Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
File:                     D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json)
Hash identifier:          ifqQTWUmMvM2d4fQnYsFtJaty/nEiUKj+M6MPlBNB5w=
Subject key identifier:   40:47:6A:74:F8:08:4D:65:9E:1F:AC:5D:B3:18:7A:CD:84:28:95:CF
Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
Certificate issuer:       /CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Certificate serial:       019369D8F32F3891F474D24649E47CF4391A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 19:00:45 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:45 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:45 +0000
Files and hashes:         1: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: zckbsOb7iW6AoBjlnLt1gyYZRcadNJ2HhzZNON0xh3c=)
                          2: XZwNH8EOpzZcFiUD7mLnV55pRpY.roa (hash: gqDaJpD4+VHFaYCt/Z//ITZML/mRodUJYec1d2U3fXo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:f3:2f:38:91:f4:74:d2:46:49:e4:7c:f4:39:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8
        Validity
            Not Before: Nov 26 19:00:45 2024 GMT
            Not After : Nov 27 19:00:45 2024 GMT
        Subject: CN=40476a74f8084d659e1fac5db3187acd842895cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d8:fc:9d:ca:30:d1:54:b5:31:08:b3:d0:fd:
                    bd:9b:69:35:75:9e:45:d7:64:f1:03:84:e5:1a:9f:
                    61:5e:9a:c8:66:d6:8f:db:02:3f:f2:2b:5f:fa:3e:
                    d7:e2:d2:58:84:20:60:df:17:75:c9:a6:4f:fd:ca:
                    3f:e6:0a:f6:3b:c3:b5:1b:a6:45:61:73:e2:68:9c:
                    67:c0:7d:5b:1b:29:f3:e5:d1:46:93:9b:03:be:6b:
                    82:43:8a:8e:6d:e0:81:49:92:3c:5c:ad:29:52:69:
                    f2:54:10:4d:eb:98:b4:ca:5a:0d:40:f7:0a:25:ca:
                    6a:7c:8e:ee:32:1f:fa:ed:66:98:b2:37:81:d8:50:
                    40:cc:12:b5:eb:58:9d:f6:e3:87:22:29:8d:e2:ea:
                    84:c0:5f:74:3d:b1:99:e0:61:86:f6:e5:db:19:b4:
                    60:f6:71:6f:26:e9:32:39:f5:54:85:e2:71:ad:35:
                    93:2f:77:ca:6c:d7:c6:c6:34:ef:51:de:3d:88:37:
                    95:09:18:57:dd:3a:68:62:93:48:06:0e:e2:b9:6f:
                    db:ca:35:fd:8c:0d:cd:50:53:10:e9:e9:b6:dd:db:
                    0e:12:40:86:1e:72:31:83:4a:68:d8:af:2a:89:a6:
                    03:66:e5:42:ea:70:ce:6d:90:d7:3f:38:99:03:a3:
                    e2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:47:6A:74:F8:08:4D:65:9E:1F:AC:5D:B3:18:7A:CD:84:28:95:CF
            X509v3 Authority Key Identifier:
                keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:57:c6:65:cb:6a:f4:60:90:06:b3:36:ce:9a:ee:3e:b9:d8:
         96:40:75:1f:d8:a7:31:f8:00:68:40:f5:24:fa:03:e8:25:d0:
         65:47:ff:2f:a4:ae:96:90:ec:1f:c6:82:fb:f6:8a:d8:de:96:
         9b:87:df:f7:92:cc:9d:44:a0:45:a2:ac:65:16:73:0f:64:ce:
         86:ba:b4:ca:fe:00:0a:bf:66:1c:03:e4:b0:f6:dc:99:a1:27:
         14:d3:14:51:5d:cd:dd:cd:b9:8a:2f:c7:f4:75:30:b7:88:f1:
         0d:55:94:56:ad:03:5b:f7:d6:cc:bc:5f:43:20:c0:b5:63:64:
         97:3f:70:b4:a1:ba:ea:8a:a8:40:d2:f9:29:03:99:45:2e:51:
         ed:98:ce:17:04:da:6f:74:c3:48:ad:58:0b:83:02:62:98:80:
         0e:16:ff:f0:83:b0:b2:ed:26:f4:ad:0b:b6:82:3e:10:df:83:
         8b:1c:5f:3e:ea:91:24:ce:72:b7:4a:52:1e:3b:93:0f:e9:19:
         77:8f:a8:79:f1:a7:f9:c2:9e:94:7f:64:6e:19:75:8d:02:ca:
         57:c9:4a:65:86:96:36:c2:df:ea:c5:fa:6b:9b:e6:6b:06:89:
         70:79:2d:e8:c4:eb:ba:72:70:7c:b0:04:9d:34:42:8e:45:0c:
         a4:08:fb:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2PMvOJH0dNJGSeR89DkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmODljODY5N2Y3NzkyY2FhZjU5OTY2NGU4OWFjZTY1MjQ0
ZjhhZTgwHhcNMjQxMTI2MTkwMDQ1WhcNMjQxMTI3MTkwMDQ1WjAzMTEwLwYDVQQD
Eyg0MDQ3NmE3NGY4MDg0ZDY1OWUxZmFjNWRiMzE4N2FjZDg0Mjg5NWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtj8ncow0VS1MQiz0P29m2k1dZ5F
12TxA4TlGp9hXprIZtaP2wI/8itf+j7X4tJYhCBg3xd1yaZP/co/5gr2O8O1G6ZF
YXPiaJxnwH1bGynz5dFGk5sDvmuCQ4qObeCBSZI8XK0pUmnyVBBN65i0yloNQPcK
JcpqfI7uMh/67WaYsjeB2FBAzBK161id9uOHIimN4uqEwF90PbGZ4GGG9uXbGbRg
9nFvJukyOfVUheJxrTWTL3fKbNfGxjTvUd49iDeVCRhX3TpoYpNIBg7iuW/byjX9
jA3NUFMQ6em23dsOEkCGHnIxg0po2K8qiaYDZuVC6nDObZDXPziZA6PirwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBHanT4CE1lnh+sXbMYes2EKJXPMB8GA1UdIwQY
MBaAFA+JyGl/d5LKr1mWZOiazmUkT4roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZjMxODctM2JlYi00YzRiLTlhNDQt
ZDZiZDU1YTllMzZkLzEvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZjMxODctM2JlYi00YzRiLTlhNDQtZDZiZDU1YTllMzZk
LzEvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVfGZctq
9GCQBrM2zpruPrnYlkB1H9inMfgAaED1JPoD6CXQZUf/L6SulpDsH8aC+/aK2N6W
m4ff95LMnUSgRaKsZRZzD2TOhrq0yv4ACr9mHAPksPbcmaEnFNMUUV3N3c25ii/H
9HUwt4jxDVWUVq0DW/fWzLxfQyDAtWNklz9wtKG66oqoQNL5KQOZRS5R7ZjOFwTa
b3TDSK1YC4MCYpiADhb/8IOwsu0m9K0LtoI+EN+DixxfPuqRJM5yt0pSHjuTD+kZ
d4+oefGn+cKelH9kbhl1jQLKV8lKZYaWNsLf6sX6a5vmawaJcHkt6MTrunJwfLAE
nTRCjkUMpAj76g==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:57:37 2024 by rpki-client on console-fra.rpki-client.org