Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File:                     R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier:          gqJrwldbnx67r+F4Zf+zkVjkzTHKb8SEd2yraF7BZbE=
Subject key identifier:   17:FA:5F:C7:B6:8B:36:DE:82:02:B7:00:66:7E:55:5A:AE:D9:E0:EB
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer:       /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial:       019365FE00EC50F61670EF82F6371FC61297
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number:          0B53
Signing time:             Tue 26 Nov 2024 01:02:45 +0000
Manifest this update:     Tue 26 Nov 2024 01:02:45 +0000
Manifest next update:     Wed 27 Nov 2024 01:02:45 +0000
Files and hashes:         1: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: SMWBOl6RT+MTeH4Cud6Lao/zyLe1xMwl6qzRo73L3yM=)
                          2: fIzb047DyNcNolAuM681cAHU1-w.roa (hash: vb97hXH2h3J9gfFwu2LmrP5GHQeYbFaoAmaam4XlKqI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fe:00:ec:50:f6:16:70:ef:82:f6:37:1f:c6:12:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
        Validity
            Not Before: Nov 26 01:02:45 2024 GMT
            Not After : Nov 27 01:02:45 2024 GMT
        Subject: CN=17fa5fc7b68b36de8202b700667e555aaed9e0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:f6:e3:b2:51:12:68:b2:4d:f1:d1:a4:b2:
                    ac:46:cf:e7:16:90:62:a7:13:d3:0b:51:ac:13:47:
                    d7:15:b6:57:3a:2d:b9:c9:e9:37:3b:ae:ae:75:dc:
                    01:c3:2f:6c:68:a8:8d:1c:44:95:a2:e1:e3:8d:a3:
                    fe:4f:cf:f9:c7:7c:5f:2e:12:8a:9d:cf:b0:18:3a:
                    0a:c6:ac:57:63:77:91:c0:7a:c2:c2:7a:11:5f:0b:
                    16:b4:0b:f1:1b:36:c2:b9:b5:d3:03:15:ba:1c:31:
                    d0:fa:2a:46:c6:41:88:6b:0d:f8:53:34:bb:6e:ec:
                    74:c0:8f:98:2f:ae:7d:f3:25:84:e2:e1:7b:87:7e:
                    c7:91:ef:93:f2:87:02:84:42:37:6b:bd:51:d2:f1:
                    fd:bb:48:a9:a0:f6:5e:9b:b5:05:9b:57:e9:04:c2:
                    b8:9b:30:60:bc:b8:e0:8d:3b:f1:74:56:64:9d:69:
                    e3:ea:f5:c6:46:b8:02:c6:c1:bb:9e:ae:07:02:23:
                    f4:4a:c4:fc:90:01:57:33:78:b5:29:2a:5e:9e:67:
                    91:c8:41:45:45:5a:e8:c9:7c:69:1e:dc:1d:dc:45:
                    0e:68:37:6a:ef:be:b0:f0:26:34:17:dc:85:a4:69:
                    a9:04:19:a7:e3:6a:6e:5b:b7:7d:21:5d:ed:a2:1a:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FA:5F:C7:B6:8B:36:DE:82:02:B7:00:66:7E:55:5A:AE:D9:E0:EB
            X509v3 Authority Key Identifier:
                keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:42:18:fe:70:77:dd:bc:bb:58:d1:61:8a:b8:88:68:a3:c8:
         31:2f:9f:03:21:03:9e:3d:df:57:d4:4b:bd:36:41:78:25:78:
         a0:82:62:ed:b4:72:2d:c7:5e:0b:33:91:50:9b:45:35:4e:3b:
         7b:24:40:f3:7a:01:08:94:56:c9:95:de:2c:b0:f1:60:9e:7b:
         f7:2f:6d:0b:97:b9:5f:e3:0c:fa:7c:fe:b8:c6:7d:6b:19:f4:
         71:77:39:4b:c2:67:f2:a0:94:51:33:a5:f6:60:65:db:01:85:
         21:b9:20:d2:4e:fc:aa:b5:9f:ed:2f:4e:3c:f4:7a:a8:c7:23:
         15:fe:e9:00:0a:91:10:ff:0b:7d:6f:dd:29:fb:e4:81:31:42:
         d4:2b:bd:d2:dc:7c:c0:3f:b7:c8:57:25:78:b5:d3:5f:53:23:
         3f:4a:db:5a:f2:80:99:3a:22:04:00:d3:bc:62:d3:4c:ea:64:
         df:fe:54:22:53:68:70:da:fd:4d:6c:d3:28:da:a5:3e:4c:d2:
         1e:da:29:0f:8a:5b:9d:c2:29:92:38:4f:53:ae:b5:84:b4:f2:
         bc:92:f7:e4:f6:ca:af:91:bc:c6:40:a6:34:72:20:26:08:a5:
         0a:1c:37:82:06:79:e7:f1:83:a1:67:50:3b:d5:12:db:9a:93:
         9d:29:a9:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNl/gDsUPYWcO+C9jcfxhKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjMzNDYxOWIxNDk0NWRmYmMwNjRkNGFlMWY1NzZiMGUx
ZGVjYTcwHhcNMjQxMTI2MDEwMjQ1WhcNMjQxMTI3MDEwMjQ1WjAzMTEwLwYDVQQD
EygxN2ZhNWZjN2I2OGIzNmRlODIwMmI3MDA2NjdlNTU1YWFlZDllMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZH247JREmiyTfHRpLKsRs/nFpBi
pxPTC1GsE0fXFbZXOi25yek3O66uddwBwy9saKiNHESVouHjjaP+T8/5x3xfLhKK
nc+wGDoKxqxXY3eRwHrCwnoRXwsWtAvxGzbCubXTAxW6HDHQ+ipGxkGIaw34UzS7
bux0wI+YL6598yWE4uF7h37Hke+T8ocChEI3a71R0vH9u0ipoPZem7UFm1fpBMK4
mzBgvLjgjTvxdFZknWnj6vXGRrgCxsG7nq4HAiP0SsT8kAFXM3i1KSpenmeRyEFF
RVroyXxpHtwd3EUOaDdq776w8CY0F9yFpGmpBBmn42puW7d9IV3tohqq7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBf6X8e2izbeggK3AGZ+VVqu2eDrMB8GA1UdIwQY
MBaAFEdjNGGbFJRd+8Bk1K4fV2sOHeynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mMTU0YjItYjEyNC00NTMyLTk3MDct
ZGJmY2QxMWMzMzAzLzEvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9mMTU0YjItYjEyNC00NTMyLTk3MDctZGJmY2QxMWMzMzAz
LzEvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0IY/nB3
3by7WNFhiriIaKPIMS+fAyEDnj3fV9RLvTZBeCV4oIJi7bRyLcdeCzORUJtFNU47
eyRA83oBCJRWyZXeLLDxYJ579y9tC5e5X+MM+nz+uMZ9axn0cXc5S8Jn8qCUUTOl
9mBl2wGFIbkg0k78qrWf7S9OPPR6qMcjFf7pAAqREP8LfW/dKfvkgTFC1Cu90tx8
wD+3yFcleLXTX1MjP0rbWvKAmToiBADTvGLTTOpk3/5UIlNocNr9TWzTKNqlPkzS
HtopD4pbncIpkjhPU661hLTyvJL35PbKr5G8xkCmNHIgJgilChw3ggZ55/GDoWdQ
O9US25qTnSmpgA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:26:31 2024 by rpki-client on console-ams.rpki-client.org