Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
File:                     UioivM096CZa_VX5gw_8Acg69yY.mft (raw, json)
Hash identifier:          WaT3qDkXTa07hBd5EJHH0mn5Wg6bUJMO/lwtmhwjfbg=
Subject key identifier:   DF:6B:DE:BD:80:07:D2:76:96:67:33:19:B6:41:18:CF:A3:89:1E:B6
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Certificate issuer:       /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial:       01935689BD86678954AE2B84D5D988E28591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
Manifest number:          122E
Signing time:             Sat 23 Nov 2024 01:01:27 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:27 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:27 +0000
Files and hashes:         1: 3bAJXBeA31xQ9iR7FO3NMY0Bu2M.roa (hash: x9Eig3c0A4wYnsdOlN+DU0nKRVrlUCz62IEDFeD2YrI=)
                          2: UioivM096CZa_VX5gw_8Acg69yY.crl (hash: Xccka7B6T+67IOMIzX9rRaeyfn/ZwOyH0qefqcdzyVY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:bd:86:67:89:54:ae:2b:84:d5:d9:88:e2:85:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
        Validity
            Not Before: Nov 23 01:01:27 2024 GMT
            Not After : Nov 24 01:01:27 2024 GMT
        Subject: CN=df6bdebd8007d27696673319b64118cfa3891eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8d:76:08:31:2d:ce:f7:3c:c5:c9:69:be:6f:
                    e3:fb:cc:29:62:2b:cf:fc:24:55:97:42:1d:be:6f:
                    2a:75:8e:17:6f:ef:49:1a:99:ed:e4:9b:60:5a:ac:
                    3a:e9:b5:18:c9:c0:7e:b1:77:31:5e:2c:c3:f9:f4:
                    76:5a:bc:a0:2b:25:3f:c6:2d:ef:ca:b9:27:00:6b:
                    9a:af:ea:13:fe:de:bc:a1:b5:e9:05:9e:76:89:57:
                    8f:35:db:aa:6e:c5:8b:23:eb:8a:8a:d4:0b:70:56:
                    a2:71:38:85:d1:29:d1:7c:52:03:9b:9a:2e:b1:67:
                    28:1e:fd:59:58:73:4e:7c:7a:74:84:a2:17:9d:c2:
                    b0:12:dd:fb:3d:b4:03:77:98:22:b4:c3:02:bb:18:
                    f8:86:b7:9b:1a:68:be:2a:cc:28:91:dd:40:e6:c3:
                    76:18:d8:f7:40:9a:39:1d:b8:56:64:7e:b9:b3:79:
                    f5:e0:2d:e3:8d:0c:76:6a:b8:61:b9:35:09:e8:73:
                    6b:64:15:89:2a:b5:e2:92:7b:a0:1f:04:cb:10:42:
                    bf:2a:6e:30:f5:22:6f:2d:e2:db:11:e7:3b:f9:e6:
                    a1:c8:51:b4:d2:f1:43:35:19:cd:8f:85:4e:39:82:
                    13:f3:bb:89:b6:02:a0:f1:f5:78:c5:a8:b2:f1:62:
                    26:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6B:DE:BD:80:07:D2:76:96:67:33:19:B6:41:18:CF:A3:89:1E:B6
            X509v3 Authority Key Identifier:
                keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ba:ca:94:de:15:87:d0:2b:7c:36:7c:63:db:a7:10:c4:4a:
         ae:c2:24:bb:11:ea:6a:47:bd:0b:70:4e:e9:55:d8:5e:a2:a7:
         cd:6f:bb:e9:8f:53:ae:26:8f:be:f4:4f:ee:ce:a4:12:b6:de:
         8d:d5:f5:6f:5e:d9:61:fd:7b:dc:38:a4:ce:fa:76:1b:6f:42:
         1e:df:22:a7:d8:d6:a4:d2:da:9f:bf:7f:93:f5:94:61:94:12:
         05:ed:28:a3:c9:0c:34:d6:0f:6d:88:de:e0:97:85:b4:34:af:
         44:b5:29:dc:e5:8b:b6:6c:d2:ad:67:2d:8d:ac:80:50:8b:21:
         22:dc:65:aa:6f:f2:dc:50:d4:22:31:e5:80:28:62:34:f2:55:
         88:e9:de:70:a2:ef:25:eb:3f:85:91:e4:24:4e:48:d4:ac:51:
         6b:00:ea:ac:fc:b0:1e:ce:70:c6:b5:2c:01:58:7e:ee:9d:80:
         78:75:ce:ef:02:7d:db:a3:86:9e:ce:99:ff:2e:04:07:f0:1b:
         e6:84:f9:f5:f3:76:96:9a:41:51:44:8f:30:1c:c6:0b:2e:ab:
         a9:83:e8:15:95:40:ff:18:d5:96:24:53:32:74:73:fd:96:1c:
         bd:91:aa:2e:d3:ef:73:79:c7:4f:cf:80:04:10:ed:3c:79:bd:
         8d:2a:c8:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWib2GZ4lUriuE1dmI4oWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMmEyMmJjY2QzZGU4MjY1YWZkNTVmOTgzMGZmYzAxYzgz
YWY3MjYwHhcNMjQxMTIzMDEwMTI3WhcNMjQxMTI0MDEwMTI3WjAzMTEwLwYDVQQD
EyhkZjZiZGViZDgwMDdkMjc2OTY2NzMzMTliNjQxMThjZmEzODkxZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y12CDEtzvc8xclpvm/j+8wpYivP
/CRVl0Idvm8qdY4Xb+9JGpnt5JtgWqw66bUYycB+sXcxXizD+fR2WrygKyU/xi3v
yrknAGuar+oT/t68obXpBZ52iVePNduqbsWLI+uKitQLcFaicTiF0SnRfFIDm5ou
sWcoHv1ZWHNOfHp0hKIXncKwEt37PbQDd5gitMMCuxj4hrebGmi+Kswokd1A5sN2
GNj3QJo5HbhWZH65s3n14C3jjQx2arhhuTUJ6HNrZBWJKrXiknugHwTLEEK/Km4w
9SJvLeLbEec7+eahyFG00vFDNRnNj4VOOYIT87uJtgKg8fV4xaiy8WIm8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9r3r2AB9J2lmczGbZBGM+jiR62MB8GA1UdIwQY
MBaAFFIqIrzNPegmWv1V+YMP/AHIOvcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWlvaXZNMDk2Q1phX1ZYNWd3XzhBY2c2OXlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZTQ3NjAtYzU0Ni00YmVjLWE2MzUt
ZmYzNzIzZTc4YmQzLzEvVWlvaXZNMDk2Q1phX1ZYNWd3XzhBY2c2OXlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8xZTQ3NjAtYzU0Ni00YmVjLWE2MzUtZmYzNzIzZTc4YmQz
LzEvVWlvaXZNMDk2Q1phX1ZYNWd3XzhBY2c2OXlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrrKlN4V
h9ArfDZ8Y9unEMRKrsIkuxHqake9C3BO6VXYXqKnzW+76Y9TriaPvvRP7s6kErbe
jdX1b17ZYf173Dikzvp2G29CHt8ip9jWpNLan79/k/WUYZQSBe0oo8kMNNYPbYje
4JeFtDSvRLUp3OWLtmzSrWctjayAUIshItxlqm/y3FDUIjHlgChiNPJViOnecKLv
Jes/hZHkJE5I1KxRawDqrPywHs5wxrUsAVh+7p2AeHXO7wJ926OGns6Z/y4EB/Ab
5oT59fN2lppBUUSPMBzGCy6rqYPoFZVA/xjVliRTMnRz/ZYcvZGqLtPvc3nHT8+A
BBDtPHm9jSrIdQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:53 2024 by rpki-client on console-ams.rpki-client.org