Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File:                     2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier:          b4DOhjfPF03VqtNGRN66Uj7YWtuCdtlaauoyaE5HCec=
Subject key identifier:   77:AD:49:76:C9:6C:AE:49:2E:C6:46:B9:F4:2E:69:A8:42:11:4C:A8
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer:       /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial:       019355E47F2E1FB6525DEDEF1CCA6D4C4737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number:          047F
Signing time:             Fri 22 Nov 2024 22:00:58 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:58 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:58 +0000
Files and hashes:         1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: d393bDgIdOwg9f/cfcMty9HZKG/p5xCeUPKMIdWB6Pg=)
                          2: HT5r7AHKguUWaHtFonv4hyOfXW0.roa (hash: +3alkQDEEBpmuAT2HXyUMgkKB0AKi0Hx7OmC4XCpNYU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:7f:2e:1f:b6:52:5d:ed:ef:1c:ca:6d:4c:47:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
        Validity
            Not Before: Nov 22 22:00:58 2024 GMT
            Not After : Nov 23 22:00:58 2024 GMT
        Subject: CN=77ad4976c96cae492ec646b9f42e69a842114ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:85:da:47:9b:67:4e:d5:8e:ea:a8:ca:2d:e0:
                    37:e4:59:9a:87:cd:ac:b0:fe:d1:7a:1f:9c:7f:a6:
                    31:da:39:5f:5e:6d:cc:e2:28:9c:e3:a8:bb:0b:5c:
                    5e:b7:e0:ba:04:ff:c7:56:eb:b4:06:a3:dc:e3:32:
                    67:36:7b:77:b5:65:a5:27:df:e4:e8:15:82:80:01:
                    9c:88:27:26:9c:36:33:ae:2e:45:33:3e:8e:b8:8f:
                    c2:35:4b:2b:c2:13:7b:0f:af:c7:87:f1:11:da:18:
                    cc:f7:f1:b0:2b:cf:14:8f:7e:16:8c:f1:39:93:50:
                    9a:e7:c8:8a:30:84:4a:03:09:66:bb:c7:7b:b1:9a:
                    a4:c4:e6:76:e5:bb:32:ee:7e:f9:d7:bc:33:7b:41:
                    a0:06:f5:28:c5:04:1d:8a:52:15:48:02:c7:1a:2e:
                    57:28:1a:7e:5f:53:9e:a2:a2:33:cb:41:29:04:d4:
                    4d:57:3c:c0:0c:e0:79:6f:bd:e9:58:a2:b4:97:cb:
                    a9:9b:49:57:99:d9:d8:3b:15:95:c1:73:01:83:2f:
                    0e:2a:2b:e3:af:83:9c:76:d5:ad:db:04:e9:dc:b7:
                    86:39:b7:9c:72:ba:15:46:ca:2f:64:87:f4:d9:99:
                    9e:15:6a:4a:89:4c:03:1d:94:94:4b:92:f5:96:cb:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AD:49:76:C9:6C:AE:49:2E:C6:46:B9:F4:2E:69:A8:42:11:4C:A8
            X509v3 Authority Key Identifier:
                keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:3a:98:5a:92:29:33:dc:63:9a:3b:31:81:5d:2d:26:1d:13:
         5d:fe:1f:e4:da:7d:35:1a:1c:25:c7:78:30:0a:a0:85:c5:a2:
         fe:ce:1a:f7:bb:fd:a9:2a:73:2a:a1:4a:ed:5e:72:7e:b4:3b:
         05:4d:26:9b:aa:90:0e:57:25:47:18:0b:26:89:26:b5:cd:72:
         9a:23:ae:da:be:ac:ef:db:dd:d5:16:99:b2:92:55:aa:37:8e:
         08:45:d4:b8:da:95:9f:3e:f4:af:40:67:78:41:d1:9c:a1:17:
         73:82:81:bf:e3:ff:ed:b9:8b:85:4b:f9:a5:55:d5:98:d9:e5:
         ff:a2:af:09:92:9a:80:3a:ee:3d:f5:37:e3:9f:2d:00:c2:d6:
         06:e2:78:f3:37:29:4e:22:a9:a0:84:18:1c:90:b8:bc:6f:75:
         9d:d3:3e:6b:e2:23:01:05:ef:14:ca:86:35:11:f1:42:fe:a4:
         54:0f:a8:a9:21:19:6b:44:02:64:8b:e1:c0:38:1e:95:a3:71:
         51:f2:51:26:a4:6d:ab:28:09:9e:92:a6:03:05:b7:93:17:1f:
         ea:6e:dd:28:3f:43:c4:40:50:3e:9e:31:69:b6:20:0f:d5:09:
         2b:3d:f7:9f:6c:34:e0:6c:11:e6:0f:cf:1d:a5:97:6f:8d:1d:
         73:02:30:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNV5H8uH7ZSXe3vHMptTEc3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MGI0OTdkNTFiZDlmNDdiODRmNjkzZDY4N2ZiZThjZjZj
ZmZiNzUwHhcNMjQxMTIyMjIwMDU4WhcNMjQxMTIzMjIwMDU4WjAzMTEwLwYDVQQD
Eyg3N2FkNDk3NmM5NmNhZTQ5MmVjNjQ2YjlmNDJlNjlhODQyMTE0Y2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YXaR5tnTtWO6qjKLeA35Fmah82s
sP7Reh+cf6Yx2jlfXm3M4iic46i7C1xet+C6BP/HVuu0BqPc4zJnNnt3tWWlJ9/k
6BWCgAGciCcmnDYzri5FMz6OuI/CNUsrwhN7D6/Hh/ER2hjM9/GwK88Uj34WjPE5
k1Ca58iKMIRKAwlmu8d7sZqkxOZ25bsy7n7517wze0GgBvUoxQQdilIVSALHGi5X
KBp+X1OeoqIzy0EpBNRNVzzADOB5b73pWKK0l8upm0lXmdnYOxWVwXMBgy8OKivj
r4OcdtWt2wTp3LeGObeccroVRsovZIf02ZmeFWpKiUwDHZSUS5L1lsv66QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHetSXbJbK5JLsZGufQuaahCEUyoMB8GA1UdIwQY
MBaAFNgLSX1RvZ9HuE9pPWh/voz2z/t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MjBkYzQtY2QzYy00Y2FjLWFjZmMt
NGM4NTQ0NWEwMzZhLzEvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85MjBkYzQtY2QzYy00Y2FjLWFjZmMtNGM4NTQ0NWEwMzZh
LzEvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzqYWpIp
M9xjmjsxgV0tJh0TXf4f5Np9NRocJcd4MAqghcWi/s4a97v9qSpzKqFK7V5yfrQ7
BU0mm6qQDlclRxgLJokmtc1ymiOu2r6s79vd1RaZspJVqjeOCEXUuNqVnz70r0Bn
eEHRnKEXc4KBv+P/7bmLhUv5pVXVmNnl/6KvCZKagDruPfU3458tAMLWBuJ48zcp
TiKpoIQYHJC4vG91ndM+a+IjAQXvFMqGNRHxQv6kVA+oqSEZa0QCZIvhwDgelaNx
UfJRJqRtqygJnpKmAwW3kxcf6m7dKD9DxEBQPp4xabYgD9UJKz33n2w04GwR5g/P
HaWXb40dcwIwrw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:56:20 2024 by rpki-client on console-ams.rpki-client.org