Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File:                     YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier:          BXN8RKer6Jvp9U//dxHacoiPe3OEVXtP0FF9dPqpISU=
Subject key identifier:   5A:FB:DA:AA:6A:53:14:44:48:4B:D0:D7:06:61:8D:CF:A0:BD:35:D9
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer:       /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial:       019351D0A7A4FE383CA28AC09E13674FE698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number:          121F
Signing time:             Fri 22 Nov 2024 03:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:49 +0000
Files and hashes:         1: 1-YkingjFzU8Fh2UJS_Xc8MgGDc4.roa (hash: b1GnzjoSOtbHfujUHkUPt9BXi7RuhW+uYEOk8oVvMNk=)
                          2: 7sxBQLCw1ValpILI7wErQQrai7E.roa (hash: OCyrfN7Ss8+4A+mY8iuKa7cEMA8Yp6g7ZAHad4frs90=)
                          3: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: plmM9LEoCNn8T9mX2edKIodEHTuKIa7lMV/XCVlbwQI=)
                          4: e25OHTlFYBDQr3tLqfCHzXXCLtw.roa (hash: MbbObHSe4RRnRuUjtDYoGAVAGwzwkHUk163eIIa+sK4=)
                          5: qr-3OPb4RsPOH8377nSPB-vpkwM.roa (hash: YMEUr7cXKPql0kW0pEtoN/w2pEvljTCiu0rnAfIVBW4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:a7:a4:fe:38:3c:a2:8a:c0:9e:13:67:4f:e6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
        Validity
            Not Before: Nov 22 03:00:49 2024 GMT
            Not After : Nov 23 03:00:49 2024 GMT
        Subject: CN=5afbdaaa6a531444484bd0d706618dcfa0bd35d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:16:5d:09:2f:28:5a:33:15:85:41:9f:46:ea:
                    a1:0e:7d:9f:91:18:41:af:f8:f0:96:6c:4d:60:a2:
                    5e:91:35:ac:3c:1e:b9:f0:f8:43:90:98:9c:a1:9b:
                    ec:73:ed:89:91:6a:5e:26:a0:ef:62:9c:d4:df:06:
                    ef:80:c1:56:5f:4e:f3:7b:f5:f8:46:cd:2d:a8:f4:
                    f1:79:d9:01:a7:57:a4:dd:22:ed:cf:57:67:8f:ca:
                    cf:53:3d:f6:8a:ed:02:be:1b:2e:40:2c:74:09:95:
                    1e:00:61:5e:82:a3:0a:76:e0:bd:21:6c:f9:a0:22:
                    85:b0:c1:5a:79:df:14:1f:22:a7:4d:fb:e4:e5:86:
                    d7:8e:58:ea:35:2a:c1:d1:23:76:de:b9:45:9d:0f:
                    44:15:f4:96:a3:04:22:6f:e6:df:1b:2b:cb:23:0c:
                    0d:96:0f:c7:d9:0f:7b:ed:b1:06:46:c2:70:e0:12:
                    cd:ee:9f:a1:7c:ad:61:05:4e:5f:d7:08:dc:62:9a:
                    5a:3f:95:f5:52:2f:2d:8b:ab:0e:1e:d5:d5:6e:4f:
                    53:18:33:33:f1:23:bb:a6:96:c7:28:8f:34:65:c5:
                    6f:1d:06:ba:11:b3:03:b6:e6:a5:33:48:b6:bb:c0:
                    a6:f4:ad:bd:1f:ad:0b:ad:22:27:32:9a:34:2f:a2:
                    73:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FB:DA:AA:6A:53:14:44:48:4B:D0:D7:06:61:8D:CF:A0:BD:35:D9
            X509v3 Authority Key Identifier:
                keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:23:a4:61:3d:49:9d:76:f1:8c:04:7a:28:d0:7d:6e:2d:c4:
         65:83:b5:37:68:50:d1:33:98:de:2b:dc:af:0c:89:0f:57:7b:
         a5:7b:21:13:35:77:6f:08:2c:aa:87:e5:93:74:e6:8a:41:d1:
         9d:c9:e1:96:60:f0:59:c9:db:5d:1b:49:44:a7:42:22:7a:66:
         20:82:b7:d1:58:9f:3c:10:62:df:70:be:1b:06:c8:91:04:f5:
         32:51:f4:72:1d:36:ae:90:5a:cf:6f:74:42:b6:0e:db:12:a1:
         0a:a7:a1:51:13:16:d3:7a:1c:09:57:de:d1:a4:b7:55:5b:fd:
         16:89:45:82:4a:8c:bb:6d:2e:ee:1e:88:30:9f:f5:d1:9c:9d:
         0e:2a:33:24:b4:19:81:5f:38:cc:9d:b2:6a:37:b3:1c:31:e7:
         a1:73:07:69:c5:06:49:6a:29:70:f5:46:72:c7:56:4f:23:f4:
         32:3a:dd:37:31:1e:c0:86:be:c0:ac:c6:72:4e:f9:99:84:0f:
         3f:06:af:de:f3:37:e5:e1:72:30:03:1f:70:c4:e6:ba:20:56:
         0e:dd:a6:b0:35:e6:ab:68:40:e8:bd:0d:6a:fb:4a:09:94:84:
         3f:3a:c5:ad:b6:15:71:3e:39:6c:56:91:ec:d3:c1:53:12:4b:
         77:de:38:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNR0Kek/jg8oorAnhNnT+aYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMzI1YzIxZDJmYWZlNzQzMzk4ZGMxZTU1NzQ0MzMyODAx
MTA0NjkwHhcNMjQxMTIyMDMwMDQ5WhcNMjQxMTIzMDMwMDQ5WjAzMTEwLwYDVQQD
Eyg1YWZiZGFhYTZhNTMxNDQ0NDg0YmQwZDcwNjYxOGRjZmEwYmQzNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hZdCS8oWjMVhUGfRuqhDn2fkRhB
r/jwlmxNYKJekTWsPB658PhDkJicoZvsc+2JkWpeJqDvYpzU3wbvgMFWX07ze/X4
Rs0tqPTxedkBp1ek3SLtz1dnj8rPUz32iu0CvhsuQCx0CZUeAGFegqMKduC9IWz5
oCKFsMFaed8UHyKnTfvk5YbXjljqNSrB0SN23rlFnQ9EFfSWowQib+bfGyvLIwwN
lg/H2Q977bEGRsJw4BLN7p+hfK1hBU5f1wjcYppaP5X1Ui8ti6sOHtXVbk9TGDMz
8SO7ppbHKI80ZcVvHQa6EbMDtualM0i2u8Cm9K29H60LrSInMpo0L6JzawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFr72qpqUxRESEvQ1wZhjc+gvTXZMB8GA1UdIwQY
MBaAFGAyXCHS+v50M5jcHlV0QzKAEQRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMjc3MGItZGExOS00NzkwLWE0OTQt
YzU4ZTk1Y2Q0Mjc3LzEvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mMjc3MGItZGExOS00NzkwLWE0OTQtYzU4ZTk1Y2Q0Mjc3
LzEvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZiOkYT1J
nXbxjAR6KNB9bi3EZYO1N2hQ0TOY3ivcrwyJD1d7pXshEzV3bwgsqoflk3TmikHR
ncnhlmDwWcnbXRtJRKdCInpmIIK30VifPBBi33C+GwbIkQT1MlH0ch02rpBaz290
QrYO2xKhCqehURMW03ocCVfe0aS3VVv9FolFgkqMu20u7h6IMJ/10ZydDiozJLQZ
gV84zJ2yajezHDHnoXMHacUGSWopcPVGcsdWTyP0MjrdNzEewIa+wKzGck75mYQP
Pwav3vM35eFyMAMfcMTmuiBWDt2msDXmq2hA6L0NavtKCZSEPzrFrbYVcT45bFaR
7NPBUxJLd944NA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:51 2024 by rpki-client on console-fra.rpki-client.org