Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
File:                     _ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft (raw, json)
Hash identifier:          PN4EIMoRNrdhxqGu7BRbQGuyjiGkVn4YhKE5eZVvGu8=
Subject key identifier:   5E:BC:8F:EE:16:93:D2:BB:22:F9:D3:9E:00:1B:15:6F:4E:79:CD:2A
Authority key identifier: FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
Certificate issuer:       /CN=fc4c512fe288ac6a63107d00414434329c43a284
Certificate serial:       019356F6C31A9F198AE7540336848173BC96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
Manifest number:          0F62
Signing time:             Sat 23 Nov 2024 03:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:32 +0000
Files and hashes:         1: MhorYDQr13Hzi1RG-Jrxl-cOtSw.roa (hash: 9gBHepoU+2YPWeToKmcbeEBCsIRnJSlGiMe3UEEYTsI=)
                          2: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl (hash: kWE64dTB/wbQU6EF+qsIZT/1nP3NCQnfrp+eg8WWDj4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:c3:1a:9f:19:8a:e7:54:03:36:84:81:73:bc:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4c512fe288ac6a63107d00414434329c43a284
        Validity
            Not Before: Nov 23 03:00:32 2024 GMT
            Not After : Nov 24 03:00:32 2024 GMT
        Subject: CN=5ebc8fee1693d2bb22f9d39e001b156f4e79cd2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:07:ee:34:af:03:1f:4e:02:3e:c7:bd:50:
                    53:24:3e:9a:3d:06:bc:c2:dc:6e:50:b1:bb:7d:82:
                    73:10:04:39:d7:e7:15:71:77:ac:6d:f0:e4:48:de:
                    e0:f5:9a:e6:62:a3:9e:05:fd:5d:83:4a:63:0e:28:
                    4f:18:45:ef:c5:3b:c0:27:5f:da:e5:3e:d8:bf:8c:
                    cc:69:96:2e:81:07:4a:f8:4d:59:0c:86:c4:3a:a8:
                    b6:79:d7:15:b4:ef:80:53:6b:47:4a:cb:ca:b0:a8:
                    14:b5:58:0f:6f:c1:cb:56:79:c0:8d:f8:66:39:69:
                    0d:94:33:54:79:25:10:70:36:f2:d2:6a:e0:51:be:
                    eb:df:71:ca:db:22:b0:20:c9:65:6e:c7:ae:39:04:
                    c4:1c:33:76:50:a7:b2:7b:8e:5d:3b:ab:28:44:22:
                    b2:e8:a9:a3:64:23:2a:82:ae:47:82:7d:9c:47:d7:
                    ec:10:95:d4:a8:ba:72:15:c4:2e:1b:f1:3d:31:0c:
                    31:4c:b1:27:54:de:47:a5:56:5b:c8:91:fa:8e:75:
                    09:fc:38:b1:f7:46:2f:24:3d:b8:99:72:95:5b:cd:
                    df:6f:bc:f2:9d:19:1d:14:5f:34:04:80:84:e5:36:
                    88:13:00:93:8a:1f:ba:1b:08:8b:d1:79:22:e1:4a:
                    75:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BC:8F:EE:16:93:D2:BB:22:F9:D3:9E:00:1B:15:6F:4E:79:CD:2A
            X509v3 Authority Key Identifier:
                keyid:FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:de:3c:30:89:4f:12:6c:80:16:6b:9a:44:f8:35:ae:63:2e:
         8e:6c:3f:77:1e:bf:a5:dc:63:d4:64:bf:ea:4e:4e:31:2f:8d:
         9a:bd:09:74:64:79:6d:b0:ac:f6:72:d3:d1:07:ec:6a:79:26:
         6e:a5:22:7b:c4:cc:69:fe:f6:d6:1f:1e:95:f0:43:c8:6a:80:
         fd:91:c4:9c:5d:0c:fc:c6:ea:57:90:f0:60:7d:e7:fc:53:3a:
         11:33:a3:57:ca:2e:cf:d8:8f:e8:06:55:9c:db:58:5b:3e:39:
         62:64:06:11:b5:53:9f:f3:17:4a:01:e2:57:d1:17:0b:8c:ed:
         c5:3f:0e:7f:fe:c7:dd:8e:b6:d9:82:78:d2:30:ec:73:31:6f:
         1d:94:29:f6:f7:5f:6e:bd:cf:39:2b:51:b3:fa:07:24:e8:40:
         c3:a3:c1:a0:d6:a2:23:46:79:14:04:21:9c:8b:93:09:91:45:
         6e:a9:91:53:9b:71:4c:03:47:8f:f4:9a:40:85:bf:05:87:4b:
         eb:31:2a:13:fd:75:1f:88:ad:cf:bb:db:e7:ed:3f:7f:4e:7c:
         5c:bc:dd:6a:06:e6:27:7a:34:04:f9:ae:1b:ba:4e:ac:2d:0a:
         29:44:9c:ed:26:23:83:16:be:41:74:57:0d:ce:cd:61:49:28:
         ac:fb:90:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9sManxmK51QDNoSBc7yWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNGM1MTJmZTI4OGFjNmE2MzEwN2QwMDQxNDQzNDMyOWM0
M2EyODQwHhcNMjQxMTIzMDMwMDMyWhcNMjQxMTI0MDMwMDMyWjAzMTEwLwYDVQQD
Eyg1ZWJjOGZlZTE2OTNkMmJiMjJmOWQzOWUwMDFiMTU2ZjRlNzljZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc0H7jSvAx9OAj7HvVBTJD6aPQa8
wtxuULG7fYJzEAQ51+cVcXesbfDkSN7g9ZrmYqOeBf1dg0pjDihPGEXvxTvAJ1/a
5T7Yv4zMaZYugQdK+E1ZDIbEOqi2edcVtO+AU2tHSsvKsKgUtVgPb8HLVnnAjfhm
OWkNlDNUeSUQcDby0mrgUb7r33HK2yKwIMllbseuOQTEHDN2UKeye45dO6soRCKy
6KmjZCMqgq5Hgn2cR9fsEJXUqLpyFcQuG/E9MQwxTLEnVN5HpVZbyJH6jnUJ/Dix
90YvJD24mXKVW83fb7zynRkdFF80BICE5TaIEwCTih+6GwiL0Xki4Up19wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF68j+4Wk9K7IvnTngAbFW9Oec0qMB8GA1UdIwQY
MBaAFPxMUS/iiKxqYxB9AEFENDKcQ6KEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDFlNDUtYjE2Yy00Nzc5LTg3NGEt
MzE1YzAyYTU5ZmE1LzEvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yMDFlNDUtYjE2Yy00Nzc5LTg3NGEtMzE1YzAyYTU5ZmE1
LzEvX0V4UkwtS0lyR3BqRUgwQVFVUTBNcHhEb29RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArd48MIlP
EmyAFmuaRPg1rmMujmw/dx6/pdxj1GS/6k5OMS+Nmr0JdGR5bbCs9nLT0Qfsankm
bqUie8TMaf721h8elfBDyGqA/ZHEnF0M/MbqV5DwYH3n/FM6ETOjV8ouz9iP6AZV
nNtYWz45YmQGEbVTn/MXSgHiV9EXC4ztxT8Of/7H3Y622YJ40jDsczFvHZQp9vdf
br3POStRs/oHJOhAw6PBoNaiI0Z5FAQhnIuTCZFFbqmRU5txTANHj/SaQIW/BYdL
6zEqE/11H4itz7vb5+0/f058XLzdagbmJ3o0BPmuG7pOrC0KKUSc7SYjgxa+QXRX
Dc7NYUkorPuQGA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:55 2024 by rpki-client on console-fra.rpki-client.org