Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
File:                     G02ANz4-NNAKhbhBKNQFOZvPikU.mft (raw, json)
Hash identifier:          oePh5H+qMqoMu9Sxz4Babv/+yCXCpSZKwrrWZYMuVgw=
Subject key identifier:   43:E8:17:B8:AC:3A:F9:25:CC:0E:61:99:58:17:8B:C0:66:24:23:C1
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Certificate issuer:       /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial:       019406476B18D6A82224D04D9577EE8D755F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
Manifest number:          039E
Signing time:             Fri 27 Dec 2024 04:02:11 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:11 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:11 +0000
Files and hashes:         1: G02ANz4-NNAKhbhBKNQFOZvPikU.crl (hash: koeZkTOIp7QLu9ISB9HIbVuKM7F1I81rlbHbcPT8HM4=)
                          2: YcQVJAJ7RQcDxHkFcm0NnsK-zeA.roa (hash: R+Au9rvYtTsYBXdOfFaLDnyD2zSxBaAeIC6V1SToUnE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:6b:18:d6:a8:22:24:d0:4d:95:77:ee:8d:75:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
        Validity
            Not Before: Dec 27 04:02:11 2024 GMT
            Not After : Dec 28 04:02:11 2024 GMT
        Subject: CN=43e817b8ac3af925cc0e619958178bc0662423c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:e4:41:05:52:46:0d:5d:f4:0a:4e:d1:00:
                    13:cb:fe:20:22:42:f7:58:c2:7d:d5:26:49:e1:51:
                    75:e4:5b:5e:72:68:c5:a7:a4:81:86:29:e0:57:8d:
                    02:81:0d:ba:cb:ee:81:ee:b5:83:53:e9:d7:38:32:
                    b1:12:37:bb:71:b0:df:33:c8:60:c3:de:95:9e:c1:
                    c8:54:14:87:b3:ec:bb:1f:5b:8d:be:c2:4e:95:af:
                    ad:bb:e2:29:04:94:5a:e5:86:07:a6:d3:b8:da:63:
                    f4:2e:bc:f6:4d:53:65:b4:26:32:e0:77:32:38:85:
                    88:19:fc:89:45:8a:38:03:ab:cc:3e:97:ef:ab:13:
                    1b:3b:eb:73:3f:45:e1:fb:70:73:55:d4:9d:41:4b:
                    17:e1:8f:8f:c5:e4:71:24:ef:00:2c:e9:3a:da:87:
                    08:c6:9a:28:84:cc:b9:b3:92:be:66:58:18:56:08:
                    4d:e9:5e:19:bc:db:1d:d8:8f:e9:bd:d2:16:63:bc:
                    a5:c9:20:b1:5d:55:77:ce:1e:c7:26:c1:51:b5:d9:
                    f3:ec:f1:5d:cb:78:02:26:ec:04:8c:02:68:95:6d:
                    1e:69:a6:e6:d1:ee:7d:ab:f6:99:f1:fe:f5:32:f8:
                    98:ef:2a:ec:64:a0:4a:13:0d:89:96:17:7f:bd:83:
                    71:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E8:17:B8:AC:3A:F9:25:CC:0E:61:99:58:17:8B:C0:66:24:23:C1
