Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
File:                     DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json)
Hash identifier:          1ZWtGF3w9UuwI4lkMKue+gy4EYD+Gyox6htvL+MDQvQ=
Subject key identifier:   5B:89:2F:1F:F9:77:63:D3:F6:9C:87:62:A8:98:73:2F:B2:65:4D:BE
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Certificate issuer:       /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial:       019354634AD2569D9072124EE91D6033C410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
Manifest number:          0E64
Signing time:             Fri 22 Nov 2024 15:00:13 +0000
Manifest this update:     Fri 22 Nov 2024 15:00:13 +0000
Manifest next update:     Sat 23 Nov 2024 15:00:13 +0000
Files and hashes:         1: 2Er_a4tXsvAjFyi8R9kkNx8HZ3E.roa (hash: A27X46pG+vHqWCQSWeuahMVUQtR8l3NQmpN6D4b61UU=)
                          2: 4HNgDUaSh_uVGhGAQnTEGVwVX2k.roa (hash: oViwXXBtz3EZlh4w828b/j4vs044wSs0DmuJkoT8jCE=)
                          3: 5ctNzSWNKhYvPgM7W-7AEdIzPcI.roa (hash: ol7GdcA4iRJIkSBh12Xly77s+yztKqUGmLoC9Xa8ZSs=)
                          4: BYx3Z6bkK08vV2sdMWJpyTQJJAw.roa (hash: CmYZDN0D/0IVTFxLxmv7FMbmXmEBMFd2CUdlZ7jbfr0=)
                          5: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: nwXTP+jlfuhaWsHSJH66nmeaDAU51tY/j/Umu7NUmFM=)
                          6: EqhA-Rr8k4bqPx5bEew6C8pwgxI.roa (hash: 76KRxOkrwHnYCBM8USqmxS5tguqYtq8kcgbX7I+0ifg=)
                          7: Myna4g7AK6BofRb82SaxtnGKUEU.roa (hash: KAyTP+sEBCa9uTZFMOlhyrtJtOWTQ0y04dwS9syq02M=)
                          8: Ow9Ezaq-Irz4UqtH4F7iN6aHIlk.roa (hash: 4SxUXciK9hx/avcoecTMLtngfh2ayyVx2I1X1qM6bmc=)
                          9: X3HukqjnT09kvd22rRQBfnh1Qc4.roa (hash: Byuq+qLBLlvSRM5D7QDoGqR8v7BYVHeTp6z0ustH8J0=)
                          10: YdQugoCa9KNRe6zUmrYq0khH0KI.roa (hash: +UC7995CdNKIr5GvVL+ucqP68cUQn3ZIgWgARgcID7g=)
                          11: _XJXFrFv6PwDIbH0ynH6bTrZoTw.roa (hash: DCncYoGslzPDsgMbrcD6N2mWqDX9nQ+WzY59SYfjBLY=)
                          12: gVjl5l_qpqWd0kk9ohkTfqilGEc.roa (hash: YXjc/+T5IkabPBRH6STfpAI5TLe2+x5mSw2GjA+/OpU=)
                          13: jQAe0USN00WDZOWswcwgnn8YOhQ.roa (hash: wzbdVYyucrnBROmfiQ2KpjIQmuEhSj/m0AJzB9UzpFo=)
                          14: lBXK9L6hP2hZW8XxgKsoGFntuMY.roa (hash: LoFq3m2d5W9RqYJ98NBx+CpVgpQlbKInEZJyCPXSAmM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:63:4a:d2:56:9d:90:72:12:4e:e9:1d:60:33:c4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
        Validity
            Not Before: Nov 22 15:00:13 2024 GMT
            Not After : Nov 23 15:00:13 2024 GMT
        Subject: CN=5b892f1ff97763d3f69c8762a898732fb2654dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:18:88:74:5b:e7:18:13:11:7f:1a:54:80:91:
                    14:55:94:df:dc:a2:83:c2:e7:07:ae:57:66:45:59:
                    67:fb:1e:5c:96:5a:74:98:a9:eb:c9:8e:85:90:91:
                    33:52:aa:af:ea:b5:d8:d1:37:f5:16:1a:e2:ca:a8:
                    5f:72:1c:b1:af:ac:85:3e:f8:b4:51:0e:84:89:9a:
                    90:cb:e3:76:36:df:b3:13:20:9b:80:be:9c:41:dc:
                    2c:76:b5:70:69:7c:4e:74:76:f8:c1:8e:96:39:07:
