Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
File:                     UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft (raw, json)
Hash identifier:          /tvYAVZLV6iXG63b/gXQsyycAx4coVHTpYGRWDK/2es=
Subject key identifier:   CB:AD:74:7D:70:A1:B3:F2:FE:D2:CE:BB:9B:76:C3:09:7B:6B:C7:1D
Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
Certificate issuer:       /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Certificate serial:       019350F4669E80751940EEF81D05C8BA082E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
Manifest number:          02A3
Signing time:             Thu 21 Nov 2024 23:00:14 +0000
Manifest this update:     Thu 21 Nov 2024 23:00:14 +0000
Manifest next update:     Fri 22 Nov 2024 23:00:14 +0000
Files and hashes:         1: CSiL6Yyeg0xQXBcj8XOK4HgrYxI.roa (hash: s+ixpHOOBgmvBKRK/+ubiTkSvkUa1at28/oEorgp1hc=)
                          2: UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl (hash: 5fM4u8tGUt79ged9o0AwPLjgzhkkQwnWSRypLUPkI5w=)
                          3: Z5Wj4ETCBwwFJoDKH5Fj58u-pFU.roa (hash: HnoyoyObavcuS/eILrDrrZ4EIOLhnlSVEA6BYmwlkwo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:f4:66:9e:80:75:19:40:ee:f8:1d:05:c8:ba:08:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
        Validity
            Not Before: Nov 21 23:00:14 2024 GMT
            Not After : Nov 22 23:00:14 2024 GMT
        Subject: CN=cbad747d70a1b3f2fed2cebb9b76c3097b6bc71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:75:8c:40:7d:ec:d7:29:c2:33:bb:bd:fa:
                    31:ef:ad:0f:63:2d:4a:af:b4:a5:d8:cb:ad:13:5a:
                    d7:c2:c5:67:2c:c4:aa:c4:4d:c4:cf:b2:9a:84:5f:
                    65:8f:da:86:fd:b5:2e:ca:5f:02:c9:3c:ae:64:1b:
                    38:c6:90:64:91:3d:14:e1:55:52:4e:a1:79:73:5b:
                    a0:ba:97:5f:15:3a:10:17:05:fa:b9:1b:54:8b:b4:
                    a5:85:2b:a8:7f:28:ea:fb:c3:97:1c:ba:ce:57:16:
                    93:f6:54:e7:19:1d:c0:4b:74:53:0d:59:15:a9:bf:
                    26:fb:79:06:f0:bc:c3:55:22:43:2b:cf:e1:7a:73:
                    f9:ac:3f:95:09:89:8a:88:48:66:b9:7c:78:3e:2d:
                    35:e9:1b:d1:d9:93:f2:af:04:b0:68:70:4e:dc:6a:
                    b5:87:90:02:c0:8a:7e:30:4b:52:9e:6f:91:2d:80:
                    04:c8:ad:dc:f4:27:2d:12:67:5e:6c:74:b3:82:2c:
                    89:3e:d4:8d:8f:23:fe:8b:61:cf:30:54:03:b0:20:
                    de:dd:c1:af:53:55:47:04:ec:c9:01:ee:81:0b:8a:
                    2b:2f:7d:9b:17:12:5c:32:4a:7c:b4:93:2a:bc:14:
                    31:90:7a:e8:82:3b:6e:7e:d9:da:25:b7:b9:c2:b3:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AD:74:7D:70:A1:B3:F2:FE:D2:CE:BB:9B:76:C3:09:7B:6B:C7:1D
            X509v3 Authority Key Identifier:
                keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0e:64:00:0a:f9:05:2e:f1:28:17:99:e1:e6:a0:43:f8:47:
         af:e4:34:94:71:a3:a5:03:93:d9:b3:c0:99:85:f8:d0:e5:11:
         80:c2:0d:de:25:e9:65:de:97:37:f0:96:59:8c:c2:95:3d:23:
         ca:bd:a8:3a:1a:e3:20:54:04:c3:32:45:3d:30:4a:d2:75:bd:
         ec:25:07:17:9e:b6:5e:1b:72:a6:a3:4d:55:6c:f8:35:f2:94:
         c8:a3:45:42:ba:a9:2b:14:45:93:5e:f9:56:c5:6f:a3:7c:b6:
         22:aa:30:93:45:2e:2a:09:50:06:2c:61:a5:42:de:11:4d:2a:
         07:8b:54:db:0a:42:38:95:d6:45:b1:f5:6f:75:4b:cf:2f:e9:
         82:f9:db:ea:fb:90:1f:a1:41:b0:03:20:fe:7b:d2:21:8a:41:
         ed:c9:26:b5:4d:10:ae:59:70:b6:da:92:e7:61:d1:62:f6:dc:
         78:ab:00:6a:0a:59:cf:5b:e1:99:e6:59:c0:35:90:b5:ac:bf:
         c8:33:ec:86:02:03:51:cc:23:94:7c:f6:df:20:d0:1a:5b:fd:
         15:21:f9:0a:fc:97:08:9f:96:48:69:d0:33:2a:f8:ed:9a:63:
         1c:46:10:6f:29:2e:7e:44:d2:22:c7:a4:d7:2f:ad:b4:2b:bc:
         07:1c:a7:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNQ9GaegHUZQO74HQXIugguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMmMzN2U3ZWNiNTliNjY3ZmE4MmVjZjA5M2U1ZWQ4NzY2
MWE4ZTIwHhcNMjQxMTIxMjMwMDE0WhcNMjQxMTIyMjMwMDE0WjAzMTEwLwYDVQQD
EyhjYmFkNzQ3ZDcwYTFiM2YyZmVkMmNlYmI5Yjc2YzMwOTdiNmJjNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypp1jEB97NcpwjO7vfox760PYy1K
r7Sl2MutE1rXwsVnLMSqxE3Ez7KahF9lj9qG/bUuyl8CyTyuZBs4xpBkkT0U4VVS
TqF5c1ugupdfFToQFwX6uRtUi7SlhSuofyjq+8OXHLrOVxaT9lTnGR3AS3RTDVkV
qb8m+3kG8LzDVSJDK8/henP5rD+VCYmKiEhmuXx4Pi016RvR2ZPyrwSwaHBO3Gq1
h5ACwIp+MEtSnm+RLYAEyK3c9CctEmdebHSzgiyJPtSNjyP+i2HPMFQDsCDe3cGv
U1VHBOzJAe6BC4orL32bFxJcMkp8tJMqvBQxkHrogjtuftnaJbe5wrNIYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMutdH1wobPy/tLOu5t2wwl7a8cdMB8GA1UdIwQY
MBaAFFAsN+fstZtmf6guzwk+Xth2YajiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUN3MzUteTFtMlpfcUM3UENUNWUySFpocU9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iNWY2YWYtM2M4My00Y2I1LWI1ZWIt
YmExNDg0M2M1NDljLzEvVUN3MzUteTFtMlpfcUM3UENUNWUySFpocU9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iNWY2YWYtM2M4My00Y2I1LWI1ZWItYmExNDg0M2M1NDlj
LzEvVUN3MzUteTFtMlpfcUM3UENUNWUySFpocU9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQ5kAAr5
BS7xKBeZ4eagQ/hHr+Q0lHGjpQOT2bPAmYX40OURgMIN3iXpZd6XN/CWWYzClT0j
yr2oOhrjIFQEwzJFPTBK0nW97CUHF562XhtypqNNVWz4NfKUyKNFQrqpKxRFk175
VsVvo3y2Iqowk0UuKglQBixhpULeEU0qB4tU2wpCOJXWRbH1b3VLzy/pgvnb6vuQ
H6FBsAMg/nvSIYpB7ckmtU0QrllwttqS52HRYvbceKsAagpZz1vhmeZZwDWQtay/
yDPshgIDUcwjlHz23yDQGlv9FSH5CvyXCJ+WSGnQMyr47ZpjHEYQbykufkTSIsek
1y+ttCu8Bxyncg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:34 2024 by rpki-client on console-ams.rpki-client.org