Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
File:                     mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json)
Hash identifier:          4hCopriiacKOeXHTuUPlmVGsscxXAQJ8ksGgg6zJAYM=
Subject key identifier:   DA:E2:8E:7A:8E:0D:92:D7:92:D6:33:6D:E4:8B:99:95:F8:50:BD:4D
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Certificate issuer:       /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial:       01935651CF086825558603FDB370AC4E6E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
Manifest number:          0119
Signing time:             Sat 23 Nov 2024 00:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:21 +0000
Files and hashes:         1: XzpuXBlwjOE8CdTiBa2-aiigcqs.roa (hash: LrT17mUyG1dvCljaL3/XfH7xfUhxI82qZMVXpTf8Q8E=)
                          2: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: nrQwu4NMohpOJEbR8OYx2GRUiOOLKAMFysXgjGL8ncs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:cf:08:68:25:55:86:03:fd:b3:70:ac:4e:6e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
        Validity
            Not Before: Nov 23 00:00:21 2024 GMT
            Not After : Nov 24 00:00:21 2024 GMT
        Subject: CN=dae28e7a8e0d92d792d6336de48b9995f850bd4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c7:07:22:29:5b:6f:da:f6:b2:e7:ec:00:23:
                    4a:15:7a:b6:6e:48:dc:5a:df:71:4b:ac:8f:7b:63:
                    42:f5:c2:89:e2:59:b4:61:07:ab:cf:9b:6f:0b:6e:
                    2e:76:34:a0:34:c8:ea:cb:59:de:91:cf:a4:eb:53:
                    06:71:39:fa:0a:9f:07:d9:8d:dd:08:81:e7:94:d9:
                    3c:e0:74:de:c3:4e:5a:97:0c:f2:fa:0d:fb:f8:6f:
                    4d:0c:4a:80:1e:ff:4c:f1:fd:99:d6:a8:9d:f5:fa:
                    bb:6c:09:3a:fb:fa:18:a8:b1:ba:72:c2:54:d0:03:
                    09:32:fc:e0:cb:4f:b6:48:79:34:ad:a3:a7:06:4b:
                    38:8b:ff:78:01:2f:1d:06:a9:75:4d:fd:62:c2:ab:
                    ed:35:cf:47:4d:0f:0d:05:5f:c7:5f:5c:b0:29:29:
                    54:89:20:8a:50:22:34:ab:06:1f:db:72:73:2d:23:
                    34:58:70:67:32:83:bc:f6:86:62:12:22:66:61:3f:
                    47:4f:77:59:b7:b8:9d:16:fb:21:03:9e:7b:de:c7:
                    a6:25:9c:5a:41:0b:54:39:8a:bc:fa:ed:d8:f7:6d:
                    ab:52:d6:60:d7:b9:18:69:06:be:89:83:b5:29:ac:
                    29:fc:9c:76:0b:84:0d:b8:b7:ec:01:07:1a:a9:30:
                    fa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E2:8E:7A:8E:0D:92:D7:92:D6:33:6D:E4:8B:99:95:F8:50:BD:4D
            X509v3 Authority Key Identifier:
                keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:87:3a:82:fc:94:df:a0:f7:60:4a:18:82:c9:78:c6:c5:b8:
         75:3b:03:04:72:21:cd:50:5e:9d:d2:5b:d6:bb:b4:5a:02:56:
         65:e4:b9:5a:66:d6:53:96:99:0e:9b:a3:a8:e4:49:fd:e0:c2:
         d5:9a:6f:ea:04:13:55:86:f0:5a:60:ef:b4:b7:40:15:a1:81:
         e4:57:07:eb:52:5c:89:18:a6:29:b1:3a:b0:dd:fc:70:f2:08:
         28:61:76:42:4f:8f:29:b2:4b:1e:38:2c:83:7b:76:8f:d9:8e:
         31:cf:69:92:dd:56:68:5a:b1:ad:0e:fb:8f:e4:14:94:ea:74:
         32:6c:05:95:33:26:20:6f:00:a0:34:50:70:e2:49:f4:17:a5:
         05:ed:7e:d1:45:b1:4e:ec:8e:bf:ea:e7:a7:9b:64:84:bc:e3:
         cf:ac:1f:34:a2:cc:c6:d5:3a:24:e3:b0:82:b4:be:57:91:30:
         49:e3:42:6c:5c:3b:38:57:ac:2f:44:df:49:4d:12:af:99:b6:
         2d:b5:61:30:a6:5c:0a:e1:72:87:7a:a2:18:eb:81:c6:10:dd:
         82:1b:13:2b:ef:ac:9b:ef:ca:2e:8a:01:6e:ef:de:3f:00:85:
         49:92:56:80:93:98:a4:3d:71:f6:1f:d4:a5:e2:6d:cb:49:9b:
         c6:92:f9:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWUc8IaCVVhgP9s3CsTm5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4Njk5ZTAwYzExNzUxZDAxYjM1ZTM1ZmMwMjk3ZGEyNmVh
Yzc5ZWEwHhcNMjQxMTIzMDAwMDIxWhcNMjQxMTI0MDAwMDIxWjAzMTEwLwYDVQQD
EyhkYWUyOGU3YThlMGQ5MmQ3OTJkNjMzNmRlNDhiOTk5NWY4NTBiZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ccHIilbb9r2sufsACNKFXq2bkjc
Wt9xS6yPe2NC9cKJ4lm0YQerz5tvC24udjSgNMjqy1nekc+k61MGcTn6Cp8H2Y3d
CIHnlNk84HTew05alwzy+g37+G9NDEqAHv9M8f2Z1qid9fq7bAk6+/oYqLG6csJU
0AMJMvzgy0+2SHk0raOnBks4i/94AS8dBql1Tf1iwqvtNc9HTQ8NBV/HX1ywKSlU
iSCKUCI0qwYf23JzLSM0WHBnMoO89oZiEiJmYT9HT3dZt7idFvshA5573semJZxa
QQtUOYq8+u3Y922rUtZg17kYaQa+iYO1Kawp/Jx2C4QNuLfsAQcaqTD6PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrijnqODZLXktYzbeSLmZX4UL1NMB8GA1UdIwQY
MBaAFJhpngDBF1HQGzXjX8ApfaJurHnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xZDQ1OTYtNmFlMy00ODBlLWFkMTYt
NzYxNTFiYjk3MTlkLzEvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8xZDQ1OTYtNmFlMy00ODBlLWFkMTYtNzYxNTFiYjk3MTlk
LzEvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIc6gvyU
36D3YEoYgsl4xsW4dTsDBHIhzVBendJb1ru0WgJWZeS5WmbWU5aZDpujqORJ/eDC
1Zpv6gQTVYbwWmDvtLdAFaGB5FcH61JciRimKbE6sN38cPIIKGF2Qk+PKbJLHjgs
g3t2j9mOMc9pkt1WaFqxrQ77j+QUlOp0MmwFlTMmIG8AoDRQcOJJ9BelBe1+0UWx
TuyOv+rnp5tkhLzjz6wfNKLMxtU6JOOwgrS+V5EwSeNCbFw7OFesL0TfSU0Sr5m2
LbVhMKZcCuFyh3qiGOuBxhDdghsTK++sm+/KLooBbu/ePwCFSZJWgJOYpD1x9h/U
peJty0mbxpL52g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:24:38 2024 by rpki-client on console-ams.rpki-client.org