Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
File:                     g02WbQCvvDm1lYvBpu1Xk__AxU0.mft (raw, json)
Hash identifier:          7bvsfjxaL8RsiMRePJ4lmCBNi5BbXFekOq4UuJEI864=
Subject key identifier:   0D:05:AC:5F:C5:DE:46:A0:13:A5:4B:F1:6F:A1:4A:04:4B:27:01:F5
Authority key identifier: 83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D
Certificate issuer:       /CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
Certificate serial:       0193572D697AA9158D83528B14730EEE6924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 04:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:14 +0000
Files and hashes:         1: OECVp6j9bUkyYM59nL4U5N8pfBw.roa (hash: CTMybD+B4gO5eieg+TOH5X72nPPC81ORTALcgWPodS4=)
                          2: g02WbQCvvDm1lYvBpu1Xk__AxU0.crl (hash: O+vIYcZIHWE6ZTQoTCY3+SscszzIkOxkEGWW3QXLq/c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:69:7a:a9:15:8d:83:52:8b:14:73:0e:ee:69:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
        Validity
            Not Before: Nov 23 04:00:14 2024 GMT
            Not After : Nov 24 04:00:14 2024 GMT
        Subject: CN=0d05ac5fc5de46a013a54bf16fa14a044b2701f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dd:61:31:e6:0d:56:4d:c9:f3:85:6b:de:1b:
                    00:9b:d5:c2:35:5a:51:53:55:82:09:92:09:f7:ea:
                    65:5d:95:b4:31:23:9f:6c:8c:20:70:1b:e6:39:79:
                    51:74:ea:d0:f4:27:02:9d:4c:2f:c7:81:ae:4a:d9:
                    d7:db:b7:7c:23:82:54:ee:57:2a:56:e9:94:aa:96:
                    84:45:63:02:41:35:8c:70:11:f6:01:44:36:3a:28:
                    47:6a:f2:28:03:4e:c6:b9:db:80:a3:1c:ba:3c:c9:
                    1f:d8:ea:bc:bc:29:cd:33:9f:e7:c6:0c:32:56:5b:
                    be:9d:fe:d2:a0:3a:77:57:05:c4:fe:a3:63:f9:49:
                    61:12:27:dc:cb:22:60:a3:5a:c5:df:5b:30:96:87:
                    1b:e4:ae:a1:93:69:7a:7f:46:34:84:3d:b1:5f:fb:
                    c6:10:87:22:73:8f:6f:19:e3:0b:ed:81:8b:3f:34:
                    7b:33:4a:c9:45:e1:b4:17:1e:36:e1:1d:ed:57:26:
                    0b:4f:1a:66:18:fe:0e:3f:e3:59:44:34:53:a3:71:
                    f3:45:08:9c:96:d3:60:1f:4d:ca:3f:42:29:25:c5:
                    8e:90:5e:98:f8:0d:37:54:ae:c9:a7:f2:55:43:3e:
                    5f:c9:34:aa:10:39:a0:f0:4c:3b:56:ef:5e:24:d2:
                    20:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:05:AC:5F:C5:DE:46:A0:13:A5:4B:F1:6F:A1:4A:04:4B:27:01:F5
            X509v3 Authority Key Identifier:
                keyid:83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:28:b1:cf:8a:6c:93:76:4a:d3:d2:46:b6:02:e7:c6:1b:f8:
         c1:66:e2:a4:97:cd:df:f2:7b:90:72:72:b5:f5:c2:da:f5:df:
         14:c1:93:b6:cf:fd:c7:67:a4:d8:43:97:88:07:7e:38:bb:e6:
         e9:6e:ca:41:03:8d:0b:27:b3:04:48:34:45:f0:a8:55:57:51:
         e4:25:ed:2d:b7:54:e1:7f:f0:c3:d8:44:89:7d:2d:1b:f4:d4:
         f8:ca:01:38:03:ef:af:62:17:57:17:52:86:b6:58:25:80:8b:
         18:1d:de:91:e3:65:99:92:3b:3d:43:3a:f1:f9:0f:de:ca:55:
         d9:44:9c:c5:5f:22:f8:28:36:55:4f:46:5d:c5:cd:e2:54:c7:
         93:0a:e3:20:a4:7b:05:79:fc:4b:e1:cd:bd:a0:de:ba:93:e2:
         3c:55:e3:56:e2:42:5a:17:5a:d5:95:ab:c0:21:36:1a:53:c9:
         54:34:b0:e2:ac:f6:1e:8f:9b:cd:53:f4:8b:4b:76:44:94:46:
         b7:63:cd:6e:e4:c8:90:92:26:94:c0:ca:85:80:f8:77:b6:75:
         57:d8:39:40:ff:68:72:52:89:0c:b5:d9:9e:6d:1b:de:54:cd:
         06:6f:33:ae:11:3d:b4:e3:b0:2f:44:ba:53:3e:d5:90:a1:60:
         71:85:45:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLWl6qRWNg1KLFHMO7mkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNGQ5NjZkMDBhZmJjMzliNTk1OGJjMWE2ZWQ1NzkzZmZj
MGM1NGQwHhcNMjQxMTIzMDQwMDE0WhcNMjQxMTI0MDQwMDE0WjAzMTEwLwYDVQQD
EygwZDA1YWM1ZmM1ZGU0NmEwMTNhNTRiZjE2ZmExNGEwNDRiMjcwMWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d1hMeYNVk3J84Vr3hsAm9XCNVpR
U1WCCZIJ9+plXZW0MSOfbIwgcBvmOXlRdOrQ9CcCnUwvx4GuStnX27d8I4JU7lcq
VumUqpaERWMCQTWMcBH2AUQ2OihHavIoA07GuduAoxy6PMkf2Oq8vCnNM5/nxgwy
Vlu+nf7SoDp3VwXE/qNj+UlhEifcyyJgo1rF31swlocb5K6hk2l6f0Y0hD2xX/vG
EIcic49vGeML7YGLPzR7M0rJReG0Fx424R3tVyYLTxpmGP4OP+NZRDRTo3HzRQic
ltNgH03KP0IpJcWOkF6Y+A03VK7Jp/JVQz5fyTSqEDmg8Ew7Vu9eJNIghQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0FrF/F3kagE6VL8W+hSgRLJwH1MB8GA1UdIwQY
MBaAFINNlm0Ar7w5tZWLwabtV5P/wMVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84ODMwYTQtNmM4My00MzM4LWJhZmQt
YjVkMWU5MDIzMTBhLzEvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84ODMwYTQtNmM4My00MzM4LWJhZmQtYjVkMWU5MDIzMTBh
LzEvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyixz4ps
k3ZK09JGtgLnxhv4wWbipJfN3/J7kHJytfXC2vXfFMGTts/9x2ek2EOXiAd+OLvm
6W7KQQONCyezBEg0RfCoVVdR5CXtLbdU4X/ww9hEiX0tG/TU+MoBOAPvr2IXVxdS
hrZYJYCLGB3ekeNlmZI7PUM68fkP3spV2UScxV8i+Cg2VU9GXcXN4lTHkwrjIKR7
BXn8S+HNvaDeupPiPFXjVuJCWhda1ZWrwCE2GlPJVDSw4qz2Ho+bzVP0i0t2RJRG
t2PNbuTIkJImlMDKhYD4d7Z1V9g5QP9oclKJDLXZnm0b3lTNBm8zrhE9tOOwL0S6
Uz7VkKFgcYVFNg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:48 2024 by rpki-client on console-fra.rpki-client.org