Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File:                     g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier:          FaLHuf5hN+V8/Yudy+BLtQiJGVJNu6lyjJqkmWqIky8=
Subject key identifier:   18:BD:47:4D:3E:26:BB:A7:D3:14:F2:B6:DE:3C:E1:EB:3A:CE:7B:1F
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer:       /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial:       0193572DC4D74A2DD39F8772A43F48CB5986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number:          0EA4
Signing time:             Sat 23 Nov 2024 04:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:37 +0000
Files and hashes:         1: W-YX6jDDfq3ftu8mGhB3FjpzDaE.roa (hash: sRFGArVxaSfVeF+SPsGlXqoHISva2NLXCWGdnsS0QH0=)
                          2: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: 230BGejR2HoUfbXnEEbj0mlZ37ScOC4uttld+kbk4DM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:c4:d7:4a:2d:d3:9f:87:72:a4:3f:48:cb:59:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
        Validity
            Not Before: Nov 23 04:00:37 2024 GMT
            Not After : Nov 24 04:00:37 2024 GMT
        Subject: CN=18bd474d3e26bba7d314f2b6de3ce1eb3ace7b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:c1:04:4e:61:aa:64:a5:30:59:c8:0c:c3:
                    c8:ea:c6:3e:9a:91:e0:af:d3:9c:22:23:f1:4b:5a:
                    7c:f6:2f:76:a4:37:3f:99:64:ee:f2:62:ab:bd:da:
                    0d:9a:60:27:c4:89:59:5c:37:91:56:5c:97:fe:37:
                    e6:e3:13:4b:7c:2d:7f:10:4f:71:1b:8e:63:5b:0a:
                    00:64:2a:7e:df:d9:e6:fe:e4:0b:49:56:63:28:7f:
                    52:59:fa:17:07:95:a5:a3:82:6b:58:ee:42:c2:c6:
                    3a:76:70:9f:49:1e:41:55:32:73:c0:58:32:17:d6:
                    df:c9:a3:2d:94:e3:07:90:98:cd:8e:a1:e0:7b:03:
                    44:b2:68:b2:a3:14:df:ae:20:8a:f1:ee:e3:3c:20:
                    57:45:8c:cd:6a:fe:c3:6a:4e:1d:7f:18:3f:de:bc:
                    7c:0f:bd:66:46:b6:ab:40:7c:3b:c9:e1:31:c0:4b:
                    bc:67:d8:60:ad:8f:9d:85:1a:ab:b9:36:64:0f:50:
                    86:49:48:50:a1:7b:92:81:96:5f:a3:dd:8f:d0:9c:
                    15:27:e4:b8:7a:45:18:21:bb:66:a4:5d:9d:58:2f:
                    14:c4:3a:26:86:50:5d:47:01:15:0c:b9:82:f3:8c:
                    18:0e:f3:48:ff:70:c7:cd:17:1c:fd:39:6d:17:60:
                    a0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BD:47:4D:3E:26:BB:A7:D3:14:F2:B6:DE:3C:E1:EB:3A:CE:7B:1F
            X509v3 Authority Key Identifier:
                keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6c:b5:b6:31:9c:2e:99:37:d3:f6:10:d1:48:21:5f:da:7d:
         c8:df:19:c5:e4:43:5d:a5:5f:54:56:6a:1d:7b:23:de:90:97:
         d7:db:a2:5e:50:a4:f1:87:5e:d9:af:67:6c:c9:e6:eb:aa:3d:
         19:e9:4f:fb:aa:c0:d1:52:72:75:05:38:88:4e:98:35:5f:d5:
         56:73:1a:e1:4d:40:bd:b7:36:76:d7:79:34:da:cd:e0:dc:37:
         e1:b1:16:b8:f6:e7:e8:a5:6e:24:49:0a:e4:12:3d:57:d6:c4:
         30:8e:8a:7c:bd:0e:8c:5a:cb:ca:a0:63:d6:ba:34:ea:12:8b:
         5c:79:70:d5:9a:e2:c0:8d:25:66:42:b6:17:d7:69:39:2a:44:
         f7:3b:c4:c1:5e:ee:57:36:1f:11:fe:51:d5:e4:3e:d9:18:8a:
         66:31:94:42:1a:c6:a8:69:07:ea:93:ce:0b:a2:91:61:39:94:
         bb:19:22:4f:21:97:a1:5f:ec:4e:55:dd:3c:1c:ff:a7:7f:77:
         d4:60:6f:6b:69:5e:73:6c:2a:7d:02:a9:8c:2f:65:7f:ad:a4:
         b2:23:5c:22:80:10:a0:1e:11:94:48:ff:ab:26:2c:c1:61:4f:
         b6:34:68:01:8d:cf:bb:3a:d1:3a:7b:cf:f8:a3:43:ad:61:16:
         e4:be:d5:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLcTXSi3Tn4dypD9Iy1mGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYmYzNmViMThlZjlhNTdjNWZiNjAzYWRhNDAwZmU2YjY2
ODhlNmUwHhcNMjQxMTIzMDQwMDM3WhcNMjQxMTI0MDQwMDM3WjAzMTEwLwYDVQQD
EygxOGJkNDc0ZDNlMjZiYmE3ZDMxNGYyYjZkZTNjZTFlYjNhY2U3YjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0/BBE5hqmSlMFnIDMPI6sY+mpHg
r9OcIiPxS1p89i92pDc/mWTu8mKrvdoNmmAnxIlZXDeRVlyX/jfm4xNLfC1/EE9x
G45jWwoAZCp+39nm/uQLSVZjKH9SWfoXB5Wlo4JrWO5CwsY6dnCfSR5BVTJzwFgy
F9bfyaMtlOMHkJjNjqHgewNEsmiyoxTfriCK8e7jPCBXRYzNav7Dak4dfxg/3rx8
D71mRrarQHw7yeExwEu8Z9hgrY+dhRqruTZkD1CGSUhQoXuSgZZfo92P0JwVJ+S4
ekUYIbtmpF2dWC8UxDomhlBdRwEVDLmC84wYDvNI/3DHzRcc/TltF2Cg8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBi9R00+Jrun0xTytt484es6znsfMB8GA1UdIwQY
MBaAFIO/NusY75pXxftgOtpAD+a2aI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mNzdkNTEtZWUxYy00N2E5LTkwYmMt
ZTBkMmExYjZlOGFjLzEvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mNzdkNTEtZWUxYy00N2E5LTkwYmMtZTBkMmExYjZlOGFj
LzEvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGy1tjGc
Lpk30/YQ0UghX9p9yN8ZxeRDXaVfVFZqHXsj3pCX19uiXlCk8Yde2a9nbMnm66o9
GelP+6rA0VJydQU4iE6YNV/VVnMa4U1Avbc2dtd5NNrN4Nw34bEWuPbn6KVuJEkK
5BI9V9bEMI6KfL0OjFrLyqBj1ro06hKLXHlw1ZriwI0lZkK2F9dpOSpE9zvEwV7u
VzYfEf5R1eQ+2RiKZjGUQhrGqGkH6pPOC6KRYTmUuxkiTyGXoV/sTlXdPBz/p393
1GBva2lec2wqfQKpjC9lf62ksiNcIoAQoB4RlEj/qyYswWFPtjRoAY3PuzrROnvP
+KNDrWEW5L7Vnw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:14:41 2024 by rpki-client on console-ams.rpki-client.org