Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
File:                     TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json)
Hash identifier:          ffPQdvw3m5urQ2l/oXi7Gb2nLHoUGYrpsq6pROp8bgE=
Subject key identifier:   5D:73:08:52:EB:FE:81:3F:70:30:1E:05:B8:2E:A6:D5:1D:EC:80:B0
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Certificate issuer:       /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial:       0193512B4C3E044B10A421A6BC659B9204FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
Manifest number:          1381
Signing time:             Fri 22 Nov 2024 00:00:12 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:12 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:12 +0000
Files and hashes:         1: 18ZPhXMHuvzVxi0dQ-Jn8vcDA_o.roa (hash: 0W6+wcUAbuDDeiFlSxGrZ8YlqYucGO1T/KcQ9Ea1seQ=)
                          2: 5lwKN8bWv7RETFO4R2KnB6nMZdI.roa (hash: IgJTLjIZI4K1bMNiUeD2nIz0kjhMcPsWAdZMQ8Gddio=)
                          3: 9WKehCxjsufpL0TalMHPJnz7PHs.roa (hash: npIYWO0gU2+WwJPB6Z7znViP7vWDuFhU7YxJ4s5X2w0=)
                          4: K72sahkHzNTlh2OOiV6IahgHT48.roa (hash: B+N0hfHnmNQDhXiIg8zL6Gug+BT0Qx2nJvcc1l0mFaM=)
                          5: SATDiNk0aElld777RnLTntcnKpo.roa (hash: Jmab3JIqcIJ9KNbjJd90ZwG16MQs/kl9qm75b5lKuTo=)
                          6: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: 47ZhQgIm1aM5eNhbPZsuBBCwHgMI1ShdYU1GJ+dZcfc=)
                          7: gZyquP1mxcwuOOXT6I9kTGvOEag.roa (hash: TxXLvG//c6kHTnG8moS7GQZK6013BBe73jGmXDd0zL0=)
                          8: lE_uL0pXSi1vc2tYKS9C74wILwM.roa (hash: Vs/+wKfAmZ/MaLyLoPXOfAz/4pe/W1GvPjq0+X7qb+4=)
                          9: pjNDkIkGxgwB_N3FTBlJp8KzyE4.roa (hash: aegTzg7mfaIVc0+qJVC3C0WYtnX28HUGzseK44MpYRU=)
                          10: u-xmEnH33cI2XzeJpDf_JZqPzD8.roa (hash: QYwyKG9zuAc+Xw3he02b7abgNTC78ENb8d95Hvvxqmo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:4c:3e:04:4b:10:a4:21:a6:bc:65:9b:92:04:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
        Validity
            Not Before: Nov 22 00:00:12 2024 GMT
            Not After : Nov 23 00:00:12 2024 GMT
        Subject: CN=5d730852ebfe813f70301e05b82ea6d51dec80b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:8a:e5:1a:e7:22:1c:e6:a4:00:98:47:cf:
                    21:6a:cb:6b:14:ac:d5:14:17:22:d8:35:20:a6:38:
                    a1:09:06:39:7c:9c:2b:9e:da:6f:5e:94:cd:88:ec:
                    bc:c1:37:45:0e:8c:1b:11:e4:57:53:82:85:ef:12:
                    41:30:19:45:2e:3b:d4:09:33:c6:75:b6:30:f2:63:
                    48:21:ca:ca:4c:83:d5:f6:7d:a4:15:76:4b:ce:b6:
                    78:b9:02:4f:83:68:a1:8e:33:9d:5f:93:64:7c:2c:
                    98:e4:6a:0e:6b:78:5a:17:e1:ba:81:9b:96:5f:ff:
                    88:0f:df:8f:2c:6e:a6:4c:0b:b2:69:da:88:d5:92:
                    a6:42:20:bd:2a:77:f5:a9:39:49:d9:81:3c:44:0f:
                    e9:23:99:24:a7:a1:e6:9b:4f:f9:ba:c8:53:e5:81:
