Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
File:                     MgJHUW6RAX4tvLVyyg8poSKBrPA.mft (raw, json)
Hash identifier:          DzYCTeXJ2qPDGEikgBxnoEF+sFY5zQ2j89feb/p668g=
Subject key identifier:   AB:E9:4A:1F:F7:0B:92:03:D2:7B:01:F7:87:6A:FD:06:EB:72:16:6A
Authority key identifier: 32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0
Certificate issuer:       /CN=320247516e91017e2dbcb572ca0f29a12281acf0
Certificate serial:       019356F696817D632AF71E193921CE085E64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
Manifest number:          0218
Signing time:             Sat 23 Nov 2024 03:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:21 +0000
Files and hashes:         1: 2UppjTO_hdeUfGVHwX-49DDLcZ0.roa (hash: ubTxHdqO886FOcrliAHFxl7Q7pzMz+8G/gvxflqPCsM=)
                          2: MgJHUW6RAX4tvLVyyg8poSKBrPA.crl (hash: LJzhOC/c+QVO0fkvaxU268rzLZprYehAn+JUHvPEafQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:96:81:7d:63:2a:f7:1e:19:39:21:ce:08:5e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320247516e91017e2dbcb572ca0f29a12281acf0
        Validity
            Not Before: Nov 23 03:00:21 2024 GMT
            Not After : Nov 24 03:00:21 2024 GMT
        Subject: CN=abe94a1ff70b9203d27b01f7876afd06eb72166a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:95:34:ca:c6:87:cd:64:85:8b:e9:ba:6e:99:
                    d3:07:bb:0a:3e:24:c5:5e:ef:8b:b9:13:3e:2c:35:
                    ad:86:76:85:50:40:48:3b:0e:4e:f8:7c:9d:6c:28:
                    dc:ae:05:4b:20:e7:fe:1f:0b:e7:92:81:4e:d8:b5:
                    6b:2b:c8:e9:92:7d:d6:c4:0a:94:ee:f5:92:01:57:
                    7f:db:79:79:b8:16:94:0f:d5:7f:10:32:95:9d:03:
                    7a:5b:43:89:d6:e4:3a:e9:8c:c5:20:2b:5b:17:5d:
                    02:3a:90:99:73:20:3a:8d:49:b4:8a:2a:3b:c9:5e:
                    91:8a:1f:dd:03:d7:5f:e3:79:e1:e9:0c:23:91:54:
                    c2:74:a5:2b:11:a4:9d:53:53:f3:af:01:bc:ff:86:
                    5e:e2:4f:7f:c0:23:64:e3:22:17:cc:d9:6a:4c:83:
                    17:95:87:13:1c:b4:13:de:b6:db:b2:f5:b2:3c:80:
                    84:df:bb:b5:b5:2c:77:9e:7c:3c:84:d3:0d:92:4a:
                    1b:76:1c:cc:c1:cf:10:cb:63:1c:63:11:b7:49:ba:
                    cc:9c:97:f5:93:1d:c7:8d:42:de:e9:48:a1:e1:cc:
                    64:35:1d:be:f8:ff:ca:1a:e8:62:91:d1:6c:a4:c6:
                    75:21:45:de:76:e8:0a:65:02:1d:aa:aa:10:42:dc:
                    d5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E9:4A:1F:F7:0B:92:03:D2:7B:01:F7:87:6A:FD:06:EB:72:16:6A
            X509v3 Authority Key Identifier:
                keyid:32:02:47:51:6E:91:01:7E:2D:BC:B5:72:CA:0F:29:A1:22:81:AC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgJHUW6RAX4tvLVyyg8poSKBrPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/624e63-b876-4ef4-bf19-e43620880cb6/1/MgJHUW6RAX4tvLVyyg8poSKBrPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:25:83:77:f3:b9:d2:fe:2f:06:05:b5:40:4d:1d:ca:61:e0:
         f6:12:f7:9d:65:84:4b:1a:86:fc:75:94:60:85:1c:6b:78:6e:
         ab:73:2a:93:79:be:10:fa:e1:21:0f:51:91:aa:ee:ef:39:9b:
         3e:53:44:05:05:e1:85:8c:d7:ed:3b:5d:c0:06:ca:f2:38:e8:
         3d:cf:f0:b3:e2:c5:a3:8b:f3:db:85:75:3f:60:2a:7a:b6:d6:
         7f:2f:65:f8:7b:2f:30:e6:3c:6d:53:c8:6e:1c:34:db:aa:64:
         0b:14:f5:cc:d3:19:fc:33:41:f5:1e:35:e5:55:4c:24:d9:de:
         69:df:1a:f0:a3:08:f5:3c:1d:f8:94:9f:6d:23:5c:db:96:21:
         df:63:c8:10:97:a9:e0:0e:8f:d2:29:dd:68:94:ec:9a:84:ee:
         56:61:1e:dd:3b:b0:6d:e8:19:70:61:4b:ae:22:91:57:7a:a0:
         25:4d:13:a2:99:6f:54:3b:fa:49:a7:50:7a:b3:c3:cb:75:41:
         a0:c0:e8:20:e9:ff:a1:0d:48:5f:e5:7c:cd:cb:6f:60:0a:a2:
         b3:ef:2c:fe:9c:92:be:2a:75:d1:1c:90:da:ca:90:69:a6:18:
         b4:73:42:51:87:f1:d6:66:e6:a8:e3:70:0e:d9:fb:c9:ae:c0:
         37:a4:51:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9paBfWMq9x4ZOSHOCF5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDI0NzUxNmU5MTAxN2UyZGJjYjU3MmNhMGYyOWExMjI4
MWFjZjAwHhcNMjQxMTIzMDMwMDIxWhcNMjQxMTI0MDMwMDIxWjAzMTEwLwYDVQQD
EyhhYmU5NGExZmY3MGI5MjAzZDI3YjAxZjc4NzZhZmQwNmViNzIxNjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJU0ysaHzWSFi+m6bpnTB7sKPiTF
Xu+LuRM+LDWthnaFUEBIOw5O+HydbCjcrgVLIOf+HwvnkoFO2LVrK8jpkn3WxAqU
7vWSAVd/23l5uBaUD9V/EDKVnQN6W0OJ1uQ66YzFICtbF10COpCZcyA6jUm0iio7
yV6Rih/dA9df43nh6QwjkVTCdKUrEaSdU1PzrwG8/4Ze4k9/wCNk4yIXzNlqTIMX
lYcTHLQT3rbbsvWyPICE37u1tSx3nnw8hNMNkkobdhzMwc8Qy2McYxG3SbrMnJf1
kx3HjULe6Uih4cxkNR2++P/KGuhikdFspMZ1IUXedugKZQIdqqoQQtzVLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvpSh/3C5ID0nsB94dq/QbrchZqMB8GA1UdIwQY
MBaAFDICR1FukQF+Lby1csoPKaEigazwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdKSFVXNlJBWDR0dkxWeXlnOHBvU0tCclBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82MjRlNjMtYjg3Ni00ZWY0LWJmMTkt
ZTQzNjIwODgwY2I2LzEvTWdKSFVXNlJBWDR0dkxWeXlnOHBvU0tCclBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS82MjRlNjMtYjg3Ni00ZWY0LWJmMTktZTQzNjIwODgwY2I2
LzEvTWdKSFVXNlJBWDR0dkxWeXlnOHBvU0tCclBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXiWDd/O5
0v4vBgW1QE0dymHg9hL3nWWESxqG/HWUYIUca3huq3Mqk3m+EPrhIQ9Rkaru7zmb
PlNEBQXhhYzX7TtdwAbK8jjoPc/ws+LFo4vz24V1P2AqerbWfy9l+HsvMOY8bVPI
bhw026pkCxT1zNMZ/DNB9R415VVMJNnead8a8KMI9Twd+JSfbSNc25Yh32PIEJep
4A6P0indaJTsmoTuVmEe3TuwbegZcGFLriKRV3qgJU0ToplvVDv6SadQerPDy3VB
oMDoIOn/oQ1IX+V8zctvYAqis+8s/pySvip10RyQ2sqQaaYYtHNCUYfx1mbmqONw
Dtn7ya7AN6RRLQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:53 2024 by rpki-client on console-ams.rpki-client.org