Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
File:                     ZHU9ILmKDudww7UWaj9KB_BRW90.mft (raw, json)
Hash identifier:          fTFZqmpBBdvdMzx8oQ2te7B01JSShigzeUZnFrS9hfs=
Subject key identifier:   D8:EF:99:15:4B:9F:4C:CB:F5:16:77:99:0C:BB:39:B2:C9:F5:FF:6F
Authority key identifier: 64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
Certificate issuer:       /CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Certificate serial:       0193568A2EB04C46F3D3DD3F11CB35011856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:01:56 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:56 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:56 +0000
Files and hashes:         1: OT1WC93daMXIv8V6xgnOcLZ0Ix8.roa (hash: vT+qXhaFzOj2G7/I/rtqx5s8u8yY2TYQxlHx/qBnXPs=)
                          2: ZHU9ILmKDudww7UWaj9KB_BRW90.crl (hash: btdYImftjrTcTer7hG27GIFsM+fy6FCVQm3D2ouFaLU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:2e:b0:4c:46:f3:d3:dd:3f:11:cb:35:01:18:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
        Validity
            Not Before: Nov 23 01:01:56 2024 GMT
            Not After : Nov 24 01:01:56 2024 GMT
        Subject: CN=d8ef99154b9f4ccbf51677990cbb39b2c9f5ff6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:1d:36:8a:01:05:5a:1d:b9:90:53:ab:0a:
                    d1:82:88:3b:7c:c2:dc:5e:85:a7:29:e2:5d:d4:dc:
                    dc:08:ef:2b:06:62:5c:61:0d:ff:b8:99:11:18:e9:
                    92:02:3a:49:71:ba:17:0f:2e:8c:49:29:de:fe:03:
                    56:ad:ed:a6:a5:86:a4:c4:57:04:0c:c1:d3:08:02:
                    b4:b6:cc:27:57:76:52:ac:bb:ba:7b:f4:e0:49:96:
                    2a:8e:de:b5:88:bc:3e:8d:35:a9:91:dc:fc:b6:67:
                    c7:68:cc:8c:aa:f5:35:49:0a:d7:35:1d:9a:71:8d:
                    08:7e:e2:7b:09:d9:5e:87:59:59:b2:6c:79:6f:95:
                    b6:aa:0a:97:60:c1:34:1f:7f:ba:a9:71:8d:9c:e2:
                    36:05:09:75:d2:80:8b:93:48:63:db:f4:94:bd:04:
                    02:41:31:75:cd:1b:23:34:78:6d:13:b3:8a:39:7d:
                    48:ed:15:94:c0:52:72:39:8e:71:30:f4:b0:62:b9:
                    50:01:c9:40:21:8c:6e:ed:97:05:31:e1:39:43:30:
                    a1:f7:60:81:9e:35:18:15:b2:d1:e0:d5:2d:0b:9d:
                    62:55:2a:34:0a:c2:35:ac:2c:f3:d5:82:6c:85:49:
                    0c:3c:a3:5f:fe:db:dd:55:9f:54:c2:be:fd:86:f9:
                    08:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EF:99:15:4B:9F:4C:CB:F5:16:77:99:0C:BB:39:B2:C9:F5:FF:6F
            X509v3 Authority Key Identifier:
                keyid:64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:55:db:3e:40:30:b6:cd:7c:0c:b4:d0:c8:83:39:ab:8a:f2:
         26:46:69:d9:0e:4f:fa:f2:2e:ec:b8:9f:49:d3:ba:14:b2:fd:
         51:18:06:d5:db:bc:60:96:46:a7:52:11:55:0d:66:6f:19:c9:
         4f:dc:e4:5d:ff:d6:65:33:fe:54:dc:4e:f8:5d:ae:0b:30:a7:
         16:a7:73:82:d4:bf:d2:03:0a:a6:5a:8b:92:24:ae:63:39:15:
         97:0f:06:bf:09:80:70:54:5e:d7:c9:cd:a4:23:1e:c1:f2:28:
         66:2a:a3:13:b0:31:44:c6:4f:fa:6d:0c:23:09:38:90:c8:43:
         f0:28:d1:94:79:c6:a8:5f:9b:fe:26:76:ce:e6:62:9f:11:ba:
         71:49:1e:c3:a9:3c:b4:21:9c:bc:9f:75:d5:74:c2:6e:23:e8:
         11:90:5f:5c:09:a0:05:e5:eb:29:d8:ef:6d:8e:d1:c2:3e:a0:
         1a:8d:c2:5a:b0:0a:ad:f2:a3:bd:3a:21:0d:33:d5:53:52:9b:
         6a:18:dd:9c:ca:19:72:29:f6:07:b4:73:2e:9a:d8:2f:04:0c:
         b6:74:d1:d0:cc:9e:4b:de:e4:8b:3c:0e:28:0d:b8:95:b5:c1:
         c8:1d:e8:88:40:64:68:56:5a:6f:92:b1:05:96:71:38:26:0f:
         e4:02:27:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWii6wTEbz090/Ecs1ARhWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzUzZDIwYjk4YTBlZTc3MGMzYjUxNjZhM2Y0YTA3ZjA1
MTViZGQwHhcNMjQxMTIzMDEwMTU2WhcNMjQxMTI0MDEwMTU2WjAzMTEwLwYDVQQD
EyhkOGVmOTkxNTRiOWY0Y2NiZjUxNjc3OTkwY2JiMzliMmM5ZjVmZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNgdNooBBVoduZBTqwrRgog7fMLc
XoWnKeJd1NzcCO8rBmJcYQ3/uJkRGOmSAjpJcboXDy6MSSne/gNWre2mpYakxFcE
DMHTCAK0tswnV3ZSrLu6e/TgSZYqjt61iLw+jTWpkdz8tmfHaMyMqvU1SQrXNR2a
cY0IfuJ7Cdleh1lZsmx5b5W2qgqXYME0H3+6qXGNnOI2BQl10oCLk0hj2/SUvQQC
QTF1zRsjNHhtE7OKOX1I7RWUwFJyOY5xMPSwYrlQAclAIYxu7ZcFMeE5QzCh92CB
njUYFbLR4NUtC51iVSo0CsI1rCzz1YJshUkMPKNf/tvdVZ9Uwr79hvkIGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjvmRVLn0zL9RZ3mQy7ObLJ9f9vMB8GA1UdIwQY
MBaAFGR1PSC5ig7ncMO1Fmo/SgfwUVvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhVOUlMbUtEdWR3dzdVV2FqOUtCX0JSVzkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lYmVkN2QtNTA5MC00MTdhLWI1Yjgt
YWE5OTU5MDJiODRiLzEvWkhVOUlMbUtEdWR3dzdVV2FqOUtCX0JSVzkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lYmVkN2QtNTA5MC00MTdhLWI1YjgtYWE5OTU5MDJiODRi
LzEvWkhVOUlMbUtEdWR3dzdVV2FqOUtCX0JSVzkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1XbPkAw
ts18DLTQyIM5q4ryJkZp2Q5P+vIu7LifSdO6FLL9URgG1du8YJZGp1IRVQ1mbxnJ
T9zkXf/WZTP+VNxO+F2uCzCnFqdzgtS/0gMKplqLkiSuYzkVlw8GvwmAcFRe18nN
pCMewfIoZiqjE7AxRMZP+m0MIwk4kMhD8CjRlHnGqF+b/iZ2zuZinxG6cUkew6k8
tCGcvJ911XTCbiPoEZBfXAmgBeXrKdjvbY7Rwj6gGo3CWrAKrfKjvTohDTPVU1Kb
ahjdnMoZcin2B7RzLprYLwQMtnTR0MyeS97kizwOKA24lbXByB3oiEBkaFZab5Kx
BZZxOCYP5AInpQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:59 2024 by rpki-client on console-fra.rpki-client.org