Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File:                     qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier:          T+9NmxBk0qob57qtDIQ9k9iT8FzLkULLlY2oJhh3oKI=
Subject key identifier:   FF:08:E6:BC:2A:63:34:74:9C:B3:20:B3:DA:41:53:C1:F2:09:5A:D0
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer:       /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial:       019356890C86290267BEE34A6B7F932A0E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:00:42 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:42 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:42 +0000
Files and hashes:         1: GYlRvXs1Zdvb45K-HqLdD1lx0Xk.roa (hash: LsH8/524XJMJXLE/lJ03R9dmHJiOZvoqmGRDD05Za/M=)
                          2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: BlEZ8ta2jquvUr6kBvS9Ahmxb1H2NjGVZyIbRBHY46g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:0c:86:29:02:67:be:e3:4a:6b:7f:93:2a:0e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
        Validity
            Not Before: Nov 23 01:00:42 2024 GMT
            Not After : Nov 24 01:00:42 2024 GMT
        Subject: CN=ff08e6bc2a6334749cb320b3da4153c1f2095ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:22:2b:83:b0:f2:d5:de:d9:41:5d:e7:6f:
                    13:e5:fc:87:98:d4:1c:98:0a:27:6d:2f:83:0c:c1:
                    03:55:2a:e7:77:bc:74:88:00:b0:b8:0e:b7:65:a9:
                    d4:17:91:df:30:02:99:c9:c4:aa:2b:2b:76:f2:15:
                    bf:44:09:88:b0:b1:21:d2:84:04:f2:25:51:56:01:
                    eb:11:39:c3:f7:10:be:10:c0:96:5b:90:74:95:d2:
                    ce:3d:23:e5:51:8d:01:90:f6:8a:5b:8b:e4:2e:aa:
                    09:c5:56:dd:33:19:79:be:a1:b3:de:c8:d4:53:cc:
                    8d:72:f0:eb:97:31:e1:d6:41:61:42:46:15:51:56:
                    b9:21:0e:cf:54:51:3c:f7:8c:fd:a3:e3:8e:85:0f:
                    c1:07:3a:5f:54:5d:4b:20:1b:3a:c8:ae:61:36:93:
                    19:15:e9:8c:ff:58:40:20:16:10:cf:b2:58:d3:9a:
                    64:39:e7:b4:0b:16:1f:3e:bc:ac:4a:85:48:c2:49:
                    24:ec:15:f3:49:e3:45:c0:78:ea:d8:50:cf:11:01:
                    36:a3:cd:8d:c6:01:f4:ec:ea:a5:d8:70:8e:4a:81:
                    2d:fd:80:52:0b:57:fa:04:46:86:8d:2c:bf:27:21:
                    af:1e:90:88:55:11:82:b4:d4:02:81:01:5e:0a:4a:
                    15:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:08:E6:BC:2A:63:34:74:9C:B3:20:B3:DA:41:53:C1:F2:09:5A:D0
            X509v3 Authority Key Identifier:
                keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:24:ac:78:c0:10:61:8a:e2:3d:3f:12:c2:f1:66:9c:1c:52:
         24:a0:c1:d8:a7:c6:00:12:bf:3d:26:b8:c2:94:61:c5:76:f1:
         6f:df:59:65:6b:f1:75:6a:38:18:e6:66:eb:e4:ff:25:86:53:
         65:99:7f:6d:e6:c6:44:ef:75:e5:a1:6a:78:a2:37:2a:3c:a5:
         83:70:7c:98:00:97:a8:90:e2:32:a4:e7:f8:e2:b9:07:95:ea:
         1b:fd:38:0c:8b:e1:26:3b:cf:83:b6:4c:11:df:d8:cd:40:63:
         d0:cf:b2:cc:72:9c:fc:04:a9:7d:31:31:15:c0:25:0d:09:56:
         98:87:74:55:13:80:fa:53:2c:9d:ec:ce:d0:10:9f:ae:5d:a7:
         7a:f5:5d:5b:a7:de:4f:6f:e0:b7:78:e3:a3:2a:e8:26:9c:8c:
         bd:a2:32:2a:f9:e0:8b:ef:49:6c:74:4c:57:6d:da:ea:1a:30:
         90:ee:80:e1:b3:1e:66:f3:eb:25:06:c2:94:59:15:0a:38:58:
         6b:ba:01:81:59:1b:e6:a7:ac:8d:4a:16:3a:e4:3a:9c:12:1a:
         e9:1d:89:85:b6:e0:73:1c:f2:1d:78:f8:02:a2:e7:ce:f3:1f:
         f7:97:fa:68:af:02:bf:fa:7f:9b:c6:82:b2:ae:e0:c9:04:58:
         b0:53:da:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiQyGKQJnvuNKa3+TKg52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYzZhZjBjMjliZWJjN2M0ODVjZjgwMDFkYTlmMTk5MzBh
Y2U0NWQwHhcNMjQxMTIzMDEwMDQyWhcNMjQxMTI0MDEwMDQyWjAzMTEwLwYDVQQD
EyhmZjA4ZTZiYzJhNjMzNDc0OWNiMzIwYjNkYTQxNTNjMWYyMDk1YWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2siK4Ow8tXe2UFd528T5fyHmNQc
mAonbS+DDMEDVSrnd7x0iACwuA63ZanUF5HfMAKZycSqKyt28hW/RAmIsLEh0oQE
8iVRVgHrETnD9xC+EMCWW5B0ldLOPSPlUY0BkPaKW4vkLqoJxVbdMxl5vqGz3sjU
U8yNcvDrlzHh1kFhQkYVUVa5IQ7PVFE894z9o+OOhQ/BBzpfVF1LIBs6yK5hNpMZ
FemM/1hAIBYQz7JY05pkOee0CxYfPrysSoVIwkkk7BXzSeNFwHjq2FDPEQE2o82N
xgH07Oql2HCOSoEt/YBSC1f6BEaGjSy/JyGvHpCIVRGCtNQCgQFeCkoVxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8I5rwqYzR0nLMgs9pBU8HyCVrQMB8GA1UdIwQY
MBaAFKrGrwwpvrx8SFz4AB2p8ZkwrORdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mOGM0NDUtMGFhYi00MDg3LWEwZDMt
OTM0NzU5MTkxMGE4LzEvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9mOGM0NDUtMGFhYi00MDg3LWEwZDMtOTM0NzU5MTkxMGE4
LzEvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgySseMAQ
YYriPT8SwvFmnBxSJKDB2KfGABK/PSa4wpRhxXbxb99ZZWvxdWo4GOZm6+T/JYZT
ZZl/bebGRO915aFqeKI3Kjylg3B8mACXqJDiMqTn+OK5B5XqG/04DIvhJjvPg7ZM
Ed/YzUBj0M+yzHKc/ASpfTExFcAlDQlWmId0VROA+lMsnezO0BCfrl2nevVdW6fe
T2/gt3jjoyroJpyMvaIyKvngi+9JbHRMV23a6howkO6A4bMeZvPrJQbClFkVCjhY
a7oBgVkb5qesjUoWOuQ6nBIa6R2JhbbgcxzyHXj4AqLnzvMf95f6aK8Cv/p/m8aC
sq7gyQRYsFPaqA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:40 2024 by rpki-client on console-ams.rpki-client.org