Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File:                     1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier:          ZpSCPczhX3ynUsBZMsP4PovEVd97kAzv8igDBnVoW0w=
Subject key identifier:   C5:21:6D:87:B9:B7:38:CB:44:7E:70:ED:53:7B:B9:07:8E:B6:F0:AB
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer:       /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial:       0193568A8B0E95701E37C8D9983FB21FD7CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:02:20 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:20 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:20 +0000
Files and hashes:         1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: 3giEtwr4CRvMLdNT6LK9zlAiX7/bSnK4cXVjIOHRnm4=)
                          2: B_i3KyTIbQJzQB2bw8vw1GRDXLA.roa (hash: 1RTITM13iOT/YFDBRHU9+aCwpCdKIaaDOo3GimHOyZ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:8b:0e:95:70:1e:37:c8:d9:98:3f:b2:1f:d7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
        Validity
            Not Before: Nov 23 01:02:20 2024 GMT
            Not After : Nov 24 01:02:20 2024 GMT
        Subject: CN=c5216d87b9b738cb447e70ed537bb9078eb6f0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:22:ab:9e:84:66:06:98:b9:c4:1e:90:9e:6c:
                    44:6f:18:2f:fb:8c:60:1b:4d:2d:ad:9a:0e:e7:c1:
                    4f:9a:31:fc:b9:41:a0:7e:48:8f:95:7f:0e:5a:f3:
                    4a:39:a6:a6:7b:5d:2e:59:54:ab:bc:8e:47:6a:eb:
                    66:0e:a1:99:da:ee:e8:4b:12:67:7b:a1:bb:60:ab:
                    72:94:da:cb:45:07:91:aa:82:6c:fe:3e:07:82:4f:
                    08:ab:5c:e2:07:ad:45:2a:5d:7a:6f:9e:7a:98:21:
                    fa:9a:c4:1c:5d:0d:7d:44:75:5d:ff:05:fe:15:a6:
                    d4:14:32:84:cd:88:2c:fa:fa:88:29:9c:95:a2:5b:
                    4f:96:22:eb:dd:5f:0a:e3:b7:03:77:bc:91:bd:22:
                    5f:36:63:47:27:b6:07:4f:13:a6:ec:83:9c:4b:ad:
                    33:72:e8:2a:2e:ef:5d:2b:c5:f9:01:ff:11:8b:24:
                    f3:14:9c:bb:e1:cc:05:39:23:eb:12:b2:87:4b:49:
                    59:b0:95:61:8b:0e:ca:67:4b:f5:36:ba:4d:bf:d1:
                    71:d5:cb:87:18:f3:ee:cd:2e:6c:17:6b:f8:37:31:
                    b7:2b:e8:54:63:a1:d8:9d:4e:87:70:65:96:5d:3b:
                    4d:8f:f2:e2:6e:1c:8d:54:c2:ce:6d:19:5c:70:69:
                    22:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:21:6D:87:B9:B7:38:CB:44:7E:70:ED:53:7B:B9:07:8E:B6:F0:AB
            X509v3 Authority Key Identifier:
                keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b0:a1:3a:e9:72:66:89:6f:e4:26:97:a8:2f:c4:7a:15:c8:
         f3:67:76:a5:b4:61:92:aa:85:48:8c:b3:fa:03:61:da:2f:56:
         38:f4:c3:14:d0:4f:4d:4f:47:76:9c:a8:2a:97:f7:17:27:1b:
         15:ef:7f:14:a1:f6:e8:94:2e:95:76:d7:13:c1:03:67:a5:0f:
         61:79:ae:81:91:7c:83:74:54:6f:86:e2:b1:ce:3b:b8:f0:a8:
         a5:5c:85:07:5d:fc:1e:62:75:47:6d:ab:a1:b8:1b:8c:1f:11:
         9f:0d:9f:b1:f1:f6:46:9d:3e:1d:65:f1:36:79:b1:1d:c3:c5:
         6a:98:d2:46:b6:20:67:62:ba:8d:25:f2:f1:7b:6f:58:18:59:
         15:94:b2:b5:fd:88:1a:fb:fd:54:2e:84:90:4c:96:f7:a8:20:
         5d:7e:f6:f6:63:24:84:8a:42:f1:f6:3b:d3:e2:ae:8b:16:4a:
         9f:84:23:b4:3b:95:d6:10:33:1a:7d:9c:2a:b0:cf:69:8b:32:
         ec:35:f0:3b:c4:e4:03:5d:b9:ba:a6:1d:8f:12:53:b0:43:d4:
         56:50:26:6c:a4:e9:f8:50:84:d7:09:1a:ba:99:e5:4b:f0:86:
         51:c1:1d:60:04:bd:c3:8f:3b:af:2f:b9:85:48:4b:8e:87:d4:
         f6:99:58:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiosOlXAeN8jZmD+yH9fOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MjMyOWQ4ZDdlNTQxOTUzZTEyMGZkMDVmNjZjYzZlYmFi
MDY4NGQwHhcNMjQxMTIzMDEwMjIwWhcNMjQxMTI0MDEwMjIwWjAzMTEwLwYDVQQD
EyhjNTIxNmQ4N2I5YjczOGNiNDQ3ZTcwZWQ1MzdiYjkwNzhlYjZmMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iKrnoRmBpi5xB6QnmxEbxgv+4xg
G00trZoO58FPmjH8uUGgfkiPlX8OWvNKOaame10uWVSrvI5HautmDqGZ2u7oSxJn
e6G7YKtylNrLRQeRqoJs/j4Hgk8Iq1ziB61FKl16b556mCH6msQcXQ19RHVd/wX+
FabUFDKEzYgs+vqIKZyVoltPliLr3V8K47cDd7yRvSJfNmNHJ7YHTxOm7IOcS60z
cugqLu9dK8X5Af8RiyTzFJy74cwFOSPrErKHS0lZsJVhiw7KZ0v1NrpNv9Fx1cuH
GPPuzS5sF2v4NzG3K+hUY6HYnU6HcGWWXTtNj/LibhyNVMLObRlccGkiTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUhbYe5tzjLRH5w7VN7uQeOtvCrMB8GA1UdIwQY
MBaAFNYjKdjX5UGVPhIP0F9mzG66sGhNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUt
NzMyMDJmMGUxZDAzLzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUtNzMyMDJmMGUxZDAz
LzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7ChOuly
Zolv5CaXqC/EehXI82d2pbRhkqqFSIyz+gNh2i9WOPTDFNBPTU9HdpyoKpf3Fycb
Fe9/FKH26JQulXbXE8EDZ6UPYXmugZF8g3RUb4bisc47uPCopVyFB138HmJ1R22r
obgbjB8Rnw2fsfH2Rp0+HWXxNnmxHcPFapjSRrYgZ2K6jSXy8XtvWBhZFZSytf2I
Gvv9VC6EkEyW96ggXX729mMkhIpC8fY70+KuixZKn4QjtDuV1hAzGn2cKrDPaYsy
7DXwO8TkA125uqYdjxJTsEPUVlAmbKTp+FCE1wkaupnlS/CGUcEdYAS9w487ry+5
hUhLjofU9plYfw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:09 2024 by rpki-client on console-ams.rpki-client.org