Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
File:                     vx1f6v05F0clv-S--RvSfHsvb5E.mft (raw, json)
Hash identifier:          WFCKSeMWcPVGPMBkREL2cC+iiSmKUhyKjZrLauC4HNQ=
Subject key identifier:   76:5F:28:DD:FB:82:3C:32:05:A2:C3:88:0C:50:F6:42:C7:85:8C:BB
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Certificate issuer:       /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial:       0193512B4A930DFC286BE216ADF60A59BA3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
Manifest number:          1398
Signing time:             Fri 22 Nov 2024 00:00:11 +0000
Manifest this update:     Fri 22 Nov 2024 00:00:11 +0000
Manifest next update:     Sat 23 Nov 2024 00:00:11 +0000
Files and hashes:         1: P22Xu7Odpb6rHs84C5Z0ip8hPqM.roa (hash: AYGw0zqszLh0A3A359kT4i4m2xr6R3QiaEpwdHejtU8=)
                          2: QPizp8uOy9L8mBvr-yJoFigCL_g.roa (hash: bm0lqjxrUwzVI+b77IVitpXLuQMzm1qZqKRcjVosq6A=)
                          3: gpNvtjPtrvf3aZt3uFqWzr1IRcE.roa (hash: Bl1Z0T32RluorV5nyKeba/yLlNK1mvuJ9DJwXLe0w9Y=)
                          4: r_Z7OYtba1P4_awi4xJ1FN8aqfI.roa (hash: RPruRzib53i7Aab/w8EvgBFXjCKUTDt0Wz+vHIedgtA=)
                          5: sdlCS1G90XzSRvEBwCD70Tz8j3A.roa (hash: SschIVvwJghM6fCioOY40pK8KZp7mWr2zkO2f6JjnUg=)
                          6: vx1f6v05F0clv-S--RvSfHsvb5E.crl (hash: B++/59QJW9xHf1uhXb63HWwVbTxkT8YLL0fYZgITLKQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:2b:4a:93:0d:fc:28:6b:e2:16:ad:f6:0a:59:ba:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
        Validity
            Not Before: Nov 22 00:00:11 2024 GMT
            Not After : Nov 23 00:00:11 2024 GMT
        Subject: CN=765f28ddfb823c3205a2c3880c50f642c7858cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:18:98:e6:5a:ea:5f:3e:07:53:89:ba:ac:8c:
                    46:5f:c8:f3:09:85:e4:10:16:05:ea:12:8f:da:40:
                    9f:b2:b1:b8:6c:a7:6e:1d:d8:b2:1b:78:fd:d8:1d:
                    9b:11:48:55:d8:a2:54:2d:7b:07:bb:bb:b9:7c:d7:
                    69:73:12:43:0c:37:d6:f2:b4:5c:88:59:a2:7b:57:
                    00:8c:dd:a8:e4:37:5e:37:ff:96:bf:28:9f:86:04:
                    2a:23:7c:0b:31:74:fc:b9:a9:87:6c:6e:ee:5f:0a:
                    28:5e:9d:02:58:b5:1f:f6:e8:ce:e1:77:64:0e:12:
                    e1:37:6e:a9:65:5a:2c:ba:7b:f3:b0:7a:1f:22:88:
                    94:9c:4b:b0:40:ab:0e:34:5e:c0:af:fb:b8:85:54:
                    6f:5a:41:8c:96:68:23:e0:23:dd:03:15:18:00:31:
                    19:5b:6e:56:2a:a6:d0:af:55:43:ff:9f:bf:0e:53:
                    58:c9:43:9e:ff:24:94:6a:6a:14:a7:c9:cb:e9:a5:
                    43:2c:76:c8:dc:0e:cf:e8:69:f6:eb:0d:7c:69:47:
                    60:7e:4e:44:0c:5a:41:c4:98:ea:a3:6a:9e:a2:f4:
