Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
File:                     4GMUdXVI8HToT68_y7e4LYLe8-U.mft (raw, json)
Hash identifier:          N+HA3M5qa9rsRb/QwHQTdch6D1eX0DcK/STGpx/1K4Q=
Subject key identifier:   11:4F:15:4B:8E:C9:1F:37:40:8F:98:EA:06:AF:3E:F9:CD:EC:0B:81
Authority key identifier: E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5
Certificate issuer:       /CN=e06314757548f074e84faf3fcbb7b82d82def3e5
Certificate serial:       01935689B5FF46284394AFDEADFE070111F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 01:01:25 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:25 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:25 +0000
Files and hashes:         1: 4GMUdXVI8HToT68_y7e4LYLe8-U.crl (hash: /mAjKpdHFy93RlF/z9N4MkmnTUQqIp4PJv0pcZYSvp8=)
                          2: g0KrjuBVKQP76QP82FIaAG5OXWQ.roa (hash: 31XXneOF1Y3dvnPAQ5XHQzbpOM/hZPCLbFNShiqjuTQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:b5:ff:46:28:43:94:af:de:ad:fe:07:01:11:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06314757548f074e84faf3fcbb7b82d82def3e5
        Validity
            Not Before: Nov 23 01:01:25 2024 GMT
            Not After : Nov 24 01:01:25 2024 GMT
        Subject: CN=114f154b8ec91f37408f98ea06af3ef9cdec0b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:e6:2d:13:e7:d6:f1:31:83:53:24:3f:ab:
                    60:bd:9e:c5:39:a6:0f:ff:0e:57:d6:23:91:5a:55:
                    74:d5:f4:eb:0b:d7:14:9e:39:56:55:78:18:05:b5:
                    84:06:0a:6a:3f:67:f3:af:9b:cb:d4:b6:f5:6b:e5:
                    31:9b:85:ee:42:0a:85:ba:b7:e4:1a:aa:70:1a:0f:
                    d2:ab:0b:89:89:4f:97:e3:cb:bb:e8:98:db:86:d5:
                    12:c7:f3:50:6d:bb:8b:76:7f:8a:e4:bd:8a:d2:84:
                    27:1b:cb:3a:aa:a7:5a:63:91:5d:96:af:1a:ff:0e:
                    7e:d2:81:ed:78:67:f4:5a:fc:da:5e:40:26:a4:1d:
                    80:cb:a2:60:ef:66:d6:38:d7:94:6c:7c:2f:ed:10:
                    a8:39:16:12:bc:63:e6:50:e6:7a:70:63:ba:e1:7d:
                    dd:f6:37:b4:30:e2:7f:97:20:ca:a6:d5:1c:e3:03:
                    09:99:3e:39:07:90:8d:03:08:5e:b5:9f:3e:85:1c:
                    5b:64:2d:d5:cb:c3:c8:c0:63:ba:ae:ac:59:17:9b:
                    b7:f6:3e:f0:30:57:d6:01:f6:b4:a5:a9:5f:17:90:
                    89:dc:ec:9d:83:5a:a5:68:7b:64:8d:4d:ee:e1:6c:
                    05:a5:bc:4f:2f:08:54:92:0c:ce:43:08:11:e5:63:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4F:15:4B:8E:C9:1F:37:40:8F:98:EA:06:AF:3E:F9:CD:EC:0B:81
            X509v3 Authority Key Identifier:
