Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
File:                     dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json)
Hash identifier:          NMw6hFehuUW6T0JZPJ43aqkd29TMNRcolK1X4X3gIn8=
Subject key identifier:   4C:A2:15:AB:DD:0A:81:A5:96:91:9B:FA:06:CD:F8:68:0E:3E:C5:56
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Certificate issuer:       /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial:       019352AC3B0714C32F6D78E254FDB79C6C87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
Manifest number:          07B6
Signing time:             Fri 22 Nov 2024 07:00:38 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:38 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:38 +0000
Files and hashes:         1: 379oIVjg6jK22VmJ3nFMJxHmEqg.roa (hash: vy7AzK77RGlK6LLBWDADv9bHrlHSM6Xmy3XmaYs9ra8=)
                          2: 4DA5U9RJDxz0PlwrFQsCc0H3MqE.roa (hash: kNinE8BKHY+J3y1cvP9lVb5qIE4xYvZTfRXEBvviJJ0=)
                          3: 6cn8yHwpomTZQtprJ4vVFkZGvZo.roa (hash: 4XlmQsHn0YIXw6zvKZMKw18yBh0M1WBYUsS+Y6Scst8=)
                          4: 8K9lfJ5HXzRhO9FGvnawblB685c.roa (hash: lMPB4ycVFoBvKtBCoOLpHZXM8LSuK+QdVsXdkC31cmo=)
                          5: AwQqI11JRu2AgESYEkqE8TS5dRc.roa (hash: LwywXO92vNUygGnVVACwLsvNaWXBGFTsrh/x00vswYo=)
                          6: B_TiUEeW6KKIzqYr7H4gHqUOxC8.roa (hash: wQ9KSbAdBIkKUX549fP3dZmt9SaKc00snhTQFoTzBZU=)
                          7: ZYkhcwX8Xci1haUScmbPBDhqKK4.roa (hash: SUCB6AD+RI8BPhxWWkpUsvVgIBj0viwdCTq6jPeOHzU=)
                          8: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: JteOJ1c8ijz86Zhbq+WQK1IxfiKwPvJqgBT7nfpczjE=)
                          9: s0GWYedj4LRqG5AY_mIkgPcHpZk.roa (hash: I+9ttjPpmj7ZR2kU/xsMKFksaocs4HjDP0hwNOWXZp0=)
                          10: upvxU_RWiJVMOVDp9ihCUrybikM.roa (hash: uyIyfw0XxFJdcfBgnO9Mw/fiG09exrCBM5i2F0olUDc=)
                          11: xugNET8hV_lUs8mzNctovD3Hbyo.roa (hash: TQ1WgR1j2gmGPeQpvDAECIUuPsOaIzykpwxvxZkOo5s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:3b:07:14:c3:2f:6d:78:e2:54:fd:b7:9c:6c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
        Validity
            Not Before: Nov 22 07:00:38 2024 GMT
            Not After : Nov 23 07:00:38 2024 GMT
        Subject: CN=4ca215abdd0a81a596919bfa06cdf8680e3ec556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2e:2c:ff:74:81:3c:d6:eb:43:b8:04:52:3d:
                    c5:c5:3d:81:6c:e3:c1:80:9a:c0:7d:54:0a:f3:c1:
                    fd:35:de:c4:5a:18:de:a6:b0:6b:59:02:97:33:81:
                    2e:8e:70:14:6e:dd:76:4e:7d:1c:27:c3:1e:dd:ce:
                    05:09:11:35:98:b4:51:46:f2:95:6d:ca:43:e0:b6:
                    de:85:f6:67:2a:85:5a:19:ba:be:85:ac:45:81:ac:
                    54:c4:fe:93:36:3e:ac:06:75:de:27:03:6a:6f:de:
                    d8:d9:3c:4e:4e:73:77:39:91:93:9a:44:9a:b8:88:
                    83:7b:be:bc:4c:5e:c9:7f:23:cf:f8:81:ac:fb:95:
                    74:e5:b9:25:46:ec:0a:ee:d5:62:6c:b3:4c:51:a9:
