Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
File:                     f6gWozONMnQc1P_49J3bLMg4_cU.mft (raw, json)
Hash identifier:          G1K7FlcAt/HGGFB8xmYsV2HUc8wWfF32jWh0rocPoVw=
Subject key identifier:   7E:11:E9:79:1D:E5:FD:07:29:14:A8:83:BB:CF:9A:33:DA:DA:79:0A
Authority key identifier: 7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5
Certificate issuer:       /CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
Certificate serial:       01936934124F480868E192D6DBC94A739EC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
Manifest number:          EA
Signing time:             Tue 26 Nov 2024 16:00:40 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:40 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:40 +0000
Files and hashes:         1: GE_0SNO0PvXhpbM0xoYJu-5KP4w.roa (hash: N2UdZ78bR9z8Vw2hIMxzaneK3jw62yi+PTf/CRihDnI=)
                          2: f6gWozONMnQc1P_49J3bLMg4_cU.crl (hash: Y/+DNR9dcNKhaZTcx316TNnb6L+u19Jop7je3nhm8rU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:34:12:4f:48:08:68:e1:92:d6:db:c9:4a:73:9e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
        Validity
            Not Before: Nov 26 16:00:40 2024 GMT
            Not After : Nov 27 16:00:40 2024 GMT
        Subject: CN=7e11e9791de5fd072914a883bbcf9a33dada790a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:08:b5:10:0e:c7:51:f8:43:46:3e:d0:f7:e3:
                    1a:3f:a4:dd:9d:d2:e4:4a:e1:f3:9b:5b:71:a4:81:
                    7d:fa:3f:c1:04:f5:9b:82:84:6c:51:ab:7b:eb:97:
                    92:3d:80:d3:71:07:3b:84:38:99:f5:14:fc:d5:d1:
                    cb:ae:2b:45:08:38:e8:91:8a:2d:bd:03:ed:fe:fe:
                    29:2c:8d:5f:13:a4:e2:a0:21:12:df:e0:53:67:e3:
                    ee:35:9e:6e:b3:32:00:fb:3d:0a:94:e9:c8:4b:b0:
                    5c:ba:d0:15:ca:61:11:88:d5:62:0e:71:7b:30:ad:
                    54:ed:80:86:32:a8:71:5d:66:eb:de:6c:44:82:d5:
                    8a:f1:ea:c8:44:0c:a4:26:5d:c9:3d:d1:e3:65:b1:
                    98:a6:bf:19:d4:1d:8b:75:a2:5a:43:e2:36:2c:1d:
                    d5:64:d1:23:f8:7e:c2:60:31:0e:2c:b4:cb:55:28:
                    12:a4:a0:21:87:40:b2:91:e0:10:36:60:37:00:32:
                    92:19:89:a2:a2:b4:98:98:9d:be:7d:cb:1c:02:32:
                    64:d8:89:61:ed:f8:05:fa:ca:89:d0:fc:23:6e:84:
                    4b:e2:64:19:cd:d7:d5:9f:b5:e8:6e:7e:fb:31:7e:
                    c3:9c:8e:75:85:79:af:ba:ed:fe:ae:06:75:46:1c:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:11:E9:79:1D:E5:FD:07:29:14:A8:83:BB:CF:9A:33:DA:DA:79:0A
            X509v3 Authority Key Identifier:
                keyid:7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f0:36:ff:d0:3f:d9:58:06:7e:8d:c6:db:a3:11:ea:20:f8:
         54:05:6d:42:3e:0a:36:c2:d1:50:88:89:ae:41:9c:2b:29:6a:
         8a:d8:b5:39:7b:06:27:64:3f:6e:df:58:a4:b8:d0:5d:3d:b3:
         5a:2a:05:2f:ff:34:99:db:19:8d:f6:03:c9:61:32:f0:1d:17:
         cc:5e:ad:62:64:18:aa:3a:16:64:4c:04:f6:76:47:3e:be:70:
         a2:61:c2:32:3c:6a:9c:d9:fe:92:05:db:db:f2:0b:74:b8:35:
         b2:70:0b:ec:50:28:02:37:c5:ac:9d:96:d7:ac:ca:b3:78:3b:
         d1:f9:73:bf:ff:16:ce:5a:b9:79:f1:79:87:cb:d4:a9:70:ff:
         66:b1:f7:06:60:5d:fa:2f:8f:0e:69:d4:fd:4e:b8:dc:12:37:
         17:dd:e6:1f:52:51:8b:6f:9c:4d:1d:cf:7c:bf:4d:ec:17:c0:
         62:cc:6d:56:fd:c5:3a:ab:c9:18:31:01:48:01:d2:5b:ac:26:
         dc:1b:12:ce:4b:8f:df:36:b2:02:6c:a1:38:4a:c0:27:d0:2b:
         ed:6d:2d:9a:81:ff:7f:50:22:84:85:81:ae:38:3b:8c:9a:e5:
         d5:c1:e6:08:01:5e:fc:4f:06:c7:cd:39:20:05:8e:f4:2a:65:
         ba:b3:7c:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNpNBJPSAho4ZLW28lKc57IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYTgxNmEzMzM4ZDMyNzQxY2Q0ZmZmOGY0OWRkYjJjYzgz
OGZkYzUwHhcNMjQxMTI2MTYwMDQwWhcNMjQxMTI3MTYwMDQwWjAzMTEwLwYDVQQD
Eyg3ZTExZTk3OTFkZTVmZDA3MjkxNGE4ODNiYmNmOWEzM2RhZGE3OTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQi1EA7HUfhDRj7Q9+MaP6TdndLk
SuHzm1txpIF9+j/BBPWbgoRsUat765eSPYDTcQc7hDiZ9RT81dHLritFCDjokYot
vQPt/v4pLI1fE6TioCES3+BTZ+PuNZ5uszIA+z0KlOnIS7BcutAVymERiNViDnF7
MK1U7YCGMqhxXWbr3mxEgtWK8erIRAykJl3JPdHjZbGYpr8Z1B2LdaJaQ+I2LB3V
ZNEj+H7CYDEOLLTLVSgSpKAhh0CykeAQNmA3ADKSGYmiorSYmJ2+fcscAjJk2Ilh
7fgF+sqJ0PwjboRL4mQZzdfVn7Xobn77MX7DnI51hXmvuu3+rgZ1Rhwg3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4R6Xkd5f0HKRSog7vPmjPa2nkKMB8GA1UdIwQY
MBaAFH+oFqMzjTJ0HNT/+PSd2yzIOP3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjZnV296T05NblFjMVBfNDlKM2JMTWc0X2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hNDUyOGEtOTBlNi00ZDkxLWE1MmMt
ZjA3MTdlYTQ4NWM2LzEvZjZnV296T05NblFjMVBfNDlKM2JMTWc0X2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hNDUyOGEtOTBlNi00ZDkxLWE1MmMtZjA3MTdlYTQ4NWM2
LzEvZjZnV296T05NblFjMVBfNDlKM2JMTWc0X2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvA2/9A/
2VgGfo3G26MR6iD4VAVtQj4KNsLRUIiJrkGcKylqiti1OXsGJ2Q/bt9YpLjQXT2z
WioFL/80mdsZjfYDyWEy8B0XzF6tYmQYqjoWZEwE9nZHPr5womHCMjxqnNn+kgXb
2/ILdLg1snAL7FAoAjfFrJ2W16zKs3g70flzv/8Wzlq5efF5h8vUqXD/ZrH3BmBd
+i+PDmnU/U643BI3F93mH1JRi2+cTR3PfL9N7BfAYsxtVv3FOqvJGDEBSAHSW6wm
3BsSzkuP3zayAmyhOErAJ9Ar7W0tmoH/f1AihIWBrjg7jJrl1cHmCAFe/E8Gx805
IAWO9CplurN8Uw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:10 2024 by rpki-client on console-fra.rpki-client.org