Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File:                     Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier:          zolsgl9WI2eOeDbdX1Ei2WEZaZWQ18YZyByJUs9AurM=
Subject key identifier:   F3:B1:F8:9E:D1:66:E6:0F:2A:C1:B4:14:A3:30:1F:7F:6A:07:0C:BE
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer:       /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial:       0193549BA80EFD6AFAC57CC149148E25117B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number:          03A1
Signing time:             Fri 22 Nov 2024 16:01:47 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:47 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:47 +0000
Files and hashes:         1: AWcygWCHjavnkOIee9g1R2yyO2g.roa (hash: 7Z4PwE7FlAmyvg+x5s2TuIUtCXjTFoHlvK797pIW/IY=)
                          2: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: F9DnepLlwBR0D4oOwbs4MqU5njVkn+8qzn0ddwUFwQE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:a8:0e:fd:6a:fa:c5:7c:c1:49:14:8e:25:11:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
        Validity
            Not Before: Nov 22 16:01:47 2024 GMT
            Not After : Nov 23 16:01:47 2024 GMT
        Subject: CN=f3b1f89ed166e60f2ac1b414a3301f7f6a070cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:84:1e:cb:31:dd:21:de:eb:d8:97:6b:8b:
                    18:ce:af:a2:76:b4:2d:0f:e8:00:9d:e9:3f:b3:b1:
                    a8:ed:72:94:cc:12:c5:0c:9a:b8:f7:f0:0f:ca:af:
                    22:ba:c2:12:6b:ce:07:99:d2:a4:2d:74:69:6b:c1:
                    d7:0d:b1:6f:fe:ca:7a:7a:a9:03:c2:94:ba:3d:8e:
                    cc:f5:2d:ea:12:97:69:be:60:c4:ee:71:43:8a:e2:
                    44:5a:91:d5:d0:53:78:65:6c:43:7f:f2:b1:53:bb:
                    01:6b:27:51:9c:3c:ed:58:79:1f:dc:bd:6b:fd:93:
                    ea:cf:7f:49:43:2f:67:fd:d6:a8:51:88:45:2b:a2:
                    0e:2c:e2:8a:c4:12:61:9e:b0:4b:d6:d5:f8:93:39:
                    80:e5:dc:b8:f1:75:33:d1:d0:8b:b6:c4:40:bc:1d:
                    6a:a7:38:55:c1:01:6a:24:94:a2:33:3e:52:f7:aa:
                    e0:03:86:82:21:61:20:a0:73:ca:ba:55:8c:66:7a:
                    07:d7:d2:42:dd:d9:f6:25:7b:2f:8e:8b:54:a0:9b:
                    cb:ed:c4:07:d5:b5:54:d4:50:79:55:a0:3f:cb:cb:
                    e8:4e:13:9b:6d:73:83:71:71:20:89:d0:c5:0e:ee:
                    46:1e:8f:fe:f1:16:ae:90:d2:a2:6e:3f:cb:ef:59:
                    3b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B1:F8:9E:D1:66:E6:0F:2A:C1:B4:14:A3:30:1F:7F:6A:07:0C:BE
            X509v3 Authority Key Identifier:
                keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d6:ed:e6:b8:03:76:6c:13:0f:ff:c0:3a:de:07:e3:bd:e1:
         5b:8e:cb:51:5f:a6:a8:78:af:dd:66:f6:0e:cd:2e:00:44:ad:
         02:00:b0:69:81:48:c9:b1:f4:6c:8d:13:2a:90:89:b4:07:64:
         9c:41:f0:e2:16:af:b7:a2:cb:4a:7f:dd:06:f4:be:dc:8e:af:
         69:18:18:8f:f0:fb:79:17:cd:b5:66:67:2d:fa:a3:28:29:5e:
         72:94:6a:f3:ec:c6:a5:c2:4b:2d:bc:bc:49:ef:a7:1e:23:9e:
         2b:bf:53:70:1a:7a:e9:d3:c0:6a:0a:14:84:87:9d:c5:d0:39:
         68:97:93:6f:5f:2d:b3:0d:1a:f9:80:a8:4b:8b:91:7f:89:53:
         08:af:ec:15:90:f6:ee:7d:d3:df:28:de:6b:42:e2:10:67:7e:
         13:f8:10:ae:b5:37:8b:f9:6f:38:39:b6:32:50:cb:d0:26:a0:
         1b:95:df:c6:0f:8f:87:8f:08:5b:b3:5e:96:80:c2:ab:12:6a:
         c0:39:65:4f:96:bc:fb:be:8c:a8:59:bf:f4:0a:5e:dd:c4:bb:
         92:d2:72:9b:5a:ba:cb:35:f4:a7:d1:0d:1d:57:12:0c:b9:53:
         1e:33:c1:45:a5:11:e4:e0:9d:d6:18:53:ba:07:3c:d6:f4:2d:
         a3:18:29:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUm6gO/Wr6xXzBSRSOJRF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZGU1NzhkYWM3OTJkOTVlMjE3ZDk4NzFlMDRmNjY5NzNi
YjdlYjAwHhcNMjQxMTIyMTYwMTQ3WhcNMjQxMTIzMTYwMTQ3WjAzMTEwLwYDVQQD
EyhmM2IxZjg5ZWQxNjZlNjBmMmFjMWI0MTRhMzMwMWY3ZjZhMDcwY2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIqEHssx3SHe69iXa4sYzq+idrQt
D+gAnek/s7Go7XKUzBLFDJq49/APyq8iusISa84HmdKkLXRpa8HXDbFv/sp6eqkD
wpS6PY7M9S3qEpdpvmDE7nFDiuJEWpHV0FN4ZWxDf/KxU7sBaydRnDztWHkf3L1r
/ZPqz39JQy9n/daoUYhFK6IOLOKKxBJhnrBL1tX4kzmA5dy48XUz0dCLtsRAvB1q
pzhVwQFqJJSiMz5S96rgA4aCIWEgoHPKulWMZnoH19JC3dn2JXsvjotUoJvL7cQH
1bVU1FB5VaA/y8voThObbXODcXEgidDFDu5GHo/+8RaukNKibj/L71k7fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOx+J7RZuYPKsG0FKMwH39qBwy+MB8GA1UdIwQY
MBaAFEneV42seS2V4hfZhx4E9mlzu36wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lN2M3ZWItZjdjNi00M2I3LWE2ZmYt
NjNlMDIwZmVlY2Y5LzEvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lN2M3ZWItZjdjNi00M2I3LWE2ZmYtNjNlMDIwZmVlY2Y5
LzEvU2Q1WGpheDVMWlhpRjltSEhnVDJhWE83ZnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9bt5rgD
dmwTD//AOt4H473hW47LUV+mqHiv3Wb2Ds0uAEStAgCwaYFIybH0bI0TKpCJtAdk
nEHw4havt6LLSn/dBvS+3I6vaRgYj/D7eRfNtWZnLfqjKClecpRq8+zGpcJLLby8
Se+nHiOeK79TcBp66dPAagoUhIedxdA5aJeTb18tsw0a+YCoS4uRf4lTCK/sFZD2
7n3T3yjea0LiEGd+E/gQrrU3i/lvODm2MlDL0CagG5Xfxg+Ph48IW7NeloDCqxJq
wDllT5a8+76MqFm/9Ape3cS7ktJym1q6yzX0p9ENHVcSDLlTHjPBRaUR5OCd1hhT
ugc81vQtoxgphQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:10:26 2024 by rpki-client on console-fra.rpki-client.org