Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File:                     UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier:          zvDnBIoSzwrafr8xKRLIlahtjQRAsrXaIpW/xhtMFvU=
Subject key identifier:   28:64:50:30:56:A5:14:C6:9F:BE:CD:BF:08:92:0B:D7:BE:F6:51:3F
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer:       /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial:       0193549B731A3CA8A7F8C6CB603F2B946D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 16:01:33 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:33 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:33 +0000
Files and hashes:         1: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: V4FYoIDnOKZPq+gtOwbooM3SCzVDfyS8U5NzfUiyBcQ=)
                          2: XB23gi2f-EhXMiKkmL8fU9PDDBQ.roa (hash: hA3iSkL/ACxgzBc9pcR+GrFx+TOBBSivCpNwtRcQVsI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:73:1a:3c:a8:a7:f8:c6:cb:60:3f:2b:94:6d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
        Validity
            Not Before: Nov 22 16:01:33 2024 GMT
            Not After : Nov 23 16:01:33 2024 GMT
        Subject: CN=2864503056a514c69fbecdbf08920bd7bef6513f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:87:ba:65:49:19:aa:17:c7:76:4c:e6:21:09:
                    d9:f7:5b:8c:dc:d6:83:6b:b6:23:ec:45:61:f6:45:
                    ad:bc:9a:08:f9:a3:5e:3f:90:2e:97:52:1d:12:e2:
                    04:a0:82:4f:55:96:e8:af:0d:95:40:10:b8:a4:24:
                    99:1b:ed:3b:47:81:bd:29:a7:90:56:c0:8e:2e:ed:
                    56:81:68:a9:b4:8b:b2:5f:0c:21:88:2a:eb:34:ff:
                    2f:7e:1f:4a:f6:ba:3c:7a:a9:81:1f:6b:05:d2:03:
                    0f:b3:a8:7d:08:6f:f9:82:c3:0c:85:3d:1f:b8:57:
                    d2:6e:92:1b:90:de:c6:8f:ef:85:eb:3b:70:8c:44:
                    0e:be:17:0a:bf:2b:db:60:1b:22:0c:d8:10:a0:3d:
                    d5:74:58:3d:1a:63:2d:bb:1f:d5:90:89:da:f3:60:
                    35:c1:51:6f:42:67:c8:5a:79:30:a8:83:7b:5f:dc:
                    11:5e:fa:58:33:e0:83:32:b7:1b:d5:36:56:c7:b5:
                    4d:63:a4:77:96:6e:16:49:94:a0:dc:8f:cb:ba:bb:
                    7b:90:43:82:63:0e:30:29:18:9e:e2:67:be:0a:8b:
                    f7:3d:f4:9b:32:4c:a4:31:73:8b:c3:bc:a3:82:88:
                    90:c1:4f:6e:56:44:5e:36:8f:f8:1a:bd:4f:4f:10:
                    44:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:64:50:30:56:A5:14:C6:9F:BE:CD:BF:08:92:0B:D7:BE:F6:51:3F
            X509v3 Authority Key Identifier:
                keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5a:b5:28:0e:3f:c2:59:85:33:b1:20:ce:3a:dc:31:33:a4:
         70:04:d6:ba:43:c2:a8:26:55:eb:b8:d6:47:0d:80:6b:cb:0d:
         c1:9e:0e:40:de:3b:6c:42:8d:6b:48:05:19:a0:21:e7:4d:fc:
         1c:19:78:bc:35:8a:db:57:76:9b:48:11:cb:16:e0:5c:38:19:
         bd:48:89:6d:54:db:ff:8d:a9:0e:bf:88:d8:d8:bb:52:a3:a9:
         ed:bd:be:dc:c4:51:30:a5:2b:92:16:1f:f1:15:bc:65:c6:de:
         c2:f7:d4:58:be:c0:f9:e5:dc:6f:61:a2:2c:30:6c:9a:3e:c8:
         30:5c:95:0b:3b:98:f7:fe:49:63:ef:88:aa:68:f9:1b:f5:ae:
         e1:d3:99:6f:76:1f:12:63:7d:7f:fb:75:de:b4:f1:38:e0:37:
         2f:8d:af:09:4d:e6:c7:71:f4:20:16:3e:8e:1f:3e:77:96:32:
         ff:53:c9:04:1b:1f:db:79:24:80:3a:50:84:d8:f3:1a:7f:2e:
         7b:96:8b:4a:65:e7:13:b5:17:c3:6c:91:ee:8a:87:83:3c:43:
         f4:00:fc:0d:80:0e:57:49:f2:24:71:8f:e6:32:fe:28:ef:83:
         c8:5b:93:13:80:85:80:2a:b1:76:93:06:cc:db:a8:9a:6b:40:
         40:64:fd:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUm3MaPKin+MbLYD8rlG2ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzBiNjVkNjExNmQ0YjYwZDM2ZmRmN2I2YzZkNWU1Yjk1
NDYzOWUwHhcNMjQxMTIyMTYwMTMzWhcNMjQxMTIzMTYwMTMzWjAzMTEwLwYDVQQD
EygyODY0NTAzMDU2YTUxNGM2OWZiZWNkYmYwODkyMGJkN2JlZjY1MTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ye6ZUkZqhfHdkzmIQnZ91uM3NaD
a7Yj7EVh9kWtvJoI+aNeP5Aul1IdEuIEoIJPVZborw2VQBC4pCSZG+07R4G9KaeQ
VsCOLu1WgWiptIuyXwwhiCrrNP8vfh9K9ro8eqmBH2sF0gMPs6h9CG/5gsMMhT0f
uFfSbpIbkN7Gj++F6ztwjEQOvhcKvyvbYBsiDNgQoD3VdFg9GmMtux/VkIna82A1
wVFvQmfIWnkwqIN7X9wRXvpYM+CDMrcb1TZWx7VNY6R3lm4WSZSg3I/Lurt7kEOC
Yw4wKRie4me+Cov3PfSbMkykMXOLw7yjgoiQwU9uVkReNo/4Gr1PTxBECwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChkUDBWpRTGn77NvwiSC9e+9lE/MB8GA1UdIwQY
MBaAFFIwtl1hFtS2DTb997bG1eW5VGOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjIt
MTM1OGMyYjVkNTQxLzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjItMTM1OGMyYjVkNTQx
LzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFq1KA4/
wlmFM7EgzjrcMTOkcATWukPCqCZV67jWRw2Aa8sNwZ4OQN47bEKNa0gFGaAh5038
HBl4vDWK21d2m0gRyxbgXDgZvUiJbVTb/42pDr+I2Ni7UqOp7b2+3MRRMKUrkhYf
8RW8ZcbewvfUWL7A+eXcb2GiLDBsmj7IMFyVCzuY9/5JY++Iqmj5G/Wu4dOZb3Yf
EmN9f/t13rTxOOA3L42vCU3mx3H0IBY+jh8+d5Yy/1PJBBsf23kkgDpQhNjzGn8u
e5aLSmXnE7UXw2yR7oqHgzxD9AD8DYAOV0nyJHGP5jL+KO+DyFuTE4CFgCqxdpMG
zNuommtAQGT9Rw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:47 2024 by rpki-client on console-ams.rpki-client.org