Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File:                     xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier:          a0dytlA5IB2lKaxXnRLP1liZyV/jRGZ1mxNKoH7WInM=
Subject key identifier:   FB:52:74:79:E1:21:CD:03:38:35:21:74:F2:E3:E8:08:16:18:1C:A5
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer:       /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial:       019355E489185A69B0BEF06466BDBDF55E37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number:          08D2
Signing time:             Fri 22 Nov 2024 22:01:00 +0000
Manifest this update:     Fri 22 Nov 2024 22:01:00 +0000
Manifest next update:     Sat 23 Nov 2024 22:01:00 +0000
Files and hashes:         1: n88NeOg50HzZdtQQIWH2fBtLspE.roa (hash: 2MktlZJ8yih0pO9UI+N77D/BDG1RYDdu7b4OXIWE0mQ=)
                          2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: DhbClfdjKczPaunX/wd20mMaCLLPsvosds7uiu1uw8w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:89:18:5a:69:b0:be:f0:64:66:bd:bd:f5:5e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
        Validity
            Not Before: Nov 22 22:01:00 2024 GMT
            Not After : Nov 23 22:01:00 2024 GMT
        Subject: CN=fb527479e121cd0338352174f2e3e80816181ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:76:0f:10:49:f7:97:80:3c:0e:cb:3a:c7:12:
                    ce:54:3b:06:19:55:36:d1:1b:bc:fe:c9:67:c6:b9:
                    0b:d2:36:be:62:92:56:3c:c5:7e:1f:5e:bf:fb:8d:
                    73:8c:ff:f6:8a:68:9f:75:68:41:ea:8a:56:ff:37:
                    cc:a2:6d:26:f0:33:10:fe:a7:b3:8b:91:a6:e9:69:
                    98:2d:bc:30:33:ef:ff:03:00:cc:75:83:38:6e:4d:
                    85:5e:63:60:ca:a6:97:81:5a:59:7f:4b:f2:35:7b:
                    89:5f:01:b2:00:8d:28:f0:48:13:75:7a:37:6c:ee:
                    71:a4:0c:49:01:05:a1:fe:06:c5:36:a9:be:8b:94:
                    8c:41:b1:40:0f:1b:36:60:59:6a:c3:4d:94:f6:fa:
                    9d:d9:b2:3f:e8:63:8d:4f:34:c5:7b:c7:99:7a:7d:
                    b4:47:83:09:7d:83:2e:51:63:75:9f:4b:c7:2e:24:
                    c4:72:bf:f3:1e:9c:98:be:9f:82:55:52:32:44:b8:
                    98:04:fd:14:7c:ad:1c:00:97:22:c8:1c:84:1c:e6:
                    25:22:67:89:8e:12:85:8b:cc:85:45:07:a0:3d:b6:
                    00:74:7c:73:92:80:05:13:ba:d4:e2:b1:e4:32:b3:
                    af:cf:35:4b:e3:f9:0f:f0:6f:af:b1:a0:80:30:37:
                    94:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:52:74:79:E1:21:CD:03:38:35:21:74:F2:E3:E8:08:16:18:1C:A5
            X509v3 Authority Key Identifier:
                keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:df:6d:64:a0:56:12:0a:ac:a8:f3:59:98:25:8a:35:db:fb:
         13:11:74:c7:74:ee:64:af:ca:c0:ab:8e:4d:08:60:10:e1:f9:
         69:ae:c7:88:d7:46:d9:f1:65:eb:75:9e:8b:47:c1:7f:da:14:
         86:07:c8:69:c7:fa:d7:b4:53:f9:11:20:90:ac:d1:ad:32:8f:
         6a:46:38:1c:f2:87:61:3a:75:b4:32:06:de:a2:8e:d5:da:1b:
         89:46:ce:fe:af:88:87:7d:94:64:1c:74:3c:16:cb:9e:35:4d:
         05:f2:b0:63:12:59:5d:e5:a6:a9:f0:5e:68:7f:90:2d:1d:76:
         a5:3e:d2:7d:90:b0:26:45:1b:de:cc:03:b4:97:2d:36:a3:d6:
         2d:df:a0:68:7c:59:ff:a5:47:25:ca:7c:19:80:d7:6c:c0:51:
         ba:7c:21:ed:45:04:ec:81:fd:45:23:32:73:b8:21:b5:4d:d1:
         7a:c9:68:16:81:fd:98:31:c6:88:39:25:bd:87:6e:22:12:a1:
         b0:cb:d5:b4:f3:2e:a6:89:06:67:8c:02:4a:d4:27:8f:c4:a2:
         df:8d:a3:ee:5f:26:3f:16:61:56:fc:59:ab:78:e4:da:a1:14:
         58:e8:11:1e:78:6f:31:7b:a0:7c:61:75:b6:79:cc:30:93:33:
         fd:7b:f4:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNV5IkYWmmwvvBkZr299V43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTA5MWQzNDcwM2MwM2VmOGY4ZDI5Y2JiZGNkOThjM2U3
MDZmODQwHhcNMjQxMTIyMjIwMTAwWhcNMjQxMTIzMjIwMTAwWjAzMTEwLwYDVQQD
EyhmYjUyNzQ3OWUxMjFjZDAzMzgzNTIxNzRmMmUzZTgwODE2MTgxY2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnYPEEn3l4A8Dss6xxLOVDsGGVU2
0Ru8/slnxrkL0ja+YpJWPMV+H16/+41zjP/2imifdWhB6opW/zfMom0m8DMQ/qez
i5Gm6WmYLbwwM+//AwDMdYM4bk2FXmNgyqaXgVpZf0vyNXuJXwGyAI0o8EgTdXo3
bO5xpAxJAQWh/gbFNqm+i5SMQbFADxs2YFlqw02U9vqd2bI/6GONTzTFe8eZen20
R4MJfYMuUWN1n0vHLiTEcr/zHpyYvp+CVVIyRLiYBP0UfK0cAJciyByEHOYlImeJ
jhKFi8yFRQegPbYAdHxzkoAFE7rU4rHkMrOvzzVL4/kP8G+vsaCAMDeU8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtSdHnhIc0DODUhdPLj6AgWGBylMB8GA1UdIwQY
MBaAFMQQkdNHA8A++PjSnLvc2Yw+cG+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQt
ZjdlN2JiMDE0ZGI4LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQtZjdlN2JiMDE0ZGI4
LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWN9tZKBW
EgqsqPNZmCWKNdv7ExF0x3TuZK/KwKuOTQhgEOH5aa7HiNdG2fFl63Wei0fBf9oU
hgfIacf617RT+REgkKzRrTKPakY4HPKHYTp1tDIG3qKO1dobiUbO/q+Ih32UZBx0
PBbLnjVNBfKwYxJZXeWmqfBeaH+QLR12pT7SfZCwJkUb3swDtJctNqPWLd+gaHxZ
/6VHJcp8GYDXbMBRunwh7UUE7IH9RSMyc7ghtU3ResloFoH9mDHGiDklvYduIhKh
sMvVtPMupokGZ4wCStQnj8Si342j7l8mPxZhVvxZq3jk2qEUWOgRHnhvMXugfGF1
tnnMMJMz/Xv0Qg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:20:37 2024 by rpki-client on console-ams.rpki-client.org