Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
File:                     XM3soXHkIseck4wnMqkNSKjFPAY.mft (raw, json)
Hash identifier:          9GlXVSn2McfH5nyBqgEHHfD4rC19SVxFOjW1Q5nGTcA=
Subject key identifier:   A4:AF:2E:22:85:EB:35:BF:3D:D3:9A:C6:FE:90:EA:0B:E3:7B:F6:A9
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Certificate issuer:       /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial:       0193523DEC2EBBC49178C0878AA3C2245C60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
Manifest number:          1379
Signing time:             Fri 22 Nov 2024 05:00:09 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:09 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:09 +0000
Files and hashes:         1: 1-mUYjvpDHMEK-YLqTI7UiI7FXqA.roa (hash: 9QXJSirRNJRjfLdq67uqPLfaNFeqU++c/sGnO9pAqWo=)
                          2: 8yDq1UpiFmrrTql2gkZEVbKYrg0.roa (hash: MIj10mJ20oURj9CdGYst1LoLSXN8OE/SHnvd/6BnBPw=)
                          3: IEic02OFLdeBe91PtXYwSEXFTc4.roa (hash: Qo1aooonh72rYybBi1V5luH4FStqQMrUx2qd2th0Oog=)
                          4: XM3soXHkIseck4wnMqkNSKjFPAY.crl (hash: ZTj7AhpZq2+Qo7/a6J1uScBXoI6U7Q3Drm7gdRrD0mA=)
                          5: ZbeJUmbAuIx1iuqLDrV5NbmROT0.roa (hash: Gcv3LuwnVZvEMqMp7RWkNpLXy5NzWAdzH6NKhbkV4dU=)
                          6: aLIu7a6bKKtM4WIsfSlNFDO-6ak.roa (hash: uP34G2gswMwuvMflEof4c6CmJWWeFjAhP6WENsiHgxI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3d:ec:2e:bb:c4:91:78:c0:87:8a:a3:c2:24:5c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
        Validity
            Not Before: Nov 22 05:00:09 2024 GMT
            Not After : Nov 23 05:00:09 2024 GMT
        Subject: CN=a4af2e2285eb35bf3dd39ac6fe90ea0be37bf6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f3:2d:f7:8b:dc:4c:08:0a:a4:af:66:db:ba:
                    92:9a:eb:e5:97:99:4b:28:40:96:c3:bd:10:97:79:
                    f2:2b:14:d7:eb:8f:38:76:b9:fc:d1:f8:10:36:01:
                    2f:54:04:7a:7c:16:82:b8:67:d1:bc:c8:39:d0:37:
                    5a:ae:84:b5:78:d4:7d:86:07:f9:41:43:f0:1b:d0:
                    12:29:eb:78:b0:5d:bb:cc:f1:c1:6d:97:71:a7:92:
                    e0:fa:e4:55:34:57:9c:c0:29:e9:32:36:c3:48:97:
                    c3:61:98:10:2f:09:51:5d:79:cf:2a:37:d3:eb:0d:
                    e2:31:db:92:6b:0f:25:33:cc:60:3a:01:02:5b:d0:
                    59:e3:d6:f9:17:84:97:33:1e:6f:e5:b3:e5:ca:fe:
                    df:55:cb:fa:40:16:91:f7:6f:12:2c:b9:73:a9:79:
                    31:c8:26:05:da:23:46:91:25:d1:2c:b8:ff:a7:89:
                    40:ff:36:2e:46:d9:49:b6:e9:22:95:9d:82:cf:14:
                    23:0b:e0:90:b1:ac:1f:6d:8c:23:a1:73:45:ed:32:
                    65:f1:0c:09:c4:1e:62:d4:4b:b8:7e:fa:22:f9:17:
                    56:4e:fc:8f:14:ba:00:10:10:cf:ea:25:d1:59:3c:
                    ea:54:56:26:75:21:c8:ae:30:d2:e3:e1:05:88:f9:
                    c6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AF:2E:22:85:EB:35:BF:3D:D3:9A:C6:FE:90:EA:0B:E3:7B:F6:A9
            X509v3 Authority Key Identifier:
                keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:1a:97:56:00:7a:d4:ce:68:24:58:36:4a:cb:7a:17:5f:09:
         89:b5:34:e5:cb:09:99:ca:e6:48:10:ac:00:34:48:2d:72:31:
         41:d1:a7:c9:e0:04:c0:4c:4d:e0:72:1e:3b:73:04:2b:96:aa:
         a4:82:57:8b:e1:83:9c:1b:24:8c:b3:a0:45:9b:a1:20:05:7a:
         34:8d:d2:94:9d:ed:23:0f:d3:09:6e:3a:e1:fb:a4:b0:be:9e:
         62:49:ca:c1:0e:7c:c6:de:4f:33:5b:21:c5:1d:6c:5c:8b:2e:
         9c:34:8e:22:0e:9f:a5:31:94:f3:fd:2c:d6:9f:20:1a:27:de:
         2e:2d:18:f6:86:d1:c4:ad:c8:59:2e:bb:9d:64:70:01:6b:5a:
         f0:a7:57:2c:3c:1e:28:00:e4:d6:3a:92:e6:75:89:03:7e:97:
         9d:36:b3:1a:4d:54:32:c8:04:cd:8e:cc:92:1c:73:07:1b:50:
         c1:86:f3:ef:c7:63:d5:86:c9:10:6e:f4:bd:36:bd:e3:98:8e:
         9b:08:13:75:ae:f3:e8:21:b9:7d:dd:7b:8c:5e:ac:7b:ed:54:
         76:ec:70:92:b7:8a:16:db:b8:8a:af:10:43:03:b2:1d:06:0f:
         3c:97:8c:a7:e1:55:79:1a:6d:83:d0:f3:f6:27:62:ee:2b:64:
         b9:ff:34:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSPewuu8SReMCHiqPCJFxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjY2RlY2ExNzFlNDIyYzc5YzkzOGMyNzMyYTkwZDQ4YThj
NTNjMDYwHhcNMjQxMTIyMDUwMDA5WhcNMjQxMTIzMDUwMDA5WjAzMTEwLwYDVQQD
EyhhNGFmMmUyMjg1ZWIzNWJmM2RkMzlhYzZmZTkwZWEwYmUzN2JmNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PMt94vcTAgKpK9m27qSmuvll5lL
KECWw70Ql3nyKxTX6484drn80fgQNgEvVAR6fBaCuGfRvMg50DdaroS1eNR9hgf5
QUPwG9ASKet4sF27zPHBbZdxp5Lg+uRVNFecwCnpMjbDSJfDYZgQLwlRXXnPKjfT
6w3iMduSaw8lM8xgOgECW9BZ49b5F4SXMx5v5bPlyv7fVcv6QBaR928SLLlzqXkx
yCYF2iNGkSXRLLj/p4lA/zYuRtlJtukilZ2CzxQjC+CQsawfbYwjoXNF7TJl8QwJ
xB5i1Eu4fvoi+RdWTvyPFLoAEBDP6iXRWTzqVFYmdSHIrjDS4+EFiPnGWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSvLiKF6zW/PdOaxv6Q6gvje/apMB8GA1UdIwQY
MBaAFFzN7KFx5CLHnJOMJzKpDUioxTwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUt
YTg4MWVjODIyOGI1LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUtYTg4MWVjODIyOGI1
LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRqXVgB6
1M5oJFg2Sst6F18JibU05csJmcrmSBCsADRILXIxQdGnyeAEwExN4HIeO3MEK5aq
pIJXi+GDnBskjLOgRZuhIAV6NI3SlJ3tIw/TCW464fuksL6eYknKwQ58xt5PM1sh
xR1sXIsunDSOIg6fpTGU8/0s1p8gGifeLi0Y9obRxK3IWS67nWRwAWta8KdXLDwe
KADk1jqS5nWJA36XnTazGk1UMsgEzY7MkhxzBxtQwYbz78dj1YbJEG70vTa945iO
mwgTda7z6CG5fd17jF6se+1UduxwkreKFtu4iq8QQwOyHQYPPJeMp+FVeRptg9Dz
9idi7itkuf80ww==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:53 2024 by rpki-client on console-ams.rpki-client.org