Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
File:                     IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json)
Hash identifier:          z0Bz2nF5PZK6JKHvZhk0e4ZH00MgGQE3x8e0oaByCTU=
Subject key identifier:   79:E9:5B:33:C4:37:8A:51:83:BD:91:48:1F:4D:7C:F2:9D:AE:A4:1E
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Certificate issuer:       /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial:       01935689990B767008D8CE14A718CF43A3C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
Manifest number:          107F
Signing time:             Sat 23 Nov 2024 01:01:18 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:18 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:18 +0000
Files and hashes:         1: BHdWrr2izmNkRLRjh6CNPRyM9rQ.roa (hash: W7F3emTQnLNPV500PmD9MJh6w8Etr5nG416RyKLhGP4=)
                          2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: UlOTUhtS/z2ZGyru5QoQng/Ca0hk+x5ClkiYrLC00IY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:99:0b:76:70:08:d8:ce:14:a7:18:cf:43:a3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
        Validity
            Not Before: Nov 23 01:01:18 2024 GMT
            Not After : Nov 24 01:01:18 2024 GMT
        Subject: CN=79e95b33c4378a5183bd91481f4d7cf29daea41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:de:64:75:f2:b4:d4:ff:af:cd:06:03:d7:
                    23:0d:be:63:a3:4e:5c:da:c9:d1:59:ed:1f:ac:74:
                    6b:3d:64:36:3f:37:99:eb:68:6d:73:76:ca:ca:f7:
                    52:56:f4:52:4f:d3:09:27:2e:22:3a:22:41:a0:84:
                    36:2a:dc:95:7d:6c:a6:b7:ae:79:62:bd:fb:ec:03:
                    e5:42:ac:9f:00:49:80:b2:ac:fe:c1:cf:f8:46:b8:
                    de:9a:7a:32:57:bd:78:3e:59:a6:ae:48:cd:05:03:
                    4b:66:cb:f1:f5:6f:51:a4:58:db:c8:95:a8:85:7f:
                    46:86:7f:1b:d3:d9:4e:e9:bd:f3:f2:3b:27:58:0c:
                    88:b0:20:bf:4c:08:c5:9f:92:13:5f:5e:f7:80:01:
                    75:f9:c3:7b:03:c5:cf:43:ce:2b:5a:fa:08:bd:9b:
                    b0:a0:fb:6b:03:ed:36:93:3f:4b:9a:c8:73:1c:7b:
                    72:91:c4:79:bf:d0:6a:b2:1a:99:ef:08:4e:84:f6:
                    d8:2e:61:92:a8:82:d7:61:e3:54:db:21:39:95:41:
                    42:89:b6:ab:63:f6:30:8e:16:65:bc:1c:8d:03:0d:
                    9d:78:b7:0f:03:06:ef:05:1a:17:5f:e8:f1:8f:2c:
                    00:c3:59:a5:41:65:b5:cb:72:f3:56:e1:7c:8b:ca:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E9:5B:33:C4:37:8A:51:83:BD:91:48:1F:4D:7C:F2:9D:AE:A4:1E
            X509v3 Authority Key Identifier:
                keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d2:fe:3a:ae:c7:26:ef:db:4f:97:cd:10:3c:8a:80:6b:e9:
         51:4b:c3:93:3e:d7:11:95:17:b6:d8:94:fd:bc:06:a5:82:f4:
         23:ef:62:06:38:a7:9d:4f:0f:ed:70:8c:da:da:08:7d:ef:29:
         67:77:48:87:7c:d2:90:14:8f:6d:e8:6e:1d:9c:6e:5a:91:fc:
         b4:3b:c0:58:49:cf:13:75:12:5f:d9:ae:a5:41:75:0a:9e:ad:
         ef:dc:85:3c:b8:d1:d3:1b:6d:b0:86:77:23:e4:e5:27:7d:27:
         41:1c:79:1b:e4:97:1b:2b:5d:26:94:50:32:1d:7c:54:df:2d:
         19:f3:4f:4c:46:14:47:27:ff:18:8a:de:8b:8f:01:35:72:16:
         48:57:b7:f5:63:61:ce:b7:24:4d:98:67:09:25:79:d9:48:de:
         a6:3a:b5:0b:ca:5a:47:36:2b:a2:bc:11:db:3b:af:b7:c1:1d:
         47:13:82:3e:e9:6e:92:db:0c:e7:2b:eb:4b:b7:2a:4a:92:48:
         45:b3:61:1c:d9:20:e9:ba:b6:f3:22:95:bf:f9:ea:c0:8f:09:
         04:44:c7:6a:e4:c0:e4:67:68:dc:45:5c:e9:6b:e0:ce:fa:f3:
         a4:c6:df:f2:32:a2:21:d9:81:8c:89:80:69:31:74:8e:18:4f:
         28:3f:5e:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiZkLdnAI2M4UpxjPQ6PCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNTA2MDM1YjMyY2MzM2FmMDU4OWM1NWJlODQ5Nzc1ZTky
YzQ2OTMwHhcNMjQxMTIzMDEwMTE4WhcNMjQxMTI0MDEwMTE4WjAzMTEwLwYDVQQD
Eyg3OWU5NWIzM2M0Mzc4YTUxODNiZDkxNDgxZjRkN2NmMjlkYWVhNDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ3eZHXytNT/r80GA9cjDb5jo05c
2snRWe0frHRrPWQ2PzeZ62htc3bKyvdSVvRST9MJJy4iOiJBoIQ2KtyVfWymt655
Yr377APlQqyfAEmAsqz+wc/4RrjemnoyV714PlmmrkjNBQNLZsvx9W9RpFjbyJWo
hX9Ghn8b09lO6b3z8jsnWAyIsCC/TAjFn5ITX173gAF1+cN7A8XPQ84rWvoIvZuw
oPtrA+02kz9LmshzHHtykcR5v9BqshqZ7whOhPbYLmGSqILXYeNU2yE5lUFCibar
Y/YwjhZlvByNAw2deLcPAwbvBRoXX+jxjywAw1mlQWW1y3LzVuF8i8rrVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnpWzPEN4pRg72RSB9NfPKdrqQeMB8GA1UdIwQY
MBaAFCFQYDWzLMM68FicVb6El3XpLEaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZCZ05iTXN3enJ3V0p4VnZvU1hkZWtzUnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81YzMyNDQtODM1ZC00NzJkLWJmMGUt
MGM3YTg3MTk2YzM1LzEvSVZCZ05iTXN3enJ3V0p4VnZvU1hkZWtzUnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81YzMyNDQtODM1ZC00NzJkLWJmMGUtMGM3YTg3MTk2YzM1
LzEvSVZCZ05iTXN3enJ3V0p4VnZvU1hkZWtzUnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtL+Oq7H
Ju/bT5fNEDyKgGvpUUvDkz7XEZUXttiU/bwGpYL0I+9iBjinnU8P7XCM2toIfe8p
Z3dIh3zSkBSPbehuHZxuWpH8tDvAWEnPE3USX9mupUF1Cp6t79yFPLjR0xttsIZ3
I+TlJ30nQRx5G+SXGytdJpRQMh18VN8tGfNPTEYURyf/GIrei48BNXIWSFe39WNh
zrckTZhnCSV52Ujepjq1C8paRzYrorwR2zuvt8EdRxOCPuluktsM5yvrS7cqSpJI
RbNhHNkg6bq28yKVv/nqwI8JBETHauTA5Gdo3EVc6WvgzvrzpMbf8jKiIdmBjImA
aTF0jhhPKD9efQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:36 2024 by rpki-client on console-ams.rpki-client.org