Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
File:                     l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json)
Hash identifier:          JzRSN27g+cfVwm9WXDtJB7xaqPkQ5Iz6KtTWbPatTKk=
Subject key identifier:   51:B6:AA:A8:9B:98:4C:73:C6:3F:66:8D:DB:27:BD:88:16:32:F3:25
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Certificate issuer:       /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial:       0193512BBE54EF0A52FB4A120EA7CDE82E06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
Manifest number:          043A
Signing time:             Fri 22 Nov 2024 00:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:41 +0000
Files and hashes:         1: 3pe-RkybjiCWFEgtKFWjs3805Ec.roa (hash: 36+Wn703wB/LhYbReYuyKifghJum+sHdoL945HKaNTU=)
                          2: 5Q6TazizNZP069w3OqZlPT3VnMA.roa (hash: MqFrFMICq1Ia2Wa95BqQ/xk/pVuHi5PcFMFdoWXsQzA=)
                          3: 6Q9S9rTHfGqWFsFO1J6vEM9xVPI.roa (hash: PfBx4Wj7wQY8pT8odg3I8YMfCibQlD51v1uDRIGu/Lk=)
                          4: 7AarGFpmzxMM3BMMiUCSdKVzuR4.roa (hash: y5QHEYvsYCjGVCmeL62vmveFNb6leAGhQiP3cqLu2OA=)
                          5: EXx1RCTyJO3IhBDNHaCcSPLI_rw.roa (hash: 9OJE//NWDya9BBk9gO0Ef/aQ+teWcDXOJU7/4veW4+E=)
                          6: HFG8crhZqa0VsgcF-yIQkWC8mZA.roa (hash: WPdm44zOYPzXFKc15xniunD9XsLapQclqpWLTCd20mQ=)
                          7: KG99ZaelzWjeIqNtxFRm12q_bg0.roa (hash: 5Oj46QZw/4vX6GsbrcfX86pMcPh1Y1M6TiSVrexkkMs=)
                          8: QeHJwnhAkpXHO4v9mvtikuSAPms.roa (hash: xoKdBooEsFUwYNd8D2PHHdDRRZTiYLbXiYTdS54pbaY=)
                          9: _cktXOvLE7Sfsdzvui_X-kq4TcI.roa (hash: Gd9dvTt64iZyvi9flKzLoaN3bwqkmhChRbv4aC0fCRo=)
                          10: a7cozjz_VlptmO3crTYSIafZv3Q.roa (hash: si4nw2kic4kUcPbTs/4Iy8E0i248prtukmqshQeugkk=)
                          11: e1doSkcZ1koZ_0dzrf54tA4ZKOY.roa (hash: +o5M5FVLJXrlesYy+fuh9lLXMMVDfaTBsymROBFP1TU=)
                          12: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: 1Lh1YryWmsgNkaT2UuNMjOdhYS2Sigw71V6cglg7O5Q=)
                          13: vSqStmLGNAJTogWbuua3TsunNXM.roa (hash: qu+AT1SuROcnw3G9X2TZCCnrcOyGYofqMOomT56rwQo=)
                          14: vdMtPAwefwbohHgFe8WWEh1gfmA.roa (hash: 291Fp7ijptaXPQNPc5sOySZK/eHhhJtK41Z+JrxWoKk=)
                          15: zo157da-AB6HI374tBFkz6iDmOk.roa (hash: a8NBWQzChpeRoliTClZgXPSTJGxIjnt6GocR1e8Aj/4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:be:54:ef:0a:52:fb:4a:12:0e:a7:cd:e8:2e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
        Validity
            Not Before: Nov 22 00:00:41 2024 GMT
            Not After : Nov 23 00:00:41 2024 GMT
        Subject: CN=51b6aaa89b984c73c63f668ddb27bd881632f325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:b4:df:36:93:08:21:bc:07:96:32:e3:cb:
                    28:fa:10:5d:07:c6:0d:d8:ea:a8:50:8b:d5:72:c8:
                    28:ff:68:62:8f:96:94:04:ba:e9:14:61:41:3f:46:
                    17:5f:e8:85:0f:18:b4:e1:24:2a:31:59:8b:12:b3:
                    8a:86:bc:26:55:e9:8d:fa:78:06:d4:e2:cb:17:a7:
                    8b:33:28:93:fe:02:4d:c7:ec:91:1b:28:78:92:d1:
                    83:f4:3f:0f:08:c7:b3:41:5c:20:d3:52:fa:85:10:
                    5d:f4:1b:db:ba:6e:06:f3:d4:7b:53:30:6a:40:de:
                    c5:3a:7b:c3:92:7e:bf:49:c0:6b:56:5a:31:90:49:
                    cd:4d:ed:20:37:dd:c0:56:c8:2e:62:e7:fd:42:33:
                    f7:b1:ec:6c:b1:1f:e6:a8:79:fb:19:e2:c1:e7:90:
                    c5:6d:39:9c:d1:a9:65:bf:96:c4:79:00:d7:f3:3f:
                    48:cf:0c:b6:ff:02:62:ed:b9:ea:3f:4b:21:e4:df:
                    92:9b:bd:07:4f:e2:0d:c8:3b:fb:55:2c:67:9e:77:
                    05:04:1f:a5:62:bd:b6:fd:5d:d3:ca:86:59:55:6e:
                    f7:35:41:c3:ab:96:ef:86:a2:cb:3c:7c:3e:1c:fc:
                    b7:06:59:cb:0a:b0:89:a4:d6:08:e4:8f:d1:d8:ff:
                    7a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B6:AA:A8:9B:98:4C:73:C6:3F:66:8D:DB:27:BD:88:16:32:F3:25
            X509v3 Authority Key Identifier:
                keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:fc:ba:63:3d:50:34:6b:80:1b:b1:fd:8f:5e:3c:f5:51:7a:
         f2:e5:08:18:64:d8:10:a1:8b:f0:48:30:e1:5b:e5:da:75:23:
         91:9e:84:c4:1c:27:59:b3:c8:76:63:b8:69:03:7e:ce:e6:a4:
         b3:33:d4:05:82:6b:ef:44:68:b7:0b:7c:f2:a7:eb:93:16:a9:
         1a:6f:77:d9:f7:0f:05:7d:2d:ae:90:f7:ca:32:5d:25:b8:38:
         00:23:c2:77:65:0e:33:71:71:90:b6:9b:73:62:6d:b4:27:c9:
         0a:4d:72:3f:b2:f5:a1:1b:3d:6b:6a:66:9e:41:1e:36:4f:8c:
         53:dc:1d:85:da:f2:a4:6f:22:b7:5d:21:6f:bd:82:1d:96:58:
         9d:21:09:f7:4e:4d:51:00:2f:6b:0f:94:00:fb:ec:15:c1:50:
         a6:b7:a3:cd:f8:83:4c:45:b9:83:a9:4a:7a:af:59:ce:07:a7:
         58:e9:87:42:5e:0e:1b:39:58:98:b8:76:ee:6a:94:c5:5b:99:
         08:05:b7:f2:1b:d2:f1:4b:29:44:0e:b2:2d:3f:e4:13:da:f3:
         34:22:5a:36:a3:3d:2d:9e:e9:dd:90:0c:24:fe:9b:e8:8c:a1:
         97:c5:72:bb:d5:73:a5:79:01:56:21:31:ce:4c:b8:03:8d:38:
         d7:d9:0e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:51:30 2024 by rpki-client on console-ams.rpki-client.org