Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
File:                     RfwKpabDOR7__6g0JbI7JkxxCF8.mft (raw, json)
Hash identifier:          OeRIlQ8PaFH/IPct/LgM0+Pqwm9QGNoqtkxeaF4a/pQ=
Subject key identifier:   93:D0:E6:3B:CC:03:92:47:19:E6:77:9D:40:54:80:4E:4C:0F:28:E8
Authority key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
Certificate issuer:       /CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Certificate serial:       01935764CDBC2047FDE8E09704B5D6AB7BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
Manifest number:          0121
Signing time:             Sat 23 Nov 2024 05:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:44 +0000
Files and hashes:         1: I10KV6Uu4Ot1DLDtL8nebWNUFKc.roa (hash: EmcxfSH87TebZhy9g/SyJtku6wAE26erg/iOllTKAH8=)
                          2: RfwKpabDOR7__6g0JbI7JkxxCF8.crl (hash: xvvKKC46TrcxLeqvzyElRMp9VqXvLhcrzBe5pNeBQnE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:cd:bc:20:47:fd:e8:e0:97:04:b5:d6:ab:7b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fc0aa5a6c3391effffa83425b23b264c71085f
        Validity
            Not Before: Nov 23 05:00:44 2024 GMT
            Not After : Nov 24 05:00:44 2024 GMT
        Subject: CN=93d0e63bcc03924719e6779d4054804e4c0f28e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:77:ab:92:94:97:f2:1b:66:be:0a:9a:61:d5:
                    45:86:dd:0f:91:34:5f:fe:ed:48:52:92:55:c7:66:
                    c9:7e:2b:8c:50:62:69:74:78:a9:cd:94:8b:60:85:
                    b0:1a:a9:dc:61:bd:65:fc:38:86:6e:3d:78:dd:24:
                    45:45:df:95:24:9f:0f:e6:21:8c:86:d4:b2:90:e8:
                    e7:ba:46:2f:c1:88:ad:a6:c5:cf:a1:f6:72:75:1f:
                    ee:c1:3a:dd:c9:2d:bd:c7:7c:fc:93:52:b7:04:5a:
                    5d:ca:af:0c:b1:62:eb:a1:c9:1e:39:fe:1d:15:f2:
                    71:5a:ae:39:12:f9:96:e5:a8:28:ba:cc:a7:0f:8b:
                    6c:13:89:48:73:77:d3:e6:89:e8:cf:c3:41:d5:5e:
                    e1:c4:da:1c:bd:4f:84:c0:5c:12:6a:bb:1d:96:eb:
                    83:e7:dc:01:d9:51:03:7c:be:7a:cb:b7:b0:c7:b6:
                    d2:62:39:bb:14:f7:e0:07:3a:78:80:6c:28:c9:75:
                    dd:bb:35:e9:60:5e:56:00:10:11:a2:44:97:32:e4:
                    da:73:41:0b:c0:a8:38:83:d0:94:57:bf:34:82:33:
                    23:12:44:16:a2:d4:ca:8a:ab:bd:df:fe:3c:e7:1c:
                    28:7d:b5:16:86:62:d6:bf:4d:36:6d:21:b5:ce:cb:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D0:E6:3B:CC:03:92:47:19:E6:77:9D:40:54:80:4E:4C:0F:28:E8
            X509v3 Authority Key Identifier:
                keyid:45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:10:bf:e5:1d:48:b9:8f:5f:6d:a8:90:e2:ab:62:55:21:97:
         53:28:f3:ee:39:f5:66:14:e1:28:bf:ec:54:34:8e:b4:86:39:
         86:fa:69:93:f5:3f:f0:47:8b:8d:7e:fd:9f:8a:99:99:67:a8:
         9c:81:04:9a:37:56:1c:3e:ee:c6:3a:35:49:80:3b:02:74:1f:
         77:1b:17:ba:e6:8f:04:17:e7:db:e0:1f:de:e6:18:d2:20:79:
         db:93:6d:44:f1:e2:2c:92:bd:c1:c7:aa:30:21:3c:d1:b8:a6:
         ea:09:0c:ba:d2:3c:91:28:62:92:53:20:e2:64:78:fc:26:d3:
         41:fa:73:8b:7c:0b:90:39:89:c6:a2:d9:21:44:3f:a2:26:d2:
         ea:59:9b:6a:cd:17:e6:c9:29:3e:5f:5e:67:c5:30:7b:7e:2d:
         88:e5:1a:59:89:58:4a:62:dd:2f:80:ac:69:ed:41:1a:04:97:
         77:c7:22:b4:9f:fe:52:88:b1:b7:84:ed:39:93:d8:9f:e5:a5:
         b2:7f:de:b4:8e:2f:90:71:08:99:e2:96:db:65:00:7d:53:1a:
         c6:93:e0:8a:14:d6:dc:77:d6:2f:42:50:9c:9c:fb:41:c8:94:
         7c:5b:1a:08:24:f0:4c:ec:95:c3:4c:07:ff:80:81:d4:b0:42:
         8a:8a:b4:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZM28IEf96OCXBLXWq3vWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZmMwYWE1YTZjMzM5MWVmZmZmYTgzNDI1YjIzYjI2NGM3
MTA4NWYwHhcNMjQxMTIzMDUwMDQ0WhcNMjQxMTI0MDUwMDQ0WjAzMTEwLwYDVQQD
Eyg5M2QwZTYzYmNjMDM5MjQ3MTllNjc3OWQ0MDU0ODA0ZTRjMGYyOGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHerkpSX8htmvgqaYdVFht0PkTRf
/u1IUpJVx2bJfiuMUGJpdHipzZSLYIWwGqncYb1l/DiGbj143SRFRd+VJJ8P5iGM
htSykOjnukYvwYitpsXPofZydR/uwTrdyS29x3z8k1K3BFpdyq8MsWLrockeOf4d
FfJxWq45EvmW5agousynD4tsE4lIc3fT5onoz8NB1V7hxNocvU+EwFwSarsdluuD
59wB2VEDfL56y7ewx7bSYjm7FPfgBzp4gGwoyXXduzXpYF5WABARokSXMuTac0EL
wKg4g9CUV780gjMjEkQWotTKiqu93/485xwofbUWhmLWv002bSG1zst6+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPQ5jvMA5JHGeZ3nUBUgE5MDyjoMB8GA1UdIwQY
MBaAFEX8CqWmwzke//+oNCWyOyZMcQhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYt
OTI3MTliMDBiYmQ0LzEvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYtOTI3MTliMDBiYmQ0
LzEvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhC/5R1I
uY9fbaiQ4qtiVSGXUyjz7jn1ZhThKL/sVDSOtIY5hvppk/U/8EeLjX79n4qZmWeo
nIEEmjdWHD7uxjo1SYA7AnQfdxsXuuaPBBfn2+Af3uYY0iB525NtRPHiLJK9wceq
MCE80bim6gkMutI8kShiklMg4mR4/CbTQfpzi3wLkDmJxqLZIUQ/oibS6lmbas0X
5skpPl9eZ8Uwe34tiOUaWYlYSmLdL4Csae1BGgSXd8citJ/+Uoixt4TtOZPYn+Wl
sn/etI4vkHEImeKW22UAfVMaxpPgihTW3HfWL0JQnJz7QciUfFsaCCTwTOyVw0wH
/4CB1LBCioq0Hw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:19 2024 by rpki-client on console-fra.rpki-client.org