Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
File:                     uMaM2mX2aWLMuWg_FVDRTlYQego.mft (raw, json)
Hash identifier:          dTEB4vut45C7sxumEAf35Qnxrnj6Ei+eLkJYSPXdslE=
Subject key identifier:   A2:AB:70:E1:B9:AA:AD:F6:ED:E2:5B:5B:A8:9F:1F:17:75:A7:3F:FB
Authority key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
Certificate issuer:       /CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Certificate serial:       019352ACD1B1B776169DF730D8E4422A83B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
Manifest number:          047D
Signing time:             Fri 22 Nov 2024 07:01:17 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:17 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:17 +0000
Files and hashes:         1: r-YLq4pYkpRLSApReMbUyyW7mqY.roa (hash: uOgPCqaDF88ZXO2nuRDweqsttHk1qJGY3VA0fI4Dd3U=)
                          2: uMaM2mX2aWLMuWg_FVDRTlYQego.crl (hash: ReeDzgUk1olSgX3/mnYgmNASJVd+NLtXBUp7CzZrGMA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:d1:b1:b7:76:16:9d:f7:30:d8:e4:42:2a:83:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
        Validity
            Not Before: Nov 22 07:01:17 2024 GMT
            Not After : Nov 23 07:01:17 2024 GMT
        Subject: CN=a2ab70e1b9aaadf6ede25b5ba89f1f1775a73ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f8:26:dc:66:6e:8c:00:04:63:f1:6e:ce:1d:
                    2d:aa:39:4a:7c:12:4f:d2:68:1b:2e:2f:22:31:67:
                    58:86:3e:e3:70:6a:d2:66:c1:73:d3:3d:3a:60:5f:
                    17:4b:c6:1e:26:7b:34:a7:d2:b9:ea:bd:84:9b:e2:
                    5b:0e:01:21:f3:9a:27:88:7c:95:5e:76:a7:bd:57:
                    ef:20:05:b8:2d:ab:f6:77:69:1c:65:c2:30:8c:6d:
                    c3:b7:8b:54:ce:50:3d:a9:7a:d8:a1:5e:a4:ac:19:
                    b0:e4:2a:5c:e7:f0:1b:7a:ab:37:34:d9:3a:82:88:
                    45:fc:4f:24:a9:59:96:cb:0d:33:a0:79:b3:7a:af:
                    c3:d0:9d:78:ec:af:7e:0b:fd:51:e3:1b:07:f2:26:
                    c8:82:fc:83:8c:62:84:4c:8d:5a:b4:2b:89:09:b5:
                    37:ad:b9:53:af:a0:3b:4d:3b:4c:78:aa:49:c9:16:
                    6a:04:f5:02:f4:7d:24:79:11:aa:7d:f2:c5:30:a7:
                    a9:1d:b3:be:44:e0:d4:6b:54:6c:55:77:b5:6e:bc:
                    a8:d7:6c:48:a3:00:b4:14:b7:e4:82:4e:63:8d:13:
                    b6:41:10:a3:22:0f:41:cb:7e:ae:bf:4e:ee:d4:6a:
                    1d:3a:7d:bb:a1:15:54:86:e7:ff:61:f7:43:84:e2:
                    7d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AB:70:E1:B9:AA:AD:F6:ED:E2:5B:5B:A8:9F:1F:17:75:A7:3F:FB
            X509v3 Authority Key Identifier:
                keyid:B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:72:05:d5:f6:2c:bd:15:a4:33:be:05:f0:18:7d:5e:ee:cd:
         99:c7:fe:99:ee:9c:47:a7:7c:99:97:cb:64:a4:c6:bb:bb:e1:
         5e:35:70:a8:e4:52:82:7f:29:d0:26:d9:01:0e:ef:db:14:91:
         d1:f8:6c:c6:94:5a:2a:d9:80:f3:0e:c3:8b:42:49:c5:eb:e3:
         5d:39:c2:9e:ad:59:a1:c7:92:12:a9:0e:30:c6:4a:61:82:8a:
         00:da:e8:e5:d8:c9:ad:44:93:44:4f:9f:a4:62:47:2d:b6:8a:
         3b:a6:46:8f:ee:b2:c2:d3:98:ef:e6:c9:41:58:77:ff:11:5d:
         5a:0f:86:86:11:d6:eb:e7:81:00:8e:d1:f9:37:0c:cb:12:ff:
         10:62:ab:a6:12:91:03:9a:36:19:31:18:c2:ba:33:e7:f2:c5:
         33:6b:63:bd:5d:e8:fc:86:cd:1a:24:f5:c7:49:d1:65:86:ae:
         e8:4b:8d:e9:b8:21:ad:4b:84:db:5d:1e:77:13:a0:91:62:5e:
         76:f9:84:ad:d9:b8:ec:e7:1a:1c:c2:6a:9f:de:6b:97:95:08:
         ca:bc:46:de:6b:44:98:7a:d9:b8:57:77:52:d0:27:2f:77:60:
         86:2e:38:b8:da:5f:3f:6a:b7:63:fa:cc:7c:ef:8c:b0:53:55:
         09:af:ce:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrNGxt3YWnfcw2ORCKoOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YzY4Y2RhNjVmNjY5NjJjY2I5NjgzZjE1NTBkMTRlNTYx
MDdhMGEwHhcNMjQxMTIyMDcwMTE3WhcNMjQxMTIzMDcwMTE3WjAzMTEwLwYDVQQD
EyhhMmFiNzBlMWI5YWFhZGY2ZWRlMjViNWJhODlmMWYxNzc1YTczZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fgm3GZujAAEY/Fuzh0tqjlKfBJP
0mgbLi8iMWdYhj7jcGrSZsFz0z06YF8XS8YeJns0p9K56r2Em+JbDgEh85oniHyV
XnanvVfvIAW4Lav2d2kcZcIwjG3Dt4tUzlA9qXrYoV6krBmw5Cpc5/Abeqs3NNk6
gohF/E8kqVmWyw0zoHmzeq/D0J147K9+C/1R4xsH8ibIgvyDjGKETI1atCuJCbU3
rblTr6A7TTtMeKpJyRZqBPUC9H0keRGqffLFMKepHbO+RODUa1RsVXe1bryo12xI
owC0FLfkgk5jjRO2QRCjIg9By36uv07u1GodOn27oRVUhuf/YfdDhOJ9QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKrcOG5qq327eJbW6ifHxd1pz/7MB8GA1UdIwQY
MBaAFLjGjNpl9mlizLloPxVQ0U5WEHoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU1hTTJtWDJhV0xNdVdnX0ZWRFJUbFlRZWdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMDc3ODgtODUwMi00NTQxLTk0ODAt
OGY0OGEzNzAyZjkwLzEvdU1hTTJtWDJhV0xNdVdnX0ZWRFJUbFlRZWdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xMDc3ODgtODUwMi00NTQxLTk0ODAtOGY0OGEzNzAyZjkw
LzEvdU1hTTJtWDJhV0xNdVdnX0ZWRFJUbFlRZWdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnIF1fYs
vRWkM74F8Bh9Xu7Nmcf+me6cR6d8mZfLZKTGu7vhXjVwqORSgn8p0CbZAQ7v2xSR
0fhsxpRaKtmA8w7Di0JJxevjXTnCnq1ZoceSEqkOMMZKYYKKANro5djJrUSTRE+f
pGJHLbaKO6ZGj+6ywtOY7+bJQVh3/xFdWg+GhhHW6+eBAI7R+TcMyxL/EGKrphKR
A5o2GTEYwroz5/LFM2tjvV3o/IbNGiT1x0nRZYau6EuN6bghrUuE210edxOgkWJe
dvmErdm47OcaHMJqn95rl5UIyrxG3mtEmHrZuFd3UtAnL3dghi44uNpfP2q3Y/rM
fO+MsFNVCa/OMA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:05:56 2024 by rpki-client on console-ams.rpki-client.org