Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File:                     g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier:          EgAOdMCI78NhdahLm20VRpcOe9uG/VRcsuKDUSD8PzU=
Subject key identifier:   85:B0:BD:75:D6:6D:F0:2B:A5:A8:E5:20:32:2F:56:B5:6A:33:6B:2E
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer:       /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial:       0193531A273F822DF6EF77EF5F8E936EF329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number:          107C
Signing time:             Fri 22 Nov 2024 09:00:42 +0000
Manifest this update:     Fri 22 Nov 2024 09:00:42 +0000
Manifest next update:     Sat 23 Nov 2024 09:00:42 +0000
Files and hashes:         1: 6cr935C4-s2oXADfpBKkZxO0JCs.roa (hash: 0UfCwrXGdagy6R8gEQHnEWp8loO7ZUV2cK3ueMpYj1o=)
                          2: KZq3wXxb5oWJX9XIXKoHMOiSrus.roa (hash: +/gQ5d0Ea0QWRZrbu1giGtnHU9e4ofMCVcowI8FhIog=)
                          3: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: k9I6w/jH5c4mFHxOTNlVxenpTe46s8ONZyM7Jh5IC/k=)
                          4: p0ib2SvKlJH3hSyq7mGMIlTu1TM.roa (hash: +mF0Oa0Q/q4eAgxQ2XvbH6COYaJ3P3u/YWsJq9lPsio=)
                          5: rLUSmJ-IZHEG96UOWMSw7kXgOhc.roa (hash: Pp1dLxAtSx8mOvHal04KqDRVQ8mU3fqlc3GuO7/i27U=)
                          6: tPim4UxpY4Q8BNjVQNkSmBkw95w.roa (hash: q+jTqMT1EX4hA3VzC3Pp9JTx5FTeqN9y7YvlKoA8xzo=)
                          7: zB87fk0pZN-cgLKW_xoF5XeZK3I.roa (hash: pneIchu3Qnfz3/lj57rnc7ZWx2ArPrPmjk/9Tl0QbUU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:1a:27:3f:82:2d:f6:ef:77:ef:5f:8e:93:6e:f3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
        Validity
            Not Before: Nov 22 09:00:42 2024 GMT
            Not After : Nov 23 09:00:42 2024 GMT
        Subject: CN=85b0bd75d66df02ba5a8e520322f56b56a336b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:5e:46:f6:21:60:7d:2e:28:62:96:dd:75:
                    2c:20:c6:ea:fc:1e:fe:94:53:db:97:b2:bf:e2:6a:
                    4a:56:a5:ee:e6:30:fe:76:44:3b:f6:ea:93:93:bf:
                    f2:f6:91:26:ec:92:1c:f9:f0:9f:db:a1:c3:90:cf:
                    de:8c:bd:cf:8c:bc:4d:76:bb:2c:2f:24:31:68:38:
                    42:6b:4b:90:58:3b:a4:d4:ed:69:89:36:9c:cc:47:
                    f7:bb:5b:65:3f:c4:96:e0:93:de:b8:03:21:02:5d:
                    a5:d3:2c:4d:af:a3:69:c3:46:cc:6d:78:29:13:48:
                    57:73:ac:f5:ca:78:e6:80:15:a2:d4:ac:b3:a9:67:
                    b2:2a:ce:27:13:88:7b:0e:f3:8a:76:d6:50:44:07:
                    b9:c8:93:37:66:39:1e:90:83:a6:29:66:b0:cd:21:
                    e4:42:07:2c:af:15:14:a9:00:e6:6a:a9:9a:cb:ee:
                    25:68:c4:8e:e8:23:63:4e:b7:a9:72:00:53:53:f3:
                    38:1b:19:ad:65:3c:9b:54:0e:d7:90:6a:5f:db:7b:
