Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File:                     M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier:          8JGHO8eqwEk5U+FzO9tyP37vkr0rIJCton7J1J4ez50=
Subject key identifier:   AC:FE:09:2F:A6:69:83:9D:DF:D9:DC:E2:8C:D2:4C:E8:62:FF:5F:34
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer:       /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial:       019351D056F9E95E57B359333CAFA8F1D67D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number:          0348
Signing time:             Fri 22 Nov 2024 03:00:28 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:28 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:28 +0000
Files and hashes:         1: 6kT1OM_177x3PGQDQ1a3s2sR_K4.roa (hash: pudzp6qByHaNTcT92lDs7vD1/hJEZCfrg6xZH0s/fi8=)
                          2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: js95rjlxblyz1W+Lk0Mr3Uk50fK8M3xHSi/AaMdoF7g=)
                          3: NIZ-m0vENOnteGp--F5tI1lXxyE.roa (hash: Y4ZE6nQfIEH4eWplvVFXdMXYBM5UdHuxPLnWbOrT5vU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:56:f9:e9:5e:57:b3:59:33:3c:af:a8:f1:d6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
        Validity
            Not Before: Nov 22 03:00:28 2024 GMT
            Not After : Nov 23 03:00:28 2024 GMT
        Subject: CN=acfe092fa669839ddfd9dce28cd24ce862ff5f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f3:8c:12:0f:d2:20:fe:ed:4b:b8:c3:a0:2f:
                    6e:9b:1a:ec:a1:f7:f1:9a:1d:0c:93:2c:b7:4b:ba:
                    4b:15:02:1e:89:ea:99:fb:7b:dc:59:12:07:44:2b:
                    8f:f0:92:f6:6a:02:95:07:d4:d0:a3:03:f3:f7:23:
                    87:e3:98:f9:ba:ac:3a:ad:5a:5c:66:f8:4d:20:2a:
                    81:8d:2a:1b:fe:f5:f4:cb:b4:e6:4e:b8:68:99:35:
                    bd:4d:b0:bd:41:62:ab:73:2a:6a:49:61:db:bb:1d:
                    11:ed:30:d5:98:fe:aa:8b:82:49:76:23:e0:bc:2f:
                    5c:2c:84:de:21:c6:9c:8c:c4:a0:46:be:63:39:71:
                    69:89:23:12:17:66:1c:5f:33:f0:21:60:cb:9c:42:
                    77:da:16:db:c4:08:f7:f1:a6:49:1f:90:b7:06:51:
                    b5:23:7d:5e:d2:33:33:99:79:25:61:12:f3:54:5f:
                    66:f6:16:65:8a:f3:b5:18:e4:f1:11:5c:c8:52:8a:
                    4d:a1:e9:0a:0c:10:78:98:b3:62:79:dc:a1:ce:c9:
                    9b:8d:f7:f9:c5:9e:8b:98:a5:bd:f7:5e:1c:3f:7e:
                    9b:54:17:b3:91:6d:ec:d0:de:01:f0:cc:85:a6:dc:
                    77:59:cf:a9:2e:d8:17:db:6e:54:ef:53:9d:4b:ed:
                    0d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FE:09:2F:A6:69:83:9D:DF:D9:DC:E2:8C:D2:4C:E8:62:FF:5F:34
            X509v3 Authority Key Identifier:
                keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c1:f4:03:74:e7:21:11:6f:87:44:62:35:c9:f6:60:45:db:
         a1:e9:11:8d:3a:84:07:2a:bc:1d:e2:45:df:c9:a9:08:fd:fa:
         7b:c2:81:75:ff:d5:b5:f1:b2:89:5d:ce:12:d4:09:3c:46:82:
         a0:86:10:a0:b6:b4:7c:53:dc:bc:ff:0f:b9:58:19:a8:87:a6:
         47:fe:b2:4c:14:71:e5:02:f6:24:4f:b3:4b:ac:05:64:b2:9f:
         4f:48:e5:7c:5c:9a:80:20:aa:58:29:29:24:a7:4d:fa:d8:d0:
         24:56:de:b0:50:e1:81:67:1f:f4:f7:d7:f7:2d:9b:88:a0:06:
         ad:56:54:bc:7e:63:9c:e0:1d:66:e5:de:ad:19:6b:e3:6d:5c:
         ad:f8:f7:fa:4c:3f:40:d7:4d:e7:58:b6:87:b5:29:d0:a7:4c:
         fe:d9:d1:12:7e:79:70:e4:59:54:50:3f:f4:ca:81:99:65:1b:
         e9:ff:0e:93:21:ad:f2:cb:4c:3c:73:f0:1c:b9:7b:da:a0:cc:
         de:16:7d:55:5f:51:4f:9a:8b:27:0a:e4:ec:12:16:88:14:9d:
         58:ac:d4:fc:a5:9c:d3:9c:54:22:3b:0f:53:ae:5f:20:0b:94:
         68:29:f3:a6:1a:6b:5e:1c:0e:76:f6:0b:b3:e0:fb:77:29:e1:
         d9:9f:a7:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNR0Fb56V5Xs1kzPK+o8dZ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5
NWNkMzQwHhcNMjQxMTIyMDMwMDI4WhcNMjQxMTIzMDMwMDI4WjAzMTEwLwYDVQQD
EyhhY2ZlMDkyZmE2Njk4MzlkZGZkOWRjZTI4Y2QyNGNlODYyZmY1ZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/OMEg/SIP7tS7jDoC9umxrsoffx
mh0Mkyy3S7pLFQIeieqZ+3vcWRIHRCuP8JL2agKVB9TQowPz9yOH45j5uqw6rVpc
ZvhNICqBjSob/vX0y7TmTrhomTW9TbC9QWKrcypqSWHbux0R7TDVmP6qi4JJdiPg
vC9cLITeIcacjMSgRr5jOXFpiSMSF2YcXzPwIWDLnEJ32hbbxAj38aZJH5C3BlG1
I31e0jMzmXklYRLzVF9m9hZlivO1GOTxEVzIUopNoekKDBB4mLNiedyhzsmbjff5
xZ6LmKW9914cP36bVBezkW3s0N4B8MyFptx3Wc+pLtgX225U71OdS+0NMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKz+CS+maYOd39nc4ozSTOhi/180MB8GA1UdIwQY
MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt
NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj
LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMH0A3Tn
IRFvh0RiNcn2YEXboekRjTqEByq8HeJF38mpCP36e8KBdf/VtfGyiV3OEtQJPEaC
oIYQoLa0fFPcvP8PuVgZqIemR/6yTBRx5QL2JE+zS6wFZLKfT0jlfFyagCCqWCkp
JKdN+tjQJFbesFDhgWcf9PfX9y2biKAGrVZUvH5jnOAdZuXerRlr421crfj3+kw/
QNdN51i2h7Up0KdM/tnREn55cORZVFA/9MqBmWUb6f8OkyGt8stMPHPwHLl72qDM
3hZ9VV9RT5qLJwrk7BIWiBSdWKzU/KWc05xUIjsPU65fIAuUaCnzphprXhwOdvYL
s+D7dynh2Z+nVw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:37:10 2024 by rpki-client on console-fra.rpki-client.org