Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
File:                     _N6Mo-LOUrvM5TxKKSbTycQQwEs.mft (raw, json)
Hash identifier:          vIY4NfVYsiAKzpGjKKhoUtK3DWw0NGzBT5LBHY0S2X8=
Subject key identifier:   51:9D:A7:CE:77:15:D5:26:C1:80:F9:AA:CA:D9:41:BF:3C:77:40:CB
Authority key identifier: FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B
Certificate issuer:       /CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b
Certificate serial:       019358405E0DEFABD8896DE70EED1AAC063B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 09:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:33 +0000
Files and hashes:         1: PEtxBR62L54KIL3SSqptwLAww_U.roa (hash: 78U9VRZ5+CaNiiZpzFYGZ/o6MFmeKNHlrJPxLwZB4Lg=)
                          2: _N6Mo-LOUrvM5TxKKSbTycQQwEs.crl (hash: RPptrJg7vtlU81URS20jth7Wjq6tdaeI3dKqnoJVHUU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:5e:0d:ef:ab:d8:89:6d:e7:0e:ed:1a:ac:06:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b
        Validity
            Not Before: Nov 23 09:00:33 2024 GMT
            Not After : Nov 24 09:00:33 2024 GMT
        Subject: CN=519da7ce7715d526c180f9aacad941bf3c7740cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:e8:89:b6:2b:c5:b5:c2:dd:28:04:3c:9c:
                    69:79:88:a5:d3:94:23:ee:e2:10:00:ee:f4:47:94:
                    32:53:a3:85:a9:1c:d4:11:c5:3b:84:d0:24:24:f5:
                    13:af:16:c3:dd:7a:6e:cd:c6:16:c7:c5:46:5e:03:
                    49:23:30:75:94:fa:9c:58:32:31:4d:d8:e7:db:75:
                    0a:7d:79:4d:c3:9b:fa:a9:60:ad:8b:8b:ff:91:90:
                    90:dc:bf:a3:c9:3e:ce:b6:5f:63:e3:f9:b8:19:2a:
                    7b:2d:04:36:e6:bc:0e:cf:62:ac:f1:1d:b5:b1:81:
                    bc:4e:88:bb:a8:39:63:f6:51:75:2c:40:7b:d7:86:
                    b0:37:f8:b9:16:7a:89:75:7b:66:f5:a5:76:7a:d1:
                    74:4a:52:8f:e8:8d:7c:ca:0e:17:c3:12:61:01:31:
                    a7:60:22:2e:89:38:16:4b:fd:50:e8:26:8c:2a:49:
                    4b:44:f8:7f:0d:aa:1d:2a:3a:90:35:b8:1e:a3:f2:
                    02:cf:1b:e0:e3:eb:bc:a1:57:8e:85:0b:16:10:f4:
                    a8:31:12:76:fb:96:6a:60:f9:cc:f1:c9:69:5c:ff:
                    69:96:0d:ab:38:3a:14:f3:da:83:ee:cb:bd:a9:be:
                    77:01:5e:b7:9a:45:47:ff:19:ca:1e:39:46:e6:2b:
                    b7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9D:A7:CE:77:15:D5:26:C1:80:F9:AA:CA:D9:41:BF:3C:77:40:CB
            X509v3 Authority Key Identifier:
                keyid:FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:04:b3:cc:29:68:78:9b:46:ad:cd:a3:3f:5d:0e:ee:58:3d:
         2a:cf:2b:8f:6e:5b:10:0c:fa:0c:06:5b:da:a6:b3:10:7e:89:
         b1:64:69:45:6c:1d:55:1f:a5:1a:c5:e8:87:1a:0a:bb:6d:67:
         03:5c:d3:5b:f0:0d:b2:7a:4b:0b:c9:29:a1:1f:69:a9:72:79:
         37:29:40:b5:da:9b:98:11:a9:7d:80:e9:19:2c:8d:85:fd:60:
         de:c1:33:5f:63:2a:e3:7a:a2:f0:4a:eb:29:ae:49:06:15:e8:
         24:a7:22:d4:ff:1d:f3:d5:2f:f7:4a:d3:f9:bb:cf:03:2b:58:
         c2:e4:92:8e:73:56:fb:ed:ed:18:0d:57:9e:56:10:a3:5b:8f:
         49:2c:75:f8:1e:17:90:fc:68:7d:33:f6:50:47:31:0c:6b:24:
         ed:c0:46:ac:84:d0:cd:27:ed:87:7e:c1:62:a2:11:8d:07:36:
         44:de:41:01:c6:17:32:35:8c:c2:f7:6b:6f:72:11:b7:8f:28:
         59:5f:1f:cf:ed:b3:c0:59:03:67:bc:26:b7:64:90:23:96:d8:
         33:78:2d:8d:51:ff:b8:88:cc:e5:85:71:5b:a8:94:60:46:4c:
         e1:a4:21:f9:5f:e6:d9:55:cd:1f:65:ca:a3:b0:84:19:49:17:
         e7:51:c9:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYQF4N76vYiW3nDu0arAY7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZGU4Y2EzZTJjZTUyYmJjY2U1M2M0YTI5MjZkM2M5YzQx
MGMwNGIwHhcNMjQxMTIzMDkwMDMzWhcNMjQxMTI0MDkwMDMzWjAzMTEwLwYDVQQD
Eyg1MTlkYTdjZTc3MTVkNTI2YzE4MGY5YWFjYWQ5NDFiZjNjNzc0MGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJLoibYrxbXC3SgEPJxpeYil05Qj
7uIQAO70R5QyU6OFqRzUEcU7hNAkJPUTrxbD3XpuzcYWx8VGXgNJIzB1lPqcWDIx
Tdjn23UKfXlNw5v6qWCti4v/kZCQ3L+jyT7Otl9j4/m4GSp7LQQ25rwOz2Ks8R21
sYG8Toi7qDlj9lF1LEB714awN/i5FnqJdXtm9aV2etF0SlKP6I18yg4XwxJhATGn
YCIuiTgWS/1Q6CaMKklLRPh/DaodKjqQNbgeo/ICzxvg4+u8oVeOhQsWEPSoMRJ2
+5ZqYPnM8clpXP9plg2rODoU89qD7su9qb53AV63mkVH/xnKHjlG5iu3UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGdp853FdUmwYD5qsrZQb88d0DLMB8GA1UdIwQY
MBaAFPzejKPizlK7zOU8Sikm08nEEMBLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX042TW8tTE9VcnZNNVR4S0tTYlR5Y1FRd0VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84NGM3NmUtYTE1Yy00NTRmLWE2ODYt
MDAwOTIyYTVjZjE5LzEvX042TW8tTE9VcnZNNVR4S0tTYlR5Y1FRd0VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84NGM3NmUtYTE1Yy00NTRmLWE2ODYtMDAwOTIyYTVjZjE5
LzEvX042TW8tTE9VcnZNNVR4S0tTYlR5Y1FRd0VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwSzzClo
eJtGrc2jP10O7lg9Ks8rj25bEAz6DAZb2qazEH6JsWRpRWwdVR+lGsXohxoKu21n
A1zTW/ANsnpLC8kpoR9pqXJ5NylAtdqbmBGpfYDpGSyNhf1g3sEzX2Mq43qi8Err
Ka5JBhXoJKci1P8d89Uv90rT+bvPAytYwuSSjnNW++3tGA1XnlYQo1uPSSx1+B4X
kPxofTP2UEcxDGsk7cBGrITQzSfth37BYqIRjQc2RN5BAcYXMjWMwvdrb3IRt48o
WV8fz+2zwFkDZ7wmt2SQI5bYM3gtjVH/uIjM5YVxW6iUYEZM4aQh+V/m2VXNH2XK
o7CEGUkX51HJIw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:08 2024 by rpki-client on console-ams.rpki-client.org