Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.mft
File:                     VbKW1rU0_joyzBw6ToE1jyFsk8c.mft (raw, json)
Hash identifier:          p9KMiJsmZag4h7s08AaKwMwbajg/qdTs7nn8dgkxjsU=
Subject key identifier:   70:E2:BB:4E:E9:00:A4:CD:15:0B:D7:2D:52:16:A2:98:6D:F6:3E:0A
Authority key identifier: 55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7
Certificate issuer:       /CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
Certificate serial:       019350BF0F208A7EABF66122466FFA1129B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.mft
Manifest number:          1370
Signing time:             Thu 21 Nov 2024 22:01:58 +0000
Manifest this update:     Thu 21 Nov 2024 22:01:58 +0000
Manifest next update:     Fri 22 Nov 2024 22:01:58 +0000
Files and hashes:         1: 3xFRxttKxRuLl6IfslBlg6006Uc.roa (hash: 0I+6Xy9XklWtA2MT75Ay6oGPjjOSVPyKh4wU+/ZpspE=)
                          2: LkLLd8zmpQEuA2kM1V4rCUgFsww.roa (hash: niEDUYPlafsL58/A7l2+x07/b1C3AeHWvK421F+eOlE=)
                          3: VbKW1rU0_joyzBw6ToE1jyFsk8c.crl (hash: 7VoGVXbSALblU0fVAntBVJz6eOKdh9NW9gTo5vjnJzM=)
                          4: blXi-TL8gICqiz50Sw8SB1eYv70.roa (hash: eCXYLYJf+kJKOL+luJf2L4PJ4fypAZaHH3yYSsPUtZ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:bf:0f:20:8a:7e:ab:f6:61:22:46:6f:fa:11:29:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
        Validity
            Not Before: Nov 21 22:01:58 2024 GMT
            Not After : Nov 22 22:01:58 2024 GMT
        Subject: CN=70e2bb4ee900a4cd150bd72d5216a2986df63e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:57:a6:12:bb:9b:4b:fd:b5:e7:01:24:c8:
                    c3:42:06:58:e2:5c:2c:5a:17:3d:16:27:6c:43:ea:
                    a5:0b:65:b8:48:bf:a0:2c:74:ab:c7:ec:e8:c8:c2:
                    1e:48:62:89:08:44:39:cd:ca:61:83:4f:cc:39:bf:
                    e6:6f:59:2e:f3:40:6c:c9:dc:08:c9:1c:fd:dd:32:
                    a3:cf:55:49:ad:cd:bd:7c:2f:01:6b:18:45:d5:69:
                    58:d0:54:f5:81:3e:13:d0:10:09:76:5c:97:cd:50:
                    73:e8:b0:46:7f:65:ef:57:74:b6:3c:c9:7a:3a:e5:
                    fc:20:c7:f6:71:a9:db:f0:4c:33:e8:66:a2:5e:19:
                    2d:73:ad:95:df:f1:dd:be:00:18:2c:68:dc:1e:10:
                    56:69:38:68:7f:21:af:25:b4:fe:f2:f6:26:77:1f:
                    89:1e:b8:b6:2d:b1:95:ea:14:c8:d5:47:2d:c4:51:
                    10:f3:24:da:71:13:9a:c4:eb:57:5e:9c:0e:ae:af:
                    fa:79:6a:1a:f8:c8:47:e6:9b:8b:a3:c3:1b:cb:72:
                    8e:a8:c8:5c:e3:8e:89:a4:3f:e6:f3:cc:2e:8d:14:
                    3b:a1:18:67:63:cf:53:5c:e7:62:d9:96:59:1a:f9:
                    1c:c8:b5:73:64:0c:3a:17:6a:94:6b:c9:58:60:e2:
                    03:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E2:BB:4E:E9:00:A4:CD:15:0B:D7:2D:52:16:A2:98:6D:F6:3E:0A
