Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
File:                     EdGf2unFPY0oseQcqROcM1VrpiU.mft (raw, json)
Hash identifier:          epWHY1oh6BonFA1DbDkELeQoit51G+XgRKPlyR6pxh0=
Subject key identifier:   6E:45:F4:2E:46:B1:3E:1A:C8:E1:CB:03:C3:2D:21:22:AB:D2:D5:D9
Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
Certificate issuer:       /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Certificate serial:       019369D98765CA7D88F7746E91252DD1AFE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
Manifest number:          07DA
Signing time:             Tue 26 Nov 2024 19:01:23 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:23 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:23 +0000
Files and hashes:         1: 1-sKsD8HRA-2vHfC8UsINmoel4MM.roa (hash: GVXbjPHW/liXQweTGGOqxEOnXT3H/nIPX4EWePSQkB4=)
                          2: EdGf2unFPY0oseQcqROcM1VrpiU.crl (hash: nnNEq4K4+CxdX0eIskM8mj4u+ubktbsDf8dbY4fq0as=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:87:65:ca:7d:88:f7:74:6e:91:25:2d:d1:af:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
        Validity
            Not Before: Nov 26 19:01:23 2024 GMT
            Not After : Nov 27 19:01:23 2024 GMT
        Subject: CN=6e45f42e46b13e1ac8e1cb03c32d2122abd2d5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:25:8a:8b:83:f3:2c:55:fc:c8:dc:f4:49:
                    76:67:bf:a8:65:74:ea:a9:4c:1f:78:61:c6:80:ab:
                    2f:54:f2:8f:f9:3b:d3:de:e3:0c:47:87:22:f9:96:
                    ca:05:ec:ba:cc:1e:6e:65:f8:76:1a:59:dd:7c:66:
                    e6:10:3b:95:3b:3c:4f:33:61:f8:6d:ad:ca:25:01:
                    13:bb:0c:52:7b:cc:f1:b5:93:b2:62:0c:00:74:7f:
                    f2:7f:eb:5d:62:41:66:82:8f:ca:c2:fa:c1:a9:96:
                    99:b1:c7:ad:9c:84:1b:94:09:ae:48:58:89:44:15:
                    2c:5b:0f:2b:c2:ac:53:f7:f8:b1:1f:c4:61:bc:71:
                    a1:32:d7:a4:0e:d4:aa:4c:c0:06:ab:e3:68:99:4b:
                    80:51:ac:39:15:0e:97:1e:0f:f8:78:fb:59:a7:bd:
                    28:fd:4a:8d:da:d5:21:72:6e:12:6e:a0:93:5c:71:
                    df:5e:b7:89:6e:ca:00:28:44:f8:8d:4f:3f:b8:09:
                    b0:3e:9f:5a:84:16:ce:dc:b2:11:81:8c:26:14:26:
                    8c:61:ba:da:dc:46:8b:c3:e5:85:06:72:10:24:f4:
                    ba:28:2c:bf:47:b9:cf:59:4d:2a:31:f3:da:46:6c:
                    07:83:74:97:ef:a2:74:e1:e4:38:a4:ea:b1:4c:93:
                    f4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:45:F4:2E:46:B1:3E:1A:C8:E1:CB:03:C3:2D:21:22:AB:D2:D5:D9
