Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File:                     GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier:          JQK7FxXLAPupVgxupkogT8/BAY9p3Dd5mV8DdEBfH8A=
Subject key identifier:   62:C1:35:37:CA:D3:AB:0F:B3:3B:BD:53:E0:2A:86:A8:69:BF:0A:C4
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer:       /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial:       019357D29166E74DFDCB28B0B4DDF8D36E7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 07:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:37 +0000
Files and hashes:         1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: 6aK42oDIEuWpezFWOteiPIp+Nn2nenM2Wj355/FheV0=)
                          2: M0JTzxUzHXhgFK_7bLzj9eI9RQI.roa (hash: KV9xFYVmmS7fM4+nZBZStznb3/RRA9Jj1TbcCSLuueA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:91:66:e7:4d:fd:cb:28:b0:b4:dd:f8:d3:6e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
        Validity
            Not Before: Nov 23 07:00:37 2024 GMT
            Not After : Nov 24 07:00:37 2024 GMT
        Subject: CN=62c13537cad3ab0fb33bbd53e02a86a869bf0ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:e8:c6:df:19:cc:d7:da:e9:7d:de:30:67:
                    11:7c:d7:37:20:af:e7:56:26:b8:83:9b:fc:d3:7b:
                    bf:e6:ec:d3:d5:a6:4b:09:be:22:da:85:ad:07:2b:
                    55:48:07:04:56:bb:fc:00:fb:8d:10:b3:a7:83:fa:
                    75:1b:57:c4:c5:23:94:5b:41:23:f6:74:8e:01:e2:
                    b5:d0:23:6a:29:4d:0e:f8:f3:82:ed:34:be:af:d2:
                    28:1a:aa:7e:e4:75:b7:ed:cc:1c:18:e1:d1:81:0c:
                    ce:c2:87:88:dc:07:36:96:38:61:39:95:ab:2b:24:
                    f2:14:00:81:c3:bc:ea:78:1f:f8:58:a8:b4:31:10:
                    c5:66:60:1c:24:50:75:7b:1a:9a:87:b4:1c:12:a3:
                    32:38:60:4d:41:8a:70:9f:cc:fc:b4:58:9c:a1:b0:
                    db:2c:f2:c1:a4:56:f3:ef:a7:0f:52:3a:f3:bd:3d:
                    00:d8:ce:ae:f7:9d:2b:e6:0e:c3:30:cb:79:5f:d1:
                    fc:2d:f9:de:54:29:79:8a:33:a4:3c:e5:f6:86:7a:
                    1f:b9:3d:5b:12:5d:c5:bf:2f:a1:a9:d3:6b:29:39:
                    4f:42:dd:dc:51:cc:32:7e:56:ae:f3:ef:e5:c8:b4:
                    e6:43:6f:8e:17:8e:d7:28:85:6c:b9:f7:2d:6c:b6:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C1:35:37:CA:D3:AB:0F:B3:3B:BD:53:E0:2A:86:A8:69:BF:0A:C4
            X509v3 Authority Key Identifier:
                keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b1:06:96:92:d6:73:e5:3c:5c:ac:fa:75:b0:35:e5:3b:62:
         08:f2:9b:61:6e:d9:e8:18:8a:2e:3e:e9:cc:fb:2f:fa:e4:c9:
         76:73:42:64:8a:34:09:b1:b3:c3:aa:c2:24:3c:f3:25:83:71:
         0c:9a:a8:60:1c:fc:d4:ae:eb:47:52:11:cd:86:e4:a5:09:5e:
         d9:ad:20:55:64:02:99:fb:57:a4:5c:fb:ab:be:46:f8:4c:24:
         a9:1c:b7:1e:6d:99:9a:f3:ad:5e:86:9e:ca:20:f6:5f:1a:f2:
         da:6a:61:21:f6:a0:9c:5d:33:da:19:ac:d9:d7:65:3a:b9:a9:
         6a:13:d7:66:8b:67:e6:b2:1b:fd:ba:82:ad:71:ea:1c:43:5f:
         06:19:3f:f8:75:04:1d:b5:e0:f7:85:2e:d2:e4:9a:72:0c:b5:
         7c:21:37:ce:d4:64:60:97:b4:dd:9d:1a:00:4e:0b:43:70:8d:
         61:95:5b:17:69:ee:b4:55:c4:8d:ac:08:ee:8b:83:fc:37:38:
         d9:56:06:73:31:dd:6d:6f:94:aa:cb:40:a7:3d:7a:f6:92:09:
         dc:f7:25:0b:e1:01:fa:4d:4a:d6:b8:4c:9e:bb:29:b7:15:07:
         cc:83:60:b4:e6:34:7d:6d:f8:26:91:ed:29:70:ce:ae:7e:bf:
         7a:88:78:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0pFm5039yyiwtN340259MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YWNmMDdmMTM1MjIyMjY1OGI3ODllNGZlNDBlYTM4YThh
YTcxZGYwHhcNMjQxMTIzMDcwMDM3WhcNMjQxMTI0MDcwMDM3WjAzMTEwLwYDVQQD
Eyg2MmMxMzUzN2NhZDNhYjBmYjMzYmJkNTNlMDJhODZhODY5YmYwYWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5joxt8ZzNfa6X3eMGcRfNc3IK/n
Via4g5v803u/5uzT1aZLCb4i2oWtBytVSAcEVrv8APuNELOng/p1G1fExSOUW0Ej
9nSOAeK10CNqKU0O+POC7TS+r9IoGqp+5HW37cwcGOHRgQzOwoeI3Ac2ljhhOZWr
KyTyFACBw7zqeB/4WKi0MRDFZmAcJFB1exqah7QcEqMyOGBNQYpwn8z8tFicobDb
LPLBpFbz76cPUjrzvT0A2M6u950r5g7DMMt5X9H8LfneVCl5ijOkPOX2hnofuT1b
El3Fvy+hqdNrKTlPQt3cUcwyflau8+/lyLTmQ2+OF47XKIVsufctbLb4jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLBNTfK06sPszu9U+AqhqhpvwrEMB8GA1UdIwQY
MBaAFBms8H8TUiImWLeJ5P5A6jioqnHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMt
NzE2YzAzNDdhYTc2LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMtNzE2YzAzNDdhYTc2
LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLEGlpLW
c+U8XKz6dbA15TtiCPKbYW7Z6BiKLj7pzPsv+uTJdnNCZIo0CbGzw6rCJDzzJYNx
DJqoYBz81K7rR1IRzYbkpQle2a0gVWQCmftXpFz7q75G+EwkqRy3Hm2ZmvOtXoae
yiD2Xxry2mphIfagnF0z2hms2ddlOrmpahPXZotn5rIb/bqCrXHqHENfBhk/+HUE
HbXg94Uu0uSacgy1fCE3ztRkYJe03Z0aAE4LQ3CNYZVbF2nutFXEjawI7ouD/Dc4
2VYGczHdbW+UqstApz169pIJ3PclC+EB+k1K1rhMnrsptxUHzINgtOY0fW34JpHt
KXDOrn6/eoh4hw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:54 2024 by rpki-client on console-fra.rpki-client.org