                keyid:E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:2f:53:e2:db:b3:75:d6:29:ac:92:0f:cd:86:86:de:af:df:
         a3:c9:61:dc:7b:0f:0e:0b:dd:37:96:e0:66:01:a2:bf:8c:4f:
         0e:78:9c:3e:3d:7d:6c:a5:d2:42:ae:ea:27:42:19:4f:e8:75:
         37:76:4d:b3:46:6f:4f:c6:ef:c0:50:85:f8:2d:54:14:da:0a:
         45:6d:a6:93:bc:51:ed:51:eb:5a:e7:7d:19:d8:a6:46:0b:2c:
         09:97:ff:44:f9:01:5b:03:a0:a6:f5:9c:7b:87:4f:1c:c9:b1:
         b8:4d:a5:a3:64:e4:63:0d:da:1d:65:39:c5:ab:e7:6b:b3:9c:
         b3:c1:35:9e:f2:5f:02:a6:7a:e0:d7:cc:98:9d:a6:8e:6a:00:
         0e:72:4c:21:c0:18:2c:bc:77:08:80:3c:10:3a:d0:f8:4d:c1:
         69:af:d4:be:36:c9:40:d7:bb:53:cb:75:1f:f5:78:5e:b3:f9:
         ac:f3:29:e6:db:06:dd:20:b6:d6:20:c1:ab:1d:5b:3e:c4:c1:
         e8:7f:9d:4d:11:49:7a:92:0e:6a:44:54:5b:2f:22:2d:4f:8f:
         c3:15:39:d8:4b:d8:91:62:ec:74:2b:e1:18:a2:a9:b8:44:8d:
         1f:6a:1d:e1:20:51:b7:5e:8c:07:c1:93:37:cd:6e:36:3f:e0:
         a8:86:c1:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWibX/RihDlK/erf4HARH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjMxNDc1NzU0OGYwNzRlODRmYWYzZmNiYjdiODJkODJk
ZWYzZTUwHhcNMjQxMTIzMDEwMTI1WhcNMjQxMTI0MDEwMTI1WjAzMTEwLwYDVQQD
EygxMTRmMTU0YjhlYzkxZjM3NDA4Zjk4ZWEwNmFmM2VmOWNkZWMwYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy23mLRPn1vExg1MkP6tgvZ7FOaYP
/w5X1iORWlV01fTrC9cUnjlWVXgYBbWEBgpqP2fzr5vL1Lb1a+Uxm4XuQgqFurfk
GqpwGg/SqwuJiU+X48u76JjbhtUSx/NQbbuLdn+K5L2K0oQnG8s6qqdaY5Fdlq8a
/w5+0oHteGf0WvzaXkAmpB2Ay6Jg72bWONeUbHwv7RCoORYSvGPmUOZ6cGO64X3d
9je0MOJ/lyDKptUc4wMJmT45B5CNAwhetZ8+hRxbZC3Vy8PIwGO6rqxZF5u39j7w
MFfWAfa0palfF5CJ3Oydg1qlaHtkjU3u4WwFpbxPLwhUkgzOQwgR5WPAIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFPFUuOyR83QI+Y6gavPvnN7AuBMB8GA1UdIwQY
MBaAFOBjFHV1SPB06E+vP8u3uC2C3vPlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdNVWRYVkk4SFRvVDY4X3k3ZTRMWUxlOC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80OTdjZWQtMDUyNi00ZDNiLWJkMmIt
ODBkMjFjMjBkOTE4LzEvNEdNVWRYVkk4SFRvVDY4X3k3ZTRMWUxlOC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80OTdjZWQtMDUyNi00ZDNiLWJkMmItODBkMjFjMjBkOTE4
LzEvNEdNVWRYVkk4SFRvVDY4X3k3ZTRMWUxlOC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASC9T4tuz
ddYprJIPzYaG3q/fo8lh3HsPDgvdN5bgZgGiv4xPDnicPj19bKXSQq7qJ0IZT+h1
N3ZNs0ZvT8bvwFCF+C1UFNoKRW2mk7xR7VHrWud9GdimRgssCZf/RPkBWwOgpvWc
e4dPHMmxuE2lo2TkYw3aHWU5xavna7Ocs8E1nvJfAqZ64NfMmJ2mjmoADnJMIcAY
LLx3CIA8EDrQ+E3Baa/UvjbJQNe7U8t1H/V4XrP5rPMp5tsG3SC21iDBqx1bPsTB
6H+dTRFJepIOakRUWy8iLU+PwxU52EvYkWLsdCvhGKKpuESNH2od4SBRt16MB8GT
N81uNj/gqIbBqw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:38:19 2024 by rpki-client on console-fra.rpki-client.org