Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File:                     SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier:          rj1R93ho7EDNvHtyMxA1jtA0lu9MePgarL0o7oz7E8M=
Subject key identifier:   64:7E:9D:E3:89:DE:93:7C:77:C7:7D:A2:D2:E4:22:AE:BB:C3:D1:FE
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer:       /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial:       0193617A19B0584C2D347E3C614B21979BF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number:          0267
Signing time:             Mon 25 Nov 2024 04:00:11 +0000
Manifest this update:     Mon 25 Nov 2024 04:00:11 +0000
Manifest next update:     Tue 26 Nov 2024 04:00:11 +0000
Files and hashes:         1: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: hkbCoKpIBT+JS8xNrfgCDwkT14EWWgogAy3gmRY5o34=)
                          2: ruk1mu19cKFh4_js5tunBVf4zug.roa (hash: QvkJroAbxxn3LSWH9WUUTTshNCqrEZ/x6uMn2UqQqj0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:61:7a:19:b0:58:4c:2d:34:7e:3c:61:4b:21:97:9b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
        Validity
            Not Before: Nov 25 04:00:11 2024 GMT
            Not After : Nov 26 04:00:11 2024 GMT
        Subject: CN=647e9de389de937c77c77da2d2e422aebbc3d1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:7d:3b:9e:b4:40:8c:b7:c8:ec:e5:97:59:
                    aa:c3:a2:11:5a:1a:3f:cc:93:d2:2f:cd:fb:2d:b3:
                    5f:30:9a:26:f9:8c:af:68:02:bf:f5:e6:bd:17:c6:
                    d8:20:c3:3a:4b:44:37:ac:e1:71:81:6d:55:8d:a8:
                    1f:fe:7c:72:07:20:9e:d4:63:1c:32:dd:02:0b:4d:
                    5f:fc:6c:2c:c6:9e:72:03:c3:38:93:7e:d8:e9:55:
                    8e:43:f6:90:9f:84:6f:c5:e6:67:f2:60:93:2a:30:
                    19:28:ba:6e:c9:1c:7f:a2:ff:95:8f:a4:ed:4d:85:
                    98:a0:36:2a:a8:4c:74:e1:0a:15:ad:69:8c:34:c8:
                    68:a7:60:b8:b8:58:42:25:da:27:58:f5:06:b9:7a:
                    8b:be:7d:0b:12:35:59:8a:1b:43:0b:d0:5a:81:4a:
                    3f:19:2b:f3:92:40:45:ca:ed:f6:75:dd:8a:92:f7:
                    05:ae:5c:a6:fa:83:50:22:b2:f9:30:bf:7c:92:95:
                    8e:16:31:7a:5c:0e:71:3b:43:fd:e1:1a:66:e0:27:
                    b2:9b:fc:7b:f9:f9:af:3c:67:a4:68:89:47:6d:de:
                    6f:20:20:b1:80:4b:85:fe:75:02:1e:ac:78:6e:30:
                    70:e8:2f:71:a1:b8:bb:2a:92:05:b0:67:cc:57:ee:
                    e8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7E:9D:E3:89:DE:93:7C:77:C7:7D:A2:D2:E4:22:AE:BB:C3:D1:FE
            X509v3 Authority Key Identifier:
                keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ec:18:5b:09:06:dc:63:1a:99:03:38:a8:78:00:06:cc:b7:
         dd:5e:b3:69:58:14:4d:90:cb:5f:a6:f6:c7:72:03:ae:25:fc:
         07:e5:28:e7:4f:b1:78:c9:c3:ce:8f:9e:01:b1:9b:6c:01:a4:
         a4:8e:46:f3:9f:72:13:87:4c:54:0d:58:c9:52:17:a9:52:fe:
         66:8a:bc:55:1f:66:9e:ff:6d:eb:0a:08:ba:44:cc:d5:6c:78:
         bf:ae:5b:94:ae:cf:85:a1:de:4f:37:ff:69:27:b3:87:17:61:
         ec:8c:71:ad:4c:25:52:0a:fa:b2:0b:d8:bf:7f:6f:52:f0:65:
         de:2e:b4:06:d9:6f:22:ad:7c:65:2a:f6:9f:31:5f:04:d7:c2:
         f6:24:80:e1:6d:51:47:f9:12:08:15:98:30:2e:2a:9f:8f:b1:
         96:21:d7:b0:54:79:fe:39:c3:6c:15:d1:b7:bd:da:f5:52:3c:
         6f:20:ab:df:7e:1a:c7:3f:8b:20:2e:dd:48:db:e2:7f:13:12:
         21:33:50:07:ca:a1:68:f4:ba:40:13:6a:0d:19:d5:df:f3:91:
         5d:37:86:a7:f6:71:e6:01:03:54:07:40:f9:fb:75:61:40:a2:
         28:36:f0:d3:2d:d5:62:5d:3f:25:12:56:4c:c2:08:ac:c7:e8:
         0e:e9:ca:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNhehmwWEwtNH48YUshl5v4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMzMyMGUwYmI1ZGJlMmJhOTcyNjkxYjc1ZDY4ZjQ4ZjZl
NTdmODgwHhcNMjQxMTI1MDQwMDExWhcNMjQxMTI2MDQwMDExWjAzMTEwLwYDVQQD
Eyg2NDdlOWRlMzg5ZGU5MzdjNzdjNzdkYTJkMmU0MjJhZWJiYzNkMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjp9O560QIy3yOzll1mqw6IRWho/
zJPSL837LbNfMJom+YyvaAK/9ea9F8bYIMM6S0Q3rOFxgW1Vjagf/nxyByCe1GMc
Mt0CC01f/Gwsxp5yA8M4k37Y6VWOQ/aQn4RvxeZn8mCTKjAZKLpuyRx/ov+Vj6Tt
TYWYoDYqqEx04QoVrWmMNMhop2C4uFhCJdonWPUGuXqLvn0LEjVZihtDC9BagUo/
GSvzkkBFyu32dd2KkvcFrlym+oNQIrL5ML98kpWOFjF6XA5xO0P94Rpm4Ceym/x7
+fmvPGekaIlHbd5vICCxgEuF/nUCHqx4bjBw6C9xobi7KpIFsGfMV+7oIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGR+neOJ3pN8d8d9otLkIq67w9H+MB8GA1UdIwQY
MBaAFEszIOC7Xb4rqXJpG3XWj0j25X+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2Ut
YTg5NzU5ZDcwNzFjLzEvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2UtYTg5NzU5ZDcwNzFj
LzEvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuwYWwkG
3GMamQM4qHgABsy33V6zaVgUTZDLX6b2x3IDriX8B+Uo50+xeMnDzo+eAbGbbAGk
pI5G859yE4dMVA1YyVIXqVL+Zoq8VR9mnv9t6woIukTM1Wx4v65blK7PhaHeTzf/
aSezhxdh7IxxrUwlUgr6sgvYv39vUvBl3i60BtlvIq18ZSr2nzFfBNfC9iSA4W1R
R/kSCBWYMC4qn4+xliHXsFR5/jnDbBXRt73a9VI8byCr334axz+LIC7dSNvifxMS
ITNQB8qhaPS6QBNqDRnV3/ORXTeGp/Zx5gEDVAdA+ft1YUCiKDbw0y3VYl0/JRJW
TMIIrMfoDunKng==
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:31:17 2024 by rpki-client on console-ams.rpki-client.org