Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File:                     deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier:          Zzm3Wwv9xCMJI8ln3+z6icrDFk3xA1B27o2Q5ar9o2g=
Subject key identifier:   9F:30:CB:42:98:1F:2D:27:CD:A2:C4:27:78:2E:12:6C:09:5F:C3:A8
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer:       /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial:       0193523E0C08EADC6E2D2A087F4A02A891B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number:          1378
Signing time:             Fri 22 Nov 2024 05:00:18 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:18 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:18 +0000
Files and hashes:         1: Py407aY1-x4uZCbuofwurbtMaCc.roa (hash: VYiyxgUs0oB+P+Xn3mPBS6P1DFn1hhwSdpC1uti82rY=)
                          2: _1pURKNH3B6tnj_yY8Jz4qjXvjU.roa (hash: 1AMEsunJeKL5OO+aJRxIi91ZHf0gnLVuF7Ar2j1nD98=)
                          3: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: TKCOCNT9TPWHw2k/gZGvtQuf/EyY2hOPfnYDgcgcJ0o=)
                          4: ff8oULOw9T-wum9QP1kuVpGYcrk.roa (hash: qg/uhrIjC+VgsiTs8gsKRlvyDMHVBJ1gjd1L/fhIW+4=)
                          5: mJ08S0v-mE3_C008SDsInqyyJEg.roa (hash: ZFQyI9Loh/8SAlfG5h6A/oxwjPurB5i2idZ8FzBTTog=)
                          6: u1NGt6sEwqdesG8h2WC0rlJVR84.roa (hash: 2OY6VKD9kIm4pMR6mLyb52XcU3v3X6yJ87BSStHWHTo=)
                          7: wkfqRE_YiW8R8vpAnw7tkrbtBAM.roa (hash: 9F4crFpUcdx/R6ooV/s2EMaAVwgvFKJAzJOWKP/3xPU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:0c:08:ea:dc:6e:2d:2a:08:7f:4a:02:a8:91:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
        Validity
            Not Before: Nov 22 05:00:18 2024 GMT
            Not After : Nov 23 05:00:18 2024 GMT
        Subject: CN=9f30cb42981f2d27cda2c427782e126c095fc3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:94:4b:b8:ec:e5:b9:1d:02:dd:c9:67:19:28:
                    33:39:31:61:47:d5:2d:41:c0:e7:0b:9e:81:74:8d:
                    34:5a:49:63:03:91:5b:76:44:22:e8:cf:6c:9b:1a:
                    f9:ea:67:a3:a8:f1:4e:3b:15:d4:87:d7:34:eb:0b:
                    d6:c3:11:ba:78:4b:18:68:50:0b:e3:f3:8e:44:20:
                    e1:15:39:8e:6a:82:be:b7:d5:83:de:5d:ae:fb:ff:
                    73:e6:db:25:ca:32:8c:95:b8:21:e8:e6:bb:86:a6:
                    41:ca:cd:ce:c6:41:51:13:d5:d2:01:d4:0a:60:40:
                    9f:77:79:46:f0:78:f7:02:2d:ba:28:66:87:e1:a2:
                    47:dd:57:57:45:7c:41:3c:7e:47:f4:f9:08:14:88:
                    b9:c5:03:e4:07:3b:89:b4:cb:02:a1:68:8f:49:c9:
                    aa:29:14:96:0a:37:f0:20:97:1a:1c:dc:6c:2b:90:
                    b9:5a:7b:4e:6e:f7:88:3b:65:2f:bb:ca:79:b8:6a:
                    bb:19:6f:ef:de:0e:74:4f:18:57:a6:79:89:dd:ab:
