Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File:                     46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier:          +W0fUSyJYipziI/snBzYkEed1nugoW0+YlTxDdJa/ZA=
Subject key identifier:   B7:BB:E0:EF:7F:23:65:E1:01:07:6C:24:9D:7D:B2:A0:96:39:A9:B2
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer:       /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial:       0193579B8F84650C13AE3B873F190AB9432A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number:          1304
Signing time:             Sat 23 Nov 2024 06:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:32 +0000
Files and hashes:         1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: iHfkNuOKtiGAkMqDyWxsyeEJkAruWPH3wMZEzpoyWI0=)
                          2: WSDdcq-b3Opo4SUBpvtUwQwt9Gc.roa (hash: mzGzuYgcDRFrln0q89jtFyAWQfpoOALi3y1yy9hBrco=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:8f:84:65:0c:13:ae:3b:87:3f:19:0a:b9:43:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
        Validity
            Not Before: Nov 23 06:00:32 2024 GMT
            Not After : Nov 24 06:00:32 2024 GMT
        Subject: CN=b7bbe0ef7f2365e101076c249d7db2a09639a9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:3f:30:bc:5a:54:0c:ba:03:cf:b3:44:9a:
                    e9:ad:ab:7f:df:cf:98:38:80:0f:24:79:90:dd:ed:
                    89:01:43:26:a7:df:ef:e7:b0:ac:af:08:28:ab:e4:
                    a3:6b:3f:8c:2b:d4:50:89:d6:d9:72:cd:37:aa:42:
                    04:e0:78:d6:7b:be:9c:64:df:e2:7a:9e:c1:9e:72:
                    e6:a0:ee:6b:bc:c4:e2:1e:6a:bd:1a:51:57:41:68:
                    77:57:d4:82:b3:0b:99:8a:10:5b:1b:a7:62:6d:9d:
                    bf:43:c5:ac:9b:af:f6:5d:1c:33:b1:18:3e:35:0d:
                    c1:91:69:f5:75:35:35:43:ad:f9:0a:6f:1c:58:26:
                    d0:74:76:e9:f9:75:68:3e:95:e4:08:e7:20:83:2e:
                    8a:55:56:72:1e:18:fc:a3:4e:a4:61:2d:1f:13:34:
                    36:c1:7a:bc:be:7b:11:e3:5d:bf:37:09:d1:35:64:
                    9d:5e:3e:db:3c:74:43:9b:1f:d6:f6:71:2e:bf:7e:
                    f5:48:53:d4:f3:df:72:cb:45:2b:6c:86:c9:7c:4f:
                    df:07:c7:d5:78:bf:4a:4f:f7:ac:f4:c1:f6:68:a3:
                    1b:23:dd:10:d0:17:08:39:e3:c1:b9:8d:e1:8a:0f:
                    a9:23:a8:79:00:54:70:64:d5:3d:45:96:05:c4:7a:
                    e6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BB:E0:EF:7F:23:65:E1:01:07:6C:24:9D:7D:B2:A0:96:39:A9:B2
            X509v3 Authority Key Identifier:
                keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2c:b6:3b:1e:cd:9a:08:b7:cd:0e:af:2c:fb:f4:a5:78:a7:
         d7:0e:e3:58:2e:db:01:3d:72:31:43:1f:e3:a9:4c:45:d5:bc:
         9a:17:39:28:fa:03:0a:c0:0f:de:25:6d:d3:bc:c9:65:f1:5b:
         1b:57:62:0c:39:b5:4c:b7:5c:10:40:39:7e:73:15:26:61:42:
         5d:0c:4b:23:92:6d:22:30:59:2d:4d:e9:3b:05:79:9b:5c:f0:
         0b:2a:93:dd:49:2f:8d:8b:70:01:49:8d:04:57:12:70:1c:e1:
         d9:d5:77:d8:8e:81:37:e0:27:20:a8:01:93:96:66:1d:f4:3b:
         8d:83:9e:79:58:9e:2b:5e:aa:fe:49:9c:c8:12:8c:68:6b:4c:
         9d:e5:4c:90:d8:36:4e:af:3b:19:00:cc:41:66:28:fb:78:23:
         81:49:97:e6:e8:9e:b0:24:99:f2:c4:da:57:82:d5:50:48:2b:
         ce:bf:29:1f:77:f4:f1:da:1f:4e:bd:15:35:c3:06:79:5f:0d:
         f9:c8:77:39:8e:9a:47:e2:32:65:5b:98:a3:21:d4:9c:88:d8:
         c1:dd:ef:94:d0:34:04:2c:23:a0:65:11:c9:b7:9d:15:16:e1:
         06:92:27:82:01:0e:fb:f4:c6:16:64:3f:43:4e:3a:7b:1e:57:
         57:f5:af:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm4+EZQwTrjuHPxkKuUMqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYWM2MzVmZDQ1ZjU0NzFjNmMyYzNmZTQ1ZWYxYmI0MzM4
YmMyNzkwHhcNMjQxMTIzMDYwMDMyWhcNMjQxMTI0MDYwMDMyWjAzMTEwLwYDVQQD
EyhiN2JiZTBlZjdmMjM2NWUxMDEwNzZjMjQ5ZDdkYjJhMDk2MzlhOWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO8/MLxaVAy6A8+zRJrprat/38+Y
OIAPJHmQ3e2JAUMmp9/v57Csrwgoq+Sjaz+MK9RQidbZcs03qkIE4HjWe76cZN/i
ep7BnnLmoO5rvMTiHmq9GlFXQWh3V9SCswuZihBbG6dibZ2/Q8Wsm6/2XRwzsRg+
NQ3BkWn1dTU1Q635Cm8cWCbQdHbp+XVoPpXkCOcggy6KVVZyHhj8o06kYS0fEzQ2
wXq8vnsR412/NwnRNWSdXj7bPHRDmx/W9nEuv371SFPU899yy0UrbIbJfE/fB8fV
eL9KT/es9MH2aKMbI90Q0BcIOePBuY3hig+pI6h5AFRwZNU9RZYFxHrmswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLe74O9/I2XhAQdsJJ19sqCWOamyMB8GA1UdIwQY
MBaAFOOsY1/UX1RxxsLD/kXvG7Qzi8J5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZjg3MGUtMmJhNS00Yjg4LTkxYTAt
MWQyMzQ4ZGJkMDM2LzEvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yZjg3MGUtMmJhNS00Yjg4LTkxYTAtMWQyMzQ4ZGJkMDM2
LzEvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyy2Ox7N
mgi3zQ6vLPv0pXin1w7jWC7bAT1yMUMf46lMRdW8mhc5KPoDCsAP3iVt07zJZfFb
G1diDDm1TLdcEEA5fnMVJmFCXQxLI5JtIjBZLU3pOwV5m1zwCyqT3UkvjYtwAUmN
BFcScBzh2dV32I6BN+AnIKgBk5ZmHfQ7jYOeeVieK16q/kmcyBKMaGtMneVMkNg2
Tq87GQDMQWYo+3gjgUmX5uiesCSZ8sTaV4LVUEgrzr8pH3f08dofTr0VNcMGeV8N
+ch3OY6aR+IyZVuYoyHUnIjYwd3vlNA0BCwjoGURybedFRbhBpInggEO+/TGFmQ/
Q046ex5XV/WvYw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:02 2024 by rpki-client on console-fra.rpki-client.org