Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
File:                     hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft (raw, json)
Hash identifier:          qB73m3TFIkailE5Od8ZM1+wxTOXbsmu7NtXtbZUOxiw=
Subject key identifier:   23:EB:90:78:DE:CF:F6:88:32:20:59:D1:4B:02:97:69:01:75:30:49
Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32
Certificate issuer:       /CN=8559fea7e83e64e5d82562313c3a3f190f49f032
Certificate serial:       0193568A1F38786419607B3DE0BEB2B9D268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
Manifest number:          0E56
Signing time:             Sat 23 Nov 2024 01:01:52 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:52 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:52 +0000
Files and hashes:         1: NLW01DZVFyztsd7cwNdeP8d6ct0.roa (hash: j/R2Lr63WXHx+MUqbKy/50ME+RSpa71cOXWo0ULL9Lk=)
                          2: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl (hash: KPbHwFIIc5RNsuxqu90POOPWW2fzgDAiHZP+NoZzPKM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:1f:38:78:64:19:60:7b:3d:e0:be:b2:b9:d2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032
        Validity
            Not Before: Nov 23 01:01:52 2024 GMT
            Not After : Nov 24 01:01:52 2024 GMT
        Subject: CN=23eb9078decff688322059d14b02976901753049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:16:8e:48:f0:b3:1a:46:37:0a:2c:01:b7:
                    b4:75:f6:6f:59:aa:49:1b:21:f9:43:79:e5:1a:c8:
                    61:62:88:5d:29:d2:21:d0:e5:6e:a6:fc:d2:58:5f:
                    58:89:1b:dd:db:e0:b4:d8:0a:b4:3d:c3:34:99:23:
                    d9:b0:e8:ac:d9:75:b9:62:32:b2:3b:69:14:0a:a9:
                    13:57:ad:0f:18:ce:4d:38:f1:07:3f:09:31:96:db:
                    50:14:71:cd:8b:26:4e:05:e0:55:73:07:ad:f3:40:
                    f8:2b:f3:c9:b0:70:a9:94:69:c2:da:22:6d:bb:11:
                    4d:ea:45:20:e9:af:58:3c:4e:51:b7:ae:0a:d8:d5:
                    14:77:3b:46:ca:63:5b:71:a2:ba:ac:c3:2f:b1:40:
                    ba:f8:57:1d:85:e4:68:b0:af:55:27:cd:43:5d:ff:
                    f4:c5:9f:2c:3b:6f:a3:c4:b0:7f:af:a4:17:3b:2b:
                    85:e6:77:f2:c0:16:71:7c:14:0c:82:88:43:ee:9a:
                    98:ee:34:fd:7b:a8:16:87:bc:cf:e9:70:ef:87:22:
                    11:f8:b0:f7:95:3f:c3:c2:95:b0:dc:2e:62:fd:fb:
                    1e:02:aa:52:2f:20:66:d8:03:77:7d:e8:21:c3:fe:
                    73:88:1c:43:9f:fb:9b:5b:89:fc:5c:d0:02:f4:cf:
                    23:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EB:90:78:DE:CF:F6:88:32:20:59:D1:4B:02:97:69:01:75:30:49
            X509v3 Authority Key Identifier:
                keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:16:74:de:d0:f0:f6:b7:9e:ed:6a:48:39:ba:87:ae:35:98:
         e4:72:a9:49:01:83:4c:9b:b4:78:60:18:ea:b6:db:83:ce:a2:
         aa:ad:fb:b4:88:a0:6f:d2:1c:38:34:4e:58:7c:e5:14:dd:e3:
         41:c4:4f:ab:77:17:ae:83:7f:b2:23:e0:4c:e1:f1:da:5a:be:
         31:af:90:8c:ff:65:fb:33:af:72:ac:f7:48:a4:a5:3a:ab:c0:
         c0:fe:0e:08:62:15:88:7c:4e:a3:41:57:ca:e1:bc:c8:41:22:
         95:6a:84:9f:b4:53:2b:40:a8:a0:2d:6e:d2:31:55:8a:75:63:
         fc:87:73:9a:4a:d7:5c:de:e3:c8:f4:46:38:e9:fe:11:70:f9:
         66:3b:fd:40:cb:98:75:d8:bf:e3:ef:4a:fe:62:02:7a:80:3b:
         0b:0b:fd:c9:15:fa:f7:f5:37:41:eb:58:61:33:61:2d:57:bd:
         d9:46:36:07:40:13:43:04:8d:6a:66:56:88:c9:db:a8:29:55:
         c6:84:6f:74:86:90:3a:47:80:2f:b3:23:14:96:e0:7b:b7:44:
         ff:a3:10:1f:f6:2d:78:bf:ac:3f:5a:0b:bc:63:e3:e8:f7:e8:
         fd:11:13:a2:3e:aa:93:e3:8f:8a:43:eb:a7:5d:b2:6d:a0:1c:
         00:d9:54:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWih84eGQZYHs94L6yudJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NTlmZWE3ZTgzZTY0ZTVkODI1NjIzMTNjM2EzZjE5MGY0
OWYwMzIwHhcNMjQxMTIzMDEwMTUyWhcNMjQxMTI0MDEwMTUyWjAzMTEwLwYDVQQD
EygyM2ViOTA3OGRlY2ZmNjg4MzIyMDU5ZDE0YjAyOTc2OTAxNzUzMDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxMWjkjwsxpGNwosAbe0dfZvWapJ
GyH5Q3nlGshhYohdKdIh0OVupvzSWF9YiRvd2+C02Aq0PcM0mSPZsOis2XW5YjKy
O2kUCqkTV60PGM5NOPEHPwkxlttQFHHNiyZOBeBVcwet80D4K/PJsHCplGnC2iJt
uxFN6kUg6a9YPE5Rt64K2NUUdztGymNbcaK6rMMvsUC6+FcdheRosK9VJ81DXf/0
xZ8sO2+jxLB/r6QXOyuF5nfywBZxfBQMgohD7pqY7jT9e6gWh7zP6XDvhyIR+LD3
lT/DwpWw3C5i/fseAqpSLyBm2AN3feghw/5ziBxDn/ubW4n8XNAC9M8jswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPrkHjez/aIMiBZ0UsCl2kBdTBJMB8GA1UdIwQY
MBaAFIVZ/qfoPmTl2CViMTw6PxkPSfAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83NmU4N2QtNzU5NS00YmExLWEyZDct
ODcwZTY0ZDQ2NGQ1LzEvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83NmU4N2QtNzU5NS00YmExLWEyZDctODcwZTY0ZDQ2NGQ1
LzEvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtxZ03tDw
9ree7WpIObqHrjWY5HKpSQGDTJu0eGAY6rbbg86iqq37tIigb9IcODROWHzlFN3j
QcRPq3cXroN/siPgTOHx2lq+Ma+QjP9l+zOvcqz3SKSlOqvAwP4OCGIViHxOo0FX
yuG8yEEilWqEn7RTK0CooC1u0jFVinVj/IdzmkrXXN7jyPRGOOn+EXD5Zjv9QMuY
ddi/4+9K/mICeoA7Cwv9yRX69/U3QetYYTNhLVe92UY2B0ATQwSNamZWiMnbqClV
xoRvdIaQOkeAL7MjFJbge7dE/6MQH/YteL+sP1oLvGPj6Pfo/REToj6qk+OPikPr
p12ybaAcANlUUA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:25 2024 by rpki-client on console-fra.rpki-client.org