Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File:                     qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier:          va5K03GqBSSlB96zWRKds3zwTJrTvIxqRVezNUQzaKQ=
Subject key identifier:   0E:C4:7D:6B:AE:A1:AC:1D:B6:38:68:F8:CC:03:DB:13:B0:A2:6C:DC
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer:       /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial:       019356BF8F4B569BB046AAC8D140777EAAF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number:          073F
Signing time:             Sat 23 Nov 2024 02:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:14 +0000
Files and hashes:         1: 7q2pptNsIej6_T140gmolmgwgmY.roa (hash: AuXzXgH4YhG8lM4T/PgnR6F/9tPNBAKoVgmGhiyaenE=)
                          2: G-koA5bYRXeou-b8ZQ-1TFgD_sA.roa (hash: 8MYPTbVBaEFfNIAs/H0rQ3S4Y+DBHDP6qHIis3BqfR0=)
                          3: IomtuiqVg-NySifoCwUCNE0RmIw.roa (hash: bKX9wCNPJbYKfvvUp1vlWjA+dtUNYhJyY3qDg/L8YZo=)
                          4: _XlGMZ6TifsVMlH8Kk3bBEVY1Mc.roa (hash: ole8n9uyMpdihYElW4Ikl5BL1ehmRoqAkM5yOBCII9Q=)
                          5: _uYb97Ym5iWxwnoMK1EuvoNPVSY.roa (hash: r4oozxhdQfOQ0GWiRiW2ExzYOa/eY1Va7J2NgUghHM0=)
                          6: g9ix0MukKOx3zrmeoUpfUm6swQs.roa (hash: AKSALheN6VReooa2VKrbZc0/8QRKQwSjDBYGwes0Phk=)
                          7: jhTu9Zz_ySxaQ55O2d2XERIrar8.roa (hash: vaOZCKITzFxNVKedvfDx6+WcPtJMTloZBg+wdcx+hCs=)
                          8: kUc1GTQb3R--0F0wwkpXKCRBbpo.roa (hash: 45xnQl/Bh3Njb51W03snLvGhoIvVkT9pOVgjxktXqpM=)
                          9: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: e0dxUQ0XQ++PEQzdQLAU5IzWDVfwiiUx5/2508nNBIs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:8f:4b:56:9b:b0:46:aa:c8:d1:40:77:7e:aa:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
        Validity
            Not Before: Nov 23 02:00:14 2024 GMT
            Not After : Nov 24 02:00:14 2024 GMT
        Subject: CN=0ec47d6baea1ac1db63868f8cc03db13b0a26cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:f7:91:e8:42:f4:d2:98:28:9e:e4:07:ed:
                    32:b7:2f:21:8c:c1:13:a7:e8:58:3c:79:52:1e:51:
                    28:e4:12:e4:7a:92:1e:90:31:bc:4c:0e:6a:d8:70:
                    fd:b5:f2:79:62:78:db:96:11:60:54:88:80:bc:b3:
                    54:37:5c:68:d5:b9:ac:a7:73:21:af:85:c0:7b:35:
                    b7:41:68:44:d3:f4:02:25:23:2c:06:84:86:db:4d:
                    cd:83:ca:a3:7f:cb:fe:c0:3e:d3:84:fa:77:af:8d:
                    14:fb:da:8c:e4:95:69:73:86:dd:54:4a:65:dd:26:
                    21:27:85:91:65:e7:b4:46:a7:df:5c:1e:5f:f4:f7:
                    a2:99:a8:ec:9c:09:50:91:eb:c6:81:a1:d8:07:56:
                    62:86:45:5e:cf:2c:40:70:cb:f5:7e:8f:ff:80:68:
                    19:60:7b:e0:bb:c0:85:7a:32:40:fe:2e:75:a3:87:
                    e3:56:d4:36:f2:17:a3:ca:d2:c3:76:4e:c9:1e:8a:
                    e3:80:a1:42:c7:c6:0a:2b:99:84:81:95:05:e5:58:
                    95:96:4c:5f:f5:df:cf:2a:fb:16:f9:f1:74:5b:4b:
                    33:d6:bd:78:ae:f4:31:48:cb:1f:5c:75:93:64:a7:
                    e8:f6:7d:3e:13:cb:2a:a7:f4:1d:13:25:27:ee:a6:
                    79:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C4:7D:6B:AE:A1:AC:1D:B6:38:68:F8:CC:03:DB:13:B0:A2:6C:DC
            X509v3 Authority Key Identifier:
                keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:de:ed:47:08:90:d3:3b:95:51:ae:7d:23:39:f5:63:4f:58:
         c7:94:1d:45:bd:e2:fc:4b:4d:5f:f8:f3:40:62:2f:5d:a4:d0:
         c2:c8:fe:9b:e4:70:a8:d4:0d:76:9a:af:d9:b4:97:a0:a4:54:
         5b:e3:12:63:d9:c7:b5:25:30:55:7f:70:9c:de:c1:65:9b:7f:
         e3:2a:c2:f8:97:61:bf:68:98:d3:3e:6b:32:97:c3:bc:c4:6e:
         45:85:fc:b9:68:d2:86:f1:54:a7:3e:a9:44:f3:d9:9b:57:37:
         8f:12:39:a5:b0:91:14:f3:05:15:5c:55:12:d1:5a:dd:bd:1d:
         60:3d:0d:e1:bc:f2:06:14:c8:8c:53:aa:56:e5:05:31:95:37:
         f9:09:a7:c6:59:6c:4e:1e:3e:fb:d1:12:c4:8c:09:b0:35:e2:
         8a:2e:60:93:9b:05:55:3f:76:4a:d5:99:38:07:4e:24:78:13:
         0f:01:75:79:29:05:44:05:3a:b8:7b:d8:42:a1:b3:08:79:c8:
         e6:34:c8:47:bc:09:8f:8e:25:ce:13:b9:db:a9:32:72:72:0b:
         ef:96:ee:10:72:2e:6e:97:d4:32:a5:2f:72:87:09:fe:55:74:
         aa:8d:2f:b9:2d:d6:3d:6e:31:d7:6d:d1:95:fd:ed:72:d5:73:
         a0:6c:6b:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWv49LVpuwRqrI0UB3fqr1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3
YWJjMWUwHhcNMjQxMTIzMDIwMDE0WhcNMjQxMTI0MDIwMDE0WjAzMTEwLwYDVQQD
EygwZWM0N2Q2YmFlYTFhYzFkYjYzODY4ZjhjYzAzZGIxM2IwYTI2Y2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gT3kehC9NKYKJ7kB+0yty8hjMET
p+hYPHlSHlEo5BLkepIekDG8TA5q2HD9tfJ5YnjblhFgVIiAvLNUN1xo1bmsp3Mh
r4XAezW3QWhE0/QCJSMsBoSG203Ng8qjf8v+wD7ThPp3r40U+9qM5JVpc4bdVEpl
3SYhJ4WRZee0RqffXB5f9PeimajsnAlQkevGgaHYB1ZihkVezyxAcMv1fo//gGgZ
YHvgu8CFejJA/i51o4fjVtQ28hejytLDdk7JHorjgKFCx8YKK5mEgZUF5ViVlkxf
9d/PKvsW+fF0W0sz1r14rvQxSMsfXHWTZKfo9n0+E8sqp/QdEyUn7qZ5rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7EfWuuoawdtjho+MwD2xOwomzcMB8GA1UdIwQY
MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt
MWI2Zjc1MGNmOWEyLzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy
LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM97tRwiQ
0zuVUa59Izn1Y09Yx5QdRb3i/EtNX/jzQGIvXaTQwsj+m+RwqNQNdpqv2bSXoKRU
W+MSY9nHtSUwVX9wnN7BZZt/4yrC+Jdhv2iY0z5rMpfDvMRuRYX8uWjShvFUpz6p
RPPZm1c3jxI5pbCRFPMFFVxVEtFa3b0dYD0N4bzyBhTIjFOqVuUFMZU3+Qmnxlls
Th4++9ESxIwJsDXiii5gk5sFVT92StWZOAdOJHgTDwF1eSkFRAU6uHvYQqGzCHnI
5jTIR7wJj44lzhO526kycnIL75buEHIubpfUMqUvcocJ/lV0qo0vuS3WPW4x123R
lf3tctVzoGxrvQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:40 2024 by rpki-client on console-ams.rpki-client.org