Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File:                     xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier:          +yHAybAtmG4ZhR8mVmUhLVVrHJ1gzfe7C+Rn1lqXhpY=
Subject key identifier:   B1:C8:A4:1C:EF:7F:33:8A:38:EB:22:53:15:E3:51:15:9F:70:2A:26
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer:       /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial:       01935764A6738FAFF1E72B0ADC605D4F47B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 05:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:34 +0000
Files and hashes:         1: uHoigP0uwEi4w4oZeuaGNxjkhjQ.roa (hash: waa9qBBgKSn3fvH7bNQyG1YbGXN1zTYK+ylqgYieCF4=)
                          2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: MP0vKxuPbu6fr5wAcr0bSyfIFy7HPvMf1sioEz8MBpg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:a6:73:8f:af:f1:e7:2b:0a:dc:60:5d:4f:47:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
        Validity
            Not Before: Nov 23 05:00:34 2024 GMT
            Not After : Nov 24 05:00:34 2024 GMT
        Subject: CN=b1c8a41cef7f338a38eb225315e351159f702a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:ca:41:83:22:a6:22:56:ef:a4:33:e6:93:
                    d1:3a:7d:75:21:6b:d0:42:65:ce:ff:c5:70:12:6f:
                    52:b3:ab:4e:65:3c:a6:5e:9c:79:65:55:35:4e:e6:
                    3c:30:12:38:c8:25:9a:22:f0:fe:4a:13:53:ba:2b:
                    10:30:ae:f3:9a:31:47:02:da:4b:26:57:e5:18:39:
                    b2:da:7c:75:77:20:e1:e6:34:d8:99:95:2f:5a:df:
                    18:5f:36:8d:c2:1b:66:89:73:98:07:ba:f8:b2:6a:
                    fd:cb:85:ab:fd:6c:d9:6c:bc:db:fb:f9:0b:74:47:
                    fe:d0:16:1f:df:29:b4:e5:d2:c4:53:aa:dc:c0:3d:
                    43:da:27:e4:d6:91:95:18:56:0d:e8:3f:27:38:12:
                    65:6e:f0:26:5a:5e:90:67:0d:26:96:fb:6c:57:09:
                    ec:26:9b:c5:19:d7:2a:7e:10:84:eb:40:c5:76:d3:
                    b2:cd:8d:bd:9a:0e:a6:79:a1:0a:31:1d:76:40:7b:
                    fe:46:54:a6:d2:7c:0f:48:87:05:5b:7e:b8:6f:bd:
                    ec:f5:ef:dd:a0:6b:22:c5:bd:ec:eb:0d:dc:40:df:
                    95:64:10:09:ab:a6:2f:ee:73:44:1e:4b:9d:06:c4:
                    65:fc:01:cf:81:1b:ed:5f:3c:a6:7a:74:4f:da:24:
                    d2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C8:A4:1C:EF:7F:33:8A:38:EB:22:53:15:E3:51:15:9F:70:2A:26
            X509v3 Authority Key Identifier:
                keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:80:f4:c9:66:b7:06:67:c7:23:4e:00:a7:a6:7b:32:40:73:
         70:89:d1:11:0c:1a:59:3d:d4:04:7f:ed:f4:2d:0d:0c:03:5a:
         9b:ae:7b:55:c2:f8:4d:ef:ef:d9:29:d6:8e:6f:7b:5b:70:95:
         36:bf:d0:e8:4f:d6:70:1d:ac:8a:d7:06:8d:57:7a:75:b9:a3:
         aa:38:4a:0b:10:f3:1c:ae:52:fa:93:7d:16:ff:9a:f8:77:4c:
         b9:cb:6f:9c:61:3f:66:83:1c:1f:d9:43:3a:a1:2f:99:29:35:
         01:75:ed:aa:cf:67:2a:4d:30:a3:f5:96:a4:0c:51:c8:3e:d4:
         da:e5:bd:1c:f7:98:12:06:ec:14:d2:87:ca:b7:0e:e9:a5:64:
         16:09:1c:57:47:68:42:7c:9b:ad:3d:9c:d5:d1:a7:5b:04:28:
         44:ca:b6:d9:b3:3f:a8:b2:7b:45:c2:cf:a9:9d:7a:0d:c3:72:
         27:e9:bd:72:51:ec:7a:99:ac:e2:32:ed:84:3d:2b:55:c5:3a:
         7a:6c:f8:d1:f1:90:9c:d3:ae:e0:88:f6:bb:7b:f3:84:20:30:
         11:fc:24:e7:25:69:c2:8e:9e:2b:da:95:89:0a:7b:ab:83:3a:
         6c:52:e0:2f:f3:3b:51:f8:2b:c7:70:27:86:6f:4b:60:53:09:
         0b:e9:54:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZKZzj6/x5ysK3GBdT0exMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OTY2OGYzNDdjNTVhZGQ3N2FjNTE3ZTkzMzFkZGU3ZmMz
NTU2YTYwHhcNMjQxMTIzMDUwMDM0WhcNMjQxMTI0MDUwMDM0WjAzMTEwLwYDVQQD
EyhiMWM4YTQxY2VmN2YzMzhhMzhlYjIyNTMxNWUzNTExNTlmNzAyYTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVDKQYMipiJW76Qz5pPROn11IWvQ
QmXO/8VwEm9Ss6tOZTymXpx5ZVU1TuY8MBI4yCWaIvD+ShNTuisQMK7zmjFHAtpL
JlflGDmy2nx1dyDh5jTYmZUvWt8YXzaNwhtmiXOYB7r4smr9y4Wr/WzZbLzb+/kL
dEf+0BYf3ym05dLEU6rcwD1D2ifk1pGVGFYN6D8nOBJlbvAmWl6QZw0mlvtsVwns
JpvFGdcqfhCE60DFdtOyzY29mg6meaEKMR12QHv+RlSm0nwPSIcFW364b73s9e/d
oGsixb3s6w3cQN+VZBAJq6Yv7nNEHkudBsRl/AHPgRvtXzymenRP2iTS7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHIpBzvfzOKOOsiUxXjURWfcComMB8GA1UdIwQY
MBaAFMaWaPNHxVrdd6xRfpMx3ef8NVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wNjA5NjktNWNhZi00MThmLThjMjUt
YWNiMjcyM2E1MDc2LzEveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wNjA5NjktNWNhZi00MThmLThjMjUtYWNiMjcyM2E1MDc2
LzEveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4D0yWa3
BmfHI04Ap6Z7MkBzcInREQwaWT3UBH/t9C0NDANam657VcL4Te/v2SnWjm97W3CV
Nr/Q6E/WcB2sitcGjVd6dbmjqjhKCxDzHK5S+pN9Fv+a+HdMuctvnGE/ZoMcH9lD
OqEvmSk1AXXtqs9nKk0wo/WWpAxRyD7U2uW9HPeYEgbsFNKHyrcO6aVkFgkcV0do
QnybrT2c1dGnWwQoRMq22bM/qLJ7RcLPqZ16DcNyJ+m9clHsepms4jLthD0rVcU6
emz40fGQnNOu4Ij2u3vzhCAwEfwk5yVpwo6eK9qViQp7q4M6bFLgL/M7Ufgrx3An
hm9LYFMJC+lU4w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:02 2024 by rpki-client on console-fra.rpki-client.org