Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File:                     FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier:          fjzwcxTKHQk8NY1d7gYthRxXUNQ8pR7bqnJT0xV1odM=
Subject key identifier:   06:74:19:BB:B9:D0:93:50:78:1B:C9:49:06:D6:5F:ED:8C:3B:32:F0
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer:       /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial:       019355E4185CDD92E52FC69A35896EC37417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number:          1114
Signing time:             Fri 22 Nov 2024 22:00:31 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:31 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:31 +0000
Files and hashes:         1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: IcZMWsxdtjyJxVFQwso/sXma4chVVNon8/eRpiIzvfU=)
                          2: ZLX0sohGwknRnmLsm_moOIjYMBo.roa (hash: o/u1AgB1l3ccHn+rOHpOWgjM8zUkMBxpAeDVDZ+rV+I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:18:5c:dd:92:e5:2f:c6:9a:35:89:6e:c3:74:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
        Validity
            Not Before: Nov 22 22:00:31 2024 GMT
            Not After : Nov 23 22:00:31 2024 GMT
        Subject: CN=067419bbb9d09350781bc94906d65fed8c3b32f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:68:f4:99:94:d9:2c:b2:46:4b:b8:ad:76:ed:
                    e9:87:f8:3c:73:71:03:ee:73:70:e8:56:99:47:37:
                    d5:bc:b1:60:42:1a:00:48:68:ed:f9:c3:32:4c:92:
                    4d:70:8e:fd:5a:9d:d3:03:b8:a3:ee:bd:91:4c:4b:
                    29:ca:7a:60:87:3a:b0:fc:e1:1e:b6:08:ee:88:3d:
                    35:71:e2:b9:aa:9a:19:7c:57:fd:78:67:b6:f7:4b:
                    2e:34:38:24:15:07:be:ef:96:88:89:47:ff:89:8e:
                    55:ff:4a:5b:1b:12:ac:87:15:ef:e5:08:c4:1b:15:
                    d7:ee:84:a7:37:5d:95:bf:c5:5b:00:f9:03:2a:71:
                    92:28:2c:13:a1:19:b9:b0:29:81:bc:69:a0:06:d1:
                    fb:62:18:11:32:e7:9c:5c:2a:63:0c:8c:f1:79:47:
                    83:c1:a9:03:b0:79:65:21:8b:2f:68:f2:ad:77:62:
                    f8:57:02:ce:c4:1f:76:d6:1f:f5:19:b6:d3:2f:85:
                    c0:c0:aa:b9:40:26:24:03:38:cd:e1:82:df:4d:2c:
                    ab:51:b4:97:54:ea:28:58:58:7d:92:10:0e:83:ad:
                    f5:7c:02:7e:a8:99:56:f5:7b:ab:59:62:8c:d4:d6:
                    0d:1b:eb:d2:e5:ed:69:0e:e5:47:ca:e7:f9:09:40:
                    46:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:74:19:BB:B9:D0:93:50:78:1B:C9:49:06:D6:5F:ED:8C:3B:32:F0
            X509v3 Authority Key Identifier:
                keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:7a:db:a7:a2:f1:34:34:50:22:da:48:f0:b6:f3:1e:eb:c3:
         53:13:73:cf:b4:88:0b:8a:cd:5c:58:20:3d:20:13:cf:f6:8e:
         87:d0:ba:1c:dc:9c:75:6b:de:cb:8a:94:25:ad:0c:50:88:b6:
         71:24:3b:a6:c2:6e:18:dc:81:14:80:46:8d:60:ed:5d:15:d4:
         2f:eb:fe:24:40:f6:7c:62:6f:20:59:a3:25:f4:56:b4:76:c7:
         9f:ce:f3:6d:af:65:bf:92:da:52:5e:37:01:cf:39:ed:c2:9a:
         34:3d:91:65:a0:31:0a:3a:6c:df:a8:64:03:42:0e:7f:99:02:
         40:b0:6d:0d:62:67:d4:2e:e9:38:e9:8c:4d:e7:37:9e:2d:57:
         e7:d7:91:80:2e:a2:25:56:63:79:e3:3f:7d:ca:ba:41:93:29:
         51:8d:75:3b:49:0b:bc:b0:90:16:75:ef:8d:b3:f3:23:c2:37:
         c3:59:db:48:8f:1f:9b:3f:06:86:db:25:ff:9f:4e:19:76:98:
         1a:98:cc:3e:4c:b0:f7:38:1f:ef:11:16:fe:7f:a8:fe:4e:b7:
         24:e1:53:37:a1:31:6a:5d:03:ef:b2:22:66:59:c5:f3:ef:e9:
         a0:05:d9:7b:82:67:ec:7b:23:14:1d:01:71:56:bd:04:e6:bf:
         3c:2a:c9:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNV5Bhc3ZLlL8aaNYluw3QXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDRhNTFkODRmYmE2ZDBmZTIxOGFlZGNhOTVhODk0ZGNj
ZTFjZDcwHhcNMjQxMTIyMjIwMDMxWhcNMjQxMTIzMjIwMDMxWjAzMTEwLwYDVQQD
EygwNjc0MTliYmI5ZDA5MzUwNzgxYmM5NDkwNmQ2NWZlZDhjM2IzMmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGj0mZTZLLJGS7itdu3ph/g8c3ED
7nNw6FaZRzfVvLFgQhoASGjt+cMyTJJNcI79Wp3TA7ij7r2RTEspynpghzqw/OEe
tgjuiD01ceK5qpoZfFf9eGe290suNDgkFQe+75aIiUf/iY5V/0pbGxKshxXv5QjE
GxXX7oSnN12Vv8VbAPkDKnGSKCwToRm5sCmBvGmgBtH7YhgRMuecXCpjDIzxeUeD
wakDsHllIYsvaPKtd2L4VwLOxB921h/1GbbTL4XAwKq5QCYkAzjN4YLfTSyrUbSX
VOooWFh9khAOg631fAJ+qJlW9XurWWKM1NYNG+vS5e1pDuVHyuf5CUBGmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZ0Gbu50JNQeBvJSQbWX+2MOzLwMB8GA1UdIwQY
MBaAFBcEpR2E+6bQ/iGK7cqVqJTczhzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMGRkZGUtY2M5Zi00ODA3LThmYTIt
ZWFmOTI0NzMxMjE4LzEvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lMGRkZGUtY2M5Zi00ODA3LThmYTItZWFmOTI0NzMxMjE4
LzEvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXrbp6Lx
NDRQItpI8LbzHuvDUxNzz7SIC4rNXFggPSATz/aOh9C6HNycdWvey4qUJa0MUIi2
cSQ7psJuGNyBFIBGjWDtXRXUL+v+JED2fGJvIFmjJfRWtHbHn87zba9lv5LaUl43
Ac857cKaND2RZaAxCjps36hkA0IOf5kCQLBtDWJn1C7pOOmMTec3ni1X59eRgC6i
JVZjeeM/fcq6QZMpUY11O0kLvLCQFnXvjbPzI8I3w1nbSI8fmz8Ghtsl/59OGXaY
GpjMPkyw9zgf7xEW/n+o/k63JOFTN6Exal0D77IiZlnF8+/poAXZe4Jn7HsjFB0B
cVa9BOa/PCrJ/w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:59:52 2024 by rpki-client on console-ams.rpki-client.org