Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
File:                     BlpHDbq5wcM08PhfQXzRqkJenxM.mft (raw, json)
Hash identifier:          wE77ZaF2FzZ4Z+F4tyFshrCEYmb4ThrhCBSq1RBZJPA=
Subject key identifier:   E1:DD:A0:6D:DB:01:AF:1B:77:EA:11:A1:FB:9D:F3:A6:06:13:74:94
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Certificate issuer:       /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial:       019363D68D44DF2409187261A4BC8A48EAF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
Manifest number:          027C
Signing time:             Mon 25 Nov 2024 15:00:24 +0000
Manifest this update:     Mon 25 Nov 2024 15:00:24 +0000
Manifest next update:     Tue 26 Nov 2024 15:00:24 +0000
Files and hashes:         1: 3UxBplNs8MXqUHHv7dv4iSve0Vo.roa (hash: GWG+MAq8Rb8ruJRFirFFYQeXWCQFB7QSRQ4dk8XLhaM=)
                          2: BlpHDbq5wcM08PhfQXzRqkJenxM.crl (hash: MzB1cuFLE6EFD3pZiztFbt9tHMjl9DUfRoxlL+jk0fQ=)
                          3: EbpiAjDaV9MWzlr-slSc0QHcVcM.roa (hash: Y6r8FDivqHIAzFBPVdJG1rqdld+PqVeb6Vq747wHp+Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 15:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:d6:8d:44:df:24:09:18:72:61:a4:bc:8a:48:ea:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
        Validity
            Not Before: Nov 25 15:00:24 2024 GMT
            Not After : Nov 26 15:00:24 2024 GMT
        Subject: CN=e1dda06ddb01af1b77ea11a1fb9df3a606137494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:9c:10:33:12:cf:6b:9c:b2:bc:3e:cb:df:
                    e5:6a:b0:26:78:81:68:da:07:af:d5:00:a7:34:76:
                    2c:30:ce:da:0e:97:8e:14:f6:d7:2f:10:2d:3e:10:
                    1d:c8:e4:46:6a:4e:33:89:dd:b4:56:62:b7:9d:51:
                    af:93:cc:c4:b8:2f:91:6e:ae:78:64:71:c2:d4:7a:
                    78:a0:9e:89:91:06:fd:0e:70:bd:18:b4:7d:7e:54:
                    ac:be:12:a6:7f:e7:c0:1d:0d:31:e6:d0:b9:34:6c:
                    08:c3:ac:a5:f9:59:16:7d:cb:92:a6:63:5e:ed:2f:
                    e2:a7:8c:5b:6d:64:e8:a5:8e:04:d8:1c:b6:b8:78:
                    56:90:b3:b4:9c:dd:f3:da:33:f9:dc:f0:84:2f:4f:
                    f6:1a:54:28:2f:2f:7f:ef:fe:38:8a:76:5a:ba:5a:
                    41:c6:8f:d2:07:39:4f:56:cc:31:ed:1a:2a:eb:5d:
                    fb:9b:fd:b1:de:65:ef:61:d9:2c:5a:47:69:4c:80:
                    63:b0:76:59:18:2a:df:cc:83:36:eb:d1:14:34:db:
                    b1:94:79:de:8e:7b:84:49:32:0f:71:d1:19:21:a9:
                    0c:65:70:ff:16:56:47:7c:61:6b:67:be:da:6c:d7:
                    af:20:a8:7b:0f:8b:66:e7:62:b9:f1:86:c0:30:d1:
                    9d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DD:A0:6D:DB:01:AF:1B:77:EA:11:A1:FB:9D:F3:A6:06:13:74:94
