Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
File:                     RQxYEkixGuKkb1UuXKQ8adZecqg.mft (raw, json)
Hash identifier:          R6Z4pibLh022Voc0KGfkz3uCqVq1HmdX5ul14sdfgNQ=
Subject key identifier:   BA:EC:1B:A2:0C:A6:5E:F6:61:D0:83:95:C1:81:29:C0:17:59:A9:AF
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Certificate issuer:       /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial:       01935508087D8B9EDAE645E646676F462DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
Manifest number:          02A6
Signing time:             Fri 22 Nov 2024 18:00:09 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:09 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:09 +0000
Files and hashes:         1: IHq4aUtTW9d4nlAlg1YRTtbrsMg.roa (hash: NTcVz3tCj1qu6VNkG30gXgGOJAfbfKlz3DJSLXf9DYw=)
                          2: RQxYEkixGuKkb1UuXKQ8adZecqg.crl (hash: b4veXazohwGCvmmi2T0l9fHQ3SCYduj2cPLIEZRvtVU=)
                          3: RvikehqzrzhsZs7RpaEfObZYnDs.roa (hash: 8kceTN16/3d9rfb9vawScqFpqSR683RAeJ46kBVJklY=)
                          4: fC1NLkG8-JfmIgvbSa0VPs7QMZw.roa (hash: 2CQFph6AubOOlduLinwqGG1xblMt8se3vToMLhiinn0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:08:7d:8b:9e:da:e6:45:e6:46:67:6f:46:2d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
        Validity
            Not Before: Nov 22 18:00:09 2024 GMT
            Not After : Nov 23 18:00:09 2024 GMT
        Subject: CN=baec1ba20ca65ef661d08395c18129c01759a9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7d:72:eb:da:87:51:71:b5:c7:db:e0:d6:0f:
                    e4:63:e4:fd:7a:34:a0:78:40:78:a4:b4:c4:b6:67:
                    07:e5:12:28:d4:f2:24:bf:ea:31:ad:7c:bc:a9:4f:
                    f4:7f:3d:a4:45:c1:e5:a8:b2:2b:83:c4:0e:3b:4a:
                    f6:f4:9a:c5:7d:f0:01:6b:e5:b5:c3:b8:52:3a:63:
                    2f:ee:ce:2f:d6:c8:12:cc:72:85:c6:0b:d3:a7:19:
                    35:ff:e1:f2:70:3e:2a:d4:db:a2:17:81:63:5f:b2:
                    b9:d6:39:cb:7b:b8:a3:29:7c:56:f6:37:01:29:b3:
                    2d:c3:28:f2:c3:ec:49:d5:41:46:11:2d:d5:20:8b:
                    61:be:92:c2:8a:ad:b7:99:f5:91:b7:f6:98:d8:4d:
                    28:1d:5e:a1:06:c9:d6:6d:f2:17:36:04:87:af:e5:
                    6e:33:69:c0:42:44:6a:a4:b0:c1:e8:fa:3c:ca:de:
                    3f:ca:56:31:e2:7b:26:89:0b:fb:cd:cc:14:4b:8a:
                    43:d5:74:cf:61:b6:22:80:ae:eb:a4:1e:36:de:48:
                    d0:1d:e9:bb:17:50:24:2a:22:a5:c8:ff:36:f7:e9:
                    4b:f1:75:12:82:11:32:a9:0d:66:40:a6:f4:8b:e6:
                    9d:36:20:3b:91:ab:43:84:7e:4a:6e:07:b6:cb:29:
                    7f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EC:1B:A2:0C:A6:5E:F6:61:D0:83:95:C1:81:29:C0:17:59:A9:AF
            X509v3 Authority Key Identifier:
                keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:33:8b:46:bb:29:42:29:ae:94:00:f1:66:9f:c3:79:f0:24:
         0e:a5:ba:5f:87:c2:74:8f:11:ac:f9:98:24:c6:d9:09:ed:41:
         1d:d1:b0:29:37:b4:10:f5:95:99:5d:48:f3:7b:ea:7d:a2:82:
         7a:61:8b:ad:48:fc:c1:46:d3:71:47:21:56:3e:a3:07:33:8f:
         31:46:83:ba:5d:46:79:6e:e1:f1:4b:fb:37:7b:4d:2d:e5:fd:
         d3:5d:77:f4:ba:b5:6e:7f:a3:fa:74:06:c6:4a:ab:0f:ec:55:
         1b:79:17:68:46:f6:be:8d:46:ac:98:8b:96:21:af:1a:0a:f5:
         1d:c7:ba:80:f0:aa:89:91:d4:63:91:b5:2f:40:3e:55:b4:88:
         d2:4e:27:3d:41:0d:64:00:6f:fd:eb:57:c6:c0:62:b5:e9:47:
         dd:ad:66:04:4e:07:26:ae:3b:19:ad:e9:4d:88:c7:74:97:e6:
         80:4b:d3:ff:22:44:3b:ef:2d:c7:77:d9:15:dd:17:7e:9d:52:
         0e:12:1c:8c:f1:79:43:97:6d:e2:f3:94:2b:8a:be:60:11:5d:
         47:b6:d3:38:b1:5f:ca:75:1b:c5:99:53:73:80:1e:9e:3a:5e:
         1c:72:72:50:8f:36:f3:0f:bb:eb:9b:10:c6:ab:d7:6e:c9:90:
         3f:0e:c3:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCAh9i57a5kXmRmdvRi39MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MGM1ODEyNDhiMTFhZTJhNDZmNTUyZTVjYTQzYzY5ZDY1
ZTcyYTgwHhcNMjQxMTIyMTgwMDA5WhcNMjQxMTIzMTgwMDA5WjAzMTEwLwYDVQQD
EyhiYWVjMWJhMjBjYTY1ZWY2NjFkMDgzOTVjMTgxMjljMDE3NTlhOWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n1y69qHUXG1x9vg1g/kY+T9ejSg
eEB4pLTEtmcH5RIo1PIkv+oxrXy8qU/0fz2kRcHlqLIrg8QOO0r29JrFffABa+W1
w7hSOmMv7s4v1sgSzHKFxgvTpxk1/+HycD4q1NuiF4FjX7K51jnLe7ijKXxW9jcB
KbMtwyjyw+xJ1UFGES3VIIthvpLCiq23mfWRt/aY2E0oHV6hBsnWbfIXNgSHr+Vu
M2nAQkRqpLDB6Po8yt4/ylYx4nsmiQv7zcwUS4pD1XTPYbYigK7rpB423kjQHem7
F1AkKiKlyP829+lL8XUSghEyqQ1mQKb0i+adNiA7katDhH5Kbge2yyl/CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrsG6IMpl72YdCDlcGBKcAXWamvMB8GA1UdIwQY
MBaAFEUMWBJIsRripG9VLlykPGnWXnKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMt
NzQ5OWE4MjMxZjU2LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMtNzQ5OWE4MjMxZjU2
LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTOLRrsp
QimulADxZp/DefAkDqW6X4fCdI8RrPmYJMbZCe1BHdGwKTe0EPWVmV1I83vqfaKC
emGLrUj8wUbTcUchVj6jBzOPMUaDul1GeW7h8Uv7N3tNLeX901139Lq1bn+j+nQG
xkqrD+xVG3kXaEb2vo1GrJiLliGvGgr1Hce6gPCqiZHUY5G1L0A+VbSI0k4nPUEN
ZABv/etXxsBitelH3a1mBE4HJq47Ga3pTYjHdJfmgEvT/yJEO+8tx3fZFd0Xfp1S
DhIcjPF5Q5dt4vOUK4q+YBFdR7bTOLFfynUbxZlTc4AenjpeHHJyUI828w+765sQ
xqvXbsmQPw7DUQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:42:17 2024 by rpki-client on console-fra.rpki-client.org