Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File:                     lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier:          XOR0djdgS/W7xrMixhFM2ZS0W3jZS93F+XWxgXp0mqs=
Subject key identifier:   DA:13:20:AA:2F:DB:BD:C1:05:A1:A1:58:82:61:93:99:E0:07:E5:3E
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer:       /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial:       019358402C6188244E4E459717C0C49B1D06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number:          52
Signing time:             Sat 23 Nov 2024 09:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:20 +0000
Files and hashes:         1: SAukptpcCeeom6mj0WHG44z4XWo.roa (hash: NW7lhUVnDmxD6po2bKT7LCSMzI1RhO94ztMlYlprGPE=)
                          2: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: pfOR4cqxFU8xnqj9kMm6x31WgwGsNthyHubE2Ljbkxk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:2c:61:88:24:4e:4e:45:97:17:c0:c4:9b:1d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
        Validity
            Not Before: Nov 23 09:00:20 2024 GMT
            Not After : Nov 24 09:00:20 2024 GMT
        Subject: CN=da1320aa2fdbbdc105a1a15882619399e007e53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:80:7d:54:c2:1d:e6:9b:22:17:3d:61:9f:8b:
                    52:ea:e1:78:0c:67:d5:8b:08:8b:6c:0c:c4:63:65:
                    1b:35:88:f3:93:27:b1:85:ab:0c:97:b9:4e:6e:14:
                    9f:0f:d6:25:f5:0c:f0:6d:50:fa:47:ee:c8:8a:41:
                    46:de:4e:bc:9c:c3:d0:f8:d7:57:20:69:85:8f:58:
                    9d:13:52:0e:2f:a8:e2:02:f1:71:e3:04:16:b4:d9:
                    cb:47:13:d6:55:e6:a7:e5:04:ab:43:01:24:1a:4c:
                    10:38:ac:60:a3:29:dd:f6:00:ae:1f:dc:76:33:39:
                    ef:56:da:26:33:c6:2d:cb:9a:5c:54:22:b1:af:82:
                    20:88:8b:f0:44:dd:f2:32:cd:36:7d:e8:a3:61:0c:
                    20:a4:87:07:5a:88:bb:5c:a1:4c:78:5c:f6:d9:73:
                    79:78:75:df:44:54:2a:38:6b:88:e9:2d:7e:bd:4b:
                    b9:d6:5b:48:45:19:e9:bd:7e:a2:5b:27:67:5e:c7:
                    44:e0:44:21:9f:4f:28:1f:c2:c5:55:15:2c:64:c8:
                    d1:90:ed:02:79:2d:c6:7c:0a:c5:9b:44:eb:28:3f:
                    d3:38:5a:9d:c6:0a:16:a1:5c:9b:2f:86:f5:7e:fa:
                    ed:ef:be:da:50:0a:9f:26:a8:3e:34:26:43:f1:f1:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:13:20:AA:2F:DB:BD:C1:05:A1:A1:58:82:61:93:99:E0:07:E5:3E
            X509v3 Authority Key Identifier:
                keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:5b:55:43:2b:0b:93:70:e7:6e:a7:01:3e:7a:f6:f4:33:7a:
         f7:d1:a2:15:9e:38:41:19:73:d7:73:c9:f8:d4:55:fb:cd:c8:
         10:4a:38:3e:5a:0a:2c:59:69:2e:c9:35:b1:d8:57:a2:1f:ef:
         73:e5:ac:96:04:33:bf:0f:42:ba:4f:af:a2:e6:2b:70:34:62:
         f6:d2:e5:44:fe:02:e6:de:36:fd:80:d2:b1:f1:2e:c8:3a:da:
         59:52:22:1c:cf:bd:22:f4:6e:4b:b4:87:bc:b7:b5:e7:e7:b3:
         7f:d4:cc:01:07:0b:2c:5d:bd:ed:c5:eb:34:d9:69:ed:fe:1e:
         dc:c6:a8:95:34:ac:e9:77:40:6c:b7:ef:3c:a0:0e:05:e6:fd:
         e6:43:2d:cd:b5:88:56:ee:ed:d2:b3:fd:81:b8:2c:c7:00:e6:
         6e:2d:bc:65:8d:72:b7:6b:29:8a:19:4f:bc:74:17:58:40:a7:
         6c:90:08:86:68:2e:25:16:a9:69:c0:44:ab:b3:22:76:0c:4b:
         1d:41:94:cd:7b:ae:42:fc:c6:47:92:aa:3e:67:41:a5:78:ad:
         05:7e:5e:3a:79:f9:8b:83:cd:ea:07:b5:15:02:5e:61:35:88:
         3f:b1:b4:ee:af:c6:48:31:88:93:87:67:d2:18:dc:3c:7e:38:
         6e:9a:86:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYQCxhiCROTkWXF8DEmx0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MmRkY2IzNTA3ODI2N2Y0ZjM3NTJlNWI0Y2NjNjVhNjYz
YTYzZTcwHhcNMjQxMTIzMDkwMDIwWhcNMjQxMTI0MDkwMDIwWjAzMTEwLwYDVQQD
EyhkYTEzMjBhYTJmZGJiZGMxMDVhMWExNTg4MjYxOTM5OWUwMDdlNTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYB9VMId5psiFz1hn4tS6uF4DGfV
iwiLbAzEY2UbNYjzkyexhasMl7lObhSfD9Yl9QzwbVD6R+7IikFG3k68nMPQ+NdX
IGmFj1idE1IOL6jiAvFx4wQWtNnLRxPWVean5QSrQwEkGkwQOKxgoynd9gCuH9x2
MznvVtomM8Yty5pcVCKxr4IgiIvwRN3yMs02feijYQwgpIcHWoi7XKFMeFz22XN5
eHXfRFQqOGuI6S1+vUu51ltIRRnpvX6iWydnXsdE4EQhn08oH8LFVRUsZMjRkO0C
eS3GfArFm0TrKD/TOFqdxgoWoVybL4b1fvrt777aUAqfJqg+NCZD8fEBDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoTIKov273BBaGhWIJhk5ngB+U+MB8GA1UdIwQY
MBaAFJUt3LNQeCZ/TzdS5bTMxlpmOmPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jNTliNjEtOTExNS00MTVmLTgxZjIt
YTRjMWJiY2I4Yzk3LzEvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jNTliNjEtOTExNS00MTVmLTgxZjItYTRjMWJiY2I4Yzk3
LzEvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1tVQysL
k3DnbqcBPnr29DN699GiFZ44QRlz13PJ+NRV+83IEEo4PloKLFlpLsk1sdhXoh/v
c+WslgQzvw9Cuk+vouYrcDRi9tLlRP4C5t42/YDSsfEuyDraWVIiHM+9IvRuS7SH
vLe15+ezf9TMAQcLLF297cXrNNlp7f4e3MaolTSs6XdAbLfvPKAOBeb95kMtzbWI
Vu7t0rP9gbgsxwDmbi28ZY1yt2spihlPvHQXWECnbJAIhmguJRapacBEq7MidgxL
HUGUzXuuQvzGR5KqPmdBpXitBX5eOnn5i4PN6ge1FQJeYTWIP7G07q/GSDGIk4dn
0hjcPH44bpqGgA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:08 2024 by rpki-client on console-fra.rpki-client.org