                    4e:b3:bc:04:8c:0c:33:04:e0:7e:a9:0a:6e:8b:0c:
                    7e:6d:f8:85:ac:fd:56:7f:40:bb:2f:6c:f4:fe:e7:
                    9f:d2:d9:bb:04:c6:c3:97:65:da:69:ed:ef:30:95:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B0:BD:75:D6:6D:F0:2B:A5:A8:E5:20:32:2F:56:B5:6A:33:6B:2E
            X509v3 Authority Key Identifier:
                keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:56:d4:9a:02:ee:1b:5a:2e:c2:a6:cf:42:db:05:22:2c:06:
         d2:4e:9d:a5:5a:55:88:cd:71:b6:e4:4e:06:d2:56:49:db:db:
         c1:6d:85:4b:bf:8b:a9:e3:79:d0:1e:cb:61:fa:c5:2f:fc:23:
         a4:be:43:bd:75:06:30:e4:2c:1f:3b:bd:9b:21:a0:4d:af:37:
         78:22:54:15:a9:d5:ee:5d:c8:81:a1:71:0a:ff:9d:b7:f0:34:
         11:b2:09:37:74:23:e1:2f:79:e9:0c:07:ab:00:93:e2:f2:8f:
         b9:26:bd:81:42:b8:fc:29:82:61:98:66:90:a9:bf:c1:02:48:
         61:b0:44:74:9d:ad:88:e4:70:3a:c3:9c:df:b5:61:fd:e9:20:
         ce:02:bb:a1:36:a0:a4:09:72:c3:e4:5d:e2:21:e1:fc:02:e9:
         7c:69:68:cd:4e:48:16:71:34:29:1f:31:d9:07:23:35:5f:44:
         82:45:25:44:28:b0:9d:40:90:ab:45:c0:64:19:ef:b0:28:dc:
         22:8a:dc:55:05:61:5e:cf:21:64:5b:68:3c:ab:6b:63:4f:34:
         f6:78:2c:e6:02:5f:ca:61:78:a7:5c:c6:62:43:f9:08:50:60:
         11:f0:32:52:e1:7e:da:5e:0b:6d:82:14:8c:28:1e:9e:e5:65:
         84:52:53:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTGic/gi3273fvX46TbvMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNTNhY2NiOTRlMTBjZjhjMmMyOTY3OTA2N2VlMzkwOTlm
NDA0ZDMwHhcNMjQxMTIyMDkwMDQyWhcNMjQxMTIzMDkwMDQyWjAzMTEwLwYDVQQD
Eyg4NWIwYmQ3NWQ2NmRmMDJiYTVhOGU1MjAzMjJmNTZiNTZhMzM2YjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M9eRvYhYH0uKGKW3XUsIMbq/B7+
lFPbl7K/4mpKVqXu5jD+dkQ79uqTk7/y9pEm7JIc+fCf26HDkM/ejL3PjLxNdrss
LyQxaDhCa0uQWDuk1O1piTaczEf3u1tlP8SW4JPeuAMhAl2l0yxNr6Npw0bMbXgp
E0hXc6z1ynjmgBWi1KyzqWeyKs4nE4h7DvOKdtZQRAe5yJM3ZjkekIOmKWawzSHk
QgcsrxUUqQDmaqmay+4laMSO6CNjTrepcgBTU/M4GxmtZTybVA7XkGpf23tOs7wE
jAwzBOB+qQpuiwx+bfiFrP1Wf0C7L2z0/uef0tm7BMbDl2Xaae3vMJWi8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWwvXXWbfArpajlIDIvVrVqM2suMB8GA1UdIwQY
MBaAFINTrMuU4Qz4wsKWeQZ+45CZ9ATTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEt
NmMzOTUwMTk0MzcwLzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEtNmMzOTUwMTk0Mzcw
LzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1bUmgLu
G1ouwqbPQtsFIiwG0k6dpVpViM1xtuROBtJWSdvbwW2FS7+LqeN50B7LYfrFL/wj
pL5DvXUGMOQsHzu9myGgTa83eCJUFanV7l3IgaFxCv+dt/A0EbIJN3Qj4S956QwH
qwCT4vKPuSa9gUK4/CmCYZhmkKm/wQJIYbBEdJ2tiORwOsOc37Vh/ekgzgK7oTag
pAlyw+Rd4iHh/ALpfGlozU5IFnE0KR8x2QcjNV9EgkUlRCiwnUCQq0XAZBnvsCjc
IorcVQVhXs8hZFtoPKtrY0809ngs5gJfymF4p1zGYkP5CFBgEfAyUuF+2l4LbYIU
jCgenuVlhFJT2w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:18:21 2024 by rpki-client on console-fra.rpki-client.org