                    48:1b:9d:d5:21:89:c5:dc:76:cb:47:16:fa:6c:d4:
                    71:17:89:39:4c:a5:99:2d:98:e3:ac:83:d6:50:b2:
                    18:4d:e7:7b:c2:de:50:2b:bc:17:bb:da:ba:3d:57:
                    e2:5a:29:d4:34:d4:28:22:7e:44:fe:89:6e:62:ce:
                    ba:89:69:ab:1b:d5:5a:bc:98:39:07:1c:a0:d0:d6:
                    d2:21:05:81:40:c1:ad:e3:6a:db:61:bc:22:11:64:
                    05:c2:a8:1d:60:36:5f:79:84:b4:80:2f:be:c8:13:
                    4f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A2:15:AB:DD:0A:81:A5:96:91:9B:FA:06:CD:F8:68:0E:3E:C5:56
            X509v3 Authority Key Identifier:
                keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e8:26:27:9f:56:84:e5:e7:12:28:a8:45:43:44:15:6e:cd:
         01:c8:5b:8d:e3:2c:98:7e:ce:44:18:68:3d:73:9a:14:ce:a7:
         1f:cc:b0:a6:66:97:b0:6b:d1:52:3f:32:73:6d:a0:c1:68:5e:
         d2:1a:04:07:d8:e4:30:ed:43:8a:63:64:21:3c:0c:8b:54:25:
         5f:52:8f:60:e1:e8:f6:04:6d:84:6a:4d:79:7b:f7:dc:f1:68:
         26:b2:a5:17:7f:f7:0c:8b:d5:bc:5c:36:20:79:91:11:41:bc:
         f8:97:3b:4c:d6:6c:ad:b2:d3:aa:4d:b4:be:8b:05:de:f5:75:
         ae:c1:51:9d:69:e3:3e:53:4f:e1:54:e9:4c:32:50:cd:1c:01:
         92:70:36:5e:01:0e:45:94:bb:85:39:98:1b:f0:19:00:9d:73:
         0c:f0:fd:84:c0:77:78:7f:a2:13:57:16:ac:ac:d7:1a:21:43:
         a1:f1:c1:6a:fd:8c:96:73:e9:69:80:e7:db:cc:ef:53:bc:e9:
         9c:48:7f:6d:92:36:48:dc:fa:2d:aa:f6:22:dd:6c:cf:2d:33:
         83:7e:93:92:6c:54:dd:6d:ec:63:63:5a:2f:94:2c:a1:5d:8d:
         8b:cc:11:57:98:95:ec:73:ac:7c:e0:b3:ed:3c:11:ff:e5:bf:
         c0:f1:a2:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrDsHFMMvbXjiVP23nGyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0
MDA0NGEwHhcNMjQxMTIyMDcwMDM4WhcNMjQxMTIzMDcwMDM4WjAzMTEwLwYDVQQD
Eyg0Y2EyMTVhYmRkMGE4MWE1OTY5MTliZmEwNmNkZjg2ODBlM2VjNTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC4s/3SBPNbrQ7gEUj3FxT2BbOPB
gJrAfVQK88H9Nd7EWhjeprBrWQKXM4EujnAUbt12Tn0cJ8Me3c4FCRE1mLRRRvKV
bcpD4LbehfZnKoVaGbq+haxFgaxUxP6TNj6sBnXeJwNqb97Y2TxOTnN3OZGTmkSa
uIiDe768TF7JfyPP+IGs+5V05bklRuwK7tVibLNMUalIG53VIYnF3HbLRxb6bNRx
F4k5TKWZLZjjrIPWULIYTed7wt5QK7wXu9q6PVfiWinUNNQoIn5E/oluYs66iWmr
G9VavJg5Bxyg0NbSIQWBQMGt42rbYbwiEWQFwqgdYDZfeYS0gC++yBNPtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyiFavdCoGllpGb+gbN+GgOPsVWMB8GA1UdIwQY
MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt
ZWQ1MzU4YjZkYTMxLzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx
LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMegmJ59W
hOXnEiioRUNEFW7NAchbjeMsmH7ORBhoPXOaFM6nH8ywpmaXsGvRUj8yc22gwWhe
0hoEB9jkMO1DimNkITwMi1QlX1KPYOHo9gRthGpNeXv33PFoJrKlF3/3DIvVvFw2
IHmREUG8+Jc7TNZsrbLTqk20vosF3vV1rsFRnWnjPlNP4VTpTDJQzRwBknA2XgEO
RZS7hTmYG/AZAJ1zDPD9hMB3eH+iE1cWrKzXGiFDofHBav2MlnPpaYDn28zvU7zp
nEh/bZI2SNz6Lar2It1szy0zg36TkmxU3W3sY2NaL5QsoV2Ni8wRV5iV7HOsfOCz
7TwR/+W/wPGifg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:22 2024 by rpki-client on console-fra.rpki-client.org