Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
File:                     il2GqrTAl08MJ_Q9lo30JvU99dI.mft (raw, json)
Hash identifier:          jyuPr8RnbwGadbpVAQdlujpkUxSiH92Wk1QAHNMV8hk=
Subject key identifier:   07:2C:E8:4D:B9:D4:01:7C:B1:66:33:D6:6D:5F:48:6E:B3:D3:9F:AF
Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
Certificate issuer:       /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Certificate serial:       019352AC13B03B7F8C5A670E591E9C2368FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 07:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:29 +0000
Files and hashes:         1: HqojYHtJxU1G6ms08qYh97DrqEI.roa (hash: BKQU3azfNKH3cgjZkiVSKAffl6Du6x6irSj5kKutUJY=)
                          2: il2GqrTAl08MJ_Q9lo30JvU99dI.crl (hash: gPkdKXUHqDOpGMwMkd+srEDpTO/ijHJ1nnwMQXy20CA=)
                          3: kg5DzowdBRghas0rvr18IN-HqsE.roa (hash: fdC/Ma7e1scZ1g6mOiGy/w7Ian+cJI4pbHgZTMAF+u4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:13:b0:3b:7f:8c:5a:67:0e:59:1e:9c:23:68:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
        Validity
            Not Before: Nov 22 07:00:29 2024 GMT
            Not After : Nov 23 07:00:29 2024 GMT
        Subject: CN=072ce84db9d4017cb16633d66d5f486eb3d39faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:20:57:b8:d9:15:dd:f0:a8:33:3d:bc:af:52:
                    14:3a:71:e9:05:a7:7f:7a:6b:30:a9:b8:36:11:2e:
                    15:d8:64:ea:da:40:f8:86:8c:b7:17:5b:c5:27:98:
                    93:26:c8:94:96:da:6a:58:a6:78:ff:e6:a9:f3:71:
                    74:0c:da:dd:0a:57:a9:a3:d0:8b:98:1b:f7:69:de:
                    37:5e:ec:3b:0d:f0:7d:66:7e:52:6a:1c:94:e3:62:
                    a5:d3:0c:33:cd:ac:11:86:40:b5:d6:ce:d8:ff:b6:
                    41:74:3f:02:e7:7b:ea:d3:03:08:f1:c7:0b:e0:d5:
                    b2:e3:c7:21:36:23:f9:18:54:8e:a8:aa:3c:2a:f3:
                    b3:e8:e4:c8:04:99:db:ba:d1:3e:07:35:5c:62:81:
                    f7:06:b1:82:01:78:6b:0f:42:e4:40:74:5b:6c:0f:
                    e6:d0:c5:ef:75:75:c6:85:08:a3:b4:ad:95:38:6f:
                    2b:1a:6b:43:7b:f4:63:f3:7d:f1:9c:3b:02:40:64:
                    7d:c1:fa:70:1a:49:4a:f6:55:8a:9e:1c:e0:0c:63:
                    0f:03:48:16:63:fb:02:a2:16:7f:e8:5c:4f:d0:0f:
                    55:70:63:cd:6a:de:93:29:eb:6b:ba:4b:83:55:fa:
                    15:aa:77:00:c1:cb:e2:4f:7a:89:18:76:16:f2:0c:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2C:E8:4D:B9:D4:01:7C:B1:66:33:D6:6D:5F:48:6E:B3:D3:9F:AF
            X509v3 Authority Key Identifier:
                keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ed:fb:ba:69:4c:32:e2:8e:a0:3d:44:aa:88:cb:ae:53:50:
         73:9e:1c:fa:65:90:48:4a:f6:69:b4:c8:40:ac:41:57:1e:50:
         ee:18:b9:a6:d6:c3:21:47:cb:07:95:f0:dc:c8:91:28:66:cd:
         e5:e8:a3:ae:22:2b:57:76:ff:06:7d:cc:3e:3e:01:06:1d:6c:
         50:bb:c1:b6:b0:80:95:47:90:84:8f:b3:15:71:fd:fa:f9:5c:
         7b:25:aa:80:76:2c:52:73:37:e5:9a:92:39:74:26:e8:a0:fa:
         0e:39:33:7f:bb:fc:03:7f:2d:13:c2:9c:03:04:ee:8e:b2:d9:
         11:2e:c9:79:27:1e:b6:64:c4:ab:be:6b:4d:0a:8b:5a:78:3b:
         11:f7:c9:03:2f:ff:94:cb:4c:d7:0a:d4:d1:cc:62:70:1c:69:
         3c:d0:4b:1e:52:51:69:8b:62:10:a0:24:d5:77:07:01:c1:40:
         f0:ea:fd:a8:76:5f:69:9c:2f:b5:fc:8d:9c:73:52:b3:f2:25:
         cf:7e:22:22:6e:44:35:80:a9:8a:bb:20:0d:d0:cb:40:0e:4f:
         4b:e0:33:f4:7a:27:03:c9:4d:9d:f9:42:9d:30:5a:a9:e9:7c:
         92:ad:10:ca:f6:63:c4:16:03:f7:f6:25:f4:19:8d:2f:14:63:
         ec:ed:57:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrBOwO3+MWmcOWR6cI2j+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWQ4NmFhYjRjMDk3NGYwYzI3ZjQzZDk2OGRmNDI2ZjUz
ZGY1ZDIwHhcNMjQxMTIyMDcwMDI5WhcNMjQxMTIzMDcwMDI5WjAzMTEwLwYDVQQD
EygwNzJjZTg0ZGI5ZDQwMTdjYjE2NjMzZDY2ZDVmNDg2ZWIzZDM5ZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSBXuNkV3fCoMz28r1IUOnHpBad/
emswqbg2ES4V2GTq2kD4hoy3F1vFJ5iTJsiUltpqWKZ4/+ap83F0DNrdClepo9CL
mBv3ad43Xuw7DfB9Zn5SahyU42Kl0wwzzawRhkC11s7Y/7ZBdD8C53vq0wMI8ccL
4NWy48chNiP5GFSOqKo8KvOz6OTIBJnbutE+BzVcYoH3BrGCAXhrD0LkQHRbbA/m
0MXvdXXGhQijtK2VOG8rGmtDe/Rj833xnDsCQGR9wfpwGklK9lWKnhzgDGMPA0gW
Y/sCohZ/6FxP0A9VcGPNat6TKetrukuDVfoVqncAwcviT3qJGHYW8gy2yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcs6E251AF8sWYz1m1fSG6z05+vMB8GA1UdIwQY
MBaAFIpdhqq0wJdPDCf0PZaN9Cb1PfXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWwyR3FyVEFsMDhNSl9ROWxvMzBKdlU5OWRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80Y2VhNzktMmEwOS00YWU3LWE1MGMt
ZjhhODM2ZjAxYjIxLzEvaWwyR3FyVEFsMDhNSl9ROWxvMzBKdlU5OWRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80Y2VhNzktMmEwOS00YWU3LWE1MGMtZjhhODM2ZjAxYjIx
LzEvaWwyR3FyVEFsMDhNSl9ROWxvMzBKdlU5OWRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKu37umlM
MuKOoD1EqojLrlNQc54c+mWQSEr2abTIQKxBVx5Q7hi5ptbDIUfLB5Xw3MiRKGbN
5eijriIrV3b/Bn3MPj4BBh1sULvBtrCAlUeQhI+zFXH9+vlceyWqgHYsUnM35ZqS
OXQm6KD6Djkzf7v8A38tE8KcAwTujrLZES7JeScetmTEq75rTQqLWng7EffJAy//
lMtM1wrU0cxicBxpPNBLHlJRaYtiEKAk1XcHAcFA8Or9qHZfaZwvtfyNnHNSs/Il
z34iIm5ENYCpirsgDdDLQA5PS+Az9HonA8lNnflCnTBaqel8kq0QyvZjxBYD9/Yl
9BmNLxRj7O1XTQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:19:02 2024 by rpki-client on console-fra.rpki-client.org