Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
File:                     YFvAEwOQWABiCsJsFGixQfgHRRQ.mft (raw, json)
Hash identifier:          sqiL74DRf9DUAckcwSLbi5FYiD6k5I3IokcS/GeKcok=
Subject key identifier:   DE:E6:AE:14:85:3E:C2:CC:1B:90:CE:D3:55:07:16:10:36:8F:91:8F
Authority key identifier: 60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
Certificate issuer:       /CN=605bc01303905800620ac26c1468b141f8074514
Certificate serial:       01935764BCE3138763057AC6355F67485DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
Manifest number:          0A47
Signing time:             Sat 23 Nov 2024 05:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:39 +0000
Files and hashes:         1: UaSCQe7QGn1TW3LzT37P46q--KM.roa (hash: 45xeVH380V+vIDmexGK7CmUAedwPcT4vkkDYOiSL1sw=)
                          2: YFvAEwOQWABiCsJsFGixQfgHRRQ.crl (hash: NK9sDY++vx5wJfV2o/4CrQ0tNwdVmbumy2qNGndl2xg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:bc:e3:13:87:63:05:7a:c6:35:5f:67:48:5d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605bc01303905800620ac26c1468b141f8074514
        Validity
            Not Before: Nov 23 05:00:39 2024 GMT
            Not After : Nov 24 05:00:39 2024 GMT
        Subject: CN=dee6ae14853ec2cc1b90ced355071610368f918f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:0a:7e:80:7d:cb:40:12:2d:2d:3e:7b:0a:
                    40:6e:26:79:5f:f7:c5:b6:74:eb:14:5e:45:4b:4f:
                    85:0e:04:28:76:03:b2:8e:f8:18:01:0b:58:c1:bc:
                    72:ac:7b:52:85:90:4f:4e:9e:2b:49:7a:40:74:05:
                    63:1d:54:79:05:45:b0:12:2d:ad:92:3a:da:44:64:
                    13:11:ba:02:d5:34:3e:48:7f:82:1e:80:d9:33:8d:
                    74:70:3b:7f:56:96:38:05:9a:69:55:04:30:6e:17:
                    6e:97:ae:a7:20:f2:4e:21:88:8e:00:be:72:56:92:
                    c4:79:4b:51:8e:91:14:3d:e5:a8:e3:d7:45:39:33:
                    fe:e9:d8:84:22:55:47:fe:34:2f:f9:7d:18:da:d7:
                    32:50:58:73:a7:a9:e5:d4:cb:7e:a5:17:2c:16:54:
                    34:29:a0:ca:09:16:48:91:31:58:17:23:58:87:34:
                    9b:e3:65:86:8e:f9:31:44:9c:90:11:07:41:81:9d:
                    01:9e:85:f3:27:e1:db:1a:39:78:23:2a:38:3f:84:
                    21:3d:44:66:90:6c:dc:d8:71:25:26:40:e2:14:fd:
                    ed:ec:91:96:50:0e:77:99:b6:65:c8:42:f1:e6:3b:
                    38:52:d4:a0:99:1b:a5:b6:a3:de:ad:a5:64:81:cb:
                    e4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E6:AE:14:85:3E:C2:CC:1B:90:CE:D3:55:07:16:10:36:8F:91:8F
            X509v3 Authority Key Identifier:
                keyid:60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d3:d8:93:1b:9e:76:e3:a8:43:cc:62:00:0f:2e:06:7c:96:
         f9:7d:aa:7c:b2:cf:a3:3f:30:2c:33:b4:cb:c4:24:47:fd:74:
         9c:a6:e7:cc:dd:2a:02:e7:21:f9:54:75:87:3a:0f:6d:06:b6:
         d1:fe:9b:4f:37:bd:d5:fa:c4:55:7a:84:06:a7:ea:f8:66:a3:
         42:99:fd:37:46:f5:90:be:d4:e7:bc:da:9e:54:ec:04:4b:5f:
         23:03:bd:3e:d2:e9:5b:6b:4d:d1:b8:f9:bf:bf:8e:48:87:28:
         39:b4:a3:c6:18:63:f2:71:09:62:ac:56:ce:2f:1e:9f:d6:95:
         a4:35:ee:df:49:e7:87:a4:c4:03:21:13:5a:07:a2:f2:cf:92:
         d1:68:a0:15:9e:60:62:88:e7:2b:f4:19:2f:d3:06:df:35:d5:
         2b:19:ea:de:06:ca:53:68:fd:d5:b6:77:ae:7c:d8:78:8c:61:
         c3:4c:44:66:74:e9:b1:37:d5:78:9b:95:60:72:d9:35:71:6e:
         16:b7:fe:0c:74:44:fa:60:6b:96:93:bd:b3:dc:a3:2b:a6:67:
         35:4b:3e:ca:0e:1e:16:89:0f:32:15:78:0a:5d:fa:75:fe:a2:
         57:ce:fb:93:d5:a9:e2:92:db:6b:0c:c6:a0:94:d7:0a:d5:c9:
         19:52:98:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZLzjE4djBXrGNV9nSF3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNWJjMDEzMDM5MDU4MDA2MjBhYzI2YzE0NjhiMTQxZjgw
NzQ1MTQwHhcNMjQxMTIzMDUwMDM5WhcNMjQxMTI0MDUwMDM5WjAzMTEwLwYDVQQD
EyhkZWU2YWUxNDg1M2VjMmNjMWI5MGNlZDM1NTA3MTYxMDM2OGY5MThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoAKfoB9y0ASLS0+ewpAbiZ5X/fF
tnTrFF5FS0+FDgQodgOyjvgYAQtYwbxyrHtShZBPTp4rSXpAdAVjHVR5BUWwEi2t
kjraRGQTEboC1TQ+SH+CHoDZM410cDt/VpY4BZppVQQwbhdul66nIPJOIYiOAL5y
VpLEeUtRjpEUPeWo49dFOTP+6diEIlVH/jQv+X0Y2tcyUFhzp6nl1Mt+pRcsFlQ0
KaDKCRZIkTFYFyNYhzSb42WGjvkxRJyQEQdBgZ0BnoXzJ+HbGjl4Iyo4P4QhPURm
kGzc2HElJkDiFP3t7JGWUA53mbZlyELx5js4UtSgmRultqPeraVkgcvkmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7mrhSFPsLMG5DO01UHFhA2j5GPMB8GA1UdIwQY
MBaAFGBbwBMDkFgAYgrCbBRosUH4B0UUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZ2QUV3T1FXQUJpQ3NKc0ZHaXhRZmdIUlJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zYTdhN2ItZGQ5ZC00ZDdjLTg2YzQt
MTNjNDI4YWQ1ZmRiLzEvWUZ2QUV3T1FXQUJpQ3NKc0ZHaXhRZmdIUlJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zYTdhN2ItZGQ5ZC00ZDdjLTg2YzQtMTNjNDI4YWQ1ZmRi
LzEvWUZ2QUV3T1FXQUJpQ3NKc0ZHaXhRZmdIUlJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNPYkxue
duOoQ8xiAA8uBnyW+X2qfLLPoz8wLDO0y8QkR/10nKbnzN0qAuch+VR1hzoPbQa2
0f6bTze91frEVXqEBqfq+GajQpn9N0b1kL7U57zanlTsBEtfIwO9PtLpW2tN0bj5
v7+OSIcoObSjxhhj8nEJYqxWzi8en9aVpDXu30nnh6TEAyETWgei8s+S0WigFZ5g
YojnK/QZL9MG3zXVKxnq3gbKU2j91bZ3rnzYeIxhw0xEZnTpsTfVeJuVYHLZNXFu
Frf+DHRE+mBrlpO9s9yjK6ZnNUs+yg4eFokPMhV4Cl36df6iV877k9Wp4pLbawzG
oJTXCtXJGVKYrg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:41 2024 by rpki-client on console-ams.rpki-client.org