                    64:56:84:72:61:26:99:f3:79:15:cc:4c:78:4d:0d:
                    31:64:6a:38:9a:f1:f2:25:11:03:e3:96:3f:a9:f5:
                    a0:ac:62:2b:a3:94:9b:64:06:c3:45:ac:75:24:e7:
                    62:a1:fb:c6:4d:fc:ef:c3:d8:22:9d:c1:09:90:25:
                    19:84:62:52:2a:7d:eb:27:7a:0a:7d:13:d9:9b:15:
                    4f:36:a2:e7:27:47:6e:9b:04:80:05:ee:20:b3:d5:
                    06:90:e7:41:b2:6c:d9:fa:01:2f:b5:c9:14:c9:ec:
                    26:3b:6c:40:f3:d3:23:fd:ce:0f:53:a1:a2:31:11:
                    30:e4:21:ec:77:8d:2f:2d:3f:c2:b2:82:82:f9:ac:
                    96:ec:00:de:45:e9:63:26:d7:7a:38:4b:af:74:ff:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:89:2F:1F:F9:77:63:D3:F6:9C:87:62:A8:98:73:2F:B2:65:4D:BE
            X509v3 Authority Key Identifier:
                keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:54:34:1d:83:4e:87:25:e4:e7:24:79:ae:c2:00:05:ba:03:
         55:f4:85:b7:a0:1a:8b:6b:cc:69:c8:3d:7d:4c:41:c6:d3:f5:
         37:c8:6a:80:95:24:58:a9:f1:51:27:e3:97:a7:55:b7:d6:9a:
         47:2e:3a:a4:e1:96:04:2c:cb:c1:e1:eb:e1:e8:06:85:ab:d0:
         24:3c:1f:cd:ab:50:8f:47:89:f6:a7:46:1f:24:94:94:a2:54:
         4f:1d:9a:f6:9d:4c:70:c3:7a:01:ca:9e:fb:5c:f8:15:4d:79:
         72:44:cd:91:eb:8f:9d:4b:6a:8e:e8:27:8b:45:67:b8:ab:8d:
         9b:1d:70:0f:9d:07:40:ae:61:a1:78:28:42:7c:08:02:fd:6b:
         58:d9:6b:f4:9a:16:11:f2:30:cd:d0:7f:c4:0f:ed:cb:70:d6:
         8d:52:40:a3:c7:1b:1e:85:73:76:85:d6:89:67:e6:b8:98:2b:
         65:b1:38:42:e8:b9:4d:63:ca:31:3f:d5:ed:3b:54:05:96:ed:
         39:ff:a4:a8:0e:d9:d5:f4:ed:37:c9:a9:7f:c5:55:b6:6f:ff:
         c8:b1:9e:69:05:31:da:56:68:6f:75:6e:b3:ee:45:dc:08:13:
         26:de:e3:d8:ba:82:bb:da:01:f2:7c:b5:62:ed:b2:c1:a7:3f:
         09:62:04:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUY0rSVp2QchJO6R1gM8QQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm
ZjA4NjEwHhcNMjQxMTIyMTUwMDEzWhcNMjQxMTIzMTUwMDEzWjAzMTEwLwYDVQQD
Eyg1Yjg5MmYxZmY5Nzc2M2QzZjY5Yzg3NjJhODk4NzMyZmIyNjU0ZGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xiIdFvnGBMRfxpUgJEUVZTf3KKD
wucHrldmRVln+x5cllp0mKnryY6FkJEzUqqv6rXY0Tf1Fhriyqhfchyxr6yFPvi0
UQ6EiZqQy+N2Nt+zEyCbgL6cQdwsdrVwaXxOdHb4wY6WOQdkVoRyYSaZ83kVzEx4
TQ0xZGo4mvHyJRED45Y/qfWgrGIro5SbZAbDRax1JOdiofvGTfzvw9gincEJkCUZ
hGJSKn3rJ3oKfRPZmxVPNqLnJ0dumwSABe4gs9UGkOdBsmzZ+gEvtckUyewmO2xA
89Mj/c4PU6GiMREw5CHsd40vLT/CsoKC+ayW7ADeReljJtd6OEuvdP/qaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuJLx/5d2PT9pyHYqiYcy+yZU2+MB8GA1UdIwQY
MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt
ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy
LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2lQ0HYNO
hyXk5yR5rsIABboDVfSFt6Aai2vMacg9fUxBxtP1N8hqgJUkWKnxUSfjl6dVt9aa
Ry46pOGWBCzLweHr4egGhavQJDwfzatQj0eJ9qdGHySUlKJUTx2a9p1McMN6Acqe
+1z4FU15ckTNkeuPnUtqjugni0VnuKuNmx1wD50HQK5hoXgoQnwIAv1rWNlr9JoW
EfIwzdB/xA/ty3DWjVJAo8cbHoVzdoXWiWfmuJgrZbE4Qui5TWPKMT/V7TtUBZbt
Of+kqA7Z1fTtN8mpf8VVtm//yLGeaQUx2lZob3Vus+5F3AgTJt7j2LqCu9oB8ny1
Yu2ywac/CWIE3A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:24:52 2024 by rpki-client on console-fra.rpki-client.org