            X509v3 Authority Key Identifier:
                keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f3:5d:0b:ee:1b:5a:cf:26:64:dc:b6:0e:d1:dc:31:24:67:
         0a:31:7d:ab:aa:0d:43:cd:c7:c7:8d:db:f2:77:5a:ef:b4:47:
         78:30:31:df:d0:e0:6d:e4:39:6e:d2:18:6b:ec:6b:92:d0:6d:
         d5:3d:7c:00:9f:5c:5b:b7:64:8f:93:af:7f:c3:68:5b:7a:a0:
         c1:6d:03:e9:8d:5b:77:7a:ea:f8:dd:e7:cf:7b:fa:0e:2a:fc:
         17:2a:56:8b:00:9a:7f:ab:98:d2:46:e2:78:df:49:ba:0c:89:
         d2:54:4e:ce:ee:16:34:a3:3b:32:50:ae:b3:47:67:6b:5a:48:
         ce:3d:fc:74:87:0a:e3:02:dd:cc:30:62:d0:26:b5:0b:ae:49:
         8b:07:8b:47:71:9e:ef:b7:6e:3f:99:29:37:7f:a1:6c:0c:5d:
         48:8a:f9:60:cc:ef:ed:4e:8d:d9:76:8e:7c:ab:49:10:7e:09:
         54:c1:80:4d:ef:ec:c8:c3:97:f0:71:37:a8:1c:02:36:99:26:
         a3:07:ea:10:20:47:e9:03:7b:04:ee:9f:be:74:e9:e6:46:46:
         94:90:a9:bc:c7:e2:36:bd:52:a3:0e:4d:b4:17:8a:9d:e7:6c:
         8b:e7:c0:58:63:ff:93:82:92:6d:35:58:d8:f4:9b:1a:ec:95:
         a8:d4:92:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQGR2sY1qgiJNBNlXfujXVfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNGQ4MDM3M2UzZTM0ZDAwYTg1Yjg0MTI4ZDQwNTM5OWJj
ZjhhNDUwHhcNMjQxMjI3MDQwMjExWhcNMjQxMjI4MDQwMjExWjAzMTEwLwYDVQQD
Eyg0M2U4MTdiOGFjM2FmOTI1Y2MwZTYxOTk1ODE3OGJjMDY2MjQyM2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj3kQQVSRg1d9ApO0QATy/4gIkL3
WMJ91SZJ4VF15FtecmjFp6SBhingV40CgQ26y+6B7rWDU+nXODKxEje7cbDfM8hg
w96VnsHIVBSHs+y7H1uNvsJOla+tu+IpBJRa5YYHptO42mP0Lrz2TVNltCYy4Hcy
OIWIGfyJRYo4A6vMPpfvqxMbO+tzP0Xh+3BzVdSdQUsX4Y+PxeRxJO8ALOk62ocI
xpoohMy5s5K+ZlgYVghN6V4ZvNsd2I/pvdIWY7ylySCxXVV3zh7HJsFRtdnz7PFd
y3gCJuwEjAJolW0eaabm0e59q/aZ8f71MviY7yrsZKBKEw2Jlhd/vYNxNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPoF7isOvklzA5hmVgXi8BmJCPBMB8GA1UdIwQY
MBaAFBtNgDc+PjTQCoW4QSjUBTmbz4pFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yNTc0ZDItY2IwYy00YjJhLWJlODMt
OGUwMGJkYTNiMjQ1LzEvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yNTc0ZDItY2IwYy00YjJhLWJlODMtOGUwMGJkYTNiMjQ1
LzEvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/NdC+4b
Ws8mZNy2DtHcMSRnCjF9q6oNQ83Hx43b8nda77RHeDAx39DgbeQ5btIYa+xrktBt
1T18AJ9cW7dkj5Ovf8NoW3qgwW0D6Y1bd3rq+N3nz3v6Dir8FypWiwCaf6uY0kbi
eN9JugyJ0lROzu4WNKM7MlCus0dna1pIzj38dIcK4wLdzDBi0Ca1C65JiweLR3Ge
77duP5kpN3+hbAxdSIr5YMzv7U6N2XaOfKtJEH4JVMGATe/syMOX8HE3qBwCNpkm
owfqECBH6QN7BO6fvnTp5kZGlJCpvMfiNr1Sow5NtBeKnedsi+fAWGP/k4KSbTVY
2PSbGuyVqNSS+w==
-----END CERTIFICATE-----
Generated at Fri Dec 27 10:50:07 2024 by rpki-client on console-fra.rpki-client.org