Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
File:                     aCyELfoqHnFHJ7zLlfFlNHED8nc.mft (raw, json)
Hash identifier:          rm3oqCxjcoyvIJxSU809AypnJaEwylJQbYSzMATTFMM=
Subject key identifier:   70:06:8F:13:02:A2:64:1C:2F:47:A9:90:77:6F:B5:3A:6B:63:3F:69
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Certificate issuer:       /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial:       019357645C489EF0A06C0D7BA2BE4A37A1F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 05:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:15 +0000
Files and hashes:         1: 0xfgCcpfi4Adzae5haRNQJm1lNM.roa (hash: C/QNbaac0DDMKZrMj5V/Wa7dZ7Q9fKWzJJgH22HXBDs=)
                          2: Mg1E1ZdUgfSWqp-opzyDS2x03rE.roa (hash: RMjvXfqQW50542hMmz8zp+6TjZIwE9Ot+Fz+VJMhr+4=)
                          3: aCyELfoqHnFHJ7zLlfFlNHED8nc.crl (hash: xy5GU/7JuGiGiT66Oe4SERThYibJGJotzKFGTkM6FXA=)
                          4: f2s1wBOEuzL-F4O06Rwc8qEuX9Y.roa (hash: 9felSVqlmzMCQEpIbnqP5e4A3V39v8OE1eWJTt54Awo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:5c:48:9e:f0:a0:6c:0d:7b:a2:be:4a:37:a1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
        Validity
            Not Before: Nov 23 05:00:15 2024 GMT
            Not After : Nov 24 05:00:15 2024 GMT
        Subject: CN=70068f1302a2641c2f47a990776fb53a6b633f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c5:2e:b3:c9:75:78:79:4b:c0:68:66:d7:4e:
                    56:3c:3a:ee:ef:74:a6:ba:35:25:f1:ee:2b:42:ba:
                    7c:e6:cc:7b:06:f8:7e:c2:5d:5c:64:6f:9b:b1:63:
                    80:79:0e:95:1e:38:07:70:05:2e:32:f4:87:37:88:
                    4f:b4:85:31:3c:be:ed:ff:8e:e7:5a:2b:ad:e7:cd:
                    42:21:f6:e7:d4:66:8e:9c:26:ef:23:ae:3f:35:e1:
                    48:a5:4e:e6:9a:0f:cd:52:09:4e:88:9a:a0:71:e8:
                    71:2f:9a:56:a5:34:7e:c2:f3:10:39:53:8a:fb:e8:
                    f9:d6:db:27:22:1a:50:c3:04:f8:89:cc:ac:aa:b5:
                    50:0c:73:5b:11:67:92:55:14:37:2a:89:4b:b3:97:
                    67:a4:bb:be:5d:e5:38:51:8e:ae:b6:9e:79:6a:2b:
                    e5:16:59:db:2e:0e:d3:11:2d:e9:d8:e1:05:f6:bf:
                    58:e3:63:8a:be:06:07:f0:8f:09:db:30:7d:ee:c6:
                    0c:00:4e:65:35:9d:25:d9:ca:3f:79:7d:e6:ed:06:
                    71:d8:b3:b1:e7:f6:d2:f7:83:8a:ed:b6:58:14:87:
                    52:9b:88:de:4d:56:32:9a:26:ea:d2:d4:49:db:49:
                    34:50:7b:bc:4f:5d:da:0e:45:d6:ce:23:16:b3:78:
                    90:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:06:8F:13:02:A2:64:1C:2F:47:A9:90:77:6F:B5:3A:6B:63:3F:69