                    ba:94:e4:d9:e1:55:63:b3:c4:43:6c:4e:b0:de:3e:
                    ab:e7:e2:0c:43:e9:01:31:49:ac:63:08:82:14:c6:
                    41:56:df:37:5f:a3:3a:d1:70:1c:f2:60:98:6b:91:
                    1e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:30:CB:42:98:1F:2D:27:CD:A2:C4:27:78:2E:12:6C:09:5F:C3:A8
            X509v3 Authority Key Identifier:
                keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:9d:25:0e:18:e7:a0:d7:ed:27:aa:81:ce:e1:80:27:f0:3e:
         ea:d8:17:48:aa:80:1e:87:06:9f:20:80:78:4d:58:96:b2:39:
         cd:35:14:bb:99:50:f2:00:ad:d3:7b:ef:85:37:ca:83:77:c8:
         c4:43:49:9c:2b:4f:0d:70:81:1b:dd:51:83:75:e1:f3:d9:5c:
         08:a5:14:b4:1f:fd:49:34:2b:e7:19:66:ad:90:4a:59:b3:8d:
         bd:bc:21:15:75:8c:5e:85:cd:6c:41:3d:53:6f:a7:19:b1:31:
         bb:df:ca:ca:66:06:6f:bc:4b:90:d8:73:95:99:4e:cb:46:08:
         f5:b8:10:bb:80:e9:f8:91:6a:1f:74:28:d3:01:bf:af:dd:c7:
         d8:e1:c3:14:b0:d0:dc:0c:f7:08:03:89:68:25:03:ec:d6:c0:
         54:94:7c:5e:7e:49:48:2b:d8:47:07:cf:bd:76:b8:48:74:f1:
         b7:1d:dc:b7:58:cb:70:b8:54:4c:af:87:fe:09:46:f0:2e:2a:
         c7:89:f2:92:04:eb:0a:87:22:63:6f:3e:39:20:5b:18:54:a6:
         14:f2:80:0b:50:b3:01:53:97:b9:31:c5:bf:06:3b:e6:fc:9e:
         4a:26:40:19:c9:27:0e:b1:7b:b2:fe:14:40:68:6c:bc:a6:ae:
         9e:78:d2:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSPgwI6txuLSoIf0oCqJGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZTA1YmMyMWIyYTZmMTAzMzcxMWZmY2E2NDkxYzZjMzBj
ZTVhNGEwHhcNMjQxMTIyMDUwMDE4WhcNMjQxMTIzMDUwMDE4WjAzMTEwLwYDVQQD
Eyg5ZjMwY2I0Mjk4MWYyZDI3Y2RhMmM0Mjc3ODJlMTI2YzA5NWZjM2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JRLuOzluR0C3clnGSgzOTFhR9Ut
QcDnC56BdI00WkljA5FbdkQi6M9smxr56mejqPFOOxXUh9c06wvWwxG6eEsYaFAL
4/OORCDhFTmOaoK+t9WD3l2u+/9z5tslyjKMlbgh6Oa7hqZBys3OxkFRE9XSAdQK
YECfd3lG8Hj3Ai26KGaH4aJH3VdXRXxBPH5H9PkIFIi5xQPkBzuJtMsCoWiPScmq
KRSWCjfwIJcaHNxsK5C5WntObveIO2Uvu8p5uGq7GW/v3g50TxhXpnmJ3au6lOTZ
4VVjs8RDbE6w3j6r5+IMQ+kBMUmsYwiCFMZBVt83X6M60XAc8mCYa5EeYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8wy0KYHy0nzaLEJ3guEmwJX8OoMB8GA1UdIwQY
MBaAFHXgW8IbKm8QM3Ef/KZJHGwwzlpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDct
ZDQ1YWI3ZGYyZGUxLzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDctZDQ1YWI3ZGYyZGUx
LzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJ0lDhjn
oNftJ6qBzuGAJ/A+6tgXSKqAHocGnyCAeE1YlrI5zTUUu5lQ8gCt03vvhTfKg3fI
xENJnCtPDXCBG91Rg3Xh89lcCKUUtB/9STQr5xlmrZBKWbONvbwhFXWMXoXNbEE9
U2+nGbExu9/KymYGb7xLkNhzlZlOy0YI9bgQu4Dp+JFqH3Qo0wG/r93H2OHDFLDQ
3Az3CAOJaCUD7NbAVJR8Xn5JSCvYRwfPvXa4SHTxtx3ct1jLcLhUTK+H/glG8C4q
x4nykgTrCociY28+OSBbGFSmFPKAC1CzAVOXuTHFvwY75vyeSiZAGcknDrF7sv4U
QGhsvKaunnjSHw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:53:12 2024 by rpki-client on console-fra.rpki-client.org