Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
File:                     E5WjqPyN003W88lQxmH0shJxdaU.mft (raw, json)
Hash identifier:          DPDFrC1lVXkbAwKyqNyZkp7jam/EzZpJwg6WJ7vEpzs=
Subject key identifier:   90:93:66:9F:61:EF:14:4E:51:22:6B:CC:26:23:03:8F:01:8E:8B:F6
Authority key identifier: 13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5
Certificate issuer:       /CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
Certificate serial:       019356F71495F5F66F4AC56E368A24F2E1DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 03:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:53 +0000
Files and hashes:         1: E5WjqPyN003W88lQxmH0shJxdaU.crl (hash: 08G3kMBomRnoyXOIYnpdpwvxE0YULnZUFbwXKBvbwpY=)
                          2: qsl9K8nEaUbCn9D96IbfO7qUNDA.roa (hash: nZGvtnnPDm+nDxEyT8PcJZ+C+IlTgHLJFxulumDl4kw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:14:95:f5:f6:6f:4a:c5:6e:36:8a:24:f2:e1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
        Validity
            Not Before: Nov 23 03:00:53 2024 GMT
            Not After : Nov 24 03:00:53 2024 GMT
        Subject: CN=9093669f61ef144e51226bcc2623038f018e8bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e0:36:1c:94:86:45:9b:24:49:87:8e:9b:c5:
                    c0:89:b3:f5:82:21:62:ef:2f:7c:85:70:94:04:cb:
                    e3:87:dc:f9:b9:cf:5f:1d:b4:1d:52:f1:01:8f:55:
                    58:79:87:34:8b:29:7f:b6:64:86:3f:a6:a5:11:a4:
                    da:63:63:e4:4c:30:fa:5f:5d:f7:e4:ba:a0:61:cc:
                    5c:e7:b5:3b:c4:60:c9:4b:f0:0e:0a:70:bc:53:4d:
                    c0:ae:63:62:54:c6:50:3c:5d:65:69:cb:90:9a:9d:
                    25:c0:3d:2d:8a:ce:01:1e:ba:60:ee:07:1e:de:ba:
                    5a:ea:9e:fe:54:45:d5:3d:f3:9c:a5:17:9b:27:1a:
                    58:8d:51:9a:7b:50:fd:0e:d0:cb:16:12:5c:d5:af:
                    bf:77:71:be:03:9e:05:6b:a9:84:f4:44:f6:b7:89:
                    97:43:94:31:eb:89:92:03:c8:31:e3:70:a5:db:09:
                    64:3d:51:12:ee:35:e2:88:56:9b:de:fd:40:c7:60:
                    6c:b3:cf:6f:fc:44:f7:0c:94:66:ce:43:80:5a:21:
                    cf:71:15:a0:85:eb:da:a5:da:77:26:56:72:1e:01:
                    84:8a:1e:41:51:72:dd:de:3b:90:fc:1a:fe:c9:ea:
                    98:e4:fe:67:38:ed:dd:be:2a:6d:4d:87:e7:5e:26:
                    98:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:93:66:9F:61:EF:14:4E:51:22:6B:CC:26:23:03:8F:01:8E:8B:F6
            X509v3 Authority Key Identifier:
                keyid:13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:86:00:26:46:37:42:75:bd:9c:d2:04:38:d1:b8:27:1a:56:
         40:a4:f0:42:cc:03:3f:22:9d:ee:ae:3d:fe:c9:da:8a:62:8d:
         ac:06:31:1a:a6:53:6f:be:cd:0f:4b:da:ba:2b:e6:22:83:97:
         75:4a:9b:3d:40:30:0f:02:4c:4d:5a:e5:76:8e:7d:96:1c:37:
         22:2c:87:d1:fb:63:52:64:2e:3c:fa:26:71:c9:d6:b7:0b:ae:
         34:1f:27:5f:13:70:ac:90:b3:73:0a:af:ab:6b:6c:b7:96:fd:
         a3:8c:53:28:1e:35:31:f3:7d:fb:7e:91:e2:e2:04:c0:d7:3b:
         4a:7d:12:6b:70:9b:5f:bf:21:f1:80:29:3b:88:be:54:32:dc:
         cf:b0:73:58:3d:52:73:2b:42:df:43:df:91:46:e7:67:ff:9d:
         c2:fb:39:20:6f:ba:35:9e:e3:28:b2:84:2a:a7:56:a3:ea:e7:
         95:e0:4e:d2:56:c2:41:1f:fd:d8:aa:e5:59:3e:f3:2d:c9:76:
         dd:0b:30:1e:86:ea:2e:76:28:4b:b2:1f:32:65:ac:af:fe:1c:
         d8:05:ef:8d:06:b6:3f:01:ef:7c:eb:49:6b:8f:23:de:4f:a4:
         dc:6a:7d:90:87:6d:0e:8c:86:f7:9b:ac:89:67:f5:e9:59:01:
         c6:3f:28:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9xSV9fZvSsVuNook8uHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOTVhM2E4ZmM4ZGQzNGRkNmYzYzk1MGM2NjFmNGIyMTI3
MTc1YTUwHhcNMjQxMTIzMDMwMDUzWhcNMjQxMTI0MDMwMDUzWjAzMTEwLwYDVQQD
Eyg5MDkzNjY5ZjYxZWYxNDRlNTEyMjZiY2MyNjIzMDM4ZjAxOGU4YmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuA2HJSGRZskSYeOm8XAibP1giFi
7y98hXCUBMvjh9z5uc9fHbQdUvEBj1VYeYc0iyl/tmSGP6alEaTaY2PkTDD6X133
5LqgYcxc57U7xGDJS/AOCnC8U03ArmNiVMZQPF1lacuQmp0lwD0tis4BHrpg7gce
3rpa6p7+VEXVPfOcpRebJxpYjVGae1D9DtDLFhJc1a+/d3G+A54Fa6mE9ET2t4mX
Q5Qx64mSA8gx43Cl2wlkPVES7jXiiFab3v1Ax2Bss89v/ET3DJRmzkOAWiHPcRWg
hevapdp3JlZyHgGEih5BUXLd3juQ/Br+yeqY5P5nOO3dviptTYfnXiaYrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCTZp9h7xROUSJrzCYjA48Bjov2MB8GA1UdIwQY
MBaAFBOVo6j8jdNN1vPJUMZh9LIScXWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTVXanFQeU4wMDNXODhsUXhtSDBzaEp4ZGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My81MmM0NDgtMWNiOS00YmViLThmYzIt
ZjA0OGE5MjY2ZmNmLzEvRTVXanFQeU4wMDNXODhsUXhtSDBzaEp4ZGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My81MmM0NDgtMWNiOS00YmViLThmYzItZjA0OGE5MjY2ZmNm
LzEvRTVXanFQeU4wMDNXODhsUXhtSDBzaEp4ZGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYYAJkY3
QnW9nNIEONG4JxpWQKTwQswDPyKd7q49/snaimKNrAYxGqZTb77ND0vauivmIoOX
dUqbPUAwDwJMTVrldo59lhw3IiyH0ftjUmQuPPomccnWtwuuNB8nXxNwrJCzcwqv
q2tst5b9o4xTKB41MfN9+36R4uIEwNc7Sn0Sa3CbX78h8YApO4i+VDLcz7BzWD1S
cytC30PfkUbnZ/+dwvs5IG+6NZ7jKLKEKqdWo+rnleBO0lbCQR/92KrlWT7zLcl2
3QswHobqLnYoS7IfMmWsr/4c2AXvjQa2PwHvfOtJa48j3k+k3Gp9kIdtDoyG95us
iWf16VkBxj8omA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:33 2024 by rpki-client on console-ams.rpki-client.org