            X509v3 Authority Key Identifier:
                keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e1:8a:3e:eb:34:aa:fb:3c:86:24:db:78:ff:fd:65:dd:00:
         82:0f:c0:b9:8d:49:8d:15:3d:41:95:e3:6c:7e:f0:fb:58:40:
         5c:fb:88:a8:46:08:50:70:f9:ac:24:b8:0b:02:b4:43:d5:84:
         66:f2:d0:f3:20:5e:db:a5:6b:c6:6f:94:65:c2:11:3e:8a:05:
         bf:5f:c3:79:9f:a4:27:bb:02:54:14:71:4b:ed:17:a9:9f:5b:
         7e:c1:c2:9d:3f:b2:a0:0a:d7:b9:65:85:6f:72:07:ae:72:0e:
         00:b9:31:33:fd:ec:b3:e8:d7:62:54:0e:63:2f:11:34:86:41:
         74:b7:83:d9:09:71:3c:b8:c1:70:a2:ab:55:13:ca:ab:47:0d:
         e1:0b:6a:77:c5:55:4f:29:a6:bc:fe:d6:16:5e:95:7c:96:af:
         0d:c1:f1:5c:84:3d:3f:75:0e:58:65:23:cd:9c:5c:d9:95:f5:
         29:f8:8f:8d:28:d7:07:d4:99:19:75:11:34:57:34:2b:41:28:
         8c:9b:e6:7d:18:e9:eb:6a:43:a8:78:6d:bc:1c:47:c6:70:65:
         43:70:0f:fb:3a:17:b8:4b:1e:4d:39:c4:9e:28:2d:e4:e0:65:
         df:13:06:1c:8f:6d:b3:67:3f:f9:2b:46:c5:d9:02:f5:b8:d0:
         c8:d2:d3:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZFxInvCgbA17or5KN6HzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MmM4NDJkZmEyYTFlNzE0NzI3YmNjYjk1ZjE2NTM0NzEw
M2YyNzcwHhcNMjQxMTIzMDUwMDE1WhcNMjQxMTI0MDUwMDE1WjAzMTEwLwYDVQQD
Eyg3MDA2OGYxMzAyYTI2NDFjMmY0N2E5OTA3NzZmYjUzYTZiNjMzZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsUus8l1eHlLwGhm105WPDru73Sm
ujUl8e4rQrp85sx7Bvh+wl1cZG+bsWOAeQ6VHjgHcAUuMvSHN4hPtIUxPL7t/47n
Wiut581CIfbn1GaOnCbvI64/NeFIpU7mmg/NUglOiJqgcehxL5pWpTR+wvMQOVOK
++j51tsnIhpQwwT4icysqrVQDHNbEWeSVRQ3KolLs5dnpLu+XeU4UY6utp55aivl
FlnbLg7TES3p2OEF9r9Y42OKvgYH8I8J2zB97sYMAE5lNZ0l2co/eX3m7QZx2LOx
5/bS94OK7bZYFIdSm4jeTVYymibq0tRJ20k0UHu8T13aDkXWziMWs3iQkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAGjxMComQcL0epkHdvtTprYz9pMB8GA1UdIwQY
MBaAFGgshC36Kh5xRye8y5XxZTRxA/J3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wMDA0NjUtODNjYi00MWI0LThlNjAt
MDhkNjViMzg2MzlkLzEvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wMDA0NjUtODNjYi00MWI0LThlNjAtMDhkNjViMzg2Mzlk
LzEvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOGKPus0
qvs8hiTbeP/9Zd0Agg/AuY1JjRU9QZXjbH7w+1hAXPuIqEYIUHD5rCS4CwK0Q9WE
ZvLQ8yBe26Vrxm+UZcIRPooFv1/DeZ+kJ7sCVBRxS+0XqZ9bfsHCnT+yoArXuWWF
b3IHrnIOALkxM/3ss+jXYlQOYy8RNIZBdLeD2QlxPLjBcKKrVRPKq0cN4Qtqd8VV
TymmvP7WFl6VfJavDcHxXIQ9P3UOWGUjzZxc2ZX1KfiPjSjXB9SZGXURNFc0K0Eo
jJvmfRjp62pDqHhtvBxHxnBlQ3AP+zoXuEseTTnEnigt5OBl3xMGHI9ts2c/+StG
xdkC9bjQyNLTnA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:38 2024 by rpki-client on console-fra.rpki-client.org