Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
File:                     vEZLqdJjhfVN9iVKwkiSbTcERbA.mft (raw, json)
Hash identifier:          +SHxxto0daZHrnbrZ7vzrgTMTna5pjRdlVxPHAjsROY=
Subject key identifier:   59:40:4A:14:CD:1D:E4:C5:64:D9:3B:E5:87:8A:D9:CC:83:5D:E5:A0
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Certificate issuer:       /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial:       01936AB4BE607BF854F4A48F96A899AD4A2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
Manifest number:          1383
Signing time:             Tue 26 Nov 2024 23:00:50 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:50 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:50 +0000
Files and hashes:         1: RqoEriWOydI2kwlR73Jsg6juQS4.roa (hash: QZCDT7y+5UwJPUMhOGPbd8KaMlUsCBhpbhE06SOGw2c=)
                          2: lvAWOwu1Oe7q16DaaZbH4EdYgjc.roa (hash: v/a+nqmnl11o/RyVfp2P3pUFm8T1DDqn8TeZ3rzmyyI=)
                          3: vEZLqdJjhfVN9iVKwkiSbTcERbA.crl (hash: U/l1mqav5pMTT8twV/3UInbyChBAPa3rDsBXZrnueO0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:be:60:7b:f8:54:f4:a4:8f:96:a8:99:ad:4a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
        Validity
            Not Before: Nov 26 23:00:50 2024 GMT
            Not After : Nov 27 23:00:50 2024 GMT
        Subject: CN=59404a14cd1de4c564d93be5878ad9cc835de5a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:ff:c2:af:3a:6a:6f:f1:8b:40:7c:5a:6c:
                    a3:d0:45:78:7d:82:14:05:53:e6:fd:46:5d:e0:ce:
                    81:d4:00:96:8d:ae:27:3a:d5:bb:ca:3a:64:f9:fa:
                    b7:3f:66:d7:c1:f8:67:24:21:cc:ba:2d:a4:b4:c6:
                    d3:69:3b:f0:d9:06:5d:84:fc:13:1d:77:e1:06:78:
                    34:8e:5b:ec:e4:91:6d:be:69:89:26:35:2e:49:90:
                    49:f5:72:bf:a7:45:96:4f:f9:a5:a2:7f:32:95:c0:
                    6f:66:81:13:31:76:bd:12:08:38:a5:b0:3e:c6:c2:
                    69:78:ac:32:7d:4c:a4:c2:47:50:e8:ed:ef:26:8e:
                    a4:8e:3f:d6:81:8f:87:fa:43:38:b6:1a:20:0c:4f:
                    a6:cd:cf:d8:61:32:02:34:5f:33:b0:fb:b4:5c:61:
                    b4:ab:17:ca:bb:7a:d6:92:12:63:74:bd:94:7c:da:
                    16:fa:64:d9:af:70:ad:ad:c2:57:ee:e6:66:11:8b:
                    ce:cd:cf:ba:98:37:db:1f:b0:75:11:00:08:a5:0f:
                    38:08:8f:bc:d2:1c:23:e6:38:e5:9d:f1:99:f8:dc:
                    b7:a8:cd:31:6b:a3:d9:c5:22:a8:59:b6:8f:cb:fd:
                    a6:2b:48:2f:91:9d:b1:5a:42:75:be:85:b7:7a:5d:
                    c0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:40:4A:14:CD:1D:E4:C5:64:D9:3B:E5:87:8A:D9:CC:83:5D:E5:A0