            X509v3 Authority Key Identifier:
                keyid:55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:8a:f2:68:46:0c:41:2a:35:07:38:38:f5:0e:95:88:35:ad:
         f5:b1:8e:52:c5:9e:b3:48:36:de:a6:1a:e0:62:61:e9:0e:05:
         06:df:55:33:63:49:65:2b:10:46:d0:39:ff:5b:d5:7f:e3:49:
         20:ef:e3:36:a2:7c:94:f6:92:76:4e:aa:41:bd:e4:d3:23:ab:
         d9:3e:df:6f:6e:48:a9:31:77:e8:fe:70:35:f2:d5:a0:f6:4a:
         50:79:2f:c3:67:69:06:c7:6e:35:89:c4:c9:7e:95:25:2f:5a:
         35:25:b0:8b:d5:cc:c3:13:c2:79:97:79:73:ae:4d:64:de:26:
         db:66:f9:d7:4a:e2:0a:2c:93:1a:9c:03:e4:f3:79:59:f6:ad:
         e4:b7:4c:7c:69:ab:df:9b:e6:bb:9b:e9:dd:18:12:17:71:bd:
         70:e0:29:85:5c:22:37:a4:77:2d:46:c2:72:f1:6e:95:4c:4e:
         f5:61:23:6c:6f:56:bc:90:56:8f:4a:db:f8:a1:93:14:42:04:
         99:53:78:4a:27:e7:06:a8:dc:88:72:aa:57:c2:b7:1b:dc:09:
         30:ff:54:c8:5f:52:4e:dc:31:e0:88:41:ac:2d:47:6a:e2:3c:
         a9:48:30:51:80:59:55:d2:db:6d:f1:70:c3:50:32:ea:3e:55:
         fc:c8:ca:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNQvw8gin6r9mEiRm/6ESm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YjI5NmQ2YjUzNGZlM2EzMmNjMWMzYTRlODEzNThmMjE2
YzkzYzcwHhcNMjQxMTIxMjIwMTU4WhcNMjQxMTIyMjIwMTU4WjAzMTEwLwYDVQQD
Eyg3MGUyYmI0ZWU5MDBhNGNkMTUwYmQ3MmQ1MjE2YTI5ODZkZjYzZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqelXphK7m0v9tecBJMjDQgZY4lws
Whc9FidsQ+qlC2W4SL+gLHSrx+zoyMIeSGKJCEQ5zcphg0/MOb/mb1ku80BsydwI
yRz93TKjz1VJrc29fC8BaxhF1WlY0FT1gT4T0BAJdlyXzVBz6LBGf2XvV3S2PMl6
OuX8IMf2canb8Ewz6GaiXhktc62V3/HdvgAYLGjcHhBWaThofyGvJbT+8vYmdx+J
Hri2LbGV6hTI1UctxFEQ8yTacROaxOtXXpwOrq/6eWoa+MhH5puLo8Mby3KOqMhc
446JpD/m88wujRQ7oRhnY89TXOdi2ZZZGvkcyLVzZAw6F2qUa8lYYOIDxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDiu07pAKTNFQvXLVIWopht9j4KMB8GA1UdIwQY
MBaAFFWylta1NP46MswcOk6BNY8hbJPHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJLVzFyVTBfam95ekJ3NlRvRTFqeUZzazhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kN2FiMGMtM2MyMi00YzYxLWEyMDEt
ZGQ2Y2M5N2M5YmRkLzEvVmJLVzFyVTBfam95ekJ3NlRvRTFqeUZzazhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9kN2FiMGMtM2MyMi00YzYxLWEyMDEtZGQ2Y2M5N2M5YmRk
LzEvVmJLVzFyVTBfam95ekJ3NlRvRTFqeUZzazhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYryaEYM
QSo1Bzg49Q6ViDWt9bGOUsWes0g23qYa4GJh6Q4FBt9VM2NJZSsQRtA5/1vVf+NJ
IO/jNqJ8lPaSdk6qQb3k0yOr2T7fb25IqTF36P5wNfLVoPZKUHkvw2dpBsduNYnE
yX6VJS9aNSWwi9XMwxPCeZd5c65NZN4m22b510riCiyTGpwD5PN5Wfat5LdMfGmr
35vmu5vp3RgSF3G9cOAphVwiN6R3LUbCcvFulUxO9WEjbG9WvJBWj0rb+KGTFEIE
mVN4SifnBqjciHKqV8K3G9wJMP9UyF9STtwx4IhBrC1HauI8qUgwUYBZVdLbbfFw
w1Ay6j5V/MjK7g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:30:07 2024 by rpki-client on console-fra.rpki-client.org