Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
File:                     vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json)
Hash identifier:          vn1TYMjItL/cGkeJCMrXou9tAn95lufs39VyZuF5+1c=
Subject key identifier:   7D:A5:D9:35:B7:56:20:ED:C8:DC:DF:5F:2C:9A:EE:43:5E:64:EB:A4
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Certificate issuer:       /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial:       01935764B80F28550B61366672DEE4BA6C51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 05:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:38 +0000
Files and hashes:         1: Mi7uqjw3EFwH2vaQ8CKQ0xvIUZ4.roa (hash: pHo/uX3EaueWBs0PMvxs/bb1U2sOI1cm59A9umYFnvc=)
                          2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: tyXqH13RH7BZOlV8zFtYYS5GQ5IdbUKVVgPfFPE4Stk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:b8:0f:28:55:0b:61:36:66:72:de:e4:ba:6c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
        Validity
            Not Before: Nov 23 05:00:38 2024 GMT
            Not After : Nov 24 05:00:38 2024 GMT
        Subject: CN=7da5d935b75620edc8dcdf5f2c9aee435e64eba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:a6:6d:bf:1b:c8:02:72:d0:be:90:f9:db:
                    f0:9b:f5:96:47:98:8c:08:30:85:5e:4b:42:8c:44:
                    66:48:bf:3b:58:f1:ef:3d:e0:49:c3:f6:12:d6:e1:
                    89:f6:52:7c:e1:e5:79:7d:44:d3:87:44:84:c5:e5:
                    c2:09:ca:63:bb:d2:89:f4:5f:22:75:89:be:0f:7a:
                    ab:79:63:c2:86:79:99:ba:d2:c1:51:0b:ff:92:57:
                    08:b2:71:ac:86:66:9f:c6:f3:85:20:8d:8d:8b:ad:
                    e9:41:3e:ec:71:72:af:58:a5:20:32:d0:35:91:d0:
                    cc:c1:38:86:e5:8a:b6:7b:9d:bf:db:f2:94:c1:ec:
                    4f:c9:5f:9d:1d:1a:a0:f8:a8:8a:bc:da:8c:6f:3c:
                    0c:21:a8:ea:11:b2:d3:a5:bb:42:12:c5:dd:68:5e:
                    4c:a3:94:c1:54:99:4b:3b:52:2a:66:75:e1:b6:97:
                    1d:37:a1:25:ad:d3:57:64:6f:68:91:38:a7:34:db:
                    3b:00:25:bb:fd:1f:4c:6b:ba:94:c8:50:7a:45:61:
                    b3:5c:66:1e:3b:25:8f:99:a8:72:4a:3d:65:60:d8:
                    76:be:d1:03:7f:21:86:ac:56:11:14:6c:4c:2f:05:
                    a8:85:1d:c0:22:be:aa:8f:ff:c9:4c:94:4e:41:00:
                    55:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A5:D9:35:B7:56:20:ED:C8:DC:DF:5F:2C:9A:EE:43:5E:64:EB:A4
            X509v3 Authority Key Identifier:
                keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:e7:9e:c3:4f:3b:ab:4b:1a:a1:2f:18:dc:22:b9:a9:26:5d:
         2b:ff:d5:2e:d1:f3:77:39:a2:46:96:b2:5f:7d:db:c8:93:ee:
         e2:47:5f:15:3c:76:3b:53:1c:1e:82:20:06:8a:8d:57:c3:56:
         1b:ac:7d:22:c3:ad:cc:d3:ca:09:c8:2f:f8:d8:32:af:11:27:
         04:b0:42:63:30:9f:11:87:f9:39:91:ba:86:a7:89:a4:cd:60:
         41:92:11:4e:89:25:f0:2b:09:99:77:66:b0:49:3d:4b:38:29:
         2d:79:3f:bb:4c:5f:c2:ca:2c:0b:8f:f4:1e:7f:ff:ad:b8:07:
         d0:70:2c:3b:77:eb:69:bc:20:d0:74:4b:e6:8f:59:88:97:57:
         58:41:e0:0f:64:70:bf:e9:96:11:8f:4b:83:a4:23:71:5f:95:
         5d:8f:49:77:15:a8:19:6b:b9:ef:ce:45:ab:33:f9:b8:a3:db:
         e4:11:2c:32:fb:93:6e:df:1b:8c:22:bb:0a:b1:48:63:ad:c6:
         a1:ff:90:4d:0e:c4:1a:fd:f1:f4:55:c4:27:c8:d6:42:8d:24:
         ee:e3:14:dc:9a:f0:da:09:3d:9d:5e:36:85:e4:05:5d:55:98:
         1e:d1:3d:50:73:6c:ae:21:e0:bb:2d:e0:f2:27:92:ed:8a:c2:
         17:4e:98:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZLgPKFULYTZmct7kumxRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMzAzM2ExMDJiM2I3OTEyYTM2NjMyMGY0NDM1YzUzZmI5
NzczZjQwHhcNMjQxMTIzMDUwMDM4WhcNMjQxMTI0MDUwMDM4WjAzMTEwLwYDVQQD
Eyg3ZGE1ZDkzNWI3NTYyMGVkYzhkY2RmNWYyYzlhZWU0MzVlNjRlYmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrSmbb8byAJy0L6Q+dvwm/WWR5iM
CDCFXktCjERmSL87WPHvPeBJw/YS1uGJ9lJ84eV5fUTTh0SExeXCCcpju9KJ9F8i
dYm+D3qreWPChnmZutLBUQv/klcIsnGshmafxvOFII2Ni63pQT7scXKvWKUgMtA1
kdDMwTiG5Yq2e52/2/KUwexPyV+dHRqg+KiKvNqMbzwMIajqEbLTpbtCEsXdaF5M
o5TBVJlLO1IqZnXhtpcdN6ElrdNXZG9okTinNNs7ACW7/R9Ma7qUyFB6RWGzXGYe
OyWPmahySj1lYNh2vtEDfyGGrFYRFGxMLwWohR3AIr6qj//JTJROQQBV4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2l2TW3ViDtyNzfXyya7kNeZOukMB8GA1UdIwQY
MBaAFLwwM6ECs7eRKjZjIPRDXFP7l3P0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zMGNmMDctM2ZhOC00NGE2LTkzNWIt
ZjlhN2FjZDkxYmNjLzEvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zMGNmMDctM2ZhOC00NGE2LTkzNWItZjlhN2FjZDkxYmNj
LzEvdkRBem9RS3p0NUVxTm1NZzlFTmNVX3VYY19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzueew087
q0saoS8Y3CK5qSZdK//VLtHzdzmiRpayX33byJPu4kdfFTx2O1McHoIgBoqNV8NW
G6x9IsOtzNPKCcgv+NgyrxEnBLBCYzCfEYf5OZG6hqeJpM1gQZIRTokl8CsJmXdm
sEk9SzgpLXk/u0xfwsosC4/0Hn//rbgH0HAsO3frabwg0HRL5o9ZiJdXWEHgD2Rw
v+mWEY9Lg6QjcV+VXY9JdxWoGWu5785FqzP5uKPb5BEsMvuTbt8bjCK7CrFIY63G
of+QTQ7EGv3x9FXEJ8jWQo0k7uMU3Jrw2gk9nV42heQFXVWYHtE9UHNsriHguy3g
8ieS7YrCF06YOQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:22:16 2024 by rpki-client on console-fra.rpki-client.org