Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
File:                     T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json)
Hash identifier:          Ox1rM0YzpmShYXrDtZVzJhS0wftWrvPa5L4hThTOaKQ=
Subject key identifier:   77:DF:A6:A1:43:F9:B0:38:82:AE:CF:5A:FB:4A:76:5B:F8:6C:F8:37
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Certificate issuer:       /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial:       0193549C8DA550EE5E8A688BAFEDBBB00531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
Manifest number:          1379
Signing time:             Fri 22 Nov 2024 16:02:46 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:46 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:46 +0000
Files and hashes:         1: 7pWVtFmCQ2PTszNoLN851c45cKQ.roa (hash: Dcw9mBzq2kuKDVh4XbSA1++dDUQuXC0bJhWrSAYpjJ4=)
                          2: AXHtPbKwzQjHJeCsvRwXm5iUBSs.roa (hash: XzZfaWLH1D9H/7kSzYwGjr8YLJNWc1TUUDxzCmvdV6Q=)
                          3: MD63urejUVAM75kTtVM8Ng3ldUs.roa (hash: mJOHj4LcaTOR5pVvPZSd7bIae69KPLrz9Zbcj0boBuU=)
                          4: NB4y9qxp089Hr5-uo2n531iG1hw.roa (hash: AzCreiq1n8zMxugluakrtWvV2/BO/IatNhSEXorqnJk=)
                          5: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: oPOQI4v+i8VyeocbQZtCr50AaOfE1zcUG8clgH1LOCM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:8d:a5:50:ee:5e:8a:68:8b:af:ed:bb:b0:05:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
        Validity
            Not Before: Nov 22 16:02:46 2024 GMT
            Not After : Nov 23 16:02:46 2024 GMT
        Subject: CN=77dfa6a143f9b03882aecf5afb4a765bf86cf837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:90:fd:ba:52:e3:95:c4:64:33:68:8e:c8:d4:
                    b3:f4:88:90:57:db:f3:4e:f2:13:73:9a:ab:18:39:
                    39:ae:d9:1c:76:63:61:b6:b8:27:48:d1:54:f7:aa:
                    c1:18:e9:e3:a8:f9:fa:23:5e:a0:1e:31:d1:49:84:
                    45:f7:84:b3:0a:40:cd:04:66:d7:87:10:2d:f4:8d:
                    4a:ef:97:b2:06:4b:cc:d1:54:34:36:95:24:49:97:
                    be:af:18:9c:c4:2c:ba:d2:88:e6:d9:83:0c:0c:85:
                    99:14:c1:1f:59:e8:08:f6:c8:ae:8b:51:3c:1b:92:
                    a4:40:11:bc:39:69:43:e3:6e:ad:15:47:d4:1d:b9:
                    5a:12:0c:d5:22:17:eb:33:92:7a:4a:e9:f9:81:7c:
                    e0:78:14:dd:ea:c9:ee:b5:28:48:cb:b5:1d:29:fa:
                    f5:13:c8:c0:3f:5a:10:74:18:c5:d4:d5:19:7d:02:
                    d6:eb:2e:74:df:4e:dc:95:ec:c8:12:bf:b8:7a:ad:
                    36:f4:95:3b:1e:a4:a6:54:40:1e:3f:11:86:ce:54:
                    31:1f:f7:00:71:a5:af:8e:df:8d:5c:a2:c2:02:2e:
                    94:7c:e9:f6:39:97:54:45:a2:4d:10:f6:d5:72:c8:
