Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File:                     IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier:          c+6ZamV6HLTq9JMLuLq2OECOrn3msemiOd3YOj7764M=
Subject key identifier:   D3:94:F6:07:97:E5:E0:01:9A:D2:3F:2D:E4:D7:2E:33:AB:CB:FB:67
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer:       /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial:       0193568A7403FA0B4E9FF776383DA1ACA671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number:          0B55
Signing time:             Sat 23 Nov 2024 01:02:14 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:14 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:14 +0000
Files and hashes:         1: 3DkjtZvGHqa1v_cj9eia45Rs-84.roa (hash: yD01z94X848TTIQw6anOHXTb1z+50fYKxlDSep2uNRA=)
                          2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: YSnoKRetLV9ICprLZJ/8bpnBvPNVpG2/GGiXV41XjR4=)
                          3: TQyXeJr22ZCJBPsgwhveDdCqIjk.roa (hash: /cbOL8qlcfaKvpCw5TFY/oLXm9p603iDajWpDAKLa/4=)
                          4: eQnjTOmaS4caiJPVC8Y012pFK_o.roa (hash: LRX+BBpEtfyTnwbv03OUTDUDXUAtSgSdZ/fh2pOrtuA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:74:03:fa:0b:4e:9f:f7:76:38:3d:a1:ac:a6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
        Validity
            Not Before: Nov 23 01:02:14 2024 GMT
            Not After : Nov 24 01:02:14 2024 GMT
        Subject: CN=d394f60797e5e0019ad23f2de4d72e33abcbfb67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:9b:69:5a:b0:c5:40:2f:69:a5:f4:ce:90:
                    9a:70:45:8b:4a:e1:dd:af:28:4d:76:c3:69:9d:46:
                    13:29:4a:04:cc:6d:97:2c:7f:de:c7:e6:cd:06:bc:
                    25:2d:a8:b4:58:e9:a4:14:fd:95:b8:4a:cf:c1:98:
                    91:bd:6e:cf:89:c0:a7:9c:d4:74:d9:47:e9:54:4b:
                    46:f0:fc:48:e2:62:dd:f0:be:95:92:29:a5:d3:88:
                    0d:b1:b8:ef:2d:48:50:ba:39:88:81:d7:3c:f7:e6:
                    f0:c1:af:82:f7:52:51:e9:5a:bd:58:2a:59:db:5d:
                    a5:7e:35:6c:a5:59:0a:4e:5f:ac:91:43:be:e9:dd:
                    82:f6:fc:45:bc:9c:10:0a:4d:76:54:97:a3:3c:a1:
                    82:a4:92:2d:04:fc:76:0a:d6:93:50:16:ec:36:2c:
                    b4:47:fb:72:8d:8d:3f:17:86:7a:b4:56:06:67:75:
                    56:7b:b4:a0:f9:27:da:d5:cb:4b:9e:34:7c:e9:c8:
                    bf:01:f8:42:8f:46:03:92:b2:9a:bc:18:b3:28:0c:
                    42:e0:ba:e1:4d:33:4a:3a:c2:74:63:c9:58:d6:8e:
                    7c:84:e6:43:c3:76:94:9e:c4:35:e0:f6:5c:8c:58:
                    d9:4c:9c:3f:f5:9b:8d:21:58:d7:4e:a7:c5:66:29:
                    6c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:94:F6:07:97:E5:E0:01:9A:D2:3F:2D:E4:D7:2E:33:AB:CB:FB:67
            X509v3 Authority Key Identifier:
                keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d5:96:cb:ed:2a:23:5c:51:86:9e:0d:bb:46:68:69:76:af:
         8e:ca:ed:9a:13:4f:eb:b4:3e:0c:61:9a:6f:23:72:04:fa:5d:
         12:ac:77:40:be:47:16:c5:ea:e6:90:e6:50:07:fd:d7:3b:eb:
         09:d3:9e:a6:61:2f:11:63:bf:a4:ff:14:75:24:4a:27:84:05:
         60:59:e5:c5:44:7d:a2:27:71:64:fa:0a:21:49:8c:3d:39:f2:
         9f:0d:59:d3:5d:3f:9e:00:44:24:36:50:11:5d:29:96:0a:fe:
         6f:e5:9e:e9:1a:d1:72:e9:e8:ce:b4:b7:e8:d0:07:34:c4:47:
         a2:58:21:5c:44:6d:a8:51:dd:ee:e2:49:a3:fc:cf:fe:23:87:
         56:5b:2c:f2:06:31:d4:0c:37:b7:95:ca:0b:3a:3d:e1:84:9a:
         34:76:a3:8c:d2:18:93:fb:90:48:b4:bd:38:f2:9e:a0:b1:61:
         da:0f:9f:a0:bb:0b:aa:b1:fb:ad:a6:9f:68:e6:ee:9c:28:10:
         ee:3f:77:93:55:8d:48:bf:f9:64:46:70:e8:40:1e:d8:39:d3:
         e4:dc:a8:7b:17:b5:20:af:00:55:e1:93:69:23:25:d6:89:58:
         b3:c6:43:5e:eb:82:4d:71:c6:7e:cf:34:27:8b:d4:26:21:80:
         dd:f4:10:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWinQD+gtOn/d2OD2hrKZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzZlZDVmNTYyM2VkZWI3OTEwYWNkMzFkNWY2ZWU4MWU1
Y2IxN2UwHhcNMjQxMTIzMDEwMjE0WhcNMjQxMTI0MDEwMjE0WjAzMTEwLwYDVQQD
EyhkMzk0ZjYwNzk3ZTVlMDAxOWFkMjNmMmRlNGQ3MmUzM2FiY2JmYjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwKbaVqwxUAvaaX0zpCacEWLSuHd
ryhNdsNpnUYTKUoEzG2XLH/ex+bNBrwlLai0WOmkFP2VuErPwZiRvW7PicCnnNR0
2UfpVEtG8PxI4mLd8L6Vkiml04gNsbjvLUhQujmIgdc89+bwwa+C91JR6Vq9WCpZ
212lfjVspVkKTl+skUO+6d2C9vxFvJwQCk12VJejPKGCpJItBPx2CtaTUBbsNiy0
R/tyjY0/F4Z6tFYGZ3VWe7Sg+Sfa1ctLnjR86ci/AfhCj0YDkrKavBizKAxC4Lrh
TTNKOsJ0Y8lY1o58hOZDw3aUnsQ14PZcjFjZTJw/9ZuNIVjXTqfFZilsUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOU9geX5eABmtI/LeTXLjOry/tnMB8GA1UdIwQY
MBaAFCI27V9WI+3reRCs0x1fbugeXLF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjct
NGQxNmJlOWJhMTMyLzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjctNGQxNmJlOWJhMTMy
LzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdWWy+0q
I1xRhp4Nu0ZoaXavjsrtmhNP67Q+DGGabyNyBPpdEqx3QL5HFsXq5pDmUAf91zvr
CdOepmEvEWO/pP8UdSRKJ4QFYFnlxUR9oidxZPoKIUmMPTnynw1Z010/ngBEJDZQ
EV0plgr+b+We6RrRcunozrS36NAHNMRHolghXERtqFHd7uJJo/zP/iOHVlss8gYx
1Aw3t5XKCzo94YSaNHajjNIYk/uQSLS9OPKeoLFh2g+foLsLqrH7raafaObunCgQ
7j93k1WNSL/5ZEZw6EAe2DnT5Nyoexe1IK8AVeGTaSMl1olYs8ZDXuuCTXHGfs80
J4vUJiGA3fQQmg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:36 2024 by rpki-client on console-ams.rpki-client.org