Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File:                     hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier:          +QIN+GXDzBnv4dz088jP1YA/rMy63rkAEMqVC7Ilkg0=
Subject key identifier:   05:B7:AD:3A:2C:24:63:1C:AB:CD:A5:84:C3:55:6F:6F:84:15:DF:42
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer:       /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial:       019352075BAC992B7BCE73D650BEA4A8A644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number:          74
Signing time:             Fri 22 Nov 2024 04:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:34 +0000
Files and hashes:         1: 1S0_Ud1FiJbWZBptn_PrMeZ35MQ.roa (hash: 20z+dU2laDKFyNd7A2Mbee622EXGr0wAFvjmZxsER74=)
                          2: M_2WdnC0FOhutC_vbnvQztNew7I.roa (hash: E1IY5bIIS2r14dHiDPaI/fSHR160ZsaEnqIZ9Zz+5kQ=)
                          3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: wMQryAs9CtqKIxAn1H8DPO2MnY6cuBjMfRvasdhtM0g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:5b:ac:99:2b:7b:ce:73:d6:50:be:a4:a8:a6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
        Validity
            Not Before: Nov 22 04:00:34 2024 GMT
            Not After : Nov 23 04:00:34 2024 GMT
        Subject: CN=05b7ad3a2c24631cabcda584c3556f6f8415df42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:b0:05:0b:a3:a4:f6:0f:d4:30:08:4f:67:
                    c0:59:5f:a8:c9:9f:f4:8e:bb:c0:e1:b2:57:f3:4c:
                    98:62:09:68:8a:5d:5e:46:4c:44:52:b5:56:70:98:
                    ce:b7:c9:e8:55:dd:72:44:43:91:dd:1d:42:a5:d7:
                    e0:c2:25:d8:58:f3:ab:f6:b8:54:ab:4e:82:df:2d:
                    a7:15:2f:dd:cd:b1:ad:87:f4:64:40:53:53:23:1d:
                    ca:64:93:8a:07:88:d8:6f:86:f6:ba:97:ec:5f:8c:
                    7e:27:04:77:10:f6:b8:25:46:68:2d:0a:7b:12:95:
                    a7:79:c5:4c:9a:8b:2e:d0:a5:78:6a:e5:2f:58:19:
                    70:a0:7a:ce:d2:ec:ea:c2:69:c9:7c:83:9f:33:63:
                    3e:c1:d9:dc:40:fa:7c:4a:35:ca:d8:64:2c:2a:1f:
                    46:ca:6f:4e:8a:e0:44:fd:44:66:b8:bb:45:f0:e8:
                    72:16:74:65:21:91:09:b5:c1:3f:53:76:b1:b8:c8:
                    f3:8c:ce:6f:d9:ae:51:4c:b1:f4:82:9e:04:8e:73:
                    26:f3:2d:86:24:40:09:8e:8b:ab:49:03:2c:fd:61:
                    54:ed:6a:d0:f3:25:c6:ee:dd:77:54:94:54:ee:86:
                    e5:bd:2e:65:6d:de:8c:74:0d:68:61:1b:59:df:e8:
                    82:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B7:AD:3A:2C:24:63:1C:AB:CD:A5:84:C3:55:6F:6F:84:15:DF:42
            X509v3 Authority Key Identifier:
                keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:02:49:47:4b:e9:a5:1f:dd:2f:bd:2b:21:1a:30:c5:f4:a3:
         cf:04:f8:40:0e:c7:f1:6f:42:6f:a2:27:3e:30:db:c9:e4:3b:
         c8:60:de:67:50:e4:12:3b:74:2b:ce:18:d8:84:57:3b:8d:f1:
         9a:36:2c:7c:e9:67:9a:dc:d7:c2:4c:5b:38:7f:8c:2e:05:a8:
         f9:ba:7a:ef:66:36:f9:7e:b9:05:83:6c:e4:e5:88:85:fc:51:
         47:cd:76:04:01:40:5f:ae:7b:ba:3a:2e:9a:cc:7f:77:99:8d:
         7d:f3:cb:68:01:1f:e5:da:c5:94:61:07:40:64:75:4b:6a:f2:
         fc:62:1c:b3:12:10:cc:6d:c9:15:9f:8a:84:1a:72:22:57:54:
         95:7d:39:3a:02:09:b7:de:d1:dc:3f:7a:73:f3:69:42:92:7a:
         31:03:6f:6b:cf:3b:08:08:c3:2d:5c:51:32:39:34:ee:6c:6d:
         3e:30:54:00:db:25:7c:17:60:f0:7e:85:0e:16:ca:74:ef:5c:
         87:85:55:17:94:84:f7:ce:c7:d9:d0:95:06:1c:a9:fe:33:22:
         6f:41:ec:f1:09:68:4c:9c:9a:d0:39:ed:6d:b4:e9:b9:4a:f4:
         af:c1:d9:48:ec:a1:93:a2:b0:80:78:f4:5d:bd:13:db:6a:7e:
         de:4b:74:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSB1usmSt7znPWUL6kqKZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWRlODczMmIxMDE3MTM4Zjg3MDMyYjcwZmEzYjdiODc3
NmVmNzEwHhcNMjQxMTIyMDQwMDM0WhcNMjQxMTIzMDQwMDM0WjAzMTEwLwYDVQQD
EygwNWI3YWQzYTJjMjQ2MzFjYWJjZGE1ODRjMzU1NmY2Zjg0MTVkZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq36wBQujpPYP1DAIT2fAWV+oyZ/0
jrvA4bJX80yYYgloil1eRkxEUrVWcJjOt8noVd1yREOR3R1CpdfgwiXYWPOr9rhU
q06C3y2nFS/dzbGth/RkQFNTIx3KZJOKB4jYb4b2upfsX4x+JwR3EPa4JUZoLQp7
EpWnecVMmosu0KV4auUvWBlwoHrO0uzqwmnJfIOfM2M+wdncQPp8SjXK2GQsKh9G
ym9OiuBE/URmuLtF8OhyFnRlIZEJtcE/U3axuMjzjM5v2a5RTLH0gp4EjnMm8y2G
JEAJjourSQMs/WFU7WrQ8yXG7t13VJRU7oblvS5lbd6MdA1oYRtZ3+iCewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAW3rTosJGMcq82lhMNVb2+EFd9CMB8GA1UdIwQY
MBaAFIRd6HMrEBcTj4cDK3D6O3uHdu9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQt
YTg4NWZiNDBkOTBkLzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQtYTg4NWZiNDBkOTBk
LzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngJJR0vp
pR/dL70rIRowxfSjzwT4QA7H8W9Cb6InPjDbyeQ7yGDeZ1DkEjt0K84Y2IRXO43x
mjYsfOlnmtzXwkxbOH+MLgWo+bp672Y2+X65BYNs5OWIhfxRR812BAFAX657ujou
msx/d5mNffPLaAEf5drFlGEHQGR1S2ry/GIcsxIQzG3JFZ+KhBpyIldUlX05OgIJ
t97R3D96c/NpQpJ6MQNva887CAjDLVxRMjk07mxtPjBUANslfBdg8H6FDhbKdO9c
h4VVF5SE987H2dCVBhyp/jMib0Hs8QloTJya0DntbbTpuUr0r8HZSOyhk6KwgHj0
Xb0T22p+3kt01Q==
-----END CERTIFICATE-----