Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File:                     Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier:          YwZwDRE4nx4eyz9fBk9zr5XHStlLAzyoUN0fYCb4mrE=
Subject key identifier:   B2:7B:25:AA:A8:4B:81:13:4C:1D:E1:45:4F:2C:EC:40:BA:AF:89:95
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer:       /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial:       01935207027330078172BFDC32C2306635C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number:          1031
Signing time:             Fri 22 Nov 2024 04:00:11 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:11 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:11 +0000
Files and hashes:         1: F49yx8hGQzJ4t6eIZe9ekZxFZes.roa (hash: heAC7Bufoonp/l9iASjQp8m3k+bQf5wrs+uiGQcH9rs=)
                          2: IXMlx0S8JiiILOX9Df9JwcR9-7A.roa (hash: EBWqhcIVG6iM5EothtWLeTsBZiviPSYitsxMWEI41Tk=)
                          3: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: KGO4d+AwkqhB6RIvB0ggseg7n4yX7l9CvxhrCyumnLk=)
                          4: U1eKmWYm-OPwdrEjvBh936w4zBk.roa (hash: u8yTS7QsRs27pU56GhAi9ZnkYPwilbnGyAX1liXbHjQ=)
                          5: bM2-VyfDytezhMkkPP84yhmUfIM.roa (hash: Ty1j3ftxovvQMBCZIlIgsTUyQKG7uk7ctvpnTJte21c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:02:73:30:07:81:72:bf:dc:32:c2:30:66:35:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
        Validity
            Not Before: Nov 22 04:00:11 2024 GMT
            Not After : Nov 23 04:00:11 2024 GMT
        Subject: CN=b27b25aaa84b81134c1de1454f2cec40baaf8995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:d3:23:da:25:19:a2:49:fb:c5:49:4a:3d:
                    c0:cc:99:ca:64:11:a9:e0:d5:d4:f8:58:16:3e:fb:
                    b3:1a:87:22:32:a6:b9:25:05:7f:28:3c:df:37:9e:
                    04:84:52:2b:7e:6e:ce:97:71:27:cc:9d:fc:1f:e8:
                    eb:96:2c:95:5f:ab:7c:09:a2:ef:34:a6:79:41:44:
                    e3:94:e4:e5:ac:2c:c0:b3:35:a7:85:7f:ca:89:94:
                    c0:68:7f:e3:92:14:25:a6:ca:f9:69:33:32:0e:61:
                    78:ed:1f:13:7e:ac:e5:fd:98:a6:a0:f3:43:d2:64:
                    c8:25:55:f8:b0:be:fa:ae:f8:9a:1e:8d:bc:f2:6e:
                    72:95:61:2c:b6:22:62:4f:21:39:e3:e0:80:ce:0a:
                    10:c1:eb:da:03:da:b8:64:fc:0f:b9:3b:8a:6e:a7:
                    6a:2c:77:99:5d:81:4e:2d:25:fd:d1:9e:75:91:d8:
                    12:30:56:58:f2:47:4b:fc:7c:36:13:5f:b5:04:02:
                    e4:e8:84:fe:e4:32:5d:d6:14:f6:88:20:db:00:96:
                    df:1c:ff:c8:4c:4b:5e:79:b6:d0:92:e7:2a:88:e2:
                    40:5d:40:d2:e7:af:eb:31:f7:a1:08:48:c5:d1:50:
                    68:19:02:1e:70:59:9e:23:69:29:85:3a:1a:6b:c6:
                    96:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7B:25:AA:A8:4B:81:13:4C:1D:E1:45:4F:2C:EC:40:BA:AF:89:95
            X509v3 Authority Key Identifier:
                keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:34:05:f2:ff:c7:86:01:31:c0:c2:54:82:ac:6e:87:b3:b6:
         86:3b:30:de:4e:d7:8e:5b:c4:a8:23:77:39:6c:b2:d4:bd:c3:
         8d:aa:55:eb:b4:68:ca:aa:a0:be:5d:bf:cf:d1:33:82:63:46:
         3d:31:8b:b7:ac:69:f0:8b:13:0f:af:c4:76:4e:4e:7f:0f:f5:
         28:95:d2:56:34:ea:63:ff:4c:12:2f:1d:cc:04:f3:30:70:ff:
         bf:d9:f4:f4:99:d7:99:24:e1:1e:aa:e8:56:a3:e0:5e:f9:3e:
         12:1e:ce:cf:cc:37:d0:92:21:14:f5:d6:72:2e:a6:5c:03:5a:
         87:bd:ef:c9:66:a6:bc:11:c7:70:24:5d:38:90:8f:92:a9:bc:
         f1:e5:50:82:c3:8e:3e:f3:d1:92:03:66:b0:6d:79:fe:3d:37:
         f4:11:97:d5:a7:31:78:10:00:25:f1:d1:28:89:b4:0a:b6:97:
         89:a7:d0:01:a5:c1:22:95:86:f8:c3:a2:8b:25:35:ab:23:42:
         16:92:6c:4c:f3:79:ee:11:4c:9c:d4:80:6b:28:be:4b:a0:24:
         fb:04:9d:18:cc:de:9f:96:e7:f0:4a:91:95:73:be:55:ef:f6:
         cd:0c:55:56:d2:99:9f:b7:f1:a1:ab:ed:1f:ea:f6:51:96:92:
         f0:78:bf:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSBwJzMAeBcr/cMsIwZjXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZGI3Y2E0ZWVlMWU0NTNkMjZmYWI5OWM4MjAxYWRmODk0
NjEyYmUwHhcNMjQxMTIyMDQwMDExWhcNMjQxMTIzMDQwMDExWjAzMTEwLwYDVQQD
EyhiMjdiMjVhYWE4NGI4MTEzNGMxZGUxNDU0ZjJjZWM0MGJhYWY4OTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCbTI9olGaJJ+8VJSj3AzJnKZBGp
4NXU+FgWPvuzGociMqa5JQV/KDzfN54EhFIrfm7Ol3EnzJ38H+jrliyVX6t8CaLv
NKZ5QUTjlOTlrCzAszWnhX/KiZTAaH/jkhQlpsr5aTMyDmF47R8Tfqzl/ZimoPND
0mTIJVX4sL76rviaHo288m5ylWEstiJiTyE54+CAzgoQwevaA9q4ZPwPuTuKbqdq
LHeZXYFOLSX90Z51kdgSMFZY8kdL/Hw2E1+1BALk6IT+5DJd1hT2iCDbAJbfHP/I
TEteebbQkucqiOJAXUDS56/rMfehCEjF0VBoGQIecFmeI2kphToaa8aW0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJ7JaqoS4ETTB3hRU8s7EC6r4mVMB8GA1UdIwQY
MBaAFCnbfKTu4eRT0m+rmcggGt+JRhK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2Yt
ZDMzZmExNjA1YWUxLzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2YtZDMzZmExNjA1YWUx
LzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTQF8v/H
hgExwMJUgqxuh7O2hjsw3k7XjlvEqCN3OWyy1L3DjapV67Royqqgvl2/z9EzgmNG
PTGLt6xp8IsTD6/Edk5Ofw/1KJXSVjTqY/9MEi8dzATzMHD/v9n09JnXmSThHqro
VqPgXvk+Eh7Oz8w30JIhFPXWci6mXANah73vyWamvBHHcCRdOJCPkqm88eVQgsOO
PvPRkgNmsG15/j039BGX1acxeBAAJfHRKIm0CraXiafQAaXBIpWG+MOiiyU1qyNC
FpJsTPN57hFMnNSAayi+S6Ak+wSdGMzen5bn8EqRlXO+Ve/2zQxVVtKZn7fxoavt
H+r2UZaS8Hi/qA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:58:56 2024 by rpki-client on console-fra.rpki-client.org