                    d4:85:6d:db:fd:ed:78:f4:20:8c:b7:ec:0d:45:0d:
                    fc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DF:A6:A1:43:F9:B0:38:82:AE:CF:5A:FB:4A:76:5B:F8:6C:F8:37
            X509v3 Authority Key Identifier:
                keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a5:ce:2f:72:c1:80:52:91:ee:48:2f:37:cc:34:0e:24:e9:
         04:c3:86:72:60:91:e1:18:ce:7b:cf:ec:5d:be:7f:28:02:88:
         cb:6f:e8:d4:4d:4f:f4:30:d2:a5:6b:d9:c9:05:78:1c:58:c3:
         99:a4:f8:a3:99:46:fa:4d:25:b3:9d:b4:04:82:96:7f:75:1b:
         03:e5:e7:b6:63:01:34:96:a2:60:cf:80:0a:e4:d4:c3:3e:9a:
         ed:4a:ae:15:58:9c:ee:97:74:c6:2b:37:69:e9:81:0a:f8:45:
         28:fa:1e:d3:52:81:a4:4e:b6:ed:8a:f2:d7:57:a9:84:c9:78:
         6c:e4:6c:1e:eb:7b:70:95:77:da:84:70:89:5c:67:fe:25:72:
         18:8b:ed:b6:7c:3d:a0:60:21:a5:77:a8:41:fe:d2:b6:2c:4c:
         b7:69:4f:9a:d4:90:23:27:39:83:67:f5:70:cd:13:c3:c5:bb:
         70:b2:2b:28:0e:56:c8:2d:14:f7:04:cd:51:a5:82:cd:ce:7d:
         b6:15:52:ee:8a:f5:7f:64:9f:25:ee:d2:34:bf:aa:0e:74:71:
         79:17:76:28:7c:85:d8:c2:53:e6:57:b3:5e:30:71:97:bd:48:
         15:11:f5:90:13:69:62:10:19:ed:41:62:da:72:1d:be:ea:6e:
         01:b8:3b:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUnI2lUO5eimiLr+27sAUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOWFjNmZlMjAzMWFkZGUwMzY2ODI0MGUzYzVkOTFlYzY3
MTFlMWUwHhcNMjQxMTIyMTYwMjQ2WhcNMjQxMTIzMTYwMjQ2WjAzMTEwLwYDVQQD
Eyg3N2RmYTZhMTQzZjliMDM4ODJhZWNmNWFmYjRhNzY1YmY4NmNmODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZD9ulLjlcRkM2iOyNSz9IiQV9vz
TvITc5qrGDk5rtkcdmNhtrgnSNFU96rBGOnjqPn6I16gHjHRSYRF94SzCkDNBGbX
hxAt9I1K75eyBkvM0VQ0NpUkSZe+rxicxCy60ojm2YMMDIWZFMEfWegI9siui1E8
G5KkQBG8OWlD426tFUfUHblaEgzVIhfrM5J6Sun5gXzgeBTd6snutShIy7UdKfr1
E8jAP1oQdBjF1NUZfQLW6y50307clezIEr+4eq029JU7HqSmVEAePxGGzlQxH/cA
caWvjt+NXKLCAi6UfOn2OZdURaJNEPbVcsjUhW3b/e149CCMt+wNRQ38FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHffpqFD+bA4gq7PWvtKdlv4bPg3MB8GA1UdIwQY
MBaAFE+axv4gMa3eA2aCQOPF2R7GcR4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NDdmZmEtOWYzOC00NjEwLTk4ZTct
NTI4YTYzYmU0Yzg3LzEvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NDdmZmEtOWYzOC00NjEwLTk4ZTctNTI4YTYzYmU0Yzg3
LzEvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6XOL3LB
gFKR7kgvN8w0DiTpBMOGcmCR4RjOe8/sXb5/KAKIy2/o1E1P9DDSpWvZyQV4HFjD
maT4o5lG+k0ls520BIKWf3UbA+XntmMBNJaiYM+ACuTUwz6a7UquFVic7pd0xis3
aemBCvhFKPoe01KBpE627Yry11ephMl4bORsHut7cJV32oRwiVxn/iVyGIvttnw9
oGAhpXeoQf7StixMt2lPmtSQIyc5g2f1cM0Tw8W7cLIrKA5WyC0U9wTNUaWCzc59
thVS7or1f2SfJe7SNL+qDnRxeRd2KHyF2MJT5lezXjBxl71IFRH1kBNpYhAZ7UFi
2nIdvupuAbg7Dg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:25:31 2024 by rpki-client on console-ams.rpki-client.org