Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
File:                     mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json)
Hash identifier:          DEa1fqAfmdXJgCRmnX44RazcRkyrh0Rg7OnscqmIGss=
Subject key identifier:   F0:F4:10:72:60:5C:12:9D:F4:C9:90:2B:B5:27:5D:66:75:C4:6F:9D
Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Certificate issuer:       /CN=997a6477dd970c94b2a17b52502982d4fc75b244
Certificate serial:       019362FAC5A54A7550C1A8C75F32A0AE490D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
Manifest number:          02A3
Signing time:             Mon 25 Nov 2024 11:00:21 +0000
Manifest this update:     Mon 25 Nov 2024 11:00:21 +0000
Manifest next update:     Tue 26 Nov 2024 11:00:21 +0000
Files and hashes:         1: VTSH3NpAwL7mZSRgQv9RWi8M4jE.roa (hash: 1F49cMyO9C96UXtidG2uYgEQAObaZBt0dTU9tCV2U7g=)
                          2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: 0qCGV7HzuNRBJ3f7KPOJPF3Lc1mc/13WjINvjrvCY4g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:fa:c5:a5:4a:75:50:c1:a8:c7:5f:32:a0:ae:49:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244
        Validity
            Not Before: Nov 25 11:00:21 2024 GMT
            Not After : Nov 26 11:00:21 2024 GMT
        Subject: CN=f0f41072605c129df4c9902bb5275d6675c46f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:92:82:20:67:e8:e0:cd:47:61:69:af:b8:b8:
                    e4:3a:d4:2b:22:59:f3:51:54:7a:50:68:04:93:55:
                    11:17:15:cd:1f:f1:cb:41:03:a8:3e:ba:86:02:08:
                    75:1d:89:3e:21:80:83:88:4f:cc:86:f9:15:d6:65:
                    c1:b5:e9:a9:79:73:22:57:be:83:17:e8:4e:20:84:
                    86:4a:78:75:8d:b8:8e:d5:30:09:1e:22:d3:db:53:
                    61:03:7c:98:e4:16:18:3b:3d:be:88:ae:6a:a0:bb:
                    5f:2b:ba:85:26:73:46:87:71:f4:1e:9d:a2:46:00:
                    50:24:5b:75:0d:6c:b6:ba:d2:f6:4f:b2:84:b9:49:
                    12:c4:54:4a:bb:76:e1:84:ae:37:12:89:02:58:b6:
                    cd:1e:40:51:dd:f8:14:a3:63:d3:25:b8:55:1b:69:
                    c1:7f:1f:45:e9:ba:6c:b6:e7:c9:ec:2d:6d:5e:d8:
                    6b:f2:e6:8b:43:d7:e8:0a:6d:46:93:97:c5:58:4f:
                    a2:34:a7:1a:82:81:c2:47:39:53:de:26:5c:35:34:
                    fc:09:ee:21:8a:eb:58:b2:28:b6:fc:b1:03:7a:60:
                    2a:ec:b7:ae:41:54:07:0f:5a:7f:f7:14:7c:57:35:
                    2a:99:4b:21:9a:84:2d:f6:04:30:1b:80:55:9d:ac:
                    43:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F4:10:72:60:5C:12:9D:F4:C9:90:2B:B5:27:5D:66:75:C4:6F:9D
            X509v3 Authority Key Identifier:
                keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:bf:d1:49:13:2e:d9:f4:3d:2d:d5:49:19:93:91:0d:f0:99:
         d1:aa:94:8b:06:db:55:91:e1:a6:d8:f3:9e:42:20:3e:62:4e:
         a5:e3:07:cf:3c:e5:82:9b:6c:08:0b:21:0e:bc:c1:05:c4:c9:
         81:aa:83:0c:82:5d:cf:2d:66:29:9e:8e:77:fd:dc:26:61:7d:
         21:51:f7:28:4b:b0:49:47:d9:02:6c:d6:77:f4:ba:44:09:c7:
         91:77:d1:4a:94:7a:2a:ea:fe:9f:ee:a3:da:81:51:b3:be:cd:
         31:4d:41:a3:bd:66:3b:69:94:f9:f9:84:08:30:26:22:7f:53:
         bb:cb:3d:30:f0:f2:5e:43:de:0d:c0:04:ce:b4:0e:11:7c:f2:
         83:3d:5c:e3:4d:b5:f0:c8:48:ba:a1:43:2e:a1:ed:37:58:64:
         3b:e8:f6:4b:34:d7:fa:ae:8e:9d:6e:f4:85:77:fd:f8:45:e9:
         1d:29:11:0d:f2:6e:73:ca:97:9e:26:7b:b2:1b:93:fa:d0:a0:
         b2:2d:93:35:0b:f6:1e:a1:f0:59:f0:81:4f:34:ee:97:4d:fb:
         57:01:e1:0d:34:a3:6f:78:32:ff:b4:1d:84:c2:e5:75:94:f7:
         04:20:f3:31:30:2e:b9:dc:0a:9d:ae:7f:86:7f:da:0c:88:1c:
         e3:ca:fb:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNi+sWlSnVQwajHXzKgrkkNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5N2E2NDc3ZGQ5NzBjOTRiMmExN2I1MjUwMjk4MmQ0ZmM3
NWIyNDQwHhcNMjQxMTI1MTEwMDIxWhcNMjQxMTI2MTEwMDIxWjAzMTEwLwYDVQQD
EyhmMGY0MTA3MjYwNWMxMjlkZjRjOTkwMmJiNTI3NWQ2Njc1YzQ2ZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZKCIGfo4M1HYWmvuLjkOtQrIlnz
UVR6UGgEk1URFxXNH/HLQQOoPrqGAgh1HYk+IYCDiE/MhvkV1mXBtempeXMiV76D
F+hOIISGSnh1jbiO1TAJHiLT21NhA3yY5BYYOz2+iK5qoLtfK7qFJnNGh3H0Hp2i
RgBQJFt1DWy2utL2T7KEuUkSxFRKu3bhhK43EokCWLbNHkBR3fgUo2PTJbhVG2nB
fx9F6bpstufJ7C1tXthr8uaLQ9foCm1Gk5fFWE+iNKcagoHCRzlT3iZcNTT8Ce4h
iutYsii2/LEDemAq7LeuQVQHD1p/9xR8VzUqmUshmoQt9gQwG4BVnaxDKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPD0EHJgXBKd9MmQK7UnXWZ1xG+dMB8GA1UdIwQY
MBaAFJl6ZHfdlwyUsqF7UlApgtT8dbJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVhwa2Q5MlhESlN5b1h0U1VDbUMxUHgxc2tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80ODE0NjYtMGUzOC00ZTNiLTliZjMt
Mjg1NzQ1NjQ3ZjVmLzEvbVhwa2Q5MlhESlN5b1h0U1VDbUMxUHgxc2tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS80ODE0NjYtMGUzOC00ZTNiLTliZjMtMjg1NzQ1NjQ3ZjVm
LzEvbVhwa2Q5MlhESlN5b1h0U1VDbUMxUHgxc2tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7/RSRMu
2fQ9LdVJGZORDfCZ0aqUiwbbVZHhptjznkIgPmJOpeMHzzzlgptsCAshDrzBBcTJ
gaqDDIJdzy1mKZ6Od/3cJmF9IVH3KEuwSUfZAmzWd/S6RAnHkXfRSpR6Kur+n+6j
2oFRs77NMU1Bo71mO2mU+fmECDAmIn9Tu8s9MPDyXkPeDcAEzrQOEXzygz1c4021
8MhIuqFDLqHtN1hkO+j2SzTX+q6OnW70hXf9+EXpHSkRDfJuc8qXniZ7shuT+tCg
si2TNQv2HqHwWfCBTzTul037VwHhDTSjb3gy/7QdhMLldZT3BCDzMTAuudwKna5/
hn/aDIgc48r7Og==
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:39:00 2024 by rpki-client on console-ams.rpki-client.org