Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File:                     iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier:          djDM8skFIWot6s1l7+WdDn/y9hu32hE8/8XWMtdX0TQ=
Subject key identifier:   5C:40:C4:E1:E8:01:6A:E7:FD:8E:1F:4C:C9:60:4D:7B:AC:C8:B4:1D
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer:       /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial:       019364B2284AF83E24248339912F9610185E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number:          0A2F
Signing time:             Mon 25 Nov 2024 19:00:17 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:17 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:17 +0000
Files and hashes:         1: RItRRXvLE8yRNRYUJjMGpPEHYYY.roa (hash: XvLqHBGfcVW1///wWrMpaNMU/tjYhgt5iDEpPXaRkc8=)
                          2: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: XQD2Y7Ag3cieuY08X3H1oKAcZpxVNUIfgPe+eptBppw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:28:4a:f8:3e:24:24:83:39:91:2f:96:10:18:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
        Validity
            Not Before: Nov 25 19:00:17 2024 GMT
            Not After : Nov 26 19:00:17 2024 GMT
        Subject: CN=5c40c4e1e8016ae7fd8e1f4cc9604d7bacc8b41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:e1:c5:c1:5a:c3:33:67:5c:db:c8:cc:fd:
                    96:80:ba:a2:5e:52:29:b7:48:3b:34:f0:25:83:f7:
                    19:df:92:ed:e0:6a:6f:40:ff:9c:a3:2c:15:26:f5:
                    bf:c5:fc:b7:8f:07:f1:6a:ff:9b:75:12:49:2d:59:
                    92:23:75:b8:88:90:47:bf:1b:7a:a7:18:2f:f6:e4:
                    3d:32:18:e1:09:bc:c9:e8:26:a5:ad:5e:b1:54:51:
                    c8:a5:d8:8d:6e:87:61:92:25:18:f0:b3:cd:e5:de:
                    6f:10:55:2d:a2:9c:e0:8c:e6:7f:64:be:8b:6e:65:
                    0b:33:b4:72:1a:93:86:94:20:35:11:bf:74:2e:66:
                    40:68:76:3f:19:d6:c5:1a:22:5c:5b:94:48:2b:30:
                    98:5c:7a:e4:85:36:bf:ff:e8:56:f9:d1:c4:2a:a7:
                    95:32:16:b3:a7:ab:d8:fd:02:ce:cf:ad:21:6c:62:
                    61:a5:48:bf:82:70:57:53:0e:00:ec:ed:5a:04:38:
                    b1:18:6d:da:75:99:07:dd:39:5f:45:cf:51:08:e9:
                    8c:17:d7:39:f4:43:54:2b:01:54:5f:48:5f:1f:62:
                    79:7c:1e:7c:7b:6e:7d:92:35:f7:70:c4:4a:da:20:
                    fd:46:de:c7:1f:a4:a5:7d:f3:90:60:2b:44:89:26:
                    99:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:40:C4:E1:E8:01:6A:E7:FD:8E:1F:4C:C9:60:4D:7B:AC:C8:B4:1D
            X509v3 Authority Key Identifier:
                keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a5:48:5a:40:3c:df:32:fd:2b:c8:b0:b6:00:0e:45:85:7e:
         ca:4e:80:35:20:d8:97:5f:b5:a1:64:0b:8b:36:6a:1d:c1:30:
         04:1a:9f:5b:11:f1:c0:31:77:be:0d:0b:f4:2a:35:12:67:9b:
         c1:27:fd:68:98:8e:52:5d:dc:02:d3:09:07:20:7b:cd:f7:cb:
         ae:0a:01:0b:79:f5:1e:1a:fe:f0:f9:90:50:c0:4d:1d:cd:b2:
         c9:9f:ce:52:4a:c5:b0:d5:8d:0e:37:41:a4:eb:4f:63:60:73:
         2c:0d:0e:7b:75:48:01:7b:90:4f:65:78:f3:38:07:20:55:27:
         73:e0:3c:82:d9:de:8e:40:78:f6:42:75:86:fd:1e:28:8d:07:
         0a:89:30:0f:83:c6:18:ba:82:66:a6:d2:3e:b5:e3:4a:fb:db:
         e7:85:4f:0d:76:07:a6:85:40:91:51:2e:2d:30:e8:8c:fd:fe:
         a5:dd:9d:04:e3:c7:d8:f0:79:dd:46:e3:7a:08:a0:8b:9a:b1:
         89:1a:d8:1e:15:1d:6e:e9:32:62:9e:22:66:61:d3:0c:c1:3e:
         00:5c:e4:c1:c1:5d:7c:16:58:4f:1a:a4:9d:3d:5a:56:6b:c0:
         74:9b:1d:ae:42:f1:11:ed:7d:eb:3b:f1:1d:6b:10:ca:73:e1:
         6d:41:df:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNksihK+D4kJIM5kS+WEBheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZTEzOWFmMDg5OWY1ZDZiNWIzMjU4MTM3M2VkYTMwMzdl
YTMwYzAwHhcNMjQxMTI1MTkwMDE3WhcNMjQxMTI2MTkwMDE3WjAzMTEwLwYDVQQD
Eyg1YzQwYzRlMWU4MDE2YWU3ZmQ4ZTFmNGNjOTYwNGQ3YmFjYzhiNDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOzhxcFawzNnXNvIzP2WgLqiXlIp
t0g7NPAlg/cZ35Lt4GpvQP+coywVJvW/xfy3jwfxav+bdRJJLVmSI3W4iJBHvxt6
pxgv9uQ9MhjhCbzJ6CalrV6xVFHIpdiNbodhkiUY8LPN5d5vEFUtopzgjOZ/ZL6L
bmULM7RyGpOGlCA1Eb90LmZAaHY/GdbFGiJcW5RIKzCYXHrkhTa//+hW+dHEKqeV
Mhazp6vY/QLOz60hbGJhpUi/gnBXUw4A7O1aBDixGG3adZkH3TlfRc9RCOmMF9c5
9ENUKwFUX0hfH2J5fB58e259kjX3cMRK2iD9Rt7HH6SlffOQYCtEiSaZVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxAxOHoAWrn/Y4fTMlgTXusyLQdMB8GA1UdIwQY
MBaAFIrhOa8ImfXWtbMlgTc+2jA36jDAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEt
ZjllMmMyZmRiZjM1LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEtZjllMmMyZmRiZjM1
LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKVIWkA8
3zL9K8iwtgAORYV+yk6ANSDYl1+1oWQLizZqHcEwBBqfWxHxwDF3vg0L9Co1Emeb
wSf9aJiOUl3cAtMJByB7zffLrgoBC3n1Hhr+8PmQUMBNHc2yyZ/OUkrFsNWNDjdB
pOtPY2BzLA0Oe3VIAXuQT2V48zgHIFUnc+A8gtnejkB49kJ1hv0eKI0HCokwD4PG
GLqCZqbSPrXjSvvb54VPDXYHpoVAkVEuLTDojP3+pd2dBOPH2PB53Ubjegigi5qx
iRrYHhUdbukyYp4iZmHTDME+AFzkwcFdfBZYTxqknT1aVmvAdJsdrkLxEe196zvx
HWsQynPhbUHf6g==
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:51:56 2024 by rpki-client on console-fra.rpki-client.org