Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
File:                     VEi51bhRcfcmQjiyegMGxWz7a08.mft (raw, json)
Hash identifier:          02szYWd3sIzcferwbVEp/zDxo0FJaEyyy/3lmcrWaaU=
Subject key identifier:   F7:9A:E3:7D:26:5F:91:20:CC:03:49:FB:DE:25:91:5A:C6:86:47:9F
Authority key identifier: 54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F
Certificate issuer:       /CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
Certificate serial:       0193591C2182D8068F1E3992647334503713
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
Manifest number:          04B8
Signing time:             Sat 23 Nov 2024 13:00:35 +0000
Manifest this update:     Sat 23 Nov 2024 13:00:35 +0000
Manifest next update:     Sun 24 Nov 2024 13:00:35 +0000
Files and hashes:         1: 64vfCO4QFqKJ5KmJXi_HetaFXVc.roa (hash: 6ezupoKrftKHi8nkJOdbuFxPjzDU+lBEdzROrTkFqrs=)
                          2: VEi51bhRcfcmQjiyegMGxWz7a08.crl (hash: JDrjJc9/uxTt3Sk3URhb/9CmtwjTg/i57Cu/2H2GpnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:1c:21:82:d8:06:8f:1e:39:92:64:73:34:50:37:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5448b9d5b85171f7264238b27a0306c56cfb6b4f
        Validity
            Not Before: Nov 23 13:00:35 2024 GMT
            Not After : Nov 24 13:00:35 2024 GMT
        Subject: CN=f79ae37d265f9120cc0349fbde25915ac686479f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b3:ee:aa:18:32:f3:a4:c7:56:90:db:f0:54:
                    84:72:62:e1:5d:45:7c:57:2e:f8:73:55:6c:ef:3a:
                    7d:e2:f0:88:b8:3f:e0:54:12:af:e0:47:86:ff:34:
                    bd:3a:b9:75:fa:c0:e7:90:c5:ee:39:03:e6:2c:e0:
                    01:b0:d2:81:03:95:77:e6:f5:47:88:86:a7:c6:47:
                    bb:f1:3d:72:59:f8:14:48:58:2e:fc:42:09:f9:ac:
                    68:cc:eb:45:fe:6b:6f:bc:4e:7c:fd:2e:f8:1e:6d:
                    f2:57:37:7e:4c:74:23:ca:24:17:94:b7:96:8f:ee:
                    54:e1:17:91:0d:ae:f6:f2:69:b9:d4:18:2a:aa:b4:
                    75:45:d1:58:bf:94:e9:f0:34:3e:19:d9:71:63:87:
                    e4:71:de:83:ba:02:c1:f1:78:93:df:91:c1:f8:34:
                    f9:cf:01:8d:93:5d:5f:62:d2:5f:4c:1a:4d:f1:3f:
                    a4:1a:13:12:d9:01:18:f0:ec:ee:0a:e0:6f:34:01:
                    b5:a2:5f:95:31:51:71:5c:3a:50:bb:72:59:fe:9e:
                    ed:4b:b8:64:f2:0c:f9:15:b0:72:a8:ef:3f:81:c5:
                    22:08:77:66:2e:c3:f7:20:fa:c3:1b:b4:b5:6b:44:
                    b8:c1:7c:46:b6:ec:a6:79:96:f0:85:71:63:d3:14:
                    03:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9A:E3:7D:26:5F:91:20:CC:03:49:FB:DE:25:91:5A:C6:86:47:9F
            X509v3 Authority Key Identifier:
                keyid:54:48:B9:D5:B8:51:71:F7:26:42:38:B2:7A:03:06:C5:6C:FB:6B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEi51bhRcfcmQjiyegMGxWz7a08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/45df63-95f0-4254-8c9b-b223c72a5593/1/VEi51bhRcfcmQjiyegMGxWz7a08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b8:27:8c:15:be:de:35:3d:59:67:2d:03:09:22:5c:ca:0c:
         05:67:c7:ac:a4:17:67:8f:4c:b9:b8:48:6d:7d:e8:de:2a:48:
         1e:b5:d2:45:4c:65:cd:e2:5f:a6:d4:59:9f:d7:ee:c5:a6:a6:
         aa:30:25:94:97:2b:e9:23:91:b2:3d:51:dc:08:53:d8:a4:fd:
         58:9a:28:52:66:0d:98:3a:ee:a9:78:cc:08:e8:75:52:d8:b2:
         5d:6c:57:ce:de:ef:e2:cd:66:87:57:ee:9f:70:49:34:e8:a9:
         e3:5c:e2:f4:01:0e:99:58:86:a4:8c:5b:67:dc:b6:0b:f2:06:
         e9:fb:fc:7a:d1:17:44:f6:5f:1f:97:ae:6e:43:4a:68:69:3f:
         5a:5c:b6:e8:6d:56:93:83:12:10:74:59:f6:bd:e6:00:87:26:
         4a:20:78:86:07:2c:11:14:69:16:ef:d7:75:ad:fb:95:4d:cc:
         8f:9f:1b:bb:73:ef:39:aa:4b:01:cc:33:c5:5b:83:73:28:75:
         00:b7:8d:d4:b9:4d:9c:6b:e8:03:2a:b8:db:08:3d:42:28:0f:
         da:a6:47:69:83:9e:a3:70:67:3c:17:ed:cb:29:c3:77:b6:b2:
         ff:fb:d1:04:87:22:b3:91:e7:fe:00:12:39:3b:51:76:40:28:
         75:3b:1f:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZHCGC2AaPHjmSZHM0UDcTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDhiOWQ1Yjg1MTcxZjcyNjQyMzhiMjdhMDMwNmM1NmNm
YjZiNGYwHhcNMjQxMTIzMTMwMDM1WhcNMjQxMTI0MTMwMDM1WjAzMTEwLwYDVQQD
EyhmNzlhZTM3ZDI2NWY5MTIwY2MwMzQ5ZmJkZTI1OTE1YWM2ODY0NzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7Puqhgy86THVpDb8FSEcmLhXUV8
Vy74c1Vs7zp94vCIuD/gVBKv4EeG/zS9Orl1+sDnkMXuOQPmLOABsNKBA5V35vVH
iIanxke78T1yWfgUSFgu/EIJ+axozOtF/mtvvE58/S74Hm3yVzd+THQjyiQXlLeW
j+5U4ReRDa728mm51BgqqrR1RdFYv5Tp8DQ+GdlxY4fkcd6DugLB8XiT35HB+DT5
zwGNk11fYtJfTBpN8T+kGhMS2QEY8OzuCuBvNAG1ol+VMVFxXDpQu3JZ/p7tS7hk
8gz5FbByqO8/gcUiCHdmLsP3IPrDG7S1a0S4wXxGtuymeZbwhXFj0xQDvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPea430mX5EgzANJ+94lkVrGhkefMB8GA1UdIwQY
MBaAFFRIudW4UXH3JkI4snoDBsVs+2tPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVpNTFiaFJjZmNtUWppeWVnTUd4V3o3YTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80NWRmNjMtOTVmMC00MjU0LThjOWIt
YjIyM2M3MmE1NTkzLzEvVkVpNTFiaFJjZmNtUWppeWVnTUd4V3o3YTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi80NWRmNjMtOTVmMC00MjU0LThjOWItYjIyM2M3MmE1NTkz
LzEvVkVpNTFiaFJjZmNtUWppeWVnTUd4V3o3YTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7gnjBW+
3jU9WWctAwkiXMoMBWfHrKQXZ49MubhIbX3o3ipIHrXSRUxlzeJfptRZn9fuxaam
qjAllJcr6SORsj1R3AhT2KT9WJooUmYNmDruqXjMCOh1UtiyXWxXzt7v4s1mh1fu
n3BJNOip41zi9AEOmViGpIxbZ9y2C/IG6fv8etEXRPZfH5eubkNKaGk/Wly26G1W
k4MSEHRZ9r3mAIcmSiB4hgcsERRpFu/Xda37lU3Mj58bu3PvOapLAcwzxVuDcyh1
ALeN1LlNnGvoAyq42wg9QigP2qZHaYOeo3BnPBftyynDd7ay//vRBIcis5Hn/gAS
OTtRdkAodTsfeA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:53:13 2024 by rpki-client on console-ams.rpki-client.org