Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
File:                     x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json)
Hash identifier:          t3x9dIh698devcTfrgcqN8Xeh0cRDah/Og5WvioIwVw=
Subject key identifier:   87:ED:9B:48:FA:DB:D2:CC:EC:DB:09:E1:FE:B8:F8:5B:89:B6:19:35
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Certificate issuer:       /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial:       019368FCDAEB11F3997EAE3E21278A7A7F25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
Manifest number:          0B45
Signing time:             Tue 26 Nov 2024 15:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 15:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 15:00:21 +0000
Files and hashes:         1: 6SmgyyQ2vILVmJ5MyNGseyMZmGQ.roa (hash: 8qyJT+9GnCviTTypk9c0s/agi8Suzs6DkRef+vJgnCQ=)
                          2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: cGYtLO4w5Og0OmidVN3u7M7lnpD2HE88mPdcENReBWw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 15:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:fc:da:eb:11:f3:99:7e:ae:3e:21:27:8a:7a:7f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
        Validity
            Not Before: Nov 26 15:00:21 2024 GMT
            Not After : Nov 27 15:00:21 2024 GMT
        Subject: CN=87ed9b48fadbd2ccecdb09e1feb8f85b89b61935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:48:2f:57:d6:71:d9:d0:b5:f7:8d:ec:22:e2:
                    4c:73:c0:a2:2b:fb:1c:c0:0c:ec:ed:f1:ad:05:97:
                    e6:23:3e:3d:07:47:52:a9:dc:be:20:ab:96:a5:b1:
                    45:d4:ff:5a:95:5d:30:48:20:44:a3:ce:1a:fc:6a:
                    51:7c:57:7f:4a:6f:87:d0:c3:6d:00:01:87:7f:8c:
                    be:97:af:ba:26:70:bc:f2:aa:8b:b1:8f:5f:16:90:
                    7b:80:64:4d:89:13:c7:be:23:1b:22:38:fb:69:58:
                    ad:8f:42:88:c2:d2:3d:eb:41:ee:b1:80:ba:32:34:
                    ce:bd:4b:c3:4d:84:b3:84:b5:3b:91:15:ba:0b:dd:
                    40:1b:37:79:52:29:c9:c1:08:25:07:0c:f4:d8:ed:
                    88:82:a7:83:e4:56:a7:ff:65:a0:ad:8d:1a:24:64:
                    c6:d6:01:8c:73:b4:ee:1b:94:35:46:b4:67:ec:61:
                    99:f2:e7:30:12:a9:09:39:c8:12:ed:af:02:ae:55:
                    bf:bd:11:fc:2c:b9:c9:12:26:61:bd:ad:51:6c:0c:
                    80:8a:06:46:37:ad:e7:12:73:75:4c:6e:d9:b7:a3:
                    88:49:29:1e:1a:92:f2:c7:c8:5d:d0:ef:d2:08:ba:
                    36:e9:05:9b:44:c1:ad:06:22:3f:36:ac:24:34:dd:
                    e1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:ED:9B:48:FA:DB:D2:CC:EC:DB:09:E1:FE:B8:F8:5B:89:B6:19:35
            X509v3 Authority Key Identifier:
                keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d6:96:2a:e3:d6:70:e6:8f:9b:b2:a9:f6:cc:01:59:38:4d:
         53:bd:87:bc:5b:b7:b4:4f:f0:03:2d:e7:e7:23:5e:46:6b:90:
         e8:63:0c:a8:60:3e:60:4c:fe:07:b6:38:99:f1:59:6f:ca:1c:
         33:52:5c:f5:48:e4:5e:1b:ee:11:b6:d0:1d:63:2e:8a:ed:7a:
         67:ea:dc:5b:b6:93:84:8d:2e:82:df:16:85:e0:37:7e:86:6c:
         1f:85:47:fd:38:42:2a:be:ce:32:45:6f:d5:83:20:15:e4:a9:
         25:f8:75:8f:61:c2:6b:11:66:37:37:21:85:fe:9c:78:af:e6:
         5d:46:97:7b:50:ef:da:98:fc:07:23:96:2b:cb:c8:78:58:86:
         a2:e9:65:e1:f4:cd:73:9e:2e:6d:b8:f0:60:05:22:b5:73:0f:
         b9:6b:a1:eb:05:bb:02:b3:29:7d:c1:e4:7a:37:bd:f5:92:d3:
         1a:a2:6b:7d:81:7e:e7:14:84:f5:42:66:87:c5:5e:0f:31:4a:
         60:f0:a5:44:ad:8d:2d:ec:43:bc:06:c4:2d:e2:c8:f3:92:a5:
         ec:c1:95:e2:92:eb:db:15:b2:f9:7e:68:cf:d4:1a:db:9a:e0:
         6b:85:a8:65:5e:d6:5d:e9:2c:a4:28:fc:db:20:d1:f3:50:75:
         88:6d:96:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNo/NrrEfOZfq4+ISeKen8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ODI3MzVhYTk4ZDQ2NDVkMDQxMDkzYTc2NjJhMTIzNzk1
MDNhMzEwHhcNMjQxMTI2MTUwMDIxWhcNMjQxMTI3MTUwMDIxWjAzMTEwLwYDVQQD
Eyg4N2VkOWI0OGZhZGJkMmNjZWNkYjA5ZTFmZWI4Zjg1Yjg5YjYxOTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EgvV9Zx2dC1943sIuJMc8CiK/sc
wAzs7fGtBZfmIz49B0dSqdy+IKuWpbFF1P9alV0wSCBEo84a/GpRfFd/Sm+H0MNt
AAGHf4y+l6+6JnC88qqLsY9fFpB7gGRNiRPHviMbIjj7aVitj0KIwtI960HusYC6
MjTOvUvDTYSzhLU7kRW6C91AGzd5UinJwQglBwz02O2IgqeD5Fan/2WgrY0aJGTG
1gGMc7TuG5Q1RrRn7GGZ8ucwEqkJOcgS7a8CrlW/vRH8LLnJEiZhva1RbAyAigZG
N63nEnN1TG7Zt6OISSkeGpLyx8hd0O/SCLo26QWbRMGtBiI/NqwkNN3hxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIftm0j629LM7NsJ4f64+FuJthk1MB8GA1UdIwQY
MBaAFMeCc1qpjUZF0EEJOnZioSN5UDoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wNTgyZmYtNzE4OS00YzNjLWE0NWYt
YjQ5M2E5ZGY0ZjhmLzEveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wNTgyZmYtNzE4OS00YzNjLWE0NWYtYjQ5M2E5ZGY0Zjhm
LzEveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdaWKuPW
cOaPm7Kp9swBWThNU72HvFu3tE/wAy3n5yNeRmuQ6GMMqGA+YEz+B7Y4mfFZb8oc
M1Jc9UjkXhvuEbbQHWMuiu16Z+rcW7aThI0ugt8WheA3foZsH4VH/ThCKr7OMkVv
1YMgFeSpJfh1j2HCaxFmNzchhf6ceK/mXUaXe1Dv2pj8ByOWK8vIeFiGoull4fTN
c54ubbjwYAUitXMPuWuh6wW7ArMpfcHkeje99ZLTGqJrfYF+5xSE9UJmh8VeDzFK
YPClRK2NLexDvAbELeLI85Kl7MGV4pLr2xWy+X5oz9Qa25rga4WoZV7WXekspCj8
2yDR81B1iG2Wjg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 21:15:47 2024 by rpki-client on console-fra.rpki-client.org