Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
File:                     wDJJW4nc6BsMf4ht38NgS94G2KY.mft (raw, json)
Hash identifier:          5Q7bAQC0ENCJMUwbayf+zjpCKEUifUOCROxXGLSoVjI=
Subject key identifier:   30:73:DC:09:37:1D:67:4E:56:20:B5:4A:E9:7E:35:B1:30:4E:25:18
Authority key identifier: C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
Certificate issuer:       /CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Certificate serial:       0193568A6FA23755E3E35E0A532C41BE9E34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:02:13 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:13 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:13 +0000
Files and hashes:         1: t-acL3hicY-F1wnVGVJq_j_EcJo.roa (hash: ksY1vekQCl/vrWqBmKAkVbt9TtTOI74JbabmK9UdGZo=)
                          2: wDJJW4nc6BsMf4ht38NgS94G2KY.crl (hash: VuPMugR4PX7JzYOTr0YKAMmx/AHclj8mS0IeDEajAB0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:6f:a2:37:55:e3:e3:5e:0a:53:2c:41:be:9e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
        Validity
            Not Before: Nov 23 01:02:13 2024 GMT
            Not After : Nov 24 01:02:13 2024 GMT
        Subject: CN=3073dc09371d674e5620b54ae97e35b1304e2518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:63:2a:c7:2e:c2:70:e9:42:9e:a8:b1:67:
                    e4:4d:f5:20:3e:e4:40:c6:9b:a3:eb:c6:d3:0c:cf:
                    58:0c:71:21:b7:f9:58:1d:76:7c:8b:08:fe:7c:58:
                    0f:75:5d:80:f1:e7:56:a9:f6:fa:ba:32:22:ac:0b:
                    08:91:a1:51:c6:9b:63:c3:c2:b4:82:0c:cb:52:54:
                    31:d5:0c:d8:ab:b0:be:27:92:ce:0f:b6:a5:ce:46:
                    13:56:26:e0:fc:df:4f:32:cd:a1:7c:ef:b8:43:a6:
                    22:f9:af:c0:cf:f1:45:fe:9d:81:07:55:ef:c3:e7:
                    e8:93:81:4e:a2:78:a7:2b:fa:8c:65:2a:c3:65:60:
                    3a:e5:6a:ea:60:c6:dc:3a:bc:ad:29:42:52:8e:76:
                    76:20:c9:3e:f5:16:80:bf:8c:eb:d9:d9:85:4f:76:
                    a9:e7:4d:5d:7c:a0:c2:2c:62:e5:77:d1:0d:98:a6:
                    d7:7c:e8:41:a5:d4:53:89:ce:0c:30:9c:56:d8:a8:
                    3e:d5:00:8b:d9:86:c5:ef:44:b8:f5:25:a5:1f:84:
                    1c:7f:7b:78:ab:7f:86:74:21:e3:75:51:b1:3e:be:
                    5b:f9:3a:62:4d:e9:51:ef:f7:40:08:bf:29:85:3e:
                    df:15:81:a5:4a:e6:5e:68:7b:02:d3:e8:61:56:26:
                    7d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:73:DC:09:37:1D:67:4E:56:20:B5:4A:E9:7E:35:B1:30:4E:25:18
            X509v3 Authority Key Identifier:
                keyid:C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:70:cc:0d:e9:fc:9b:a5:6e:aa:a5:98:8f:c1:32:15:e2:af:
         c2:f4:85:97:81:5d:07:83:77:ae:00:be:75:83:d7:55:1c:e4:
         22:4c:a7:39:75:78:8d:31:ba:35:7c:09:2c:31:8c:8f:e7:d4:
         95:ae:cc:ba:d3:17:d1:a7:58:c2:46:5c:8a:f0:20:36:db:b9:
         50:54:f8:02:3f:a2:93:77:03:5e:43:0d:16:b1:b2:83:d7:bb:
         f0:b3:41:3e:4b:8b:15:37:ce:16:64:bd:e0:32:7f:7b:18:22:
         84:71:2d:ff:0b:8a:64:fe:ba:79:e5:dc:98:8f:82:91:28:09:
         ff:d8:b6:68:38:49:a5:9f:b2:5a:0f:c9:23:f3:7d:ef:a6:ef:
         36:7d:54:58:75:68:95:83:42:7d:4b:9e:d2:cf:c3:90:8f:d0:
         b2:9f:3e:80:cf:a8:b5:fb:60:b2:ec:78:44:64:73:ac:f0:50:
         6b:d7:51:b5:14:14:30:f9:95:3e:eb:01:e2:08:f8:81:2b:3c:
         15:f0:8e:dd:d7:3c:4d:d6:92:72:6f:81:4d:88:13:4a:5f:50:
         a6:ef:99:d6:54:e0:05:21:46:fe:2c:86:01:e7:d7:67:19:d0:
         a1:03:82:e3:24:6c:ff:67:62:7a:45:87:ef:bd:41:5e:0f:1a:
         34:bb:20:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWim+iN1Xj414KUyxBvp40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMzI0OTViODlkY2U4MWIwYzdmODg2ZGRmYzM2MDRiZGUw
NmQ4YTYwHhcNMjQxMTIzMDEwMjEzWhcNMjQxMTI0MDEwMjEzWjAzMTEwLwYDVQQD
EygzMDczZGMwOTM3MWQ2NzRlNTYyMGI1NGFlOTdlMzViMTMwNGUyNTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/tjKscuwnDpQp6osWfkTfUgPuRA
xpuj68bTDM9YDHEht/lYHXZ8iwj+fFgPdV2A8edWqfb6ujIirAsIkaFRxptjw8K0
ggzLUlQx1QzYq7C+J5LOD7alzkYTVibg/N9PMs2hfO+4Q6Yi+a/Az/FF/p2BB1Xv
w+fok4FOoninK/qMZSrDZWA65WrqYMbcOrytKUJSjnZ2IMk+9RaAv4zr2dmFT3ap
501dfKDCLGLld9ENmKbXfOhBpdRTic4MMJxW2Kg+1QCL2YbF70S49SWlH4Qcf3t4
q3+GdCHjdVGxPr5b+TpiTelR7/dACL8phT7fFYGlSuZeaHsC0+hhViZ9HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBz3Ak3HWdOViC1Sul+NbEwTiUYMB8GA1UdIwQY
MBaAFMAySVuJ3OgbDH+Ibd/DYEveBtimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMmRkMmMtNGQwYy00MjBhLTk4YTUt
MDJlNjQyMmM0MTgxLzEvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMmRkMmMtNGQwYy00MjBhLTk4YTUtMDJlNjQyMmM0MTgx
LzEvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnXDMDen8
m6VuqqWYj8EyFeKvwvSFl4FdB4N3rgC+dYPXVRzkIkynOXV4jTG6NXwJLDGMj+fU
la7MutMX0adYwkZcivAgNtu5UFT4Aj+ik3cDXkMNFrGyg9e78LNBPkuLFTfOFmS9
4DJ/exgihHEt/wuKZP66eeXcmI+CkSgJ/9i2aDhJpZ+yWg/JI/N976bvNn1UWHVo
lYNCfUue0s/DkI/Qsp8+gM+otftgsux4RGRzrPBQa9dRtRQUMPmVPusB4gj4gSs8
FfCO3dc8TdaScm+BTYgTSl9Qpu+Z1lTgBSFG/iyGAefXZxnQoQOC4yRs/2diekWH
771BXg8aNLsgZg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:41 2024 by rpki-client on console-ams.rpki-client.org