Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
File:                     xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json)
Hash identifier:          M7gNROE1ZlemLxNUQhI3CX3QzBB/C0JFKpTQNhxEAIA=
Subject key identifier:   C6:80:11:73:44:0D:E2:79:4F:CD:2F:3A:F2:C1:E6:23:2F:C8:5C:7F
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Certificate issuer:       /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial:       0193633201EBD6299E64C7D9D2904BE1E7A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
Manifest number:          0F24
Signing time:             Mon 25 Nov 2024 12:00:41 +0000
Manifest this update:     Mon 25 Nov 2024 12:00:41 +0000
Manifest next update:     Tue 26 Nov 2024 12:00:41 +0000
Files and hashes:         1: 0fv0bHcfEhi1Ku_oCSItEv8MwoU.roa (hash: MraVkJuJmNKOOJ/6G87QVrDqtob8GmTNfqTv9XoGp4A=)
                          2: BU4CVzd3h-UD5DEZ-Dfc28dmJy8.roa (hash: YCwN5KbEXs5tkF3YBI96WF+F5QH2Mo/FRaevTrXqojY=)
                          3: ZJfjMG4UabC8HGk6EvMsBmF0x3g.roa (hash: Sl9G+OSFwiAn6KQhzAing32LK/fyM5eTscabR/HlLV4=)
                          4: fx7UusiymBggg77O7Uq1nA0WLNc.roa (hash: pjyvoI68KeFdgwEBJEcXqVriZpwoCMEzNm8jgLWhQys=)
                          5: v2cnfm66ydS72VnkAJID_TlfDCU.roa (hash: bioWDMMTT/QHwvW3EBbibHXhSB8yVDDVl6trkhWn+Gg=)
                          6: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: vWyCkdB/nsm5dqoa3nrVcq4/dse9rO33touTfn3UjSY=)
                          7: ysDtIgTzQ3dDVUm6LZ5lmfk4mdg.roa (hash: h/wZLTZLFcPgnEQENsJ8+QgoDi7LZbsqWI+Mr56cBPA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:32:01:eb:d6:29:9e:64:c7:d9:d2:90:4b:e1:e7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
        Validity
            Not Before: Nov 25 12:00:41 2024 GMT
            Not After : Nov 26 12:00:41 2024 GMT
        Subject: CN=c6801173440de2794fcd2f3af2c1e6232fc85c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6a:f8:f4:a6:fc:a1:f7:24:59:60:f6:ec:94:
                    13:9b:09:1e:59:49:83:f1:23:6a:11:79:2b:c3:1f:
                    3a:84:3b:f0:a2:6d:cf:c0:96:79:42:e0:79:c4:9c:
                    4d:14:59:a3:a8:54:1e:0b:d9:5c:61:36:8a:2a:7f:
                    a3:56:c6:30:50:e7:fa:b8:a5:7f:34:2c:a6:d1:ab:
                    cd:c0:12:17:ea:f6:64:ce:97:44:f5:0d:8a:86:11:
                    80:01:ed:30:b3:58:e8:72:e4:e6:c7:3e:d5:d8:35:
                    39:18:5b:ae:a6:a4:b2:ff:1f:d9:35:37:9b:05:01:
                    ae:a1:46:c3:d2:45:9e:73:cd:99:ba:01:65:83:98:
                    35:e7:0c:c7:53:d6:6e:ad:24:77:3d:7f:7f:25:e9:
                    8e:91:52:7a:2d:36:74:35:b9:21:98:35:06:4a:8c:
                    4d:93:be:3f:9d:a8:a2:0f:73:6a:3c:8c:36:22:fd:
                    31:84:2c:d5:2d:2f:73:ec:5b:19:79:e7:2d:60:dc:
                    78:43:0f:42:00:63:51:85:37:f5:58:7d:fc:2f:80:
                    84:60:eb:ec:ef:da:92:26:db:f3:19:1b:ca:b2:ac:
                    e5:2c:2f:6e:a3:35:fa:94:d6:f8:fd:00:7a:78:7d:
                    82:ac:3c:41:e4:9b:89:16:8c:0a:93:c6:12:81:7f:
                    a9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:80:11:73:44:0D:E2:79:4F:CD:2F:3A:F2:C1:E6:23:2F:C8:5C:7F
            X509v3 Authority Key Identifier:
                keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:09:21:73:cf:3d:1d:9a:85:cf:bc:76:0a:eb:b7:55:2b:e0:
         88:c1:29:89:a4:75:93:d4:53:8f:ed:4e:0d:02:80:c8:a2:b6:
         0f:71:82:4e:0f:3e:fb:89:4b:43:c5:5a:79:7c:9f:c9:c1:2a:
         e6:c0:59:a7:0b:9c:15:23:eb:03:79:c1:2c:cb:3c:fa:84:37:
         65:d4:3f:7b:8e:90:24:14:4a:05:6a:ca:36:80:26:a6:d0:4d:
         aa:6d:d5:0d:56:4d:11:a7:ea:1f:d4:59:c5:a8:57:c5:43:c0:
         3d:98:9b:3e:3d:ba:91:90:a3:00:21:c1:f4:8c:59:e0:76:85:
         c9:e7:5d:ee:f4:b8:e5:ee:a8:37:47:9e:13:c5:95:21:03:02:
         d8:5f:b9:4d:5a:c0:27:38:67:6d:60:10:dd:63:70:a6:2b:d0:
         c1:0a:d6:9b:56:71:e7:d3:3c:63:4b:70:a1:6a:86:ff:14:10:
         e8:90:ab:c6:ab:20:7d:69:ad:68:70:0e:99:7f:e2:94:f6:55:
         a9:73:4a:d2:40:cd:ac:18:53:0d:7e:b4:82:15:57:bb:91:de:
         43:af:78:ff:ed:36:a5:84:7c:eb:1d:dc:c2:ba:b8:b4:e6:1b:
         5b:f0:25:76:21:5f:c3:c2:14:5e:e0:ef:f2:77:42:72:6c:b2:
         e9:a2:72:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNjMgHr1imeZMfZ0pBL4eemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl
NzczNWIwHhcNMjQxMTI1MTIwMDQxWhcNMjQxMTI2MTIwMDQxWjAzMTEwLwYDVQQD
EyhjNjgwMTE3MzQ0MGRlMjc5NGZjZDJmM2FmMmMxZTYyMzJmYzg1YzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2r49Kb8ofckWWD27JQTmwkeWUmD
8SNqEXkrwx86hDvwom3PwJZ5QuB5xJxNFFmjqFQeC9lcYTaKKn+jVsYwUOf6uKV/
NCym0avNwBIX6vZkzpdE9Q2KhhGAAe0ws1jocuTmxz7V2DU5GFuupqSy/x/ZNTeb
BQGuoUbD0kWec82ZugFlg5g15wzHU9ZurSR3PX9/JemOkVJ6LTZ0NbkhmDUGSoxN
k74/naiiD3NqPIw2Iv0xhCzVLS9z7FsZeectYNx4Qw9CAGNRhTf1WH38L4CEYOvs
79qSJtvzGRvKsqzlLC9uozX6lNb4/QB6eH2CrDxB5JuJFowKk8YSgX+pUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaAEXNEDeJ5T80vOvLB5iMvyFx/MB8GA1UdIwQY
MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt
ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj
LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQkhc889
HZqFz7x2Cuu3VSvgiMEpiaR1k9RTj+1ODQKAyKK2D3GCTg8++4lLQ8VaeXyfycEq
5sBZpwucFSPrA3nBLMs8+oQ3ZdQ/e46QJBRKBWrKNoAmptBNqm3VDVZNEafqH9RZ
xahXxUPAPZibPj26kZCjACHB9IxZ4HaFyedd7vS45e6oN0eeE8WVIQMC2F+5TVrA
JzhnbWAQ3WNwpivQwQrWm1Zx59M8Y0twoWqG/xQQ6JCrxqsgfWmtaHAOmX/ilPZV
qXNK0kDNrBhTDX60ghVXu5HeQ694/+02pYR86x3cwrq4tOYbW/AldiFfw8IUXuDv
8ndCcmyy6aJyCg==
-----END CERTIFICATE-----