Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
File:                     kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json)
Hash identifier:          JXd4pRyDtpfzTTFZi1VGSz2ZKbgc2zelmXRbw0gRtuU=
Subject key identifier:   25:55:E4:71:D9:A6:69:6C:E7:C3:B5:6B:B2:52:D3:85:EA:77:27:CD
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Certificate issuer:       /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial:       019355088491F07C85F9546BACF0C9B91A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
Manifest number:          0263
Signing time:             Fri 22 Nov 2024 18:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:41 +0000
Files and hashes:         1: I601BXbKmZuZ40s2TXYQbM3B1wQ.roa (hash: OoRUPqOUem4DbsiZfdZ6+xJU5Ruat495jW9i1EDG5k8=)
                          2: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: T5g8swYTMuvFyUzMRpkXrdTUD12LnMfOIKBx35ggBgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:84:91:f0:7c:85:f9:54:6b:ac:f0:c9:b9:1a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
        Validity
            Not Before: Nov 22 18:00:41 2024 GMT
            Not After : Nov 23 18:00:41 2024 GMT
        Subject: CN=2555e471d9a6696ce7c3b56bb252d385ea7727cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:58:21:42:c3:0c:72:41:56:1b:3d:1a:63:71:
                    04:57:7b:59:3c:53:cd:31:90:2b:ed:44:87:e8:9e:
                    d6:8f:4f:62:b1:20:d9:b5:ac:e2:5a:37:0c:fe:f3:
                    66:ce:59:56:45:a2:22:fa:2f:28:d2:e8:2b:6e:44:
                    e9:f4:23:5c:30:c5:3d:2f:18:79:39:06:c5:e7:de:
                    89:0c:31:d4:5e:d9:22:a6:8a:08:ad:18:49:a4:ba:
                    2f:c2:3e:f9:96:d1:51:e9:57:3a:41:eb:54:19:2c:
                    dd:e2:a5:cc:0f:6f:29:d4:a6:f8:e0:53:2e:46:1b:
                    c0:0d:ad:28:9d:71:7b:35:24:cf:33:15:3f:3f:fe:
                    b4:d1:ad:0f:e9:6c:d0:af:9a:5e:e8:2c:8f:0d:30:
                    67:63:d5:de:59:08:d1:55:11:38:88:b9:04:04:c8:
                    1a:fd:ca:1c:d8:5a:8e:ad:73:1b:13:fe:87:50:3c:
                    73:c1:14:26:fb:c5:b7:a2:dc:5e:72:f6:f5:ec:11:
                    43:1f:3b:5e:4b:df:9a:3b:1a:09:75:c9:9b:11:fd:
                    7d:e7:24:c4:a3:34:fa:fd:e5:3d:7e:b1:00:47:6d:
                    7a:10:bc:70:ac:37:08:bc:d8:cc:74:45:88:3c:95:
                    e3:3f:3d:2d:91:3d:46:3e:fd:fb:8b:31:01:3b:6b:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:55:E4:71:D9:A6:69:6C:E7:C3:B5:6B:B2:52:D3:85:EA:77:27:CD
            X509v3 Authority Key Identifier:
                keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ee:e2:14:fe:d0:51:8f:1a:31:50:c2:b9:4f:26:2a:c5:76:
         87:73:76:fa:38:41:69:51:5b:10:c2:36:4b:07:64:f9:e9:11:
         3a:3e:c6:87:3c:5c:f3:61:30:61:e3:7c:21:c4:ae:9b:ae:2b:
         51:5e:21:6d:fe:e9:50:60:87:a1:71:bb:ae:6f:43:9c:2e:a3:
         b3:03:5c:76:7f:c2:0e:da:5f:3f:d1:07:10:8e:58:30:99:e5:
         b7:7d:8d:bc:70:cd:f6:05:61:05:17:64:34:f4:0b:41:56:86:
         76:8d:fd:f1:a2:e5:50:c5:fb:ae:76:b4:c2:66:63:81:ad:84:
         03:dc:eb:71:8c:8e:fa:3d:7b:25:57:ec:84:d5:b9:65:d8:43:
         7c:c1:0f:ef:1c:cc:fb:1b:07:ab:4b:c1:b8:59:74:6a:08:44:
         3a:7a:7e:39:fa:bd:23:99:f5:03:0b:a0:8d:4f:1e:57:9e:17:
         e9:ce:a5:c9:55:71:6d:e0:dc:6e:cc:f0:87:69:15:7f:f2:3c:
         89:b5:37:b8:7c:75:b2:2b:33:52:93:d3:d0:09:ef:83:25:3e:
         4a:05:8f:c6:15:9b:41:6e:ba:b0:f7:86:d0:ac:61:4b:2c:7c:
         d8:ec:b9:50:5a:05:58:d7:11:c2:8f:fd:d1:4d:bd:75:17:65:
         41:d4:ac:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCISR8HyF+VRrrPDJuRp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjU4N2E3YzQyYzI2MWZhMjU0YjBiODJlN2JjMDcxOWNj
NjQ4MTIwHhcNMjQxMTIyMTgwMDQxWhcNMjQxMTIzMTgwMDQxWjAzMTEwLwYDVQQD
EygyNTU1ZTQ3MWQ5YTY2OTZjZTdjM2I1NmJiMjUyZDM4NWVhNzcyN2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlghQsMMckFWGz0aY3EEV3tZPFPN
MZAr7USH6J7Wj09isSDZtaziWjcM/vNmzllWRaIi+i8o0ugrbkTp9CNcMMU9Lxh5
OQbF596JDDHUXtkipooIrRhJpLovwj75ltFR6Vc6QetUGSzd4qXMD28p1Kb44FMu
RhvADa0onXF7NSTPMxU/P/600a0P6WzQr5pe6CyPDTBnY9XeWQjRVRE4iLkEBMga
/coc2FqOrXMbE/6HUDxzwRQm+8W3otxecvb17BFDHzteS9+aOxoJdcmbEf195yTE
ozT6/eU9frEAR216ELxwrDcIvNjMdEWIPJXjPz0tkT1GPv37izEBO2vlUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVV5HHZpmls58O1a7JS04XqdyfNMB8GA1UdIwQY
MBaAFJJlh6fELCYfolSwuC57wHGcxkgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjIt
ODhmYTNiNmViMDA2LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjItODhmYTNiNmViMDA2
LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQO7iFP7Q
UY8aMVDCuU8mKsV2h3N2+jhBaVFbEMI2Swdk+ekROj7Ghzxc82EwYeN8IcSum64r
UV4hbf7pUGCHoXG7rm9DnC6jswNcdn/CDtpfP9EHEI5YMJnlt32NvHDN9gVhBRdk
NPQLQVaGdo398aLlUMX7rna0wmZjga2EA9zrcYyO+j17JVfshNW5ZdhDfMEP7xzM
+xsHq0vBuFl0aghEOnp+Ofq9I5n1AwugjU8eV54X6c6lyVVxbeDcbszwh2kVf/I8
ibU3uHx1siszUpPT0AnvgyU+SgWPxhWbQW66sPeG0KxhSyx82Oy5UFoFWNcRwo/9
0U29dRdlQdSs2g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:07:21 2024 by rpki-client on console-ams.rpki-client.org