Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
File:                     1KA5ru5iEDsojGyLlpLPWAh0PiE.mft (raw, json)
Hash identifier:          i32kmMERSjRp9sBU747o8/tLWJUeCj+pLCgJ/MyRh30=
Subject key identifier:   C3:48:7D:D6:DD:91:1D:6A:E2:58:5B:4F:0F:B5:56:55:43:B7:A9:FC
Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
Certificate issuer:       /CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Certificate serial:       01935876F98AAB735AC257496CCE91DE75D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
Manifest number:          1305
Signing time:             Sat 23 Nov 2024 10:00:12 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:12 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:12 +0000
Files and hashes:         1: 1KA5ru5iEDsojGyLlpLPWAh0PiE.crl (hash: 6VBsRFWvJz3KBokaXiyso0Ck0ygDwFsyhGxXks9YCFQ=)
                          2: MF7gUqV1bP0pZdGtgxnh_eyO6I8.roa (hash: 0JqiX5mWGDDw7xsSYSWlOWQFsyBT7AR0VxFuLt/fLTI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:76:f9:8a:ab:73:5a:c2:57:49:6c:ce:91:de:75:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21
        Validity
            Not Before: Nov 23 10:00:12 2024 GMT
            Not After : Nov 24 10:00:12 2024 GMT
        Subject: CN=c3487dd6dd911d6ae2585b4f0fb5565543b7a9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:d9:16:4a:08:74:2c:5f:d9:28:e5:67:69:
                    f7:24:fc:da:c6:b7:fd:c1:af:f1:a4:56:c4:42:49:
                    77:81:ed:9c:50:4d:73:71:c0:61:33:0e:c5:40:a3:
                    dd:72:f2:7d:df:d7:e4:07:1e:60:c1:eb:ee:ef:c4:
                    ae:86:48:65:59:d7:cf:ef:3e:7b:69:0e:eb:ba:32:
                    77:1e:87:c6:a2:72:5e:03:b0:d6:1f:29:04:54:df:
                    e7:4b:78:e5:33:d7:19:8b:15:9c:b3:14:96:a0:0a:
                    1c:ea:ad:75:07:f6:c2:9a:e7:38:86:53:d4:54:cf:
                    c3:a9:08:e2:df:98:ee:21:63:b1:36:56:3c:05:28:
                    f4:ee:c1:0a:b0:14:2c:b8:72:ef:36:ff:67:9b:f8:
                    58:39:93:ca:b3:7b:c3:dc:e9:a2:fc:3d:4e:d5:56:
                    e5:c9:ec:ef:23:bb:77:29:10:20:2c:61:b2:cd:a2:
                    6c:1a:93:8a:d6:a0:09:0c:c5:e2:16:28:97:84:b1:
                    c6:f5:84:ae:87:17:f1:2a:23:2f:f6:04:13:f3:89:
                    97:9e:86:a3:9b:d1:48:29:42:1e:7c:f2:49:93:72:
                    c7:50:0b:17:fb:46:55:21:cc:8c:ee:af:bd:ec:c3:
                    f7:6d:0b:e8:08:c0:28:bd:9c:e9:48:97:1f:74:5e:
                    2b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:48:7D:D6:DD:91:1D:6A:E2:58:5B:4F:0F:B5:56:55:43:B7:A9:FC
