Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
File:                     eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json)
Hash identifier:          7LoCvUtArjcRf2OesHv+nKuCAf4MjV87HltWhfxLFtg=
Subject key identifier:   EB:C9:F3:F2:76:0F:26:F8:64:08:AA:43:E0:6B:5A:1E:31:8A:C5:1C
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Certificate issuer:       /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial:       019357644C65A2828238FC2855C17B5B8CAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 05:00:11 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:11 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:11 +0000
Files and hashes:         1: I04yYS9o9trz1C94q8yhPh1vNx0.roa (hash: GnkcSk6lAN5LjtBTJsyhfFumCXta8qATteuvK60P8tU=)
                          2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: 7ZM0WdyDF1SSOonutUa7wYvKgBNY/LOxccUNvliShsk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:4c:65:a2:82:82:38:fc:28:55:c1:7b:5b:8c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
        Validity
            Not Before: Nov 23 05:00:11 2024 GMT
            Not After : Nov 24 05:00:11 2024 GMT
        Subject: CN=ebc9f3f2760f26f86408aa43e06b5a1e318ac51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9c:7c:37:2f:01:97:0a:4a:e5:df:a5:67:9c:
                    c3:52:09:5e:fc:f8:fa:92:b1:f1:91:87:74:7d:b3:
                    60:c9:65:6b:84:bb:82:f0:7b:09:92:59:1d:78:c5:
                    f2:db:74:c0:55:13:ba:ce:65:22:6f:a2:71:93:b5:
                    9d:2a:be:12:86:d9:a3:f9:9d:4d:0c:11:10:a0:b0:
                    39:d9:93:50:bb:4e:28:79:38:92:a1:53:f4:97:0d:
                    b6:58:75:4b:f2:e4:e7:9a:19:1d:64:84:ce:e4:b5:
                    08:e6:f2:35:1d:fc:02:80:12:d6:33:4e:2c:36:9c:
                    81:e5:21:f5:08:f3:67:4c:87:10:47:fe:e0:05:b9:
                    14:c0:ea:f7:6c:10:83:b5:32:5c:5a:c0:46:3a:23:
                    0e:80:1c:3d:6a:9e:07:46:4a:5b:66:47:c4:43:66:
                    ca:24:1d:d7:19:4e:8b:e5:8e:1f:76:f6:2d:ef:e6:
                    f6:c0:15:bb:95:f0:f1:df:22:55:27:ed:f0:92:69:
                    fd:d8:ac:f4:d3:73:bb:74:40:42:f7:93:5d:4f:be:
                    9e:64:a3:49:42:25:33:96:b5:93:69:f4:64:1a:50:
                    99:00:15:f5:54:41:da:03:01:e9:e1:86:52:c3:02:
                    eb:b5:f6:f7:2c:b5:20:40:23:a5:bd:58:2c:b7:1a:
                    76:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C9:F3:F2:76:0F:26:F8:64:08:AA:43:E0:6B:5A:1E:31:8A:C5:1C
            X509v3 Authority Key Identifier:
                keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:15:4b:0a:b9:ff:84:b8:99:45:56:98:bc:be:5b:f2:a4:
         de:4b:19:b0:8d:66:51:73:b9:b5:bb:5f:0c:3f:13:5a:0b:35:
         ea:8e:57:59:b0:16:8d:47:14:dd:ee:37:9c:75:ce:fd:a7:ad:
         b8:c1:25:dc:f6:03:4a:25:7b:6d:73:0a:d4:d4:66:74:df:23:
         8c:58:a7:a3:b8:40:90:e2:a5:e2:24:16:45:da:4d:e0:aa:55:
         9f:80:38:e8:a2:72:01:61:5d:9d:09:71:f9:79:cc:8d:fd:20:
         ff:33:d5:99:f8:58:8a:04:19:83:22:45:65:52:e2:7e:25:78:
         27:c5:7e:d2:d6:73:2f:ec:56:d9:f6:91:72:39:ee:5e:59:28:
         51:bc:f5:fd:e1:c2:da:6e:28:ac:7a:b5:c3:1a:37:eb:af:18:
         35:d1:d5:86:a7:2e:37:a1:af:0a:e2:fc:51:75:f2:5e:72:b7:
         43:e9:f4:b2:4e:71:e0:ae:3e:b5:60:59:3e:fd:91:4d:64:c0:
         25:94:86:7f:4c:70:4e:33:23:f6:f0:a5:b4:27:8d:ee:ab:fc:
         af:f0:95:72:f7:1e:96:a0:19:7b:88:f5:db:4a:9e:2b:86:b2:
         b8:0c:a7:b8:54:60:b1:28:72:8d:5e:35:d3:bd:e2:de:33:19:
         1c:a6:e1:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZExlooKCOPwoVcF7W4yuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzMwYjllYTAxMGQ4MzJmOTQwZWZiNTg5YzUxODg5MTMy
ZjRjOTQwHhcNMjQxMTIzMDUwMDExWhcNMjQxMTI0MDUwMDExWjAzMTEwLwYDVQQD
EyhlYmM5ZjNmMjc2MGYyNmY4NjQwOGFhNDNlMDZiNWExZTMxOGFjNTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5x8Ny8BlwpK5d+lZ5zDUgle/Pj6
krHxkYd0fbNgyWVrhLuC8HsJklkdeMXy23TAVRO6zmUib6Jxk7WdKr4Shtmj+Z1N
DBEQoLA52ZNQu04oeTiSoVP0lw22WHVL8uTnmhkdZITO5LUI5vI1HfwCgBLWM04s
NpyB5SH1CPNnTIcQR/7gBbkUwOr3bBCDtTJcWsBGOiMOgBw9ap4HRkpbZkfEQ2bK
JB3XGU6L5Y4fdvYt7+b2wBW7lfDx3yJVJ+3wkmn92Kz003O7dEBC95NdT76eZKNJ
QiUzlrWTafRkGlCZABX1VEHaAwHp4YZSwwLrtfb3LLUgQCOlvVgstxp2EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvJ8/J2Dyb4ZAiqQ+BrWh4xisUcMB8GA1UdIwQY
MBaAFHlzC56gENgy+UDvtYnFGIkTL0yUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hMDJjYzYtMTMwOC00N2U0LWEwODct
Mzk2MDVmOTA4MWI3LzEvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hMDJjYzYtMTMwOC00N2U0LWEwODctMzk2MDVmOTA4MWI3
LzEvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWYVSwq5
/4S4mUVWmLy+W/Kk3ksZsI1mUXO5tbtfDD8TWgs16o5XWbAWjUcU3e43nHXO/aet
uMEl3PYDSiV7bXMK1NRmdN8jjFino7hAkOKl4iQWRdpN4KpVn4A46KJyAWFdnQlx
+XnMjf0g/zPVmfhYigQZgyJFZVLifiV4J8V+0tZzL+xW2faRcjnuXlkoUbz1/eHC
2m4orHq1wxo3668YNdHVhqcuN6GvCuL8UXXyXnK3Q+n0sk5x4K4+tWBZPv2RTWTA
JZSGf0xwTjMj9vCltCeN7qv8r/CVcvcelqAZe4j120qeK4ayuAynuFRgsShyjV41
073i3jMZHKbhTg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:46 2024 by rpki-client on console-fra.rpki-client.org