Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File:                     v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier:          GpDoyxjzQgQMFsh2yGCbdw/NWvH0K7HWbyQp33Sdw40=
Subject key identifier:   32:2F:D5:CF:87:94:95:B8:C2:40:E6:F9:38:AB:8C:07:77:89:13:E0
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer:       /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial:       0193572DFD008B8C240BAAB737AA630E6022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 04:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:51 +0000
Files and hashes:         1: WOcYZTttubWz06b22JJSGQ3Akos.roa (hash: +UjrJQenwXLeVWrbNcSeHayzLyjiAd9EpvvPGv0MIWY=)
                          2: j7LvyzxcAe00QHmEwU_IqQyb_GQ.roa (hash: NbIHDukFL8rH8ZpuZ7rHBOLcYzhtfiQTltdmZUAPGmU=)
                          3: oV3vWhIV2nlgnY_bEK1xjA7oI2Y.roa (hash: C2/zWsUYNcqC3kC41agJwbInu3A2HT2Wj02SGhI/kWE=)
                          4: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: zU9gppp/rx4evJacayK0F0BwXA/9sLziM6y3UDtbPCs=)
                          5: xcs9ffwQS8eAsBjO43zEAeZW818.roa (hash: LYXh6/DGHaQxWrAa8aaeq/ocKORg569JbwCR41GVb7Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:fd:00:8b:8c:24:0b:aa:b7:37:aa:63:0e:60:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
        Validity
            Not Before: Nov 23 04:00:51 2024 GMT
            Not After : Nov 24 04:00:51 2024 GMT
        Subject: CN=322fd5cf879495b8c240e6f938ab8c07778913e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2d:bd:c6:6c:38:05:f5:00:e0:c5:8e:7a:3c:
                    ce:97:3c:bb:8d:fc:0d:69:1c:0b:58:25:f2:70:c6:
                    b5:d1:e5:4a:ad:fe:c1:0c:e0:8b:ae:49:32:3e:a4:
                    bb:39:f5:9a:fc:d5:17:10:f4:ec:5f:85:26:6f:9c:
                    8f:ff:2a:54:1f:67:38:dd:03:25:63:62:4f:08:ff:
                    db:ca:42:51:ba:64:34:14:49:05:30:7c:e7:ba:cb:
                    1c:1b:4b:63:94:5c:fa:64:2f:55:ba:76:97:8f:f6:
                    4f:69:3a:c6:2c:4f:83:21:91:bb:44:73:33:d6:f1:
                    02:35:c7:d6:19:c0:8b:8d:ef:ef:6a:05:bd:b9:f9:
                    4c:19:64:c9:c8:f4:05:aa:80:28:58:58:bd:3b:a2:
                    8e:88:57:2c:36:4b:36:bf:a8:21:7d:cd:11:9b:26:
                    c3:27:8a:2a:62:bf:30:8f:4f:f0:99:51:0b:17:ba:
                    06:8b:8d:48:de:17:17:58:f9:d3:d3:4f:20:6f:b4:
                    ea:24:af:3d:dc:ff:05:1a:05:a5:fc:e3:57:2c:b2:
                    d8:ed:0f:14:9b:d4:8d:f8:8e:b2:0f:dc:4e:e3:3f:
                    de:58:bd:c7:a2:8c:52:09:95:2a:ba:ed:8f:ff:11:
                    7f:14:aa:31:5b:4c:13:7c:bf:ba:11:96:12:65:b1:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2F:D5:CF:87:94:95:B8:C2:40:E6:F9:38:AB:8C:07:77:89:13:E0
            X509v3 Authority Key Identifier:
                keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:0e:f7:7a:9f:93:12:e1:69:82:be:29:0c:cc:ba:0c:6e:e0:
         62:27:70:03:a7:e0:98:59:e8:a1:13:6b:fc:7d:cb:85:9e:fb:
         02:2e:1c:b6:c6:bb:95:96:3e:9e:73:68:0f:86:b0:cd:ff:cb:
         c6:d1:fb:18:32:6d:87:90:00:fe:9a:38:08:16:b3:a7:39:09:
         34:9a:13:1d:bc:fa:5a:31:c4:f0:a9:a4:6c:6e:71:3c:71:fc:
         a7:3a:a4:76:01:27:3f:c7:9e:fe:a8:76:43:f7:94:19:6d:e0:
         19:9c:a2:af:37:9b:1c:3b:74:86:98:4a:d2:3f:5a:9a:1c:e1:
         9f:d2:76:05:85:d2:ab:48:f4:68:b4:29:16:26:0c:9d:66:8b:
         21:38:82:de:69:ef:3e:7b:ca:ad:c6:bc:9c:d4:2d:72:fa:4e:
         48:f1:1c:6e:37:2e:66:69:9d:c8:6f:81:71:b0:20:66:42:3c:
         06:e3:49:f0:19:1b:a2:02:77:7c:9b:2c:18:1d:c8:11:8c:c8:
         d0:92:5a:d0:87:2e:43:9a:39:30:18:bd:4e:08:c4:1e:21:0c:
         09:41:24:ff:77:7a:9f:c8:37:ba:d3:0e:78:10:5a:41:0d:9f:
         49:1d:37:4e:25:46:a6:d7:24:18:9f:ca:52:c8:d5:3d:44:35:
         19:88:b9:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLf0Ai4wkC6q3N6pjDmAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNWRiODExYjVkNWQwNWJlYzM3ZWU5ZDA5YTRlYzUyZWVl
ZDFhZDUwHhcNMjQxMTIzMDQwMDUxWhcNMjQxMTI0MDQwMDUxWjAzMTEwLwYDVQQD
EygzMjJmZDVjZjg3OTQ5NWI4YzI0MGU2ZjkzOGFiOGMwNzc3ODkxM2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S29xmw4BfUA4MWOejzOlzy7jfwN
aRwLWCXycMa10eVKrf7BDOCLrkkyPqS7OfWa/NUXEPTsX4Umb5yP/ypUH2c43QMl
Y2JPCP/bykJRumQ0FEkFMHznusscG0tjlFz6ZC9VunaXj/ZPaTrGLE+DIZG7RHMz
1vECNcfWGcCLje/vagW9uflMGWTJyPQFqoAoWFi9O6KOiFcsNks2v6ghfc0RmybD
J4oqYr8wj0/wmVELF7oGi41I3hcXWPnT008gb7TqJK893P8FGgWl/ONXLLLY7Q8U
m9SN+I6yD9xO4z/eWL3HooxSCZUquu2P/xF/FKoxW0wTfL+6EZYSZbFd+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIv1c+HlJW4wkDm+TirjAd3iRPgMB8GA1UdIwQY
MBaAFL9duBG11dBb7DfunQmk7FLu7RrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2Mt
NzE1ZjA5ODE3MzQxLzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2MtNzE1ZjA5ODE3MzQx
LzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQ73ep+T
EuFpgr4pDMy6DG7gYidwA6fgmFnooRNr/H3LhZ77Ai4ctsa7lZY+nnNoD4awzf/L
xtH7GDJth5AA/po4CBazpzkJNJoTHbz6WjHE8KmkbG5xPHH8pzqkdgEnP8ee/qh2
Q/eUGW3gGZyirzebHDt0hphK0j9amhzhn9J2BYXSq0j0aLQpFiYMnWaLITiC3mnv
PnvKrca8nNQtcvpOSPEcbjcuZmmdyG+BcbAgZkI8BuNJ8BkbogJ3fJssGB3IEYzI
0JJa0IcuQ5o5MBi9TgjEHiEMCUEk/3d6n8g3utMOeBBaQQ2fSR03TiVGptckGJ/K
UsjVPUQ1GYi5vA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:31 2024 by rpki-client on console-ams.rpki-client.org