            X509v3 Authority Key Identifier:
                keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ee:57:a4:7d:29:59:c9:de:6a:31:21:00:4f:28:85:cc:41:
         b2:30:3e:09:33:34:7b:07:bc:c5:08:25:aa:55:eb:37:2f:13:
         99:c4:cd:4d:f3:bd:8c:73:28:d5:33:23:49:b6:b6:a8:5c:c8:
         71:15:59:80:73:3d:6c:34:c3:7e:73:1b:dc:74:c4:b3:b7:bf:
         4d:d9:e6:88:72:94:10:58:37:a7:44:58:ce:49:15:1a:e2:71:
         51:2a:45:8a:1a:e8:e6:88:4b:86:21:5e:5a:8a:7c:f3:e9:5d:
         fa:32:86:26:5b:f3:8b:36:55:31:a1:6d:ad:03:81:bb:10:ac:
         ad:d4:fe:9a:1a:f8:b0:e9:d5:76:a8:07:d7:bf:6a:e8:57:8c:
         fb:8d:8d:7d:2e:da:97:f4:7a:6b:c9:9b:0c:e7:ce:08:1e:ef:
         a2:48:ca:dc:bd:fa:4e:74:40:c3:90:f5:11:20:20:90:bc:b2:
         ef:75:5c:59:8e:db:f3:03:21:3e:40:fb:43:83:f1:dd:ac:0d:
         b8:be:8f:21:75:5b:7a:98:f1:42:cc:2a:65:16:07:97:3f:46:
         2a:23:66:28:6c:a7:38:5c:7e:da:a1:9e:21:47:8c:58:2a:a5:
         ea:dc:26:76:1d:17:f6:68:99:c9:19:88:80:5a:e0:2d:57:ab:
         ae:f8:cd:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYdvmKq3NawldJbM6R3nXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YTAzOWFlZWU2MjEwM2IyODhjNmM4Yjk2OTJjZjU4MDg3
NDNlMjEwHhcNMjQxMTIzMTAwMDEyWhcNMjQxMTI0MTAwMDEyWjAzMTEwLwYDVQQD
EyhjMzQ4N2RkNmRkOTExZDZhZTI1ODViNGYwZmI1NTY1NTQzYjdhOWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JTZFkoIdCxf2SjlZ2n3JPzaxrf9
wa/xpFbEQkl3ge2cUE1zccBhMw7FQKPdcvJ939fkBx5gwevu78SuhkhlWdfP7z57
aQ7rujJ3HofGonJeA7DWHykEVN/nS3jlM9cZixWcsxSWoAoc6q11B/bCmuc4hlPU
VM/DqQji35juIWOxNlY8BSj07sEKsBQsuHLvNv9nm/hYOZPKs3vD3Omi/D1O1Vbl
yezvI7t3KRAgLGGyzaJsGpOK1qAJDMXiFiiXhLHG9YSuhxfxKiMv9gQT84mXnoaj
m9FIKUIefPJJk3LHUAsX+0ZVIcyM7q+97MP3bQvoCMAovZzpSJcfdF4rfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNIfdbdkR1q4lhbTw+1VlVDt6n8MB8GA1UdIwQY
MBaAFNSgOa7uYhA7KIxsi5aSz1gIdD4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lNTRlODktN2I2Yi00MTdkLTliYzkt
NjJjZTg0ZjcwNzVlLzEvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lNTRlODktN2I2Yi00MTdkLTliYzktNjJjZTg0ZjcwNzVl
LzEvMUtBNXJ1NWlFRHNvakd5TGxwTFBXQWgwUGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAju5XpH0p
WcneajEhAE8ohcxBsjA+CTM0ewe8xQglqlXrNy8TmcTNTfO9jHMo1TMjSba2qFzI
cRVZgHM9bDTDfnMb3HTEs7e/TdnmiHKUEFg3p0RYzkkVGuJxUSpFihro5ohLhiFe
Wop88+ld+jKGJlvzizZVMaFtrQOBuxCsrdT+mhr4sOnVdqgH179q6FeM+42NfS7a
l/R6a8mbDOfOCB7vokjK3L36TnRAw5D1ESAgkLyy73VcWY7b8wMhPkD7Q4Px3awN
uL6PIXVbepjxQswqZRYHlz9GKiNmKGynOFx+2qGeIUeMWCql6twmdh0X9miZyRmI
gFrgLVerrvjNig==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:01:05 2024 by rpki-client on console-fra.rpki-client.org