Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
File:                     _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json)
Hash identifier:          VKxsO4PUOrICIfnk6I610SE5mwhrh6LGfaRd62pisRY=
Subject key identifier:   09:3E:B3:37:1D:47:57:D3:82:27:8D:E5:22:AA:1E:41:E8:3A:C1:A0
Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
Certificate issuer:       /CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Certificate serial:       0193549A52338D1310F875DFEFEAC2C8232A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
Manifest number:          0A06
Signing time:             Fri 22 Nov 2024 16:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:19 +0000
Files and hashes:         1: LHwVBMhnYLHEIfwUxGzrnITDBKA.roa (hash: tuAK4xYeux9QDq3jL8bqOpJOaYjS8maPLyxST42qgP0=)
                          2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: rrwWRFMO96leHWOVOOII8uMt1o3ggBBMNHisLfTojYI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:52:33:8d:13:10:f8:75:df:ef:ea:c2:c8:23:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d
        Validity
            Not Before: Nov 22 16:00:19 2024 GMT
            Not After : Nov 23 16:00:19 2024 GMT
        Subject: CN=093eb3371d4757d382278de522aa1e41e83ac1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:27:59:a6:90:d2:63:53:98:30:1b:ae:92:
                    31:ce:ac:04:69:e2:f7:03:4e:7e:6f:93:dc:d5:6b:
                    e4:ca:f5:65:81:07:4a:72:88:22:36:83:3b:29:1e:
                    f2:86:16:00:0d:c8:8f:9a:0f:7f:a0:bc:f6:2f:7e:
                    a5:03:99:43:ad:82:20:d6:4f:c5:ac:79:fc:a9:13:
                    62:56:15:88:5c:b3:37:8e:46:24:4f:89:60:97:5f:
                    71:ff:ef:b4:06:b6:ae:83:cf:55:22:c9:42:14:9e:
                    f4:28:6d:d3:35:50:f6:f7:02:55:12:60:36:af:c8:
                    66:be:8a:c6:8d:7d:18:07:d3:fd:54:68:75:30:97:
                    d5:fd:47:86:37:d7:17:33:6d:0e:98:29:d9:c0:ab:
                    c8:5e:80:15:76:2d:2f:d1:e0:8c:18:c9:6b:90:6a:
                    dc:bc:64:dc:8e:65:ba:90:0f:ae:15:c8:4c:a6:32:
                    0b:14:72:21:4c:d8:e1:2e:f0:4f:e0:3d:a5:79:2b:
                    9c:79:0d:7e:e2:17:f6:c0:a0:df:da:39:16:7b:94:
                    60:53:31:25:7b:52:14:21:6e:4d:de:43:28:4f:7d:
                    13:8a:40:86:ce:e7:97:e8:ee:08:3c:88:ce:7c:cc:
                    56:ae:a9:4d:ce:c0:cb:94:09:34:4f:37:b1:f8:6c:
                    84:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3E:B3:37:1D:47:57:D3:82:27:8D:E5:22:AA:1E:41:E8:3A:C1:A0
            X509v3 Authority Key Identifier:
                keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:65:30:67:59:41:38:d1:6f:98:b9:67:3a:ee:a6:35:a8:ac:
         67:75:b7:f5:0d:c5:eb:70:3a:af:56:04:d3:c4:40:d7:46:a1:
         50:c2:fa:95:01:02:83:9b:ed:63:96:d2:cc:91:0d:e4:53:b6:
         94:da:f7:b6:00:eb:39:61:8d:e3:4d:1b:db:da:6e:c8:d4:d2:
         37:45:62:e9:d6:00:58:44:b5:80:58:3c:e0:1f:61:59:1c:1f:
         64:e1:50:1d:ba:37:d5:3f:f4:87:01:61:98:65:c2:1e:4e:73:
         87:79:30:fa:dd:e7:9f:b2:20:94:85:11:59:d0:a2:aa:ae:48:
         25:48:3d:a2:ca:10:10:8b:41:b7:16:8e:91:52:37:4c:5f:46:
         b6:d7:cd:fe:60:ad:ce:6f:4b:a1:71:e8:10:dc:11:b7:08:35:
         59:dd:19:d4:17:40:74:e4:f4:e3:b5:fd:79:59:5b:95:23:0a:
         34:43:ee:4f:41:c3:47:ee:03:4c:17:3f:ee:66:a2:e0:65:42:
         17:03:6f:1f:70:cc:a5:aa:29:8f:32:bc:a9:90:21:8d:80:ec:
         db:6f:ac:cd:30:dc:59:4b:a2:f7:77:56:3c:f5:f2:13:da:9b:
         53:87:3d:f8:90:da:80:98:1f:b4:ff:3a:30:a8:10:80:86:a5:
         fe:3b:2c:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmlIzjRMQ+HXf7+rCyCMqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMGVmMDQwZmJhNDViY2U3YjA3MTYzNDk1Y2RmNWU4NTA3
NzkxOWQwHhcNMjQxMTIyMTYwMDE5WhcNMjQxMTIzMTYwMDE5WjAzMTEwLwYDVQQD
EygwOTNlYjMzNzFkNDc1N2QzODIyNzhkZTUyMmFhMWU0MWU4M2FjMWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3EnWaaQ0mNTmDAbrpIxzqwEaeL3
A05+b5Pc1WvkyvVlgQdKcogiNoM7KR7yhhYADciPmg9/oLz2L36lA5lDrYIg1k/F
rHn8qRNiVhWIXLM3jkYkT4lgl19x/++0Braug89VIslCFJ70KG3TNVD29wJVEmA2
r8hmvorGjX0YB9P9VGh1MJfV/UeGN9cXM20OmCnZwKvIXoAVdi0v0eCMGMlrkGrc
vGTcjmW6kA+uFchMpjILFHIhTNjhLvBP4D2leSuceQ1+4hf2wKDf2jkWe5RgUzEl
e1IUIW5N3kMoT30TikCGzueX6O4IPIjOfMxWrqlNzsDLlAk0Tzex+GyECwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAk+szcdR1fTgieN5SKqHkHoOsGgMB8GA1UdIwQY
MBaAFP0O8ED7pFvOewcWNJXN9ehQd5GdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kNzcxNjgtMTMzZi00NTUzLWIxOWQt
NTZjOTRmMzI2ZGMyLzEvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9kNzcxNjgtMTMzZi00NTUzLWIxOWQtNTZjOTRmMzI2ZGMy
LzEvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmUwZ1lB
ONFvmLlnOu6mNaisZ3W39Q3F63A6r1YE08RA10ahUML6lQECg5vtY5bSzJEN5FO2
lNr3tgDrOWGN400b29puyNTSN0Vi6dYAWES1gFg84B9hWRwfZOFQHbo31T/0hwFh
mGXCHk5zh3kw+t3nn7IglIURWdCiqq5IJUg9osoQEItBtxaOkVI3TF9GttfN/mCt
zm9LoXHoENwRtwg1Wd0Z1BdAdOT047X9eVlblSMKNEPuT0HDR+4DTBc/7mai4GVC
FwNvH3DMpaopjzK8qZAhjYDs22+szTDcWUui93dWPPXyE9qbU4c9+JDagJgftP86
MKgQgIal/jss/A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:08:33 2024 by rpki-client on console-ams.rpki-client.org