Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File:                     nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier:          PQpkNpyZj3LLmPW4hnUL39iCg9u2Rahj82o0N44nw+M=
Subject key identifier:   32:75:18:8E:6B:3D:FE:BF:3E:7C:94:78:DD:FF:74:16:F2:27:5B:89
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer:       /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial:       019356F731E9F64B130C1DBCFE8D46E41ABB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number:          137B
Signing time:             Sat 23 Nov 2024 03:01:00 +0000
Manifest this update:     Sat 23 Nov 2024 03:01:00 +0000
Manifest next update:     Sun 24 Nov 2024 03:01:00 +0000
Files and hashes:         1: _DPipThGD68CVoCdFKNVgyd2hHY.roa (hash: DFzQUVd04qWuJY4SAnr4S+BYxqIAS2Vfoq8U3RuKXcc=)
                          2: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: b3Izi6kIen0QulC5lGLpXwVeDyeBCgNr5lRLzR1iE2s=)
                          3: zEx8iQuUh00Az3ebyqIxCAQcZ-Q.roa (hash: aE1eRgeYd34mM3KVcSPmN+NdQTBHWO9qMGwfo34vPoY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:31:e9:f6:4b:13:0c:1d:bc:fe:8d:46:e4:1a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
        Validity
            Not Before: Nov 23 03:01:00 2024 GMT
            Not After : Nov 24 03:01:00 2024 GMT
        Subject: CN=3275188e6b3dfebf3e7c9478ddff7416f2275b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:ea:f3:10:ad:f8:69:fc:14:a0:6b:74:ee:
                    62:7e:cf:97:4e:a0:eb:83:55:5f:2e:4d:19:1a:47:
                    95:4f:13:a3:6e:44:0b:d6:d9:4e:ff:81:b8:04:21:
                    80:0c:2f:fd:2e:d2:4e:84:b9:7f:7f:30:c4:c9:28:
                    60:cc:74:ae:7e:13:3b:14:e8:c9:68:42:10:4d:8e:
                    63:59:7e:96:e8:04:a9:b9:00:4a:34:23:81:5e:68:
                    ec:1d:22:47:fc:03:2f:3a:35:df:7d:52:ac:75:2d:
                    ff:b3:44:06:3b:27:3d:4a:c3:f4:a5:41:37:1c:e3:
                    bd:1f:c1:61:b0:b7:8d:07:6a:1a:d7:34:47:2e:dd:
                    fb:d6:71:2d:50:a4:36:ce:49:6c:42:70:6f:08:29:
                    ce:68:e9:34:96:80:38:a5:a9:67:32:4f:86:12:10:
                    a3:2e:5d:c3:1c:5b:77:84:d7:1f:9b:f0:9e:06:3f:
                    aa:1d:0a:d2:b5:b2:c3:48:cf:3a:98:a0:45:c5:da:
                    d0:d9:d4:c3:70:c2:5b:0b:1d:25:41:6b:4d:98:74:
                    d3:1c:ab:9e:a7:dd:09:27:f3:1c:8d:17:9e:94:18:
                    1b:64:74:1a:d3:6b:33:8f:eb:b3:75:a1:f2:ad:12:
                    b6:e2:8c:1b:22:96:44:e8:d5:d2:ec:9b:dc:53:a7:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:75:18:8E:6B:3D:FE:BF:3E:7C:94:78:DD:FF:74:16:F2:27:5B:89
            X509v3 Authority Key Identifier:
                keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:14:27:3c:ab:f0:6d:0d:aa:fd:17:97:f4:3a:ac:30:df:a0:
         11:d0:64:df:5a:6b:27:da:b5:5e:f4:d8:96:e9:d4:14:99:6a:
         08:bb:d1:ad:f4:60:b4:67:16:23:23:23:02:75:4a:f3:6d:5b:
         7b:dc:41:98:bf:a4:b0:91:89:53:bf:1c:5d:bb:de:58:66:7f:
         c1:cd:2a:97:0e:ab:7c:99:a4:cb:28:c3:d6:f2:5a:5d:df:7f:
         57:6e:0f:12:79:a5:df:be:e8:02:bd:9a:20:9f:ee:26:c2:65:
         31:7c:62:45:20:8b:fc:13:12:4d:fd:1f:c4:bf:05:2b:66:98:
         14:7d:cb:78:ae:b5:98:5b:35:aa:c4:db:13:98:27:94:3a:3e:
         d3:90:0c:28:ba:38:53:59:0d:a4:6c:aa:d1:8a:68:05:ef:3b:
         39:b6:cd:78:f8:4f:67:b1:6f:c5:ea:f6:8e:ce:b9:da:69:06:
         89:09:b9:a7:30:81:81:29:5e:c0:5b:06:b6:c2:92:d5:6e:a1:
         29:e4:c0:9d:fb:92:03:46:dd:87:58:53:b6:68:05:e1:a2:28:
         45:d5:16:5a:5b:73:89:f5:6a:a6:7d:68:7e:4c:00:c1:19:c5:
         e2:ca:cc:e2:fe:58:db:aa:04:31:29:2d:0f:a3:59:29:a1:6d:
         fd:f0:a2:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9zHp9ksTDB28/o1G5Bq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMDY2Y2I4NDg4ZGFlN2U0MjM0YWE3Yzg5MjQzMGRhZDEx
ZmU1YjEwHhcNMjQxMTIzMDMwMTAwWhcNMjQxMTI0MDