Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/cd39a7-ed1a-4bf3-b5a6-40d836c62829/1/XWRLkCyqF6mdZcRss6b42TnNmLU.mft
File:                     XWRLkCyqF6mdZcRss6b42TnNmLU.mft (raw, json)
Hash identifier:          pGfYaeFuGQrUaztfa2PI8pWv7Rh16MsVX75t+PAAuwY=
Subject key identifier:   D8:AD:05:1E:C3:0A:A6:BC:C7:80:7C:EA:D5:FC:46:7C:53:10:8E:A6
Authority key identifier: 5D:64:4B:90:2C:AA:17:A9:9D:65:C4:6C:B3:A6:F8:D9:39:CD:98:B5
Certificate issuer:       /CN=5d644b902caa17a99d65c46cb3a6f8d939cd98b5
Certificate serial:       0193561AF5D2BFA4806803B3B39CC7F45D81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XWRLkCyqF6mdZcRss6b42TnNmLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/cd39a7-ed1a-4bf3-b5a6-40d836c62829/1/XWRLkCyqF6mdZcRss6b42TnNmLU.mft
Manifest number:          0C47
Signing time:             Fri 22 Nov 2024 23:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:27 +0000
Files and hashes:         1: 9u4MlE0b9sPL4DYard_TyzusMSs.roa (hash: xNJtJ3ljGRunrRqvR1juY4uMDPSy3sHnBiyd7hMw7Pc=)
                          2: L1VeIVQQZmHAmg4lk8ft9Y74iHE.roa (hash: dyHjZpGNXyMvvbGKzf8NFI5ogZZ4NDjnJv5xueH4Yi8=)
                          3: XWRLkCyqF6mdZcRss6b42TnNmLU.crl (hash: 4zUMaEKHd5ysawGTEnjPyTMOLgXyTOrJ/jjD3QWG58o=)
                          4: cLMX8bBVVSajj0J2R8-8rTZhcTA.roa (hash: eabZie9qSeiStaJfe1O1VLj2A1alZfffr0TTP2mIDSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/cd39a7-ed1a-4bf3-b5a6-40d836c62829/1/XWRLkCyqF6mdZcRss6b42TnNmLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/cd39a7-ed1a-4bf3-b5a6-40d836c62829/1/XWRLkCyqF6mdZcRss6b42TnNmLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XWRLkCyqF6mdZcRss6b42TnNmLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:f5:d2:bf:a4:80:68:03:b3:b3:9c:c7:f4:5d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d644b902caa17a99d65c46cb3a6f8d939cd98b5
        Validity
            Not Before: Nov 22 23:00:27 2024 GMT
            Not After : Nov 23 23:00:27 2024 GMT
        Subject: CN=d8ad051ec30aa6bcc7807cead5fc467c53108ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9e:9f:5b:0e:4b:a6:f2:bb:54:cd:38:e2:ea:
                    a8:9c:0f:8c:5e:ca:2b:ce:14:12:e6:0e:f1:2d:c5:
                    de:66:1c:c1:40:86:0c:38:b4:0b:03:07:f4:90:fc:
                    29:9b:fa:ad:73:7e:a8:65:60:76:e9:71:2a:1b:f2:
                    7e:54:5a:ae:19:d4:29:89:80:49:ce:5b:38:10:c9:
                    f6:f5:9e:d2:7f:dc:d0:eb:5c:a0:39:a4:dd:a3:be:
                    d6:79:e9:83:f9:f3:62:e0:2d:60:18:2d:07:ef:a8:
                    e8:93:b7:34:7b:44:d0:38:b2:79:be:a6:e7:a6:bf:
                    d3:85:7e:0a:66:9a:41:b6:ce:1f:0f:7e:88:76:c9:
                    bd:88:a0:35:48:f5:e3:a5:30:8f:d0:87:96:ea:78:
                    c0:0f:e6:01:9a:f7:29:7f:19:30:db:c4:8b:4d:d9:
                    6e:ab:12:2f:85:26:18:25:f0:ac:8f:05:40:b8:c2:
                    8c:34:11:b8:93:b8:1b:c7:ec:4b:59:d4:81:7e:47:
                    ec:92:8c:92:6f:51:3a:3b:2b:58:c5:42:c4:df:97:
                    4e:95:60:61:c0:53:ae:c2:99:1c:c4:1b:de:a6:b0:
                    64:c1:9f:81:9a:2f:6e:78:25:79:78:c6:23:42:89:
                    5c:84:4d:d9:5b:ec:ba:6c:96:58:e4:c1:92:f3:e5:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AD:05:1E:C3:0A:A6:BC:C7:80:7C:EA:D5:FC:46:7C:53:10:8E:A6
            X509v3 Authority Key Identifier:
                keyid:5D:64:4B:90:2C:AA:17:A9:9D:65:C4:6C:B3:A6:F8:D9:39:CD:98:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWRLkCyqF6mdZcRss6b42TnNmLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/cd39a7-ed1a-4bf3-b5a6-40d836c62829/1/XWRLkCyqF6mdZcRss6b42TnNmLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/cd39a7-ed1a-4bf3-b5a6-40d836c62829/1/XWRLkCyqF6mdZcRss6b42TnNmLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3b:6e:0f:3a:ec:4c:58:d8:0b:79:c9:40:98:24:a9:80:52:
         50:2d:d4:5b:11:20:10:b2:9e:9d:d0:77:7a:fa:96:e0:03:f1:
         d6:3d:29:da:bb:86:a4:2c:79:70:8b:53:79:4e:d7:c9:1f:51:
         af:8c:33:bf:9a:9d:18:c9:8b:28:56:ef:6a:79:11:c4:19:e4:
         cc:f3:e6:77:66:3f:93:17:66:80:81:48:ae:0f:f3:ca:55:f3:
         50:ea:41:f5:f9:85:85:cd:8e:53:7f:a8:a1:bc:07:06:c6:b3:
         7d:35:d5:63:66:79:79:44:5d:63:15:95:4b:e2:9a:17:d8:2c:
         07:13:44:1a:3c:d1:63:c8:d3:04:65:af:2d:26:d1:f1:d4:d5:
         7f:67:a4:8e:18:80:c3:9c:e9:97:00:5e:77:5a:f3:e1:ad:1a:
         69:66:4d:b1:6e:cc:30:86:6a:25:56:ea:64:d0:53:c0:5b:9d:
         ad:6c:54:6f:1b:fe:ea:55:18:f1:66:4c:74:ea:dc:10:8b:7c:
         63:d8:aa:fd:5b:7c:66:5f:9d:cf:c3:3a:0c:7d:55:24:31:06:
         89:4d:12:ef:85:dd:36:51:e6:47:63:22:43:86:70:38:99:7e:
         04:7f:b9:33:a9:d3:48:ba:b2:08:03:db:9c:78:af:e1:50:15:
         ab:41:3e:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWGvXSv6SAaAOzs5zH9F2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjQ0YjkwMmNhYTE3YTk5ZDY1YzQ2Y2IzYTZmOGQ5Mzlj
ZDk4YjUwHhcNMjQxMTIyMjMwMDI3WhcNMjQxMTIzMjMwMDI3WjAzMTEwLwYDVQQD
EyhkOGFkMDUxZWMzMGFhNmJjYzc4MDdjZWFkNWZjNDY3YzUzMTA4ZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ6fWw5LpvK7VM044uqonA+MXsor
zhQS5g7xLcXeZhzBQIYMOLQLAwf0kPwpm/qtc36oZWB26XEqG/J+VFquGdQpiYBJ
zls4EMn29Z7Sf9zQ61ygOaTdo77WeemD+fNi4C1gGC0H76jok7c0e0TQOLJ5vqbn
pr/ThX4KZppBts4fD36Idsm9iKA1SPXjpTCP0IeW6njAD+YBmvcpfxkw28SLTdlu
qxIvhSYYJfCsjwVAuMKMNBG4k7gbx+xLWdSBfkfskoySb1E6OytYxULE35dOlWBh
wFOuwpkcxBveprBkwZ+Bmi9ueCV5eMYjQolchE3ZW+y6bJZY5MGS8+WnPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNitBR7DCqa8x4B86tX8RnxTEI6mMB8GA1UdIwQY
MBaAFF1kS5AsqhepnWXEbLOm+Nk5zZi1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdSTGtDeXFGNm1kWmNSc3M2YjQyVG5ObUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jZDM5YTctZWQxYS00YmYzLWI1YTYt
NDBkODM2YzYyODI5LzEvWFdSTGtDeXFGNm1kWmNSc3M2YjQyVG5ObUxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jZDM5YTctZWQxYS00YmYzLWI1YTYtNDBkODM2YzYyODI5
LzEvWFdSTGtDeXFGNm1kWmNSc3M2YjQyVG5ObUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUztuDzrs
TFjYC3nJQJgkqYBSUC3UWxEgELKendB3evqW4APx1j0p2ruGpCx5cItTeU7XyR9R
r4wzv5qdGMmLKFbvankRxBnkzPPmd2Y/kxdmgIFIrg/zylXzUOpB9fmFhc2OU3+o
obwHBsazfTXVY2Z5eURdYxWVS+KaF9gsBxNEGjzRY8jTBGWvLSbR8dTVf2ekjhiA
w5zplwBed1rz4a0aaWZNsW7MMIZqJVbqZNBTwFudrWxUbxv+6lUY8WZMdOrcEIt8
Y9iq/Vt8Zl+dz8M6DH1VJDEGiU0S74XdNlHmR2MiQ4ZwOJl+BH+5M6nTSLqyCAPb
nHiv4VAVq0E+Fw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:24 2024 by rpki-client on console-ams.rpki-client.org