            X509v3 Authority Key Identifier:
                keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fe:59:02:f2:c1:a5:37:d0:4a:9f:53:46:39:c3:d3:7d:71:
         94:73:ae:88:a8:8b:1f:bc:59:cf:eb:76:1a:a3:81:fc:c7:2c:
         dc:36:dd:4f:01:5e:eb:06:a2:eb:28:ab:37:51:01:ea:f0:52:
         c9:bf:7c:46:48:d6:a9:2c:8d:07:e3:ab:44:0f:87:a7:8e:dd:
         5e:ab:ce:2d:70:cf:07:f0:7f:d0:17:fa:18:cc:92:73:66:e9:
         4e:4f:69:f9:a5:49:a8:b2:e3:29:cf:ca:29:33:cb:48:76:32:
         2a:30:4a:6b:07:9c:c2:97:28:0b:c6:0e:be:93:81:e7:6f:6f:
         aa:ca:14:4a:da:27:a3:a6:6d:8a:4a:3c:ba:4f:44:61:0d:7d:
         dd:23:6d:be:7d:e8:d1:73:92:12:50:7b:f6:96:ec:6c:61:de:
         e2:ef:ab:d3:6c:a7:4a:9d:2d:4a:a1:81:b8:04:db:f5:d1:21:
         fd:81:90:ab:81:1c:be:0b:12:28:f2:0f:44:1f:30:c3:fd:82:
         51:db:1d:52:c9:f8:8f:cd:4d:7c:e7:4a:63:24:60:f9:31:2a:
         70:cc:c7:7f:1d:0f:25:6b:24:46:51:78:89:9b:1d:d4:6c:3e:
         48:8d:83:6f:2b:5c:45:90:00:56:e4:41:90:ef:b6:d6:d3:3c:
         b7:45:45:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2Ydlyn2I93RukSUt0a/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZDE5ZmRhZTljNTNkOGQyOGIxZTQxY2E5MTM5YzMzNTU2
YmE2MjUwHhcNMjQxMTI2MTkwMTIzWhcNMjQxMTI3MTkwMTIzWjAzMTEwLwYDVQQD
Eyg2ZTQ1ZjQyZTQ2YjEzZTFhYzhlMWNiMDNjMzJkMjEyMmFiZDJkNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKUliouD8yxV/Mjc9El2Z7+oZXTq
qUwfeGHGgKsvVPKP+TvT3uMMR4ci+ZbKBey6zB5uZfh2GlndfGbmEDuVOzxPM2H4
ba3KJQETuwxSe8zxtZOyYgwAdH/yf+tdYkFmgo/KwvrBqZaZscetnIQblAmuSFiJ
RBUsWw8rwqxT9/ixH8RhvHGhMtekDtSqTMAGq+NomUuAUaw5FQ6XHg/4ePtZp70o
/UqN2tUhcm4SbqCTXHHfXreJbsoAKET4jU8/uAmwPp9ahBbO3LIRgYwmFCaMYbra
3EaLw+WFBnIQJPS6KCy/R7nPWU0qMfPaRmwHg3SX76J04eQ4pOqxTJP0WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5F9C5GsT4ayOHLA8MtISKr0tXZMB8GA1UdIwQY
MBaAFBHRn9rpxT2NKLHkHKkTnDNVa6YlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YzQ2ZDItOTgxOC00YWZjLTg4MGUt
MWNjNWZkMjU0NGU5LzEvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YzQ2ZDItOTgxOC00YWZjLTg4MGUtMWNjNWZkMjU0NGU5
LzEvRWRHZjJ1bkZQWTBvc2VRY3FST2NNMVZycGlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATP5ZAvLB
pTfQSp9TRjnD031xlHOuiKiLH7xZz+t2GqOB/Mcs3DbdTwFe6wai6yirN1EB6vBS
yb98RkjWqSyNB+OrRA+Hp47dXqvOLXDPB/B/0Bf6GMySc2bpTk9p+aVJqLLjKc/K
KTPLSHYyKjBKawecwpcoC8YOvpOB529vqsoUStono6Ztiko8uk9EYQ193SNtvn3o
0XOSElB79pbsbGHe4u+r02ynSp0tSqGBuATb9dEh/YGQq4EcvgsSKPIPRB8ww/2C
UdsdUsn4j81NfOdKYyRg+TEqcMzHfx0PJWskRlF4iZsd1Gw+SI2DbytcRZAAVuRB
kO+21tM8t0VFBw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:20:38 2024 by rpki-client on console-ams.rpki-client.org