Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File:                     5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier:          5yqHyJlM63J2e6GqjQLy60PFppT77lqRdT78LV2SS1I=
Subject key identifier:   A6:2A:7D:0C:CE:D9:D2:56:32:DF:12:B0:46:B4:AC:A6:31:BF:B9:54
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer:       /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial:       019358E4FE6E5155D18C358B9503A1492DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 12:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:22 +0000
Files and hashes:         1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: l2vcgeMC62VzIC9LTnbGsUicsti7bgdyZBJtovpTgn8=)
                          2: hzJuIEN7bykVd0o_8-iuNaUrUT0.roa (hash: xQ5aovQxSYhX3iVj8WcatMTzFP9N5IKNFk0mFJ9HkR0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e4:fe:6e:51:55:d1:8c:35:8b:95:03:a1:49:2d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
        Validity
            Not Before: Nov 23 12:00:22 2024 GMT
            Not After : Nov 24 12:00:22 2024 GMT
        Subject: CN=a62a7d0cced9d25632df12b046b4aca631bfb954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2d:4c:6a:62:a5:02:45:6c:09:6b:68:0d:36:
                    66:86:94:fd:11:e7:75:b6:ca:2a:79:be:19:a4:ea:
                    a6:86:2f:84:38:5b:df:4b:99:16:1a:d0:f6:3b:f6:
                    8f:19:c3:8b:36:0d:6a:ea:dd:5f:6d:d0:a1:05:ee:
                    e3:1e:40:aa:62:a7:84:be:01:15:ff:f5:47:ac:c1:
                    21:25:39:c2:a6:e2:d7:8c:09:6f:a5:38:dc:4f:0a:
                    65:cb:3c:c4:65:ce:4f:d9:93:60:80:cc:3f:ae:30:
                    96:2c:51:d0:7a:ae:13:46:a7:40:9d:14:1e:6a:f4:
                    93:90:20:5c:dd:ac:1a:0c:18:ca:b1:2b:74:b9:58:
                    6b:8f:40:8c:aa:85:11:a4:ec:9f:12:54:08:9a:e5:
                    5c:43:60:7c:a2:6c:21:15:ea:c2:a7:25:fc:7f:65:
                    6f:72:0a:2b:10:69:f8:78:66:e3:75:dc:96:ed:99:
                    a4:ec:85:90:42:ee:46:15:a5:79:1e:fc:07:c6:dd:
                    8a:40:ed:21:b4:45:f0:31:9f:a5:f8:75:98:72:4c:
                    01:13:7f:64:84:fd:7b:cb:54:b3:37:01:9d:81:ab:
                    83:7e:f5:b3:47:04:64:e8:d4:b8:43:3a:0d:96:6d:
                    51:b3:2a:15:79:01:ab:0c:94:ad:f4:1c:d3:6c:6b:
                    74:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2A:7D:0C:CE:D9:D2:56:32:DF:12:B0:46:B4:AC:A6:31:BF:B9:54
            X509v3 Authority Key Identifier:
                keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f3:3b:29:2d:19:63:1f:11:76:0f:ba:25:8c:c9:68:e4:8c:
         95:40:17:dc:aa:3c:db:f7:64:7e:4c:0b:01:cd:7f:1e:70:b1:
         49:b2:62:5e:82:55:36:c4:1d:f9:51:ab:8c:50:ed:53:db:22:
         5a:79:d7:e0:f6:73:b4:19:2d:43:b8:97:9e:15:aa:e0:44:bc:
         4e:e9:14:f4:53:5e:2e:3a:e7:69:4c:4a:12:b1:61:15:72:08:
         0b:65:ac:ca:3d:2b:1f:84:f5:8c:49:cc:80:4d:a0:a3:1e:73:
         87:55:2d:f5:d6:87:76:22:b4:cf:4b:3e:16:57:a9:6f:c0:d1:
         48:7e:3e:88:30:24:ee:d0:3c:60:ef:cb:5a:7d:ce:08:b6:26:
         9c:5a:01:02:bb:0b:d2:6c:1d:28:71:6e:b9:0d:29:d3:16:e5:
         ab:c2:67:db:62:a0:9e:08:52:ba:5c:d6:6b:c2:61:a5:06:2b:
         c3:c1:7b:88:93:3a:2e:b1:0e:5a:50:d6:c2:99:76:f8:d7:9f:
         35:2c:5f:3e:96:e0:7e:65:42:1a:ab:f3:ca:c5:3c:3f:d3:91:
         d0:17:b0:61:9c:fb:41:11:64:18:d7:e5:1c:08:c0:65:02:b9:
         52:c0:3b:84:f6:00:98:2f:92:f6:b1:e1:fc:00:56:10:e2:8b:
         82:41:95:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNY5P5uUVXRjDWLlQOhSS3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MDE1ZjFlMjAwNDM1OWNhZTc2NTZiOTY4YWRiMmE1NGE0
MzRmMWUwHhcNMjQxMTIzMTIwMDIyWhcNMjQxMTI0MTIwMDIyWjAzMTEwLwYDVQQD
EyhhNjJhN2QwY2NlZDlkMjU2MzJkZjEyYjA0NmI0YWNhNjMxYmZiOTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS1MamKlAkVsCWtoDTZmhpT9Eed1
tsoqeb4ZpOqmhi+EOFvfS5kWGtD2O/aPGcOLNg1q6t1fbdChBe7jHkCqYqeEvgEV
//VHrMEhJTnCpuLXjAlvpTjcTwplyzzEZc5P2ZNggMw/rjCWLFHQeq4TRqdAnRQe
avSTkCBc3awaDBjKsSt0uVhrj0CMqoURpOyfElQImuVcQ2B8omwhFerCpyX8f2Vv
cgorEGn4eGbjddyW7Zmk7IWQQu5GFaV5HvwHxt2KQO0htEXwMZ+l+HWYckwBE39k
hP17y1SzNwGdgauDfvWzRwRk6NS4QzoNlm1RsyoVeQGrDJSt9BzTbGt01wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYqfQzO2dJWMt8SsEa0rKYxv7lUMB8GA1UdIwQY
MBaAFOYBXx4gBDWcrnZWuWitsqVKQ08eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MDgzMjEtMmRmYS00MjUzLWEzY2It
MmY5MjY1MTBmZmJmLzEvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81MDgzMjEtMmRmYS00MjUzLWEzY2ItMmY5MjY1MTBmZmJm
LzEvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvM7KS0Z
Yx8Rdg+6JYzJaOSMlUAX3Ko82/dkfkwLAc1/HnCxSbJiXoJVNsQd+VGrjFDtU9si
WnnX4PZztBktQ7iXnhWq4ES8TukU9FNeLjrnaUxKErFhFXIIC2Wsyj0rH4T1jEnM
gE2gox5zh1Ut9daHdiK0z0s+Flepb8DRSH4+iDAk7tA8YO/LWn3OCLYmnFoBArsL
0mwdKHFuuQ0p0xblq8Jn22KgnghSulzWa8JhpQYrw8F7iJM6LrEOWlDWwpl2+Nef
NSxfPpbgfmVCGqvzysU8P9OR0BewYZz7QRFkGNflHAjAZQK5UsA7hPYAmC+S9rHh
/ABWEOKLgkGVYg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:17:09 2024 by rpki-client on console-fra.rpki-client.org