Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
File:                     jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft (raw, json)
Hash identifier:          SnkRZGTQpimew43UB+QGHImKSEhj8WkRo1uVlEH0++E=
Subject key identifier:   D3:DD:E3:28:91:17:AB:F9:E0:B9:07:26:BE:96:FB:9B:E5:3C:72:A4
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Certificate issuer:       /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial:       0193523E247DECCD19CC5205A807A4B5FA3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
Manifest number:          0F6F
Signing time:             Fri 22 Nov 2024 05:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:24 +0000
Files and hashes:         1: 7ZlchC01W2yoeX1jz8x73dhzfkw.roa (hash: Pv3amnA1aAAmoHqSVnEkqNsSQorsezqPe/JsddWheQk=)
                          2: HbhBPLE5Mg8xLzFRyr1utQtjtb0.roa (hash: x8g998Bd20Hi8C3BXe5Mheeloa96lmP31Kdn5Ml4jzU=)
                          3: OCeyX3XsjCELnX6aC8IQlswGOFc.roa (hash: y3WFZCt+VTlKMrcWaigsyAFC6cMTN0Z8J2PIqiTu/pk=)
                          4: jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl (hash: tNoFBYNzycElqA/LAWY5zGR4Vh31TPKpVbaMSkejkb0=)
                          5: lXVfJTQazE64iaaOlzFDYfhG8Pk.roa (hash: TiVsMco9eFx44GPlTR0R5Tg2qrWp5XeX/q4hTn5auFI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:24:7d:ec:cd:19:cc:52:05:a8:07:a4:b5:fa:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
        Validity
            Not Before: Nov 22 05:00:24 2024 GMT
            Not After : Nov 23 05:00:24 2024 GMT
        Subject: CN=d3dde3289117abf9e0b90726be96fb9be53c72a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:fa:1b:e9:92:8b:c8:af:c5:c2:9c:b0:31:
                    5d:c6:9a:f7:d8:15:0f:47:de:49:1f:21:74:c7:e9:
                    c3:80:78:ab:cd:f7:1f:49:e2:ed:fc:d2:29:7c:de:
                    f6:74:96:8d:bf:fe:1d:3e:ce:c5:f0:ef:f5:98:1f:
                    1c:ef:c9:60:67:7d:71:96:be:d0:47:22:42:3a:66:
                    73:01:86:1c:eb:d9:25:a7:02:d0:37:d4:2f:92:a5:
                    8e:74:d7:88:f6:41:ac:d5:5a:2f:44:c6:0f:97:9c:
                    70:a0:b5:86:09:a8:a7:08:40:f4:95:e9:b3:9e:13:
                    9b:12:79:83:77:3c:b5:ce:a4:7b:8b:1b:d8:b1:20:
                    fb:c7:2b:71:4b:b6:ad:3e:58:0b:48:08:b5:61:9d:
                    f3:af:ca:c8:ab:2e:fe:ff:8f:4c:0f:61:f5:cc:ed:
                    34:68:b7:13:b0:68:b0:5c:04:d4:06:95:f0:d1:ac:
                    53:5d:90:ba:c9:33:cf:e7:9f:cd:07:ef:02:b1:2a:
                    47:04:f9:39:ed:a2:d7:be:b3:23:05:17:6e:e8:d7:
                    44:d1:35:ba:d8:5c:ee:d9:fe:ae:00:8e:f3:5b:7c:
                    8a:a3:6f:90:54:96:16:1c:6c:f0:66:99:5d:61:5e:
                    c5:41:82:b5:41:d4:2d:bb:07:26:b5:56:36:d5:1b:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DD:E3:28:91:17:AB:F9:E0:B9:07:26:BE:96:FB:9B:E5:3C:72:A4
            X509v3 Authority Key Identifier:
                keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:15:7e:6a:77:46:53:9b:f8:c1:38:6a:d0:e9:70:d2:b2:7c:
         94:08:55:c3:a3:86:66:e7:1a:04:a6:04:36:24:9b:5f:ff:86:
         cf:2a:af:a7:bf:12:c5:cd:b7:ef:b6:7c:e4:f3:80:f5:45:3a:
         1c:80:ec:fc:cd:fd:49:e9:81:98:fb:45:2a:1a:18:ea:dc:bf:
         ed:3a:e7:4d:d8:2b:61:8f:96:d1:49:70:9b:80:ef:31:39:50:
         e1:37:a9:ee:48:8c:db:4d:6e:6d:fb:07:57:e0:ef:71:88:61:
         83:c6:45:30:d1:07:5f:8c:b1:73:8f:b6:54:39:55:d2:81:45:
         e6:3a:bf:1c:f1:97:83:8f:0e:8b:63:54:4b:d8:87:3c:04:22:
         6b:dc:0a:23:1d:e7:d8:8b:9e:4c:71:0e:af:09:64:cb:71:96:
         ea:4c:e7:c6:52:11:a6:bd:7f:66:3d:a9:d2:8c:5c:4f:78:7a:
         7e:c2:e1:ba:70:68:95:7f:41:fb:58:a6:37:23:dd:7f:d6:a1:
         d4:d4:79:01:73:1e:1a:a9:76:d6:a2:0f:a2:f9:b3:da:97:3d:
         74:6b:76:56:62:11:5b:e7:29:ff:4d:cf:ae:61:83:45:16:13:
         6a:ce:63:77:47:06:73:99:65:cf:ca:1f:b1:c0:af:39:1d:b3:
         4d:c0:b7:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSPiR97M0ZzFIFqAektfo9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjgyNGM2MTM1N2RjMzQ0YmJkZjM1YjgzNTc3NDU5Yjlk
M2ZjNDQwHhcNMjQxMTIyMDUwMDI0WhcNMjQxMTIzMDUwMDI0WjAzMTEwLwYDVQQD
EyhkM2RkZTMyODkxMTdhYmY5ZTBiOTA3MjZiZTk2ZmI5YmU1M2M3MmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur/6G+mSi8ivxcKcsDFdxpr32BUP
R95JHyF0x+nDgHirzfcfSeLt/NIpfN72dJaNv/4dPs7F8O/1mB8c78lgZ31xlr7Q
RyJCOmZzAYYc69klpwLQN9QvkqWOdNeI9kGs1VovRMYPl5xwoLWGCainCED0lemz
nhObEnmDdzy1zqR7ixvYsSD7xytxS7atPlgLSAi1YZ3zr8rIqy7+/49MD2H1zO00
aLcTsGiwXATUBpXw0axTXZC6yTPP55/NB+8CsSpHBPk57aLXvrMjBRdu6NdE0TW6
2Fzu2f6uAI7zW3yKo2+QVJYWHGzwZpldYV7FQYK1QdQtuwcmtVY21RuegQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPd4yiRF6v54LkHJr6W+5vlPHKkMB8GA1UdIwQY
MBaAFI8oJMYTV9w0S73zW4NXdFm50/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzIt
M2FlNzExYWYwMzRiLzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzItM2FlNzExYWYwMzRi
LzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhV+andG
U5v4wThq0Olw0rJ8lAhVw6OGZucaBKYENiSbX/+Gzyqvp78Sxc2377Z85POA9UU6
HIDs/M39SemBmPtFKhoY6ty/7TrnTdgrYY+W0Ulwm4DvMTlQ4Tep7kiM201ubfsH
V+DvcYhhg8ZFMNEHX4yxc4+2VDlV0oFF5jq/HPGXg48Oi2NUS9iHPAQia9wKIx3n
2IueTHEOrwlky3GW6kznxlIRpr1/Zj2p0oxcT3h6fsLhunBolX9B+1imNyPdf9ah
1NR5AXMeGql21qIPovmz2pc9dGt2VmIRW+cp/03PrmGDRRYTas5jd0cGc5llz8of
scCvOR2zTcC3vQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:24 2024 by rpki-client on console-ams.rpki-client.org