Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File:                     FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier:          D4FTw6RpmY9A1lR+J//YoyRpTpG9ENSUjvaZBy4EvMs=
Subject key identifier:   BD:5D:40:E3:AC:82:3F:8F:97:D6:DD:89:BD:6F:D5:DF:49:A0:25:FE
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer:       /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial:       0193553F847188D3120237CCFA99924A7F4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number:          0468
Signing time:             Fri 22 Nov 2024 19:00:46 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:46 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:46 +0000
Files and hashes:         1: E4cEQ2bXcWZ0NrAGeBgn4KQ_rZ0.roa (hash: PlC9lf6Rj6VZK9vImLG8z7CxNna7Ca803KHh31aUxNE=)
                          2: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: NNnXgyyY5q9mZijqMo1lZd4aEILhKgdj/zb49B3OnbM=)
                          3: FsXQvMW39VrICgQXUTRnijnE4Ms.roa (hash: kQunhym5SBeXk4S/rNARlfY6YsFXbt5xVRKl0EWl2KU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:84:71:88:d3:12:02:37:cc:fa:99:92:4a:7f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153f24183d6c95185919349e6e92533736437b94
        Validity
            Not Before: Nov 22 19:00:46 2024 GMT
            Not After : Nov 23 19:00:46 2024 GMT
        Subject: CN=bd5d40e3ac823f8f97d6dd89bd6fd5df49a025fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5f:00:cc:28:e7:a5:79:d9:8a:58:ca:2c:65:
                    23:6c:b6:12:3e:6f:7a:86:b9:fe:bb:3b:34:60:4c:
                    94:9a:f1:2c:fe:69:a6:e7:5d:90:79:f3:d2:64:ff:
                    c0:82:f9:8c:60:96:25:8e:f2:87:aa:81:77:81:fc:
                    39:23:9a:02:a9:b9:f1:c9:ac:3f:1c:e4:88:29:99:
                    cc:e1:55:27:fb:4c:be:95:be:6e:00:92:81:82:94:
                    c7:f6:c8:2f:17:de:d7:ae:0c:54:7a:eb:68:fa:0b:
                    14:c9:71:1d:88:32:17:1d:c2:b7:ea:65:ef:45:df:
                    40:0a:d4:b2:ac:ad:6e:4b:c1:8e:d2:da:c8:c0:a4:
                    34:41:cc:5d:d3:22:0f:ef:9d:99:d6:66:91:9d:4f:
                    2a:69:d4:65:43:e1:f0:0d:b2:19:1a:7a:77:67:d9:
                    e7:3c:e8:8a:f3:86:b3:d1:01:5f:d5:4e:76:be:77:
                    4a:d1:d3:87:99:22:9c:c3:d8:bd:a6:00:0b:17:da:
                    d0:22:d9:37:98:b5:a4:9a:67:6a:26:83:12:1c:e6:
                    3a:39:13:3c:ef:a4:2f:13:b9:4f:00:12:c7:81:ff:
                    d0:3f:bb:00:dc:d6:4b:61:af:08:a2:a3:c8:e0:ab:
                    ce:71:78:4c:cc:c8:fe:1c:a8:75:7e:db:e3:51:e9:
                    06:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5D:40:E3:AC:82:3F:8F:97:D6:DD:89:BD:6F:D5:DF:49:A0:25:FE
            X509v3 Authority Key Identifier:
                keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:eb:02:76:5e:17:34:47:0e:a9:aa:5b:0f:39:c0:88:27:bb:
         b2:39:7a:7d:97:09:b9:76:a4:e9:4b:a1:29:4d:ac:0e:70:cb:
         a7:4f:a7:22:6a:d5:b7:0f:4d:4b:76:a8:8f:63:b7:b4:e2:ae:
         fb:d6:05:66:1a:19:1a:3d:8f:a6:30:23:5f:54:22:86:f4:71:
         62:17:aa:c6:15:69:92:b4:56:2b:4e:d0:10:c6:70:a6:e5:d7:
         d3:48:c5:59:7a:72:a3:58:bc:58:69:c0:ba:fa:1f:05:21:61:
         19:6c:5d:8a:e8:93:f3:bb:57:51:d8:98:67:0b:69:9a:08:52:
         2e:05:80:56:49:d2:85:0e:53:78:1d:b0:0f:a9:9e:6b:b2:96:
         7c:1b:f6:7e:01:5d:11:ea:71:92:f1:d0:02:3e:ac:7e:2f:c1:
         50:11:91:b1:02:1c:9b:c3:ca:6f:72:85:be:0e:2e:83:dc:28:
         ed:ff:ed:1d:dd:16:67:97:a8:f3:64:13:5d:ec:68:40:55:10:
         a2:70:b1:69:2b:ce:a5:c8:c6:ea:ac:32:d5:ef:9a:f4:01:8d:
         f0:fa:c0:30:cb:fe:27:60:7c:1f:c8:55:1d:ec:b4:33:ed:fd:
         0e:43:80:06:2a:fd:01:50:86:b5:ce:d6:14:de:c1:04:fb:85:
         22:4c:3d:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVP4RxiNMSAjfM+pmSSn9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2YyNDE4M2Q2Yzk1MTg1OTE5MzQ5ZTZlOTI1MzM3MzY0
MzdiOTQwHhcNMjQxMTIyMTkwMDQ2WhcNMjQxMTIzMTkwMDQ2WjAzMTEwLwYDVQQD
EyhiZDVkNDBlM2FjODIzZjhmOTdkNmRkODliZDZmZDVkZjQ5YTAyNWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV8AzCjnpXnZiljKLGUjbLYSPm96
hrn+uzs0YEyUmvEs/mmm512QefPSZP/AgvmMYJYljvKHqoF3gfw5I5oCqbnxyaw/
HOSIKZnM4VUn+0y+lb5uAJKBgpTH9sgvF97XrgxUeuto+gsUyXEdiDIXHcK36mXv
Rd9ACtSyrK1uS8GO0trIwKQ0Qcxd0yIP752Z1maRnU8qadRlQ+HwDbIZGnp3Z9nn
POiK84az0QFf1U52vndK0dOHmSKcw9i9pgALF9rQItk3mLWkmmdqJoMSHOY6ORM8
76QvE7lPABLHgf/QP7sA3NZLYa8IoqPI4KvOcXhMzMj+HKh1ftvjUekG7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1dQOOsgj+Pl9bdib1v1d9JoCX+MB8GA1UdIwQY
MBaAFBU/JBg9bJUYWRk0nm6SUzc2Q3uUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAt
NTgwNWQzZjNkYmIyLzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAtNTgwNWQzZjNkYmIy
LzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOsCdl4X
NEcOqapbDznAiCe7sjl6fZcJuXak6UuhKU2sDnDLp0+nImrVtw9NS3aoj2O3tOKu
+9YFZhoZGj2PpjAjX1QihvRxYheqxhVpkrRWK07QEMZwpuXX00jFWXpyo1i8WGnA
uvofBSFhGWxdiuiT87tXUdiYZwtpmghSLgWAVknShQ5TeB2wD6mea7KWfBv2fgFd
EepxkvHQAj6sfi/BUBGRsQIcm8PKb3KFvg4ug9wo7f/tHd0WZ5eo82QTXexoQFUQ
onCxaSvOpcjG6qwy1e+a9AGN8PrAMMv+J2B8H8hVHey0M+39DkOABir9AVCGtc7W
FN7BBPuFIkw9qw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:03 2024 by rpki-client on console-fra.rpki-client.org