Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
File:                     Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft (raw, json)
Hash identifier:          DUGNPr0VGwB6gDB1mC1n+j/sy2uUxmWoYuwmoPz9o9M=
Subject key identifier:   73:DC:36:D5:87:77:72:5E:88:75:DB:BA:C1:7F:E0:1D:C9:B8:B0:EB
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Certificate issuer:       /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial:       019352076C3D3F31488FB78F162C746878DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
Manifest number:          0FA1
Signing time:             Fri 22 Nov 2024 04:00:38 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:38 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:38 +0000
Files and hashes:         1: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl (hash: 4fNSHvFXQ9WeOIe887XvsfJapESY3DSy7VrOUgTSxzY=)
                          2: brjfRNcG3nYZhYtzIe4-JE203u4.roa (hash: qgFBaSB74sLdj1np3/G1JATAHk7sY9Rn2tUBW966v7M=)
                          3: jHgHqnANLrtm7VTx4Z7Qk_66Q6I.roa (hash: GXGs9j3CLcQ8ajQusri0/AI2dQqfHS0uzwBDNnoJUa0=)
                          4: x_fOMo931VTp4lJ8MGBWhIFROp4.roa (hash: 9KPg+3IgzvARxRiNarIcCNN8IvTSaCzvhLykucNaIvM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:6c:3d:3f:31:48:8f:b7:8f:16:2c:74:68:78:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
        Validity
            Not Before: Nov 22 04:00:38 2024 GMT
            Not After : Nov 23 04:00:38 2024 GMT
        Subject: CN=73dc36d58777725e8875dbbac17fe01dc9b8b0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:07:48:d8:e5:c4:55:d3:42:c6:76:1d:01:
                    dd:ec:83:4f:32:9d:12:fb:4e:e8:bb:a4:67:9c:e8:
                    fb:5e:f8:08:6c:8e:7a:94:fc:c2:e8:5f:1c:31:e4:
                    81:6a:ab:e8:60:e1:58:ed:0f:d2:25:ed:86:bb:b5:
                    9c:72:77:9b:ef:fd:70:e8:9f:ec:b2:8a:5d:d4:d4:
                    93:b5:be:13:ec:54:70:37:48:e1:6b:9e:05:b1:04:
                    f0:24:12:e4:16:d1:10:50:45:01:c0:e3:d5:dc:dc:
                    28:c1:58:e5:1e:b6:53:3e:23:cb:05:37:70:ca:83:
                    bc:33:84:7b:ae:18:cd:09:47:34:48:07:09:69:74:
                    a1:49:e0:ff:dd:6d:20:2b:95:d8:fe:c6:1a:84:4a:
                    f0:b7:e0:29:a0:e7:ea:aa:bb:50:3b:6e:2a:16:ec:
                    a7:1b:fa:85:19:43:4a:cc:68:a3:33:30:12:06:5d:
                    c1:9f:fd:6d:c4:16:e1:19:07:60:e8:f5:57:84:74:
                    fa:b5:d6:42:0a:01:75:a6:0b:20:27:7a:38:be:45:
                    b0:89:17:d6:ca:93:8a:34:5f:0b:48:b1:a0:fd:ba:
                    b6:a1:80:ff:dc:03:ef:ad:50:cc:51:c3:14:84:28:
                    5c:42:f2:dd:f6:4f:66:96:55:0f:d5:57:3d:e2:bd:
                    96:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DC:36:D5:87:77:72:5E:88:75:DB:BA:C1:7F:E0:1D:C9:B8:B0:EB
