Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft
File:                     uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft (raw, json)
Hash identifier:          tcSBGODnbAUdquampldpP0qqVlgQzXTb4xvvvwguEJA=
Subject key identifier:   64:DD:14:BB:39:42:0F:55:CE:A6:A5:16:EC:8C:B0:05:20:01:CD:9B
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Certificate issuer:       /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial:       01935207C2A226B6ED4BFABF6D377D8D8931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft
Manifest number:          0FC4
Signing time:             Fri 22 Nov 2024 04:01:00 +0000
Manifest this update:     Fri 22 Nov 2024 04:01:00 +0000
Manifest next update:     Sat 23 Nov 2024 04:01:00 +0000
Files and hashes:         1: 77Gy3y2FQthq77jG07e0AAavBew.roa (hash: hcrG/tiZox3xsnBkKXNwzSDwn9vpN2IvLjXbWqGLVKg=)
                          2: ZRZwxqAiCITyJNRTnGxGJPOXa0I.roa (hash: VX1IPsGPvLoKouD63uaB7SQ49JZ4JNkiRMmEaiWb8CM=)
                          3: frQOIGlGBmJLWy7ubwkKLJlLQck.roa (hash: VU8Md4SnSeliWC3PUwRgWWhbjpVvoFNg1IFF08ncSU0=)
                          4: uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl (hash: H57K96Na86tesJV3nYkQ0R7woSUohZKjJpAjx6SXDZ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:c2:a2:26:b6:ed:4b:fa:bf:6d:37:7d:8d:89:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
        Validity
            Not Before: Nov 22 04:01:00 2024 GMT
            Not After : Nov 23 04:01:00 2024 GMT
        Subject: CN=64dd14bb39420f55cea6a516ec8cb0052001cd9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:59:cd:72:73:25:06:75:d1:90:79:ee:30:18:
                    da:ad:22:5b:77:aa:4d:20:a7:a1:e4:15:77:55:d1:
                    ad:75:01:24:11:a7:2e:f9:ca:6a:bc:f0:31:63:33:
                    51:87:08:ad:85:18:79:9c:88:40:e6:d8:3d:34:71:
                    e1:97:de:c9:7e:52:fc:5b:1c:bc:d6:6f:ee:e1:8b:
                    13:e2:fd:e2:d4:8a:4e:a3:e0:f9:b3:45:eb:84:c1:
                    ec:1c:24:ef:a4:72:2b:f5:90:5b:d7:06:dc:37:cb:
                    0c:7c:b0:22:4d:b2:cc:a0:1e:8e:cc:3b:5b:7d:5c:
                    e1:2d:09:4d:47:d8:af:e3:22:b1:f9:d8:5e:80:69:
                    80:bb:c6:f3:92:cd:96:3f:c5:0b:de:6b:91:7f:35:
                    e0:21:e6:2e:22:5d:e1:73:ac:c6:bc:e4:47:39:94:
                    35:d8:07:b9:6f:aa:ed:e5:85:bb:07:28:23:8a:79:
                    19:59:59:f0:6e:4a:37:6b:dd:d6:69:3a:f7:76:a2:
                    a6:51:9e:75:b7:02:cf:8b:6c:65:e4:ac:87:13:25:
                    b0:02:6b:7b:6c:0f:1d:87:70:27:ba:3b:be:07:54:
                    25:7f:70:b1:d8:7d:79:04:d1:38:0c:11:b7:05:99:
                    38:83:19:29:7d:f1:1a:02:be:d6:69:d0:ac:93:bb:
                    4f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DD:14:BB:39:42:0F:55:CE:A6:A5:16:EC:8C:B0:05:20:01:CD:9B
            X509v3 Authority Key Identifier:
                keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:70:f2:ea:47:31:1d:05:78:34:77:86:70:69:45:51:c3:40:
         94:3c:d3:5a:f8:6e:00:f0:9e:97:a8:91:17:e2:7b:69:20:51:
         dd:41:1f:4f:0e:cb:f5:2a:c7:11:cd:2d:ea:f3:47:4f:e0:00:
         f5:32:45:42:14:aa:83:43:87:77:ac:40:e3:6c:59:65:79:5b:
         8e:2a:ab:67:72:4b:ba:4d:53:90:29:e2:d3:8b:bf:c9:b4:b9:
         00:3e:5f:cd:cb:e7:df:27:de:c9:3a:b6:84:6d:d8:32:2d:1e:
         0a:72:20:7f:50:3e:7a:8f:d0:20:4c:fe:8f:9a:15:c3:ac:b6:
         59:bd:4c:dd:83:51:e8:cd:fd:40:09:bb:5a:94:10:cc:67:e5:
         81:28:a8:c5:d9:54:2f:8b:43:56:d6:92:85:4c:cf:b6:b3:e1:
         3e:fe:34:a9:4b:fe:2e:47:6d:e2:d3:a9:6a:de:28:aa:cb:da:
         95:f7:39:ac:e1:1a:f7:7d:1b:a1:cf:5d:94:5a:9b:a1:e7:f5:
         cd:d1:b5:70:6f:cc:fd:88:af:1d:40:8a:61:5f:5f:f6:d6:7d:
         75:8e:71:a4:a6:6c:5f:9e:c7:34:fc:96:1f:c9:63:e9:8a:d8:
         fb:8d:6e:82:95:70:4f:98:80:12:48:89:40:c7:14:d2:af:71:
         ef:59:11:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSB8KiJrbtS/q/bTd9jYkxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NzYyZGIxMjgyZmZkMDg0NzYxMjMyMDM4ZjgxZjVkMjll
NjQwZDUwHhcNMjQxMTIyMDQwMTAwWhcNMjQxMTIzMDQwMTAwWjAzMTEwLwYDVQQD
Eyg2NGRkMTRiYjM5NDIwZjU1Y2VhNmE1MTZlYzhjYjAwNTIwMDFjZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VnNcnMlBnXRkHnuMBjarSJbd6pN
IKeh5BV3VdGtdQEkEacu+cpqvPAxYzNRhwithRh5nIhA5tg9NHHhl97JflL8Wxy8
1m/u4YsT4v3i1IpOo+D5s0XrhMHsHCTvpHIr9ZBb1wbcN8sMfLAiTbLMoB6OzDtb
fVzhLQlNR9iv4yKx+dhegGmAu8bzks2WP8UL3muRfzXgIeYuIl3hc6zGvORHOZQ1
2Ae5b6rt5YW7BygjinkZWVnwbko3a93WaTr3dqKmUZ51twLPi2xl5KyHEyWwAmt7
bA8dh3Anuju+B1Qlf3Cx2H15BNE4DBG3BZk4gxkpffEaAr7WadCsk7tPkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTdFLs5Qg9VzqalFuyMsAUgAc2bMB8GA1UdIwQY
MBaAFLl2LbEoL/0IR2EjIDj4H10p5kDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mODE5MTUtNDA1ZS00YjU0LTljYjQt
NzBhNTU2YmE4YTExLzEvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mODE5MTUtNDA1ZS00YjU0LTljYjQtNzBhNTU2YmE4YTEx
LzEvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnDy6kcx
HQV4NHeGcGlFUcNAlDzTWvhuAPCel6iRF+J7aSBR3UEfTw7L9SrHEc0t6vNHT+AA
9TJFQhSqg0OHd6xA42xZZXlbjiqrZ3JLuk1TkCni04u/ybS5AD5fzcvn3yfeyTq2
hG3YMi0eCnIgf1A+eo/QIEz+j5oVw6y2Wb1M3YNR6M39QAm7WpQQzGflgSioxdlU
L4tDVtaShUzPtrPhPv40qUv+Lkdt4tOpat4oqsvalfc5rOEa930boc9dlFqboef1
zdG1cG/M/YivHUCKYV9f9tZ9dY5xpKZsX57HNPyWH8lj6YrY+41ugpVwT5iAEkiJ
QMcU0q9x71kR2Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:11 2024 by rpki-client on console-fra.rpki-client.org