Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
File:                     UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json)
Hash identifier:          xz/PIbvyMaRqaEBj8r9dpfeCL5YPVHTTOEeNpdIp9wQ=
Subject key identifier:   6C:04:E7:C7:EF:EC:1E:43:95:38:22:55:CF:8B:D1:B1:AF:2F:AF:A5
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Certificate issuer:       /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial:       019353F608639840288E491306440AA648A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
Manifest number:          1302
Signing time:             Fri 22 Nov 2024 13:00:53 +0000
Manifest this update:     Fri 22 Nov 2024 13:00:53 +0000
Manifest next update:     Sat 23 Nov 2024 13:00:53 +0000
Files and hashes:         1: 8sVxWEiqcq9oIOX4DYs61TdMaFI.roa (hash: 3MPQU0xokOmcnS0OZXIs6CDlpoa9bOro3FPp/nLyQJA=)
                          2: TnN28K9zuAneKczpJSq0hRx10T8.roa (hash: 6XXKj8/I7oysBY+yemR5rMuqFp7kShQcemYB/G6TevU=)
                          3: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: XePVTsx3pP5yrDyJb24h6cMkOGViZn8jkPwTCiVv3DQ=)
                          4: UVODqGXU1i2V6wxruPPu6NZqD8c.roa (hash: qaMkqKyufJdfChbwh58tDb+74/c3RDGK12uoFQ3xxwU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:f6:08:63:98:40:28:8e:49:13:06:44:0a:a6:48:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
        Validity
            Not Before: Nov 22 13:00:53 2024 GMT
            Not After : Nov 23 13:00:53 2024 GMT
        Subject: CN=6c04e7c7efec1e4395382255cf8bd1b1af2fafa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:40:0c:d7:56:8c:78:69:3d:3c:4d:2f:9c:
                    18:19:80:af:ff:74:12:4f:60:e0:c3:05:0d:b1:d9:
                    ea:d8:5f:3c:bb:bd:cb:23:48:8e:3b:25:33:b9:42:
                    e3:fd:16:b8:79:7c:c9:63:65:d3:f1:59:be:ef:24:
                    9b:17:f3:fa:9b:81:8c:df:47:b0:86:cc:7f:cc:f5:
                    64:4d:02:04:08:51:2e:d0:f6:46:ec:de:50:91:fc:
                    cd:96:45:ac:b6:71:fc:f1:f7:e3:93:dd:e6:dd:0a:
                    1c:89:08:a2:44:2e:13:da:58:49:ae:1b:84:cd:6b:
                    95:47:dd:c0:a5:b3:07:5a:22:77:a7:dc:ed:1a:f9:
                    1e:62:11:f3:0a:d4:33:ee:6a:75:78:44:97:7f:f3:
                    19:ca:25:fd:6d:c1:ec:6b:04:f4:af:21:10:f6:fe:
                    54:05:7e:2e:b6:e1:f2:02:11:4f:fe:79:69:17:ac:
                    12:07:af:34:fa:a7:16:3e:0f:90:fa:db:a2:96:9c:
                    f3:27:8a:fd:af:ef:09:25:3a:e9:73:4b:e2:80:b7:
                    0f:46:2b:46:10:3f:9a:a9:64:b9:58:57:cf:5e:70:
                    f2:26:38:93:eb:83:97:8e:9b:a1:5a:b1:3d:ae:7c:
                    ea:1c:9a:e8:d4:bd:41:1b:04:be:99:c6:5b:a0:aa:
                    ff:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:04:E7:C7:EF:EC:1E:43:95:38:22:55:CF:8B:D1:B1:AF:2F:AF:A5
            X509v3 Authority Key Identifier:
                keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:c5:3b:09:1e:03:db:f8:0a:2a:f1:74:ac:07:1b:5c:c9:a8:
         35:39:7e:a2:ce:f2:27:46:bc:62:6f:e4:51:42:01:f6:43:2f:
         b0:c0:32:6c:ea:93:df:f4:95:59:7b:2c:37:d3:a2:b2:7f:83:
         4b:b3:fd:9e:fa:63:49:75:ef:77:cf:93:47:91:19:de:92:5e:
         f4:c8:a1:81:5c:55:5c:23:9f:c5:58:35:e7:9e:a2:a5:51:35:
         46:7a:79:a2:31:51:94:fd:f6:3a:8a:a2:ca:e0:0c:07:ea:c8:
         40:77:35:a6:e8:e3:a7:30:d8:33:eb:3d:83:b3:f1:8b:c1:2c:
         c6:97:b4:c5:6d:f2:d6:e3:6b:c4:c9:21:cd:c2:3b:75:33:4e:
         42:3a:11:e2:f4:c3:85:13:9b:9c:e6:5b:b2:68:17:b3:2d:f8:
         b8:e4:50:fc:e5:a6:87:4d:3f:82:35:05:83:0e:22:54:24:9d:
         1a:a3:04:0f:38:b7:2f:27:06:12:b6:43:5d:f4:f4:4d:3b:de:
         d8:e6:db:42:fe:cb:02:5d:d5:98:67:e1:28:ab:1f:79:a6:c8:
         b5:e2:92:35:83:ee:4b:6e:4e:5b:3a:02:67:92:7a:1d:96:47:
         33:96:38:1b:b0:ed:e3:a9:11:51:0f:e6:e1:08:0e:5f:96:1e:
         e9:ff:90:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNT9ghjmEAojkkTBkQKpkimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTQ1OWMwMjdhODZlMWE1NTcwOWY4NjA5MzdmZTJmODFi
MzEyZjAwHhcNMjQxMTIyMTMwMDUzWhcNMjQxMTIzMTMwMDUzWjAzMTEwLwYDVQQD
Eyg2YzA0ZTdjN2VmZWMxZTQzOTUzODIyNTVjZjhiZDFiMWFmMmZhZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC1ADNdWjHhpPTxNL5wYGYCv/3QS
T2DgwwUNsdnq2F88u73LI0iOOyUzuULj/Ra4eXzJY2XT8Vm+7ySbF/P6m4GM30ew
hsx/zPVkTQIECFEu0PZG7N5QkfzNlkWstnH88ffjk93m3QociQiiRC4T2lhJrhuE
zWuVR93ApbMHWiJ3p9ztGvkeYhHzCtQz7mp1eESXf/MZyiX9bcHsawT0ryEQ9v5U
BX4utuHyAhFP/nlpF6wSB680+qcWPg+Q+tuilpzzJ4r9r+8JJTrpc0vigLcPRitG
ED+aqWS5WFfPXnDyJjiT64OXjpuhWrE9rnzqHJro1L1BGwS+mcZboKr/owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwE58fv7B5DlTgiVc+L0bGvL6+lMB8GA1UdIwQY
MBaAFFAUWcAnqG4aVXCfhgk3/i+BsxLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYt
MTYyYjAyYmIxNWJkLzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85ZWRlOTItYTgzOC00MGJjLWEyNjYtMTYyYjAyYmIxNWJk
LzEvVUJSWndDZW9iaHBWY0otR0NUZi1MNEd6RXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw8U7CR4D
2/gKKvF0rAcbXMmoNTl+os7yJ0a8Ym/kUUIB9kMvsMAybOqT3/SVWXssN9Oisn+D
S7P9nvpjSXXvd8+TR5EZ3pJe9MihgVxVXCOfxVg1556ipVE1Rnp5ojFRlP32Ooqi
yuAMB+rIQHc1pujjpzDYM+s9g7Pxi8Esxpe0xW3y1uNrxMkhzcI7dTNOQjoR4vTD
hRObnOZbsmgXsy34uORQ/OWmh00/gjUFgw4iVCSdGqMEDzi3LycGErZDXfT0TTve
2ObbQv7LAl3VmGfhKKsfeabIteKSNYPuS25OWzoCZ5J6HZZHM5Y4G7Dt46kRUQ/m
4QgOX5Ye6f+Qrg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:28:44 2024 by rpki-client on console-fra.rpki-client.org