Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
File:                     U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json)
Hash identifier:          KbKOPjUsznK4j2p3gOiu7bIqs4/0WKz4e6YruVQagQU=
Subject key identifier:   17:40:CA:24:34:76:39:FF:BA:F6:75:CB:C5:18:DD:4B:AF:BB:00:D9
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Certificate issuer:       /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial:       0193512B69115A8E118B23A1C17B434A1F20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
Manifest number:          05B3
Signing time:             Fri 22 Nov 2024 00:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:19 +0000
Files and hashes:         1: IkOZvLt_lD2otewh2GnLpKQ0ErY.roa (hash: L2oelXZf+GRgIXsRy9ECPN7TjmtT6+oi/FkpfMHJKvk=)
                          2: KEc2xuqUXfK6skp9bZzVvlyu4lI.roa (hash: TQCYWjTA3yRTifr6iA2gnwXl+XLnBqvJroz5wVwsxhQ=)
                          3: Ny-n9deG5AfM5sWz7Hn9pA380eo.roa (hash: rzx9WIeETiPIQudPrDbKqrRjUNx9eRRPJJDjzuvnNhE=)
                          4: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: lv0bS/o4RLBTJuFmlGMT5yTQgcDc2yNwVPBthHSOc1o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:69:11:5a:8e:11:8b:23:a1:c1:7b:43:4a:1f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
        Validity
            Not Before: Nov 22 00:00:19 2024 GMT
            Not After : Nov 23 00:00:19 2024 GMT
        Subject: CN=1740ca24347639ffbaf675cbc518dd4bafbb00d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:9e:27:c6:79:80:74:3a:f2:d2:38:c2:43:
                    7f:17:43:65:dd:3e:3e:b2:2d:54:6d:8f:d4:0b:8f:
                    12:13:93:5a:de:5b:45:f4:d9:9f:87:51:5b:3a:f9:
                    56:6a:5c:76:16:1a:36:87:6a:a9:ed:fd:f6:4f:b0:
                    9b:49:bd:c6:ac:37:a3:42:aa:b1:28:3c:46:9b:a9:
                    36:db:bd:e0:56:72:ff:c6:8a:c0:af:98:ba:cd:50:
                    41:aa:66:30:7a:ad:cb:8e:4d:3b:2b:99:75:f6:0d:
                    90:9a:e6:66:96:72:c7:a7:43:22:f7:2b:68:13:e9:
                    2c:19:34:3d:78:1e:f3:f5:a4:2d:3e:91:47:25:ea:
                    96:89:ba:c8:4c:46:60:2a:19:66:ac:4f:a7:7c:a3:
                    f2:53:b3:45:60:a7:db:98:b3:a0:5c:5c:dc:27:0d:
                    50:a4:4c:2a:71:40:7f:09:a8:bb:40:fa:c6:56:d7:
                    80:ee:7b:c2:bc:73:71:da:65:7a:b4:74:44:73:f6:
                    22:c1:a9:1f:f1:39:9d:bf:7f:aa:44:e7:77:a4:a1:
                    ac:ba:e3:82:f0:0b:c7:bc:01:c0:80:62:43:27:2d:
                    7c:60:cd:a7:d9:ed:5f:4d:1f:c0:4e:b0:b5:60:df:
                    97:08:42:94:78:37:43:5b:04:7c:5b:39:3e:58:fd:
                    c2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:40:CA:24:34:76:39:FF:BA:F6:75:CB:C5:18:DD:4B:AF:BB:00:D9
            X509v3 Authority Key Identifier:
                keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:6d:4f:23:1f:cf:bd:c7:d2:b6:c0:a3:64:ef:cc:1d:55:56:
         1a:8f:3e:11:04:36:0b:97:12:41:1c:77:18:f8:7d:59:48:e8:
         94:e5:31:47:30:d2:8b:20:28:12:ef:dd:ce:a0:87:59:b4:48:
         65:6b:3d:98:b5:fd:ec:e4:61:25:fe:de:27:1f:0d:80:4b:2e:
         b7:94:55:9e:e3:09:ed:70:6f:75:e9:60:4d:a7:19:b1:64:c1:
         3f:4e:4e:33:d8:0b:2c:b6:a3:33:c1:22:d2:91:00:b6:15:ea:
         9b:e2:a3:6c:68:99:2d:7d:1e:9f:3e:f4:1f:c0:2d:5e:b7:d6:
         1b:bd:c1:3b:44:77:2e:9c:e6:cf:7d:81:76:1c:8a:ca:98:5c:
         c5:91:f9:c0:0d:9a:7a:de:89:a1:bb:78:73:c3:5c:da:b4:73:
         57:af:2b:29:88:23:ec:80:f8:a9:84:e5:72:24:d7:9c:f0:ff:
         fa:c2:6e:15:cf:39:b3:03:a7:d9:78:c1:67:da:72:f4:a4:52:
         24:c7:56:9c:f3:8b:2c:e3:c7:a9:f4:95:de:79:e0:5e:8d:ce:
         9a:6a:84:b6:6b:98:04:0b:57:5c:c6:47:e1:75:61:01:3e:3f:
         1d:71:16:16:f5:af:23:90:38:f3:7d:c1:18:9c:c8:7b:30:ae:
         c9:14:88:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRK2kRWo4RiyOhwXtDSh8gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzM1Y2E4M2ZjZGY3MWIyNDRlZDgwM2FjNDY4ZTE0NTNk
ODI2OGYwHhcNMjQxMTIyMDAwMDE5WhcNMjQxMTIzMDAwMDE5WjAzMTEwLwYDVQQD
EygxNzQwY2EyNDM0NzYzOWZmYmFmNjc1Y2JjNTE4ZGQ0YmFmYmIwMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YaeJ8Z5gHQ68tI4wkN/F0Nl3T4+
si1UbY/UC48SE5Na3ltF9Nmfh1FbOvlWalx2Fho2h2qp7f32T7CbSb3GrDejQqqx
KDxGm6k2273gVnL/xorAr5i6zVBBqmYweq3Ljk07K5l19g2QmuZmlnLHp0Mi9yto
E+ksGTQ9eB7z9aQtPpFHJeqWibrITEZgKhlmrE+nfKPyU7NFYKfbmLOgXFzcJw1Q
pEwqcUB/Cai7QPrGVteA7nvCvHNx2mV6tHREc/Yiwakf8Tmdv3+qROd3pKGsuuOC
8AvHvAHAgGJDJy18YM2n2e1fTR/ATrC1YN+XCEKUeDdDWwR8Wzk+WP3C2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdAyiQ0djn/uvZ1y8UY3UuvuwDZMB8GA1UdIwQY
MBaAFFPDXKg/zfcbJE7YA6xGjhRT2CaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQt
NDExYTI3MTIxNjRkLzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQtNDExYTI3MTIxNjRk
LzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN21PIx/P
vcfStsCjZO/MHVVWGo8+EQQ2C5cSQRx3GPh9WUjolOUxRzDSiyAoEu/dzqCHWbRI
ZWs9mLX97ORhJf7eJx8NgEsut5RVnuMJ7XBvdelgTacZsWTBP05OM9gLLLajM8Ei
0pEAthXqm+KjbGiZLX0enz70H8AtXrfWG73BO0R3Lpzmz32BdhyKyphcxZH5wA2a
et6Jobt4c8Nc2rRzV68rKYgj7ID4qYTlciTXnPD/+sJuFc85swOn2XjBZ9py9KRS
JMdWnPOLLOPHqfSV3nngXo3OmmqEtmuYBAtXXMZH4XVhAT4/HXEWFvWvI5A4833B
GJzIezCuyRSIKQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:03:51 2024 by rpki-client on console-ams.rpki-client.org