                    6a:be:14:1a:1b:ca:c6:2e:a5:78:c0:40:1e:58:09:
                    5e:cb:fb:41:2e:36:7e:04:99:98:45:fe:d7:59:44:
                    64:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5F:28:DD:FB:82:3C:32:05:A2:C3:88:0C:50:F6:42:C7:85:8C:BB
            X509v3 Authority Key Identifier:
                keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1f:cb:0d:d4:a4:2c:c4:d6:3c:36:3d:2a:18:46:ed:b0:f7:
         58:00:7e:a4:d8:b6:be:12:bf:e6:c8:34:60:d5:f3:65:64:13:
         ab:5a:16:ac:bf:89:be:ae:01:d1:1e:92:e9:e4:16:4c:3e:f1:
         52:ac:14:cc:3f:7d:d0:ee:c3:85:94:c1:aa:3e:8a:f3:b1:fb:
         2e:4a:3c:5a:7b:d0:d5:dd:06:5d:63:9c:a9:d8:a9:d5:9a:b3:
         f8:22:d9:b1:4f:35:d8:cf:97:46:5a:4e:ef:97:be:ba:68:52:
         b8:32:e9:8c:0f:9d:eb:0c:eb:f0:ad:81:6c:91:e1:0c:5c:7a:
         ea:9b:bd:ae:1a:5a:4c:9b:1a:06:be:36:61:1e:a2:96:1a:1e:
         29:6f:bc:08:5d:67:35:e3:6c:45:45:13:26:ca:02:c2:92:71:
         2d:98:11:d4:da:7a:ab:9c:5a:77:13:12:a7:b1:9f:10:a3:98:
         91:7f:2c:fe:52:07:bc:26:fd:04:82:4b:ee:40:14:e2:b3:97:
         3b:74:1f:bf:4f:2e:4d:8e:dd:4e:7e:74:d6:7c:1d:10:10:40:
         cb:39:15:85:97:88:eb:6a:ba:40:c0:d7:cc:00:01:44:2b:e9:
         91:84:59:cf:d6:a7:de:7b:2c:65:2a:a0:b2:11:7c:56:88:60:
         5e:41:85:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRK0qTDfwoa+IWrfYKWbo6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWQ1ZmVhZmQzOTE3NDcyNWJmZTRiZWY5MWJkMjdjN2Iy
ZjZmOTEwHhcNMjQxMTIyMDAwMDExWhcNMjQxMTIzMDAwMDExWjAzMTEwLwYDVQQD
Eyg3NjVmMjhkZGZiODIzYzMyMDVhMmMzODgwYzUwZjY0MmM3ODU4Y2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRiY5lrqXz4HU4m6rIxGX8jzCYXk
EBYF6hKP2kCfsrG4bKduHdiyG3j92B2bEUhV2KJULXsHu7u5fNdpcxJDDDfW8rRc
iFmie1cAjN2o5DdeN/+WvyifhgQqI3wLMXT8uamHbG7uXwooXp0CWLUf9ujO4Xdk
DhLhN26pZVosunvzsHofIoiUnEuwQKsONF7Ar/u4hVRvWkGMlmgj4CPdAxUYADEZ
W25WKqbQr1VD/5+/DlNYyUOe/ySUamoUp8nL6aVDLHbI3A7P6Gn26w18aUdgfk5E
DFpBxJjqo2qeovRqvhQaG8rGLqV4wEAeWAley/tBLjZ+BJmYRf7XWURkYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZfKN37gjwyBaLDiAxQ9kLHhYy7MB8GA1UdIwQY
MBaAFL8dX+r9ORdHJb/kvvkb0nx7L2+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMt
MWE4Yzg0MmFmZTJhLzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMtMWE4Yzg0MmFmZTJh
LzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKx/LDdSk
LMTWPDY9KhhG7bD3WAB+pNi2vhK/5sg0YNXzZWQTq1oWrL+Jvq4B0R6S6eQWTD7x
UqwUzD990O7DhZTBqj6K87H7Lko8WnvQ1d0GXWOcqdip1Zqz+CLZsU812M+XRlpO
75e+umhSuDLpjA+d6wzr8K2BbJHhDFx66pu9rhpaTJsaBr42YR6ilhoeKW+8CF1n
NeNsRUUTJsoCwpJxLZgR1Np6q5xadxMSp7GfEKOYkX8s/lIHvCb9BIJL7kAU4rOX
O3Qfv08uTY7dTn501nwdEBBAyzkVhZeI62q6QMDXzAABRCvpkYRZz9an3nssZSqg
shF8VohgXkGF4A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:13 2024 by rpki-client on console-fra.rpki-client.org