Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
File:                     xPLYuhsZIR-p-cDbVRVFEzECzLs.mft (raw, json)
Hash identifier:          l8Sl/hW5waUmt5qdeF71DaF/+UpPuNO+WZZK8OVo5JE=
Subject key identifier:   44:60:7A:4A:FB:07:EC:48:57:93:85:B8:84:2D:EE:41:2D:8F:C0:A3
Authority key identifier: C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB
Certificate issuer:       /CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
Certificate serial:       019357D2666328B33EE2F51668C948C16F7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
Manifest number:          11FB
Signing time:             Sat 23 Nov 2024 07:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:26 +0000
Files and hashes:         1: 4oweBRtQfp7VorxsAJO8tm5Qd_I.roa (hash: EPu/kU2GkqZ/0mGGWxe1ClHCYfdHGcrXibLeVm8SR7o=)
                          2: xPLYuhsZIR-p-cDbVRVFEzECzLs.crl (hash: RffQh/Mbo6u/8mCriOq2y7WTKlCHOvz/3Tq7B2s31m8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:66:63:28:b3:3e:e2:f5:16:68:c9:48:c1:6f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
        Validity
            Not Before: Nov 23 07:00:26 2024 GMT
            Not After : Nov 24 07:00:26 2024 GMT
        Subject: CN=44607a4afb07ec48579385b8842dee412d8fc0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:21:8e:23:12:8c:d3:67:21:bb:4a:7a:08:be:
                    d8:b0:e7:ef:5c:9b:a2:8b:0c:ee:85:e0:40:2a:3c:
                    cd:fb:60:cc:83:72:db:02:3a:3a:b9:55:fa:c3:70:
                    db:4a:05:5f:d5:c8:a9:51:41:0e:a3:1c:23:94:2f:
                    27:80:df:6a:92:f6:b4:0b:d6:0a:87:ca:d8:b4:73:
                    7a:74:63:a7:79:99:1b:80:b0:93:d5:c9:71:48:da:
                    31:1b:26:47:72:67:82:14:49:bc:8b:59:6a:a0:17:
                    9d:e4:f6:b7:ff:cc:13:2c:d9:0c:02:6e:c0:40:97:
                    5e:83:cd:17:bd:66:f8:92:7f:ae:fd:c3:bd:fe:36:
                    a7:02:aa:c5:17:d8:d7:8e:26:94:79:c9:a5:a7:3f:
                    71:b4:17:8d:c4:fb:64:2b:cd:ad:e7:12:fe:29:0c:
                    10:60:2c:61:2f:e4:00:96:c1:64:cb:e4:15:e2:5d:
                    68:08:2e:69:5e:07:c7:20:19:92:d2:a9:60:74:f7:
                    0f:e2:ad:be:63:8a:94:2e:61:54:30:bc:8d:9c:e1:
                    31:7b:8e:bc:c6:f9:2d:9b:a9:e6:c8:08:00:fe:26:
                    a4:e0:d9:9a:7f:32:0a:25:d0:e1:29:a5:01:b5:3b:
                    0c:5b:12:f9:d4:c2:df:7e:a4:79:b5:ba:0b:4d:6c:
                    7e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:60:7A:4A:FB:07:EC:48:57:93:85:B8:84:2D:EE:41:2D:8F:C0:A3
            X509v3 Authority Key Identifier:
                keyid:C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ad:91:eb:49:c1:1f:29:c2:8a:41:cd:8d:eb:04:6d:b3:14:
         e4:2f:e7:a0:31:59:eb:a5:6c:28:0c:9f:86:3c:23:15:e2:fe:
         45:f9:b6:16:76:27:70:a4:db:89:0b:d3:1f:76:c0:65:12:62:
         34:0c:76:4f:db:23:f8:e5:d4:66:0f:92:18:f0:9f:73:b5:79:
         3d:ba:39:c0:a2:fd:65:06:66:79:66:11:90:81:fb:bb:fe:9c:
         9c:f9:de:c0:de:69:e5:dc:54:3b:ee:73:d4:b3:24:98:ed:ba:
         01:ef:30:15:44:34:dc:e7:37:ae:c1:de:40:12:d1:b3:12:11:
         ab:3f:68:3f:0c:e1:00:f3:a1:d0:56:3f:5a:17:1d:8f:79:7e:
         ea:61:d0:a7:0f:8d:7c:d0:c2:f4:a1:19:67:7f:95:b3:32:a1:
         34:c9:8f:47:05:ba:36:d8:ff:aa:95:aa:4b:c3:5b:64:b7:9d:
         86:e0:68:95:1c:3f:66:26:d2:55:7a:e4:fd:c3:83:e1:a0:0a:
         76:ce:58:a0:c5:68:a8:3e:40:42:51:32:a7:80:9d:13:b0:af:
         33:31:89:32:d2:66:c0:bc:6c:9c:50:22:a6:c4:93:4b:46:6c:
         23:9f:41:18:c2:eb:67:bb:bb:d0:88:d6:76:05:92:b7:13:3c:
         90:83:ca:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0mZjKLM+4vUWaMlIwW99MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZjJkOGJhMWIxOTIxMWZhOWY5YzBkYjU1MTU0NTEzMzEw
MmNjYmIwHhcNMjQxMTIzMDcwMDI2WhcNMjQxMTI0MDcwMDI2WjAzMTEwLwYDVQQD
Eyg0NDYwN2E0YWZiMDdlYzQ4NTc5Mzg1Yjg4NDJkZWU0MTJkOGZjMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyGOIxKM02chu0p6CL7YsOfvXJui
iwzuheBAKjzN+2DMg3LbAjo6uVX6w3DbSgVf1cipUUEOoxwjlC8ngN9qkva0C9YK
h8rYtHN6dGOneZkbgLCT1clxSNoxGyZHcmeCFEm8i1lqoBed5Pa3/8wTLNkMAm7A
QJdeg80XvWb4kn+u/cO9/janAqrFF9jXjiaUecmlpz9xtBeNxPtkK82t5xL+KQwQ
YCxhL+QAlsFky+QV4l1oCC5pXgfHIBmS0qlgdPcP4q2+Y4qULmFUMLyNnOExe468
xvktm6nmyAgA/iak4NmafzIKJdDhKaUBtTsMWxL51MLffqR5tboLTWx+ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERgekr7B+xIV5OFuIQt7kEtj8CjMB8GA1UdIwQY
MBaAFMTy2LobGSEfqfnA21UVRRMxAsy7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFBMWXVoc1pJUi1wLWNEYlZSVkZFekVDekxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lOGMyYmQtOThmYS00YmRmLTgwYmIt
YzVlZWU1N2VkMmU2LzEveFBMWXVoc1pJUi1wLWNEYlZSVkZFekVDekxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9lOGMyYmQtOThmYS00YmRmLTgwYmItYzVlZWU1N2VkMmU2
LzEveFBMWXVoc1pJUi1wLWNEYlZSVkZFekVDekxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAla2R60nB
HynCikHNjesEbbMU5C/noDFZ66VsKAyfhjwjFeL+Rfm2FnYncKTbiQvTH3bAZRJi
NAx2T9sj+OXUZg+SGPCfc7V5Pbo5wKL9ZQZmeWYRkIH7u/6cnPnewN5p5dxUO+5z
1LMkmO26Ae8wFUQ03Oc3rsHeQBLRsxIRqz9oPwzhAPOh0FY/Whcdj3l+6mHQpw+N
fNDC9KEZZ3+VszKhNMmPRwW6Ntj/qpWqS8NbZLedhuBolRw/ZibSVXrk/cOD4aAK
ds5YoMVoqD5AQlEyp4CdE7CvMzGJMtJmwLxsnFAipsSTS0ZsI59BGMLrZ7u70IjW
dgWStxM8kIPK2Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:16 2024 by rpki-client on console-fra.rpki-client.org