Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File:                     IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier:          ZXHF69GRH3vfOHJnI8B9BZgi6G27ZrcVwWP2sXDGXlg=
Subject key identifier:   7F:7E:53:77:80:2B:ED:F0:A7:44:72:04:9E:CD:58:A8:2B:A2:32:64
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer:       /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial:       01935350BF122E21276AA99C8B9959F9FB95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number:          0EB9
Signing time:             Fri 22 Nov 2024 10:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:20 +0000
Files and hashes:         1: Hj54pUApylrNHTcKfC9e0qpkNno.roa (hash: GCgaRCHe+ACHFKK/QFpR3uqOQIkNsDqCwzZrP5baRZI=)
                          2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: yK+KrCVnQmLIVuZbETVAZpPaoICOtwtOu5DSZ46Vjxs=)
                          3: LCcSPKnkpZ7XWsZ_lBMa3DVg2Jk.roa (hash: vJf15B1v8Cv3ZpF7od4GOUP9sb87008LK7iJXH7LvNQ=)
                          4: cvDID1mO_KxMrtTZLFOrQTErt2E.roa (hash: 5JxGHoYAF2joL086jFjqukXRzHhVkrhemlQSKi+EDuM=)
                          5: j6UOSc_ktXRVk5nAhgjmfllhkik.roa (hash: H4tS0PmN9Wws0UXcCN6xz1HWfFM5TmvSSR66VGgaVQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:50:bf:12:2e:21:27:6a:a9:9c:8b:99:59:f9:fb:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
        Validity
            Not Before: Nov 22 10:00:20 2024 GMT
            Not After : Nov 23 10:00:20 2024 GMT
        Subject: CN=7f7e5377802bedf0a74472049ecd58a82ba23264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:64:67:0b:58:ad:cc:77:26:df:47:25:59:
                    2f:7b:71:6b:b5:cd:fb:49:66:34:34:a9:b1:eb:c4:
                    f3:10:dd:d9:21:f2:08:3d:8f:31:e5:3c:c8:c5:42:
                    f6:2a:bc:f4:86:63:67:25:eb:43:15:73:2d:06:65:
                    e6:e2:22:bb:b9:02:76:67:44:66:ae:36:7e:1c:11:
                    b2:17:14:f5:d5:50:38:ce:0f:d8:39:05:c4:32:50:
                    a7:0a:5f:4b:4f:48:58:7f:e9:6c:48:d9:dd:c4:6e:
                    1b:67:ff:36:d9:0e:49:7e:5a:ab:3f:77:14:ab:87:
                    b3:6f:2b:bc:88:05:d3:74:f5:00:47:14:e6:ca:4c:
                    74:8a:bc:73:6e:ac:2c:23:34:68:90:ff:e4:3e:1f:
                    7d:05:7b:d2:df:3c:bb:52:11:9f:3b:df:5a:1b:95:
                    88:8b:3b:c8:cf:1a:a6:f5:32:7f:89:dc:4c:c5:95:
                    06:44:1a:2e:0c:1d:89:46:fc:e0:44:bc:ac:b1:92:
                    d0:56:b2:13:fd:0c:e9:2a:d7:c4:76:f2:f3:73:b3:
                    36:5a:3d:7a:21:65:54:b6:d4:26:a6:64:38:a4:bf:
                    06:33:94:ae:7e:14:e3:51:d2:5c:a0:dd:d1:44:68:
                    38:72:b1:22:bf:01:d9:a9:17:4a:dd:cc:eb:5d:99:
                    07:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7E:53:77:80:2B:ED:F0:A7:44:72:04:9E:CD:58:A8:2B:A2:32:64
            X509v3 Authority Key Identifier:
                keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:91:7d:09:ab:ce:c5:18:9f:c3:9d:e5:e4:64:d3:24:7f:8a:
         f8:b9:bf:d2:db:5e:dc:fe:17:e7:c1:5c:da:dc:f6:19:0b:d2:
         3c:04:5c:e3:51:73:ed:e0:5e:60:02:a0:83:c8:7b:a8:06:28:
         33:e6:30:f7:55:84:09:7f:f8:cb:2f:5b:3f:e1:f9:7f:92:5d:
         e0:57:5f:19:23:d8:95:86:5e:b5:69:b9:99:f8:5d:94:4a:4b:
         29:11:36:a6:e6:87:a3:55:81:b7:25:17:da:7e:87:b8:a5:e7:
         82:ab:43:2d:3b:2e:24:30:d2:ec:1b:f7:93:22:30:75:a0:b1:
         14:83:5b:f2:97:e0:90:a1:4c:82:2c:cf:50:5f:18:05:b6:d4:
         80:84:de:f2:2a:c6:0e:0a:70:9c:1c:f3:43:63:29:9f:e9:a1:
         98:07:91:bd:4d:91:9a:09:e7:08:05:08:fc:32:d1:6b:d6:cc:
         fd:5a:c6:9a:97:99:4a:2b:0b:e9:c5:fb:f7:e8:bc:e0:4c:ff:
         51:d8:d8:4e:05:84:86:24:e2:9f:cb:79:f9:f9:52:50:65:02:
         3d:e4:c2:d3:53:36:ff:1b:dc:12:e3:cf:ca:d4:60:48:a6:d6:
         b1:fd:52:80:06:be:ee:49:bc:68:c5:e0:97:a1:7b:66:d6:bf:
         2a:ba:66:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTUL8SLiEnaqmci5lZ+fuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxM2UxZDUwZDUyMjg4YmVlODBlZWE0MzU1NzcwMTg3MTI0
MDliYmUwHhcNMjQxMTIyMTAwMDIwWhcNMjQxMTIzMTAwMDIwWjAzMTEwLwYDVQQD
Eyg3ZjdlNTM3NzgwMmJlZGYwYTc0NDcyMDQ5ZWNkNThhODJiYTIzMjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjJkZwtYrcx3Jt9HJVkve3Frtc37
SWY0NKmx68TzEN3ZIfIIPY8x5TzIxUL2Krz0hmNnJetDFXMtBmXm4iK7uQJ2Z0Rm
rjZ+HBGyFxT11VA4zg/YOQXEMlCnCl9LT0hYf+lsSNndxG4bZ/822Q5JflqrP3cU
q4ezbyu8iAXTdPUARxTmykx0irxzbqwsIzRokP/kPh99BXvS3zy7UhGfO99aG5WI
izvIzxqm9TJ/idxMxZUGRBouDB2JRvzgRLyssZLQVrIT/QzpKtfEdvLzc7M2Wj16
IWVUttQmpmQ4pL8GM5SufhTjUdJcoN3RRGg4crEivwHZqRdK3czrXZkH3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9+U3eAK+3wp0RyBJ7NWKgrojJkMB8GA1UdIwQY
MBaAFCE+HVDVIoi+6A7qQ1V3AYcSQJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYt
MzE2ZWYyNjFmNGE1LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYtMzE2ZWYyNjFmNGE1
LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZF9CavO
xRifw53l5GTTJH+K+Lm/0tte3P4X58Fc2tz2GQvSPARc41Fz7eBeYAKgg8h7qAYo
M+Yw91WECX/4yy9bP+H5f5Jd4FdfGSPYlYZetWm5mfhdlEpLKRE2puaHo1WBtyUX
2n6HuKXngqtDLTsuJDDS7Bv3kyIwdaCxFINb8pfgkKFMgizPUF8YBbbUgITe8irG
DgpwnBzzQ2Mpn+mhmAeRvU2RmgnnCAUI/DLRa9bM/VrGmpeZSisL6cX79+i84Ez/
UdjYTgWEhiTin8t5+flSUGUCPeTC01M2/xvcEuPPytRgSKbWsf1SgAa+7km8aMXg
l6F7Zta/KrpmFw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:04:22 2024 by rpki-client on console-ams.rpki-client.org