Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
File:                     H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft (raw, json)
Hash identifier:          7IPdS//5s6A2g/lWIigPEt/JN69XZKiGqe3fj6+NEe4=
Subject key identifier:   4A:45:E6:5D:1D:F6:15:EC:BB:F5:1B:73:CF:7C:77:E4:45:4D:D1:DB
Authority key identifier: 1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
Certificate issuer:       /CN=1f4439c757b6b646df16844f5a529ee27520736e
Certificate serial:       0193549B0AC7B089D4ADED56D0F109DEE6BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
Manifest number:          0236
Signing time:             Fri 22 Nov 2024 16:01:07 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:07 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:07 +0000
Files and hashes:         1: H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl (hash: wqCszQ8zcPGRdysCGIkeh+2O0U1rIgNsICHzL2RunN4=)
                          2: Ujl_h0jCa-xG9Xp49eI0_MtNqV0.roa (hash: yHx54kIOB9auGvApyiSE7Lfl6KVL4Vn+BxE3Ek9s+Nk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:0a:c7:b0:89:d4:ad:ed:56:d0:f1:09:de:e6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4439c757b6b646df16844f5a529ee27520736e
        Validity
            Not Before: Nov 22 16:01:07 2024 GMT
            Not After : Nov 23 16:01:07 2024 GMT
        Subject: CN=4a45e65d1df615ecbbf51b73cf7c77e4454dd1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a3:c0:dc:d0:03:d3:f3:65:72:5f:23:92:d6:
                    16:66:1a:94:23:95:1a:38:76:89:b9:88:54:4c:d2:
                    c4:bb:1f:34:bb:2e:14:9f:23:54:cb:a3:71:9a:80:
                    a2:2a:59:70:ac:ed:c8:d7:16:f3:b3:2a:d7:9f:56:
                    71:00:8d:2b:ba:c6:f8:3f:b3:de:e4:06:74:d4:4a:
                    bb:52:36:b3:d1:fe:ac:bf:23:86:7d:ba:7a:42:79:
                    fe:89:ac:80:89:af:03:79:9f:0a:b6:a5:92:49:5d:
                    74:d0:e4:ab:7d:03:e8:79:d5:c0:47:0d:10:96:3c:
                    e6:ca:ea:71:49:62:21:5f:44:aa:8b:55:57:63:69:
                    56:df:d9:51:bb:cb:a6:54:58:a6:17:e1:37:cf:3d:
                    aa:93:a5:1c:07:7d:1d:cb:68:ce:40:49:c6:5f:59:
                    a5:29:b0:b2:da:e2:81:fc:0b:e6:61:f8:4f:66:2c:
                    b1:d6:fc:0e:3b:79:8b:ef:c8:5c:e3:33:12:75:8a:
                    0b:d8:f1:9c:00:ed:ef:5f:ff:06:53:9c:35:52:b1:
                    69:96:fc:65:84:cc:fc:9a:73:f0:c1:34:b7:20:30:
                    14:ec:92:96:9e:40:bb:56:ea:1e:f5:07:29:88:6e:
                    7b:e1:62:63:75:28:2e:ba:60:1c:38:b5:f8:8b:3b:
                    f0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:45:E6:5D:1D:F6:15:EC:BB:F5:1B:73:CF:7C:77:E4:45:4D:D1:DB
            X509v3 Authority Key Identifier:
                keyid:1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ad:eb:51:f0:2a:a2:35:2b:e7:3b:89:d3:50:1a:11:7c:e4:
         54:97:6d:84:7a:63:01:db:c2:0b:46:d6:66:a5:52:80:ea:a4:
         4e:b2:70:37:27:ec:43:1b:47:86:39:c0:bc:30:e0:d7:bb:b4:
         23:8e:4b:a8:56:cd:13:4b:a0:73:07:94:0a:33:98:4e:73:69:
         1b:92:3c:4e:4a:cd:7f:f8:01:26:a0:49:36:23:f2:86:80:bb:
         5c:d9:c0:8a:a0:3d:d7:4c:72:a1:20:89:16:47:8e:58:61:1d:
         42:b2:71:2c:98:4f:9e:bd:4d:35:00:30:6a:c1:08:62:9a:77:
         0e:fa:88:fa:7f:ab:62:4f:ba:15:a0:d8:6f:b4:c3:20:c3:7a:
         27:fd:74:19:9f:8c:e8:48:29:04:66:2e:23:47:c9:98:1c:57:
         79:6c:e9:f7:dd:49:f9:bb:1e:99:30:d6:2f:1c:4c:52:88:41:
         36:dc:4b:d0:aa:40:2f:f8:55:d9:5d:16:24:36:56:64:6f:f1:
         ab:67:6a:47:2e:06:d2:40:b8:76:22:ab:a8:23:6a:0b:cf:9b:
         b2:73:0c:e9:d7:1c:d8:a1:d1:6d:8c:1f:1d:26:4d:19:42:42:
         86:2b:f1:74:05:ed:ee:45:88:83:e6:ec:7b:17:e6:a4:30:2e:
         47:31:d5:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmwrHsInUre1W0PEJ3ua7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDQzOWM3NTdiNmI2NDZkZjE2ODQ0ZjVhNTI5ZWUyNzUy
MDczNmUwHhcNMjQxMTIyMTYwMTA3WhcNMjQxMTIzMTYwMTA3WjAzMTEwLwYDVQQD
Eyg0YTQ1ZTY1ZDFkZjYxNWVjYmJmNTFiNzNjZjdjNzdlNDQ1NGRkMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aPA3NAD0/Nlcl8jktYWZhqUI5Ua
OHaJuYhUTNLEux80uy4UnyNUy6NxmoCiKllwrO3I1xbzsyrXn1ZxAI0rusb4P7Pe
5AZ01Eq7Ujaz0f6svyOGfbp6Qnn+iayAia8DeZ8KtqWSSV100OSrfQPoedXARw0Q
ljzmyupxSWIhX0Sqi1VXY2lW39lRu8umVFimF+E3zz2qk6UcB30dy2jOQEnGX1ml
KbCy2uKB/AvmYfhPZiyx1vwOO3mL78hc4zMSdYoL2PGcAO3vX/8GU5w1UrFplvxl
hMz8mnPwwTS3IDAU7JKWnkC7Vuoe9QcpiG574WJjdSguumAcOLX4izvw/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpF5l0d9hXsu/Ubc898d+RFTdHbMB8GA1UdIwQY
MBaAFB9EOcdXtrZG3xaET1pSnuJ1IHNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBRNXgxZTJ0a2JmRm9SUFdsS2U0blVnYzI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mZTllYjMtM2IxYi00ZmY0LWEzNzQt
NWE1ZDBiZDg3NjBlLzEvSDBRNXgxZTJ0a2JmRm9SUFdsS2U0blVnYzI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mZTllYjMtM2IxYi00ZmY0LWEzNzQtNWE1ZDBiZDg3NjBl
LzEvSDBRNXgxZTJ0a2JmRm9SUFdsS2U0blVnYzI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWq3rUfAq
ojUr5zuJ01AaEXzkVJdthHpjAdvCC0bWZqVSgOqkTrJwNyfsQxtHhjnAvDDg17u0
I45LqFbNE0ugcweUCjOYTnNpG5I8TkrNf/gBJqBJNiPyhoC7XNnAiqA910xyoSCJ
FkeOWGEdQrJxLJhPnr1NNQAwasEIYpp3DvqI+n+rYk+6FaDYb7TDIMN6J/10GZ+M
6EgpBGYuI0fJmBxXeWzp991J+bsemTDWLxxMUohBNtxL0KpAL/hV2V0WJDZWZG/x
q2dqRy4G0kC4diKrqCNqC8+bsnMM6dcc2KHRbYwfHSZNGUJChivxdAXt7kWIg+bs
exfmpDAuRzHVjA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:00:20 2024 by rpki-client on console-ams.rpki-client.org