Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
File:                     _SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft (raw, json)
Hash identifier:          nt7kBL5KysIMRzeCj7vFNlTi/lQNVkE8Q9imkWjQ7MU=
Subject key identifier:   45:6B:0B:CB:D4:A3:59:05:54:C4:8E:D9:EA:BF:A1:20:48:EE:DD:38
Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4
Certificate issuer:       /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
Certificate serial:       0193572E03F718861A5E90141760D45E83F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
Manifest number:          0E81
Signing time:             Sat 23 Nov 2024 04:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:53 +0000
Files and hashes:         1: 28Pth53wKhWgK1J2V3VEf5zc6dw.roa (hash: Dxnox5Uo6i9Gkwk4VTAU+c7xVJK2oc5ivhC+9xu5gFk=)
                          2: BzRVuGa9ZH90S05u94vSOvcBnUQ.roa (hash: JoKiKixrlz/LCSMXUsYwcansVa+Sa7pt25+HFHDkWSA=)
                          3: K68G3dzuNkbWyzH-ZFsGQEEDbnQ.roa (hash: ypC9UNvcdbqSuXYuGIw4OB2Xjnp2Ol8KsW7qZsQdwEo=)
                          4: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl (hash: vSSi3N/dMrAhPTImksWPWv56VsOQ5+cyWrYUQZFnzCQ=)
                          5: _qEGUBs24kp-lFGWWQFL5oR2mao.roa (hash: aqKxwzkGdXqTsoFlt3DPbqi2MgvKUJo+TD03kn5Q2ko=)
                          6: ql3We4QVrTrcgYEhzy2kg-DIxvk.roa (hash: +2S1iCIA3tqYmwDDO+fJRilI+hUr6M1vkn4uOvn1UyY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2e:03:f7:18:86:1a:5e:90:14:17:60:d4:5e:83:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
        Validity
            Not Before: Nov 23 04:00:53 2024 GMT
            Not After : Nov 24 04:00:53 2024 GMT
        Subject: CN=456b0bcbd4a3590554c48ed9eabfa12048eedd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b9:af:28:a3:ca:8c:92:35:a9:94:e0:7a:db:
                    ab:22:f2:df:94:31:4f:87:c0:94:cf:c6:6e:2d:d7:
                    41:b2:9e:3a:e1:e5:b9:67:02:31:e3:af:7e:ed:05:
                    ef:8b:d9:28:67:b0:cd:52:4c:8d:ae:d7:ba:be:95:
                    af:a2:54:3b:2e:85:07:ac:78:01:ce:25:31:4f:4d:
                    c2:b8:3d:e3:da:a3:ce:92:df:e1:f7:0e:0a:24:35:
                    14:cc:01:b9:99:83:c9:6a:f5:c6:67:5a:e9:a2:b5:
                    10:e0:c0:2f:8e:3c:88:62:6e:af:bd:3f:df:9d:4f:
                    f3:6f:03:5f:ce:4f:e8:5c:51:b9:15:25:85:94:b4:
                    4c:40:a4:81:2e:9a:d7:28:7e:9d:57:f4:80:3f:3e:
                    8f:cc:a6:41:a4:7c:4c:8a:36:f1:30:91:f2:fc:86:
                    f7:20:ea:84:86:94:7e:53:df:06:da:ab:d3:84:7e:
                    e2:58:6e:20:d4:d4:fb:01:11:f7:e9:2a:c4:d1:a5:
                    b9:73:93:a8:81:dd:92:c8:24:0a:6d:f6:60:0e:b8:
                    88:9f:28:ec:c9:bb:c5:88:8c:49:bc:97:91:93:dd:
                    ea:56:0a:80:f4:53:7f:c4:1d:f0:d1:51:91:ff:00:
                    14:d2:9d:0f:3d:19:0d:4a:e3:49:4d:ef:a1:20:94:
                    88:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6B:0B:CB:D4:A3:59:05:54:C4:8E:D9:EA:BF:A1:20:48:EE:DD:38
            X509v3 Authority Key Identifier:
                keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ed:87:c3:5b:7f:f7:67:05:1b:c7:30:bb:c6:5c:e1:91:bd:
         07:10:a5:5c:1b:03:39:80:77:50:c8:53:03:01:be:c1:1a:c8:
         aa:12:a6:a8:f9:12:9a:3c:2d:04:69:a8:8f:39:19:b3:cd:f1:
         23:6d:dd:17:96:de:5d:1a:47:d8:81:4c:e6:de:c0:6e:7e:9b:
         ad:cc:e0:5b:f8:65:13:a5:2f:25:23:5c:e8:c6:89:f8:9c:c0:
         be:59:5e:38:ba:0e:e0:15:6f:b0:d9:e8:46:69:fe:38:56:95:
         d9:c2:b7:ff:40:9b:c3:0d:12:f1:d5:0d:aa:5d:e6:78:48:c1:
         93:c0:9f:97:97:1b:bd:84:ca:94:21:84:c5:ba:d0:eb:1a:8b:
         03:70:88:79:d2:21:32:59:b0:c4:f3:93:36:7e:18:0a:c8:6b:
         60:74:b0:f9:6b:6a:d8:ed:23:b0:aa:7f:83:1e:0c:30:d3:97:
         54:bc:37:fb:3f:c6:df:48:61:a0:56:7d:1f:7a:e0:18:bd:b5:
         46:d6:da:fa:91:2f:15:ca:5b:e0:f3:6f:a5:f6:b1:6d:89:f6:
         8b:5b:c8:bc:fd:80:3b:24:57:b3:4e:8a:7b:54:be:86:8a:d9:
         9a:ff:e9:a6:c8:f1:c3:43:61:ed:3a:63:a0:4f:c7:34:b2:27:
         18:ba:2e:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLgP3GIYaXpAUF2DUXoP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMjFjYjRiYWExNTg2MmQxYjU3NzNiZjJiZTYwY2E1ZjRm
YzI0ZDQwHhcNMjQxMTIzMDQwMDUzWhcNMjQxMTI0MDQwMDUzWjAzMTEwLwYDVQQD
Eyg0NTZiMGJjYmQ0YTM1OTA1NTRjNDhlZDllYWJmYTEyMDQ4ZWVkZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rmvKKPKjJI1qZTgeturIvLflDFP
h8CUz8ZuLddBsp464eW5ZwIx469+7QXvi9koZ7DNUkyNrte6vpWvolQ7LoUHrHgB
ziUxT03CuD3j2qPOkt/h9w4KJDUUzAG5mYPJavXGZ1rporUQ4MAvjjyIYm6vvT/f
nU/zbwNfzk/oXFG5FSWFlLRMQKSBLprXKH6dV/SAPz6PzKZBpHxMijbxMJHy/Ib3
IOqEhpR+U98G2qvThH7iWG4g1NT7ARH36SrE0aW5c5Oogd2SyCQKbfZgDriInyjs
ybvFiIxJvJeRk93qVgqA9FN/xB3w0VGR/wAU0p0PPRkNSuNJTe+hIJSI7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVrC8vUo1kFVMSO2eq/oSBI7t04MB8GA1UdIwQY
MBaAFP0hy0uqFYYtG1dzvyvmDKX0/CTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zMjY2MDYtMTRiYS00NDM2LTk5ODUt
YmU1NTIwYTVjODIxLzEvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zMjY2MDYtMTRiYS00NDM2LTk5ODUtYmU1NTIwYTVjODIx
LzEvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAe2Hw1t/
92cFG8cwu8Zc4ZG9BxClXBsDOYB3UMhTAwG+wRrIqhKmqPkSmjwtBGmojzkZs83x
I23dF5beXRpH2IFM5t7Abn6brczgW/hlE6UvJSNc6MaJ+JzAvlleOLoO4BVvsNno
Rmn+OFaV2cK3/0Cbww0S8dUNql3meEjBk8Cfl5cbvYTKlCGExbrQ6xqLA3CIedIh
MlmwxPOTNn4YCshrYHSw+Wtq2O0jsKp/gx4MMNOXVLw3+z/G30hhoFZ9H3rgGL21
Rtba+pEvFcpb4PNvpfaxbYn2i1vIvP2AOyRXs06Ke1S+horZmv/ppsjxw0Nh7Tpj
oE/HNLInGLoueQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:50 2024 by rpki-client on console-fra.rpki-client.org