Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
File:                     I399sDMxTEc82hlODfefHDddo_Q.mft (raw, json)
Hash identifier:          FBuJX90M6SHm2lAPElvyhDQgyfRQ+jIA1sVuAnen368=
Subject key identifier:   DB:A9:8E:91:C3:40:55:82:21:08:95:1B:FF:BD:55:DD:1B:F9:53:FA
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Certificate issuer:       /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial:       0193549BD3B07B810EC9AA983F7A349668A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
Manifest number:          1394
Signing time:             Fri 22 Nov 2024 16:01:58 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:58 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:58 +0000
Files and hashes:         1: FDL9nXfJsxy4B0eTjrkmhxtqIQY.roa (hash: zsJGlFFxdMa9D+vJl6WrwtfteEMMNeJ0plGG4w6nRFQ=)
                          2: I399sDMxTEc82hlODfefHDddo_Q.crl (hash: k/xHgMUhcW+2tiNQxA8BRLFUUhy8En7iJSkwV84xj3s=)
                          3: W1P5dKfuw5hrshhUs34-OCzDBkw.roa (hash: KJ6YL7gffvQohgEl4JgChkYggCKJbyG9WlRh/MZe/Xc=)
                          4: mgZJPL0nR3ZEehAjPHzv4kedWww.roa (hash: 89tsemg9bwljRD4qyclcULNS89/gjzWeZiimoRrRYFo=)
                          5: wTSlLAapVK-K-mMLcdSHFCZMVrE.roa (hash: 3D1AhrE1B4fyUWJgZWcegasLf4kbw/3Ho2+sFtiZE1w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:d3:b0:7b:81:0e:c9:aa:98:3f:7a:34:96:68:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
        Validity
            Not Before: Nov 22 16:01:58 2024 GMT
            Not After : Nov 23 16:01:58 2024 GMT
        Subject: CN=dba98e91c34055822108951bffbd55dd1bf953fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:bf:bc:c5:84:c3:b6:7c:f5:3f:d1:8b:fc:
                    55:c6:19:57:de:81:4b:ba:a2:e1:60:d3:bd:ee:02:
                    1a:0d:c2:78:20:56:34:97:fc:f7:6f:0e:2a:0c:e2:
                    ca:eb:c6:08:40:ad:99:6c:3d:0b:68:60:b2:5f:eb:
                    e1:c5:86:6d:e4:2b:b7:04:44:f2:6f:2f:bd:50:ce:
                    3b:61:bf:63:3a:09:7e:97:66:64:6b:18:e9:71:74:
                    76:f4:91:a8:82:23:12:93:00:ce:93:64:d7:10:8f:
                    6e:5b:29:5d:49:c6:22:a6:04:79:6d:3b:cd:e2:d9:
                    e2:af:a2:fe:1d:e8:65:00:99:bf:ba:7c:c4:6f:be:
                    27:46:87:41:c5:1c:6e:dd:44:c1:56:87:0f:bf:75:
                    70:9e:fa:aa:76:88:16:e5:cc:d6:e2:94:e4:00:9b:
                    8c:ee:10:15:3b:ab:e5:b0:9f:47:5f:a8:0b:63:5a:
                    01:a5:47:e7:13:0a:6e:43:d9:06:a3:a8:c0:1a:20:
                    e7:e1:a9:dd:aa:0d:04:0a:32:6e:d5:ce:52:55:38:
                    64:79:3c:8b:16:2a:f7:0f:ad:6c:e3:f0:2b:58:ba:
                    df:d5:fd:d7:03:35:14:24:21:70:5b:6d:8c:98:e3:
                    68:76:22:a3:1f:0c:63:a4:2c:18:2a:da:91:0f:4d:
                    5c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A9:8E:91:C3:40:55:82:21:08:95:1B:FF:BD:55:DD:1B:F9:53:FA
            X509v3 Authority Key Identifier:
                keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:da:1b:d8:f0:f2:f9:a1:81:b6:e9:91:72:c2:ed:d2:c4:b3:
         dd:81:d7:b1:87:0f:5e:d9:40:6f:6b:0c:29:d5:2b:0a:aa:f2:
         09:73:85:c1:a3:29:59:38:d4:75:6a:98:dd:d0:32:02:97:f2:
         00:68:08:b1:80:14:11:a2:9c:0c:8a:73:52:70:54:a1:f5:79:
         3c:97:11:e5:6b:9d:2e:7a:b7:20:53:90:81:59:3c:25:dc:99:
         09:bc:c7:84:04:62:79:a7:9e:23:c1:09:0b:bb:e6:83:70:63:
         75:af:cd:bc:6a:0c:63:66:af:e4:58:1e:5b:d3:c0:47:41:94:
         56:42:04:27:90:95:00:c1:53:68:00:77:4a:89:97:cf:31:ca:
         c7:75:67:4f:e2:bd:3f:e2:de:0d:13:e2:e2:a9:ac:1e:a4:cd:
         f0:ca:e5:b7:6a:e4:34:c1:d9:54:51:21:b8:e1:fb:e2:b4:6a:
         2e:03:c0:ba:f5:00:61:a7:9c:7f:c4:d5:82:2d:c8:47:03:77:
         c6:cd:88:68:f2:aa:df:d1:3f:b7:1d:3e:3c:15:dc:64:0b:13:
         c6:16:0b:2a:41:77:44:2b:aa:ae:41:23:d2:6a:ce:99:23:3b:
         d7:5b:f1:b3:8f:af:27:e0:61:01:92:e4:c0:7a:c0:b9:89:85:
         d0:e7:74:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUm9Owe4EOyaqYP3o0lminMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2Y3ZGIwMzMzMTRjNDczY2RhMTk0ZTBkZjc5ZjFjMzc1
ZGEzZjQwHhcNMjQxMTIyMTYwMTU4WhcNMjQxMTIzMTYwMTU4WjAzMTEwLwYDVQQD
EyhkYmE5OGU5MWMzNDA1NTgyMjEwODk1MWJmZmJkNTVkZDFiZjk1M2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD6/vMWEw7Z89T/Ri/xVxhlX3oFL
uqLhYNO97gIaDcJ4IFY0l/z3bw4qDOLK68YIQK2ZbD0LaGCyX+vhxYZt5Cu3BETy
by+9UM47Yb9jOgl+l2ZkaxjpcXR29JGogiMSkwDOk2TXEI9uWyldScYipgR5bTvN
4tnir6L+HehlAJm/unzEb74nRodBxRxu3UTBVocPv3VwnvqqdogW5czW4pTkAJuM
7hAVO6vlsJ9HX6gLY1oBpUfnEwpuQ9kGo6jAGiDn4andqg0ECjJu1c5SVThkeTyL
Fir3D61s4/ArWLrf1f3XAzUUJCFwW22MmONodiKjHwxjpCwYKtqRD01cCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNupjpHDQFWCIQiVG/+9Vd0b+VP6MB8GA1UdIwQY
MBaAFCN/fbAzMUxHPNoZTg33nxw3XaP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYt
ZWUwNjAzOTQ5ZjkzLzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYtZWUwNjAzOTQ5Zjkz
LzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdob2PDy
+aGBtumRcsLt0sSz3YHXsYcPXtlAb2sMKdUrCqryCXOFwaMpWTjUdWqY3dAyApfy
AGgIsYAUEaKcDIpzUnBUofV5PJcR5WudLnq3IFOQgVk8JdyZCbzHhARieaeeI8EJ
C7vmg3Bjda/NvGoMY2av5FgeW9PAR0GUVkIEJ5CVAMFTaAB3SomXzzHKx3VnT+K9
P+LeDRPi4qmsHqTN8Mrlt2rkNMHZVFEhuOH74rRqLgPAuvUAYaecf8TVgi3IRwN3
xs2IaPKq39E/tx0+PBXcZAsTxhYLKkF3RCuqrkEj0mrOmSM711vxs4+vJ+BhAZLk
wHrAuYmF0Od05A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:12:54 2024 by rpki-client on console-ams.rpki-client.org