                    bf:0b:86:06:bc:c4:43:3e:e3:7c:28:56:3b:d0:b6:
                    2d:a6:3a:e7:0c:29:d9:0c:2c:27:7d:c1:39:ce:2d:
                    71:1f:95:bd:97:78:1d:42:e5:70:bd:ee:d1:63:65:
                    bd:fa:ba:34:bb:0b:7a:f5:a0:7e:ed:e2:14:73:14:
                    a6:8a:30:9e:40:a4:78:1c:26:a7:aa:e0:e1:e6:41:
                    78:32:a5:63:54:1b:06:99:df:2a:04:87:c0:6c:5a:
                    bd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:73:08:52:EB:FE:81:3F:70:30:1E:05:B8:2E:A6:D5:1D:EC:80:B0
            X509v3 Authority Key Identifier:
                keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:0f:0c:fd:75:da:6f:d9:45:4b:e6:54:fe:2e:26:1d:4b:65:
         e4:4f:8d:ed:55:18:c7:a0:9e:36:56:21:f2:64:9a:73:92:53:
         04:62:ae:de:5f:28:13:a8:ac:e9:8f:ac:b2:c2:2a:d1:f5:43:
         83:4d:03:5e:9a:58:2c:6b:19:93:db:16:a3:7f:97:21:29:fc:
         62:98:3b:67:41:ab:b5:6c:44:2f:d2:e2:23:b4:d8:1d:d6:20:
         e2:92:3d:6a:3a:e2:5e:31:33:9e:b0:86:df:5d:2b:8e:80:42:
         99:f3:f4:9e:62:af:48:9f:7e:06:50:c2:2e:45:24:d6:4f:16:
         b6:76:bd:d0:0d:d8:3a:81:55:fd:6d:21:6e:c3:11:b6:a7:59:
         6e:37:d5:09:9e:b3:de:81:7c:96:2c:69:08:bd:54:f3:d6:e9:
         9e:e9:6a:a8:f8:7c:c8:9b:09:68:34:2d:4f:cc:14:d9:ad:7e:
         b0:ba:ba:2e:0b:64:53:88:b6:a8:37:9c:b4:ad:69:d5:4c:44:
         94:be:ca:f0:18:f0:77:1c:f0:5c:b9:1a:60:8c:e7:14:30:27:
         5a:33:6e:ad:e0:44:72:f8:f1:a8:2f:6f:93:3a:c2:b0:81:1b:
         69:10:ab:ea:26:ba:6a:b9:b5:33:3c:4b:08:8c:c7:4d:f5:08:
         83:b1:1c:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRK0w+BEsQpCGmvGWbkgT+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2
NzdiY2QwHhcNMjQxMTIyMDAwMDEyWhcNMjQxMTIzMDAwMDEyWjAzMTEwLwYDVQQD
Eyg1ZDczMDg1MmViZmU4MTNmNzAzMDFlMDViODJlYTZkNTFkZWM4MGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriqK5RrnIhzmpACYR88hastrFKzV
FBci2DUgpjihCQY5fJwrntpvXpTNiOy8wTdFDowbEeRXU4KF7xJBMBlFLjvUCTPG
dbYw8mNIIcrKTIPV9n2kFXZLzrZ4uQJPg2ihjjOdX5NkfCyY5GoOa3haF+G6gZuW
X/+ID9+PLG6mTAuyadqI1ZKmQiC9Knf1qTlJ2YE8RA/pI5kkp6Hmm0/5ushT5YG/
C4YGvMRDPuN8KFY70LYtpjrnDCnZDCwnfcE5zi1xH5W9l3gdQuVwve7RY2W9+ro0
uwt69aB+7eIUcxSmijCeQKR4HCanquDh5kF4MqVjVBsGmd8qBIfAbFq9lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1zCFLr/oE/cDAeBbguptUd7ICwMB8GA1UdIwQY
MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt
NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk
LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQ8M/XXa
b9lFS+ZU/i4mHUtl5E+N7VUYx6CeNlYh8mSac5JTBGKu3l8oE6is6Y+sssIq0fVD
g00DXppYLGsZk9sWo3+XISn8Ypg7Z0GrtWxEL9LiI7TYHdYg4pI9ajriXjEznrCG
310rjoBCmfP0nmKvSJ9+BlDCLkUk1k8Wtna90A3YOoFV/W0hbsMRtqdZbjfVCZ6z
3oF8lixpCL1U89bpnulqqPh8yJsJaDQtT8wU2a1+sLq6LgtkU4i2qDectK1p1UxE
lL7K8BjwdxzwXLkaYIznFDAnWjNureBEcvjxqC9vkzrCsIEbaRCr6ia6arm1MzxL
CIzHTfUIg7EcWQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:25 2024 by rpki-client on console-fra.rpki-client.org