            X509v3 Authority Key Identifier:
                keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f7:23:e7:ef:51:c1:26:fc:e6:85:87:e0:91:b1:bc:bb:b9:
         d6:46:30:ef:e5:87:a2:0b:d0:50:4c:a8:16:b6:e2:15:c0:9a:
         e6:77:7b:b8:24:bf:ac:a7:87:c0:84:c1:7c:62:ea:d5:e5:bb:
         41:7b:79:ad:c8:9c:32:71:ad:aa:bc:e9:a2:a6:56:82:a3:85:
         fa:9e:b9:85:85:0b:d7:e8:08:77:b3:2f:97:95:9d:b6:b8:cb:
         ca:0e:57:a0:69:80:7e:ac:1b:a2:05:4d:82:b8:5a:a4:c4:9f:
         38:fb:4d:de:ea:b7:0e:8f:af:15:ad:28:89:a2:43:c0:17:be:
         95:78:66:40:a4:3b:8a:45:ac:08:c9:6b:e7:76:06:a9:9a:7a:
         26:03:52:22:f3:ea:28:06:91:7e:30:b6:3e:b8:3f:11:b4:7e:
         c8:7e:c7:4e:b6:19:84:f5:87:42:04:ba:25:c0:a8:50:82:1f:
         25:14:e4:ae:09:ba:b1:d3:ff:e0:a7:46:c8:82:dd:c7:1b:e5:
         19:10:9d:b5:d4:46:b9:76:97:d1:c2:57:dd:ed:fd:92:d2:22:
         ce:8b:b5:24:37:85:fe:60:7a:1b:35:bb:4c:22:21:c2:69:db:
         e6:a6:51:95:c5:b7:37:da:c3:ca:52:31:d5:26:92:52:9a:e2:
         98:20:a1:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSB2w9PzFIj7ePFix0aHjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZmQzMzc0YzdhYzNjMDM3Nzg3MDdmMzY3ZjkxNDhmMWZl
MDM5MGQwHhcNMjQxMTIyMDQwMDM4WhcNMjQxMTIzMDQwMDM4WjAzMTEwLwYDVQQD
Eyg3M2RjMzZkNTg3Nzc3MjVlODg3NWRiYmFjMTdmZTAxZGM5YjhiMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFYHSNjlxFXTQsZ2HQHd7INPMp0S
+07ou6RnnOj7XvgIbI56lPzC6F8cMeSBaqvoYOFY7Q/SJe2Gu7Wccneb7/1w6J/s
sopd1NSTtb4T7FRwN0jha54FsQTwJBLkFtEQUEUBwOPV3NwowVjlHrZTPiPLBTdw
yoO8M4R7rhjNCUc0SAcJaXShSeD/3W0gK5XY/sYahErwt+ApoOfqqrtQO24qFuyn
G/qFGUNKzGijMzASBl3Bn/1txBbhGQdg6PVXhHT6tdZCCgF1pgsgJ3o4vkWwiRfW
ypOKNF8LSLGg/bq2oYD/3APvrVDMUcMUhChcQvLd9k9mllUP1Vc94r2WfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPcNtWHd3JeiHXbusF/4B3JuLDrMB8GA1UdIwQY
MBaAFEX9M3THrDwDd4cH82f5FI8f4DkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmYwemRNZXNQQU4zaHdmelpfa1VqeF9nT1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ODA5YmItMjQ2OC00MWU2LThhNDIt
ZGUyNWNkYzhmMjExLzEvUmYwemRNZXNQQU4zaHdmelpfa1VqeF9nT1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84ODA5YmItMjQ2OC00MWU2LThhNDItZGUyNWNkYzhmMjEx
LzEvUmYwemRNZXNQQU4zaHdmelpfa1VqeF9nT1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/cj5+9R
wSb85oWH4JGxvLu51kYw7+WHogvQUEyoFrbiFcCa5nd7uCS/rKeHwITBfGLq1eW7
QXt5rcicMnGtqrzpoqZWgqOF+p65hYUL1+gId7Mvl5WdtrjLyg5XoGmAfqwbogVN
grhapMSfOPtN3uq3Do+vFa0oiaJDwBe+lXhmQKQ7ikWsCMlr53YGqZp6JgNSIvPq
KAaRfjC2Prg/EbR+yH7HTrYZhPWHQgS6JcCoUIIfJRTkrgm6sdP/4KdGyILdxxvl
GRCdtdRGuXaX0cJX3e39ktIizou1JDeF/mB6GzW7TCIhwmnb5qZRlcW3N9rDylIx
1SaSUprimCChxA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:51:25 2024 by rpki-client on console-fra.rpki-client.org