Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
File:                     ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json)
Hash identifier:          pKb3vJoK4VrP31NoReLaAU2D3buEO4/BZ5G7yTi8tD4=
Subject key identifier:   64:69:B4:DE:40:83:CC:59:91:CB:72:E7:AD:36:3E:F9:55:76:82:64
Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
Certificate issuer:       /CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Certificate serial:       0193688F462EF62843EED102F3DD126E8BC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
Manifest number:          0469
Signing time:             Tue 26 Nov 2024 13:00:40 +0000
Manifest this update:     Tue 26 Nov 2024 13:00:40 +0000
Manifest next update:     Wed 27 Nov 2024 13:00:40 +0000
Files and hashes:         1: 3fCPYsZRO4920I7J3fiL7m3QYMA.roa (hash: 22Tcanln/YyWYPAdVKqHcBbg+HRmZ4L+xgloOhYJJ3s=)
                          2: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: qTxMGjksECP22N/Bf93vDdQqy4WOsTer5u1gSvsJSOo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:8f:46:2e:f6:28:43:ee:d1:02:f3:dd:12:6e:8b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556
        Validity
            Not Before: Nov 26 13:00:40 2024 GMT
            Not After : Nov 27 13:00:40 2024 GMT
        Subject: CN=6469b4de4083cc5991cb72e7ad363ef955768264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f6:e9:49:07:ff:55:34:38:ec:a3:8a:7e:a4:
                    41:98:0a:42:a2:39:49:60:1f:f9:36:ff:cd:81:38:
                    04:29:31:a3:54:15:18:4d:83:eb:0e:79:df:30:89:
                    be:b5:71:da:f1:d6:44:fe:87:7d:05:2c:30:87:31:
                    c0:20:a3:43:d1:55:7f:83:f0:43:8c:a2:b0:95:82:
                    f5:3f:25:62:61:04:b1:89:da:2d:60:e2:f5:14:2f:
                    7a:26:c0:f9:e1:0e:9a:41:23:63:32:46:9f:d7:31:
                    45:37:a5:fd:e2:92:54:e4:c6:69:02:ac:c8:db:a1:
                    b4:41:7d:f2:7e:ec:96:10:c2:14:7d:5b:9c:b9:66:
                    92:fc:03:e0:91:dc:a5:ad:bd:3f:ce:87:ba:a1:b7:
                    46:fc:5b:33:fc:1b:06:0f:f7:42:58:da:62:da:c0:
                    da:13:6f:d3:f0:6f:69:e7:d0:fc:3c:aa:3d:bc:af:
                    d9:c1:f4:52:52:ac:58:4a:56:8e:ea:f7:51:b6:07:
                    b0:17:27:fd:91:07:02:e0:ca:25:4d:f0:c3:1f:87:
                    c7:31:d7:77:78:38:6c:6c:ca:f8:6d:32:e5:12:3e:
                    a2:7e:cd:12:a2:01:64:fc:b8:5c:07:78:24:66:98:
                    7d:77:f5:aa:28:03:ec:d1:30:81:24:a5:98:b2:53:
                    c6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:69:B4:DE:40:83:CC:59:91:CB:72:E7:AD:36:3E:F9:55:76:82:64
            X509v3 Authority Key Identifier:
                keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f0:d7:3b:77:a6:09:17:b5:47:12:00:35:66:cc:8e:cf:a2:
         1d:37:44:76:9e:0d:a9:82:28:aa:1b:c4:11:11:c7:53:66:ab:
         e3:39:4f:82:3f:4a:3d:d2:5f:4d:85:3f:e0:aa:97:39:0a:b2:
         c0:a3:23:da:0e:9a:96:85:ab:ee:c2:62:4a:a0:d7:da:a9:9e:
         3b:85:42:15:b5:f5:dc:a9:b1:f8:d2:d2:c1:23:da:d7:2d:3f:
         45:82:33:96:29:99:2d:85:76:4b:a2:14:e5:38:b2:f9:a5:48:
         f3:38:61:c2:77:9d:23:5e:e3:bb:c5:29:61:2b:98:2d:d6:df:
         ff:ad:35:d1:d0:65:6a:42:46:ad:d8:9a:22:c4:fe:df:ee:33:
         db:e7:96:c5:55:84:df:0d:dc:5e:74:87:39:9f:74:f5:a6:02:
         30:46:0b:7b:7c:7c:9d:57:cc:85:e6:9b:f9:22:88:08:60:26:
         30:45:17:2c:53:f6:4b:d5:94:76:ea:44:4f:30:03:da:dd:f7:
         8f:bd:cf:41:75:73:65:ea:12:de:e8:95:ad:88:f0:61:83:7f:
         8a:bf:01:5a:93:df:9c:82:43:16:2e:05:a7:6d:4d:73:26:82:
         cc:f9:08:85:a0:7c:de:4b:7f:3e:59:a5:a3:ed:59:d6:37:8b:
         e0:8c:f9:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNoj0Yu9ihD7tEC890SbovBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDg0YjVmMTliNjIwNDhiMjJhNjEwM2QwOWY4NGQ4MTUz
Yzc1NTYwHhcNMjQxMTI2MTMwMDQwWhcNMjQxMTI3MTMwMDQwWjAzMTEwLwYDVQQD
Eyg2NDY5YjRkZTQwODNjYzU5OTFjYjcyZTdhZDM2M2VmOTU1NzY4MjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPbpSQf/VTQ47KOKfqRBmApCojlJ
YB/5Nv/NgTgEKTGjVBUYTYPrDnnfMIm+tXHa8dZE/od9BSwwhzHAIKND0VV/g/BD
jKKwlYL1PyViYQSxidotYOL1FC96JsD54Q6aQSNjMkaf1zFFN6X94pJU5MZpAqzI
26G0QX3yfuyWEMIUfVucuWaS/APgkdylrb0/zoe6obdG/Fsz/BsGD/dCWNpi2sDa
E2/T8G9p59D8PKo9vK/ZwfRSUqxYSlaO6vdRtgewFyf9kQcC4MolTfDDH4fHMdd3
eDhsbMr4bTLlEj6ifs0SogFk/LhcB3gkZph9d/WqKAPs0TCBJKWYslPG9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRptN5Ag8xZkcty5602PvlVdoJkMB8GA1UdIwQY
MBaAFGTYS18ZtiBIsiphA9CfhNgVPHVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEt
NWRiNjNiYWI5NDYwLzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEtNWRiNjNiYWI5NDYw
LzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfDXO3em
CRe1RxIANWbMjs+iHTdEdp4NqYIoqhvEERHHU2ar4zlPgj9KPdJfTYU/4KqXOQqy
wKMj2g6aloWr7sJiSqDX2qmeO4VCFbX13Kmx+NLSwSPa1y0/RYIzlimZLYV2S6IU
5Tiy+aVI8zhhwnedI17ju8UpYSuYLdbf/6010dBlakJGrdiaIsT+3+4z2+eWxVWE
3w3cXnSHOZ909aYCMEYLe3x8nVfMheab+SKICGAmMEUXLFP2S9WUdupETzAD2t33
j73PQXVzZeoS3uiVrYjwYYN/ir8BWpPfnIJDFi4Fp21NcyaCzPkIhaB83kt/Plml
o+1Z1jeL4Iz50A==
-----END CERTIFICATE-----
Generated at Tue Nov 26 20:12:41 2024 by rpki-client on console-ams.rpki-client.org