Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
File:                     c45l-wPm1gfYviBDRdbgWkYLmk8.mft (raw, json)
Hash identifier:          ybaeNlLuSOXd/tnWL9h3WbRh/HznMXj39QOKQw+r37Q=
Subject key identifier:   53:17:0E:4D:88:85:27:DC:47:D0:1A:C8:58:58:02:49:02:83:A9:76
Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
Certificate issuer:       /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Certificate serial:       019356890FBBB0CC815BB373CF40FC2D8A90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
Manifest number:          0B71
Signing time:             Sat 23 Nov 2024 01:00:43 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:43 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:43 +0000
Files and hashes:         1: KY0cRWQfsJpiyusBxDSmoB2UZjM.roa (hash: L2C2HMPbJS2Kv5bJ2NLXJVSu+jStvN+1QR4ixo/zh4w=)
                          2: c45l-wPm1gfYviBDRdbgWkYLmk8.crl (hash: 1BeT49U4pkuLYfil/cF+ixwA36ul0E4KmSMUx9Ie56s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:0f:bb:b0:cc:81:5b:b3:73:cf:40:fc:2d:8a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
        Validity
            Not Before: Nov 23 01:00:43 2024 GMT
            Not After : Nov 24 01:00:43 2024 GMT
        Subject: CN=53170e4d888527dc47d01ac8585802490283a976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:56:00:13:78:a4:92:db:ba:6a:cb:2b:1a:
                    f3:55:20:7e:0b:5c:78:4a:b6:71:64:57:ac:de:d5:
                    7f:c9:d9:8b:9e:5e:18:86:00:1c:e6:71:52:a7:2f:
                    17:6b:7d:5e:ee:31:fa:f4:4a:c6:63:ef:9d:37:e6:
                    d2:9a:f7:8f:7f:69:d0:fa:00:61:9f:0e:33:54:4d:
                    e0:66:8e:ff:56:98:06:b4:1a:5e:fd:7e:d7:dd:46:
                    6f:81:61:0b:92:24:5a:79:d6:8a:46:9a:b0:98:ac:
                    d3:4f:3e:fd:b2:0a:7b:e0:33:37:34:5b:d1:99:0a:
                    6b:e5:b7:f3:4b:36:b2:d6:de:8b:61:63:27:df:a9:
                    67:31:b5:8d:6e:b5:dc:8b:2c:68:e2:30:1d:8b:3d:
                    19:d1:bb:c5:86:e1:32:ac:fc:3e:9d:b5:76:35:36:
                    3c:d8:ec:52:fe:77:26:39:2c:5e:d6:21:ae:c4:25:
                    ba:c1:60:69:c1:aa:0c:5b:a2:c1:f7:71:12:a1:58:
                    0f:ad:2d:26:fe:3f:69:b2:9f:ce:53:a9:2c:34:1e:
                    35:eb:eb:af:b0:9f:80:7e:cd:92:25:ed:04:3f:bb:
                    cd:51:b2:1a:38:d3:63:20:23:af:86:ae:83:45:9c:
                    71:1d:ed:02:8a:fa:7e:cb:0a:c7:28:da:f7:a5:69:
                    93:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:17:0E:4D:88:85:27:DC:47:D0:1A:C8:58:58:02:49:02:83:A9:76
            X509v3 Authority Key Identifier:
                keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ef:0b:42:23:5a:01:63:61:6f:c5:33:f7:a4:d5:39:0e:33:
         6a:b0:36:7a:a3:9d:19:00:c6:e6:c9:55:9c:be:b7:f5:1d:8b:
         aa:56:08:38:38:aa:0c:1b:da:0b:59:c3:0c:63:13:14:c0:64:
         58:8d:1c:04:96:69:d0:2e:c9:de:e9:a9:ef:50:51:b1:f0:37:
         bb:b7:04:cd:5d:92:70:f4:f9:d0:84:23:ad:62:8f:ed:b4:66:
         8b:9d:82:b3:22:58:52:bb:8a:0a:a0:2e:1e:bc:1c:7b:52:51:
         05:ff:71:de:f1:aa:51:4c:4b:94:06:5e:87:00:5d:d4:8c:03:
         7b:45:0f:2b:6f:ba:9e:29:14:c8:2d:45:c2:e5:54:27:0f:50:
         22:d2:82:01:8b:73:08:2f:5c:c3:27:41:b3:f2:df:57:b9:c4:
         0e:77:08:a7:a1:f8:c7:ff:f9:51:92:50:44:88:65:fe:35:65:
         da:ec:8a:6b:fb:84:89:9e:b6:49:53:2d:c0:66:3f:3b:24:a8:
         e6:43:5c:ee:9e:77:b4:d5:4b:9e:fd:95:6e:8d:f1:73:4b:a8:
         5e:90:40:e0:10:8a:c1:19:89:45:ed:bc:1b:7e:a2:0c:30:07:
         87:04:d1:b9:13:48:b2:80:f6:58:81:21:00:ab:8c:b3:6d:80:
         fc:a8:ee:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiQ+7sMyBW7Nzz0D8LYqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczOGU2NWZiMDNlNmQ2MDdkOGJlMjA0MzQ1ZDZlMDVhNDYw
YjlhNGYwHhcNMjQxMTIzMDEwMDQzWhcNMjQxMTI0MDEwMDQzWjAzMTEwLwYDVQQD
Eyg1MzE3MGU0ZDg4ODUyN2RjNDdkMDFhYzg1ODU4MDI0OTAyODNhOTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn05WABN4pJLbumrLKxrzVSB+C1x4
SrZxZFes3tV/ydmLnl4YhgAc5nFSpy8Xa31e7jH69ErGY++dN+bSmvePf2nQ+gBh
nw4zVE3gZo7/VpgGtBpe/X7X3UZvgWELkiRaedaKRpqwmKzTTz79sgp74DM3NFvR
mQpr5bfzSzay1t6LYWMn36lnMbWNbrXciyxo4jAdiz0Z0bvFhuEyrPw+nbV2NTY8
2OxS/ncmOSxe1iGuxCW6wWBpwaoMW6LB93ESoVgPrS0m/j9psp/OU6ksNB416+uv
sJ+Afs2SJe0EP7vNUbIaONNjICOvhq6DRZxxHe0Civp+ywrHKNr3pWmThwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMXDk2IhSfcR9AayFhYAkkCg6l2MB8GA1UdIwQY
MBaAFHOOZfsD5tYH2L4gQ0XW4FpGC5pPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzQ1bC13UG0xZ2ZZdmlCRFJkYmdXa1lMbWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iYTYxY2UtOWM4Ni00MmVmLTkwZmIt
ZGQ1MTVlNjNjZmNiLzEvYzQ1bC13UG0xZ2ZZdmlCRFJkYmdXa1lMbWs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iYTYxY2UtOWM4Ni00MmVmLTkwZmItZGQ1MTVlNjNjZmNi
LzEvYzQ1bC13UG0xZ2ZZdmlCRFJkYmdXa1lMbWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOe8LQiNa
AWNhb8Uz96TVOQ4zarA2eqOdGQDG5slVnL639R2LqlYIODiqDBvaC1nDDGMTFMBk
WI0cBJZp0C7J3ump71BRsfA3u7cEzV2ScPT50IQjrWKP7bRmi52CsyJYUruKCqAu
Hrwce1JRBf9x3vGqUUxLlAZehwBd1IwDe0UPK2+6nikUyC1FwuVUJw9QItKCAYtz
CC9cwydBs/LfV7nEDncIp6H4x//5UZJQRIhl/jVl2uyKa/uEiZ62SVMtwGY/OySo
5kNc7p53tNVLnv2Vbo3xc0uoXpBA4BCKwRmJRe28G36iDDAHhwTRuRNIsoD2WIEh
AKuMs22A/Kju6Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:51 2024 by rpki-client on console-ams.rpki-client.org