            X509v3 Authority Key Identifier:
                keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:bc:27:fa:59:76:f0:b5:c6:4a:34:33:b6:ff:79:28:23:27:
         21:d5:74:3c:5b:0c:a3:2d:b8:cd:f6:83:4b:28:30:35:16:41:
         5a:48:62:9c:f0:84:19:0e:ae:64:b8:79:f7:ba:47:5e:a0:a9:
         28:18:45:8d:b6:6a:c3:75:ff:cb:e6:d5:4a:f4:99:9e:1a:7f:
         9d:92:bc:da:bd:4a:79:e6:8e:95:fa:72:38:7f:6c:76:d6:cf:
         4b:80:a4:3f:49:89:56:96:42:d6:b5:96:c8:72:f1:e5:ed:3b:
         5b:9a:5e:7c:eb:be:5e:f8:49:f3:12:59:11:1f:e7:be:9c:94:
         98:c7:fb:ff:b1:47:c4:e1:0b:c1:c5:fd:0e:b7:3c:59:55:d1:
         d2:6d:93:c4:7b:50:cc:cb:18:c2:f8:81:f9:d0:ae:a2:ef:8c:
         be:97:f3:7f:77:6b:d2:9e:1c:0a:5a:a1:6c:02:b6:84:ba:5b:
         e6:e9:c2:21:a7:7d:ba:e9:1a:9b:8d:12:47:e0:00:72:f4:40:
         61:34:63:d1:4e:f5:ca:58:af:20:01:91:30:d9:42:db:ac:68:
         66:7c:67:af:a3:f9:0f:26:bd:77:b4:01:e5:6b:b6:bf:66:19:
         e2:1d:74:fc:5c:43:d6:3e:73:28:54:6c:17:7b:14:cf:0e:75:
         46:bb:8a:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNj1o1E3yQJGHJhpLyKSOr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NWE0NzBkYmFiOWMxYzMzNGYwZjg1ZjQxN2NkMWFhNDI1
ZTlmMTMwHhcNMjQxMTI1MTUwMDI0WhcNMjQxMTI2MTUwMDI0WjAzMTEwLwYDVQQD
EyhlMWRkYTA2ZGRiMDFhZjFiNzdlYTExYTFmYjlkZjNhNjA2MTM3NDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMScEDMSz2ucsrw+y9/larAmeIFo
2gev1QCnNHYsMM7aDpeOFPbXLxAtPhAdyORGak4zid20VmK3nVGvk8zEuC+Rbq54
ZHHC1Hp4oJ6JkQb9DnC9GLR9flSsvhKmf+fAHQ0x5tC5NGwIw6yl+VkWfcuSpmNe
7S/ip4xbbWTopY4E2By2uHhWkLO0nN3z2jP53PCEL0/2GlQoLy9/7/44inZaulpB
xo/SBzlPVswx7Roq6137m/2x3mXvYdksWkdpTIBjsHZZGCrfzIM269EUNNuxlHne
jnuESTIPcdEZIakMZXD/FlZHfGFrZ77abNevIKh7D4tm52K58YbAMNGdJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHdoG3bAa8bd+oRofud86YGE3SUMB8GA1UdIwQY
MBaAFAZaRw26ucHDNPD4X0F80apCXp8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmxwSERicTV3Y00wOFBoZlFYelJxa0plbnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zNzVhNjctOGM0ZS00YTQ2LTk5Y2Mt
NjUwNzhhN2Y2NWI4LzEvQmxwSERicTV3Y00wOFBoZlFYelJxa0plbnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zNzVhNjctOGM0ZS00YTQ2LTk5Y2MtNjUwNzhhN2Y2NWI4
LzEvQmxwSERicTV3Y00wOFBoZlFYelJxa0plbnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbwn+ll2
8LXGSjQztv95KCMnIdV0PFsMoy24zfaDSygwNRZBWkhinPCEGQ6uZLh597pHXqCp
KBhFjbZqw3X/y+bVSvSZnhp/nZK82r1KeeaOlfpyOH9sdtbPS4CkP0mJVpZC1rWW
yHLx5e07W5pefOu+XvhJ8xJZER/nvpyUmMf7/7FHxOELwcX9Drc8WVXR0m2TxHtQ
zMsYwviB+dCuou+Mvpfzf3dr0p4cClqhbAK2hLpb5unCIad9uukam40SR+AAcvRA
YTRj0U71ylivIAGRMNlC26xoZnxnr6P5Dya9d7QB5Wu2v2YZ4h10/FxD1j5zKFRs
F3sUzw51RruKvA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:24:56 2024 by rpki-client on console-fra.rpki-client.org