            X509v3 Authority Key Identifier:
                keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a0:fc:c1:9a:f0:ba:ba:d4:fc:be:ad:ec:9c:ec:ca:48:2f:
         1a:c2:54:6f:e7:47:d3:43:b9:e4:50:76:49:48:eb:ea:43:7a:
         b4:4f:55:d9:c1:23:6a:a5:4f:73:e7:bd:cc:3d:d2:68:a9:e1:
         91:3a:ea:f1:f1:66:f9:c1:64:8f:44:78:90:14:88:8c:c8:97:
         e2:b8:42:4d:e1:9d:11:07:60:22:8c:4d:9d:5c:57:1d:90:0b:
         03:d1:f8:f1:f0:71:00:c2:aa:2e:ab:e5:55:65:c8:10:20:88:
         a1:1a:d7:0f:3d:3d:b8:2f:ec:54:02:88:51:83:d1:cf:54:93:
         b0:04:58:e6:d6:c0:03:9d:e3:95:32:cb:33:2f:d5:e3:77:1c:
         1d:e8:00:fb:ef:18:e2:c0:a4:dc:fc:82:4f:57:30:48:17:f4:
         b3:fa:27:a7:cd:42:a3:f6:0d:86:13:e2:05:41:11:86:52:50:
         03:98:66:05:78:7d:a5:05:c5:8c:73:1b:ed:c6:aa:6c:e1:ec:
         88:dd:4c:1e:f6:67:4b:2d:94:a3:2f:ac:26:41:18:a1:38:87:
         30:cf:81:7c:b8:31:31:04:30:0d:ad:94:0c:18:46:c3:45:5e:
         e2:07:67:50:34:29:23:54:d8:cf:79:94:5d:42:3a:53:ee:eb:
         9b:81:b2:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtL5ge/hU9KSPlqiZrUoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDY0YmE5ZDI2Mzg1ZjU0ZGY2MjU0YWMyNDg5MjZkMzcw
NDQ1YjAwHhcNMjQxMTI2MjMwMDUwWhcNMjQxMTI3MjMwMDUwWjAzMTEwLwYDVQQD
Eyg1OTQwNGExNGNkMWRlNGM1NjRkOTNiZTU4NzhhZDljYzgzNWRlNWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHn/wq86am/xi0B8Wmyj0EV4fYIU
BVPm/UZd4M6B1ACWja4nOtW7yjpk+fq3P2bXwfhnJCHMui2ktMbTaTvw2QZdhPwT
HXfhBng0jlvs5JFtvmmJJjUuSZBJ9XK/p0WWT/mlon8ylcBvZoETMXa9Egg4pbA+
xsJpeKwyfUykwkdQ6O3vJo6kjj/WgY+H+kM4thogDE+mzc/YYTICNF8zsPu0XGG0
qxfKu3rWkhJjdL2UfNoW+mTZr3CtrcJX7uZmEYvOzc+6mDfbH7B1EQAIpQ84CI+8
0hwj5jjlnfGZ+Ny3qM0xa6PZxSKoWbaPy/2mK0gvkZ2xWkJ1voW3el3A7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlAShTNHeTFZNk75YeK2cyDXeWgMB8GA1UdIwQY
MBaAFLxGS6nSY4X1TfYlSsJIkm03BEWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVaTHFkSmpoZlZOOWlWS3draVNiVGNFUmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MDFmMmItZmQxZi00NWVhLWI0OTQt
ZDczZGM0YjQxY2UxLzEvdkVaTHFkSmpoZlZOOWlWS3draVNiVGNFUmJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81MDFmMmItZmQxZi00NWVhLWI0OTQtZDczZGM0YjQxY2Ux
LzEvdkVaTHFkSmpoZlZOOWlWS3draVNiVGNFUmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6D8wZrw
urrU/L6t7JzsykgvGsJUb+dH00O55FB2SUjr6kN6tE9V2cEjaqVPc+e9zD3SaKnh
kTrq8fFm+cFkj0R4kBSIjMiX4rhCTeGdEQdgIoxNnVxXHZALA9H48fBxAMKqLqvl
VWXIECCIoRrXDz09uC/sVAKIUYPRz1STsARY5tbAA53jlTLLMy/V43ccHegA++8Y
4sCk3PyCT1cwSBf0s/onp81Co/YNhhPiBUERhlJQA5hmBXh9pQXFjHMb7caqbOHs
iN1MHvZnSy2Uoy+sJkEYoTiHMM+BfLgxMQQwDa2UDBhGw0Ve4gdnUDQpI1TYz3mU
XUI6U+7rm4Gy2Q==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:34 2024 by rpki-client on console-fra.rpki-client.org