Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File:                     hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier:          9R/HtbAwDwJ62RqHKPiHR90lgqOUM+TCwbCZkNesjgI=
Subject key identifier:   DD:22:F5:3B:D7:7F:7B:A1:C0:8F:67:F5:ED:91:70:5D:D5:82:4D:72
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer:       /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial:       0193688F925F8631FC9C8B618105CD528930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number:          0200
Signing time:             Tue 26 Nov 2024 13:00:59 +0000
Manifest this update:     Tue 26 Nov 2024 13:00:59 +0000
Manifest next update:     Wed 27 Nov 2024 13:00:59 +0000
Files and hashes:         1: GEpECgwfqAXr4R0DZRTy18D5e-o.roa (hash: aNb4ACH8qw8mmONSJCyLQIuGXcWG2EL/il0M8QrOwx8=)
                          2: fFT5dQBO7EeNERA_Rh1_46Zh894.roa (hash: D17YGlnVi42NUEPLCgWTFm5mK3rnOJ3mYZIJbdkkC7E=)
                          3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: pTah2AI15NRCbv47xwgzefLA5OkR+I1WPPpdH8G1MDM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:8f:92:5f:86:31:fc:9c:8b:61:81:05:cd:52:89:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
        Validity
            Not Before: Nov 26 13:00:59 2024 GMT
            Not After : Nov 27 13:00:59 2024 GMT
        Subject: CN=dd22f53bd77f7ba1c08f67f5ed91705dd5824d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:67:dc:d5:54:1b:0f:9c:cf:c8:56:d7:5b:
                    72:b8:13:73:30:7e:8d:4b:fa:8f:e4:10:0a:fb:ed:
                    33:e4:8a:55:24:5b:d7:37:41:1c:f3:a6:96:11:a9:
                    5b:54:80:19:85:fd:d7:73:53:e6:7d:d8:92:b6:67:
                    3e:d0:5f:11:9c:8b:0f:20:f8:0b:c8:72:7b:61:65:
                    d0:c2:03:4b:e0:1f:43:5f:0c:aa:aa:84:41:b3:84:
                    ec:cf:1c:ea:24:56:49:4b:dc:fd:af:45:06:53:33:
                    d2:b9:c2:6a:80:9c:86:e1:02:6d:f2:ad:b1:cc:2b:
                    0a:58:0f:40:07:24:1f:7e:bc:cd:23:69:76:e9:2a:
                    94:05:d9:2e:59:05:4e:98:25:1c:25:14:b8:26:19:
                    f8:1a:d2:1e:99:de:cb:62:b9:e9:59:d5:e7:b2:a0:
                    f0:1f:e0:47:c7:7b:e8:ae:27:60:3a:6c:df:79:4e:
                    1f:08:ce:98:33:53:ed:aa:53:9a:69:c5:18:75:e5:
                    30:f3:69:b4:e7:12:85:e3:49:7f:e2:fe:88:bb:7e:
                    53:4b:19:65:54:f7:7a:ed:4d:b9:b4:1f:17:99:d3:
                    ae:ae:6c:75:03:94:a3:3a:3f:23:30:f0:c4:cb:2f:
                    25:fe:b2:94:a1:88:56:99:75:06:af:45:7c:5c:63:
                    bc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:22:F5:3B:D7:7F:7B:A1:C0:8F:67:F5:ED:91:70:5D:D5:82:4D:72
            X509v3 Authority Key Identifier:
                keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a2:81:e8:57:cb:9b:8b:c9:c8:8e:d5:67:2f:c6:68:2d:29:
         97:5c:21:19:5f:8e:46:38:47:04:c0:cf:dd:51:dc:fe:4a:c5:
         05:c7:04:7e:29:cf:bb:e6:0a:6a:b8:12:3b:0e:b9:49:20:5a:
         d1:a3:6a:2a:68:3d:cf:e9:7e:2c:c7:41:e8:85:98:d7:19:7a:
         b8:20:98:f4:db:16:52:f0:f7:1f:75:21:80:31:c9:7d:6d:c0:
         ef:b1:5c:4b:7d:6d:03:e3:4d:a6:c4:28:57:34:4b:4b:1b:5b:
         e4:8d:4a:2d:1b:b3:e8:c5:8d:45:43:91:76:e0:5a:cf:3e:ee:
         98:f5:01:2e:21:7c:40:b9:4f:02:bf:3a:e0:3d:98:53:4f:16:
         c6:2f:08:76:f5:ca:31:62:aa:0f:03:c1:8f:34:df:54:be:45:
         90:04:ab:86:b8:d8:21:7c:7b:43:52:b1:b2:64:d3:63:d1:5f:
         53:5c:b4:fa:2b:37:cd:90:b3:a2:ba:48:7a:33:e9:82:b5:68:
         30:90:41:e1:4e:7e:70:39:04:c3:ee:dd:c0:17:03:07:e7:7c:
         77:c9:10:c8:5a:68:9a:2f:ae:ab:80:3d:56:76:87:8f:ac:bb:
         70:cb:53:a6:d3:54:31:39:c5:60:f9:46:5c:14:21:c9:fb:44:
         e5:56:37:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNoj5JfhjH8nIthgQXNUokwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MzcyNmIxN2IwMWJmMGI1NDQyNmQxODEwZjIzZGM0ZjU4
ZjZhN2IwHhcNMjQxMTI2MTMwMDU5WhcNMjQxMTI3MTMwMDU5WjAzMTEwLwYDVQQD
EyhkZDIyZjUzYmQ3N2Y3YmExYzA4ZjY3ZjVlZDkxNzA1ZGQ1ODI0ZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPpn3NVUGw+cz8hW11tyuBNzMH6N
S/qP5BAK++0z5IpVJFvXN0Ec86aWEalbVIAZhf3Xc1PmfdiStmc+0F8RnIsPIPgL
yHJ7YWXQwgNL4B9DXwyqqoRBs4TszxzqJFZJS9z9r0UGUzPSucJqgJyG4QJt8q2x
zCsKWA9AByQffrzNI2l26SqUBdkuWQVOmCUcJRS4Jhn4GtIemd7LYrnpWdXnsqDw
H+BHx3voridgOmzfeU4fCM6YM1PtqlOaacUYdeUw82m05xKF40l/4v6Iu35TSxll
VPd67U25tB8XmdOurmx1A5SjOj8jMPDEyy8l/rKUoYhWmXUGr0V8XGO81QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0i9TvXf3uhwI9n9e2RcF3Vgk1yMB8GA1UdIwQY
MBaAFIc3JrF7Ab8LVEJtGBDyPcT1j2p7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yMzgzNWEtYjJjYi00YTZlLTg5ZmQt
MmFlMzUxNzU3MTNjLzEvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yMzgzNWEtYjJjYi00YTZlLTg5ZmQtMmFlMzUxNzU3MTNj
LzEvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqKB6FfL
m4vJyI7VZy/GaC0pl1whGV+ORjhHBMDP3VHc/krFBccEfinPu+YKargSOw65SSBa
0aNqKmg9z+l+LMdB6IWY1xl6uCCY9NsWUvD3H3UhgDHJfW3A77FcS31tA+NNpsQo
VzRLSxtb5I1KLRuz6MWNRUORduBazz7umPUBLiF8QLlPAr864D2YU08Wxi8IdvXK
MWKqDwPBjzTfVL5FkASrhrjYIXx7Q1KxsmTTY9FfU1y0+is3zZCzorpIejPpgrVo
MJBB4U5+cDkEw+7dwBcDB+d8d8kQyFpomi+uq4A9VnaHj6y7cMtTptNUMTnFYPlG
XBQhyftE5VY36A==
-----END CERTIFICATE-----
Generated at Tue Nov 26 22:11:23 2024 by rpki-client on console-ams.rpki-client.org