Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.mft
File:                     MfimDHg4bJIR08qSHxQ30dHsHQw.mft (raw, json)
Hash identifier:          mx75x+gKYZoiLke7ylCcnqzHoAa8Ox7M6pmreN7AscM=
Subject key identifier:   82:5A:4C:96:87:C9:38:10:EC:FD:65:3D:60:B0:F4:1D:A0:F6:C7:F9
Authority key identifier: 31:F8:A6:0C:78:38:6C:92:11:D3:CA:92:1F:14:37:D1:D1:EC:1D:0C
Certificate issuer:       /CN=31f8a60c78386c9211d3ca921f1437d1d1ec1d0c
Certificate serial:       01936A7D6B93928BF7571FDD22413F0D6BBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MfimDHg4bJIR08qSHxQ30dHsHQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.mft
Manifest number:          0449
Signing time:             Tue 26 Nov 2024 22:00:24 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:24 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:24 +0000
Files and hashes:         1: 6kYrYhsmqyi2Y4JwN1kKiGaJNnM.roa (hash: 46GeQ5l112efEHx9ACC5+ENh6u3+ctgdsNxS21arnT8=)
                          2: MfimDHg4bJIR08qSHxQ30dHsHQw.crl (hash: 5ak9sdyDCYJta/jv3xrDaiCBleNGF6S543N3VP2mhWo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MfimDHg4bJIR08qSHxQ30dHsHQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:6b:93:92:8b:f7:57:1f:dd:22:41:3f:0d:6b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31f8a60c78386c9211d3ca921f1437d1d1ec1d0c
        Validity
            Not Before: Nov 26 22:00:24 2024 GMT
            Not After : Nov 27 22:00:24 2024 GMT
        Subject: CN=825a4c9687c93810ecfd653d60b0f41da0f6c7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:db:0b:f9:73:b7:0d:95:de:99:d6:9c:43:
                    45:fa:75:c4:bf:f9:91:30:41:4c:86:56:c9:b6:c3:
                    d2:c8:33:a0:2c:17:d2:82:04:fa:b2:26:1e:1c:3c:
                    27:5a:33:96:de:92:9d:b7:f5:a0:71:f7:bb:ec:3d:
                    39:3d:dd:ca:10:9a:9e:a0:f9:13:83:42:82:26:51:
                    98:95:f8:c3:e7:22:90:f6:86:ec:1d:af:f9:2e:d9:
                    ad:f9:3d:7d:68:a4:53:36:35:09:ea:fd:ff:c7:2b:
                    58:ae:11:60:56:51:ce:d1:c1:b0:33:a9:55:aa:6b:
                    1b:5b:1a:d8:2f:ee:66:c7:57:bc:ff:2d:a7:91:20:
                    9d:7a:d1:e3:cd:7a:99:a5:19:d9:83:ae:9f:cc:6d:
                    fd:f0:f9:08:ba:03:8d:a4:c1:21:a1:82:c3:5f:e0:
                    49:32:92:c1:13:64:ff:cb:67:98:9c:51:e4:fe:a3:
                    08:c4:95:8a:ba:ec:f6:98:53:f9:60:93:0e:7d:ca:
                    9e:90:fb:93:cb:e8:0e:14:ee:71:c1:7c:51:c8:84:
                    38:5c:fb:e7:34:18:8e:37:a1:9d:a9:c3:de:e7:0d:
                    ee:73:ff:24:81:eb:24:9d:4b:92:d1:77:d0:27:a2:
                    5e:6f:a5:a5:1c:3c:25:61:ae:a3:ac:2e:aa:47:78:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5A:4C:96:87:C9:38:10:EC:FD:65:3D:60:B0:F4:1D:A0:F6:C7:F9
            X509v3 Authority Key Identifier:
                keyid:31:F8:A6:0C:78:38:6C:92:11:D3:CA:92:1F:14:37:D1:D1:EC:1D:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfimDHg4bJIR08qSHxQ30dHsHQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fa:c6:82:aa:2f:e5:84:d6:9d:94:a4:c5:0a:15:ec:49:6b:
         1f:90:e4:75:b6:78:b7:f2:0b:68:78:d2:d9:e2:15:da:03:8b:
         8a:19:32:fc:f4:50:e1:db:6c:84:e5:a0:f3:1b:05:f1:63:fd:
         b7:02:3b:1e:12:fe:df:be:23:e1:f1:4e:8a:d9:3d:26:93:1e:
         5c:6e:2c:88:00:c2:ea:b6:4b:a2:24:10:68:a2:ee:1c:eb:df:
         2a:23:91:7c:44:3b:79:66:b0:e1:2c:2e:93:9c:04:59:ab:ad:
         f0:a6:1f:6c:e4:1b:ad:9b:24:49:7d:32:ff:00:26:d7:39:42:
         c3:14:67:06:9d:1a:ca:77:e9:f3:11:d1:2d:e7:99:28:9b:8e:
         62:28:c9:71:4a:58:ac:f3:d9:ef:1f:50:4e:ba:73:c7:58:82:
         47:b9:0b:1a:95:44:cf:a8:cf:5e:a0:25:e0:e8:d0:66:a6:d5:
         ba:80:f4:70:f6:9c:e2:f1:a4:22:94:6b:14:c4:a8:28:2a:48:
         1a:22:7a:25:05:b6:08:72:00:0b:03:1c:fe:5c:df:a0:33:fc:
         6f:cb:93:7c:23:84:a0:3b:ef:43:5e:6b:94:d0:eb:6e:da:c5:
         66:3c:c7:bd:bf:3e:a7:a6:15:15:56:9e:64:94:78:3c:60:bf:
         f3:61:f2:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqfWuTkov3Vx/dIkE/DWu6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZjhhNjBjNzgzODZjOTIxMWQzY2E5MjFmMTQzN2QxZDFl
YzFkMGMwHhcNMjQxMTI2MjIwMDI0WhcNMjQxMTI3MjIwMDI0WjAzMTEwLwYDVQQD
Eyg4MjVhNGM5Njg3YzkzODEwZWNmZDY1M2Q2MGIwZjQxZGEwZjZjN2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkfbC/lztw2V3pnWnENF+nXEv/mR
MEFMhlbJtsPSyDOgLBfSggT6siYeHDwnWjOW3pKdt/Wgcfe77D05Pd3KEJqeoPkT
g0KCJlGYlfjD5yKQ9obsHa/5Ltmt+T19aKRTNjUJ6v3/xytYrhFgVlHO0cGwM6lV
qmsbWxrYL+5mx1e8/y2nkSCdetHjzXqZpRnZg66fzG398PkIugONpMEhoYLDX+BJ
MpLBE2T/y2eYnFHk/qMIxJWKuuz2mFP5YJMOfcqekPuTy+gOFO5xwXxRyIQ4XPvn
NBiON6GdqcPe5w3uc/8kgesknUuS0XfQJ6Jeb6WlHDwlYa6jrC6qR3hyrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJaTJaHyTgQ7P1lPWCw9B2g9sf5MB8GA1UdIwQY
MBaAFDH4pgx4OGySEdPKkh8UN9HR7B0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWZpbURIZzRiSklSMDhxU0h4UTMwZEhzSFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9iNGY4MTgtNWUyZC00OWE1LTgwNzIt
ZDg0MmQxOWEzMTMzLzEvTWZpbURIZzRiSklSMDhxU0h4UTMwZEhzSFF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9iNGY4MTgtNWUyZC00OWE1LTgwNzItZDg0MmQxOWEzMTMz
LzEvTWZpbURIZzRiSklSMDhxU0h4UTMwZEhzSFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvrGgqov
5YTWnZSkxQoV7ElrH5DkdbZ4t/ILaHjS2eIV2gOLihky/PRQ4dtshOWg8xsF8WP9
twI7HhL+374j4fFOitk9JpMeXG4siADC6rZLoiQQaKLuHOvfKiORfEQ7eWaw4Swu
k5wEWaut8KYfbOQbrZskSX0y/wAm1zlCwxRnBp0aynfp8xHRLeeZKJuOYijJcUpY
rPPZ7x9QTrpzx1iCR7kLGpVEz6jPXqAl4OjQZqbVuoD0cPac4vGkIpRrFMSoKCpI
GiJ6JQW2CHIACwMc/lzfoDP8b8uTfCOEoDvvQ15rlNDrbtrFZjzHvb8+p6YVFVae
ZJR4PGC/82Hy0g==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:43 2024 by rpki-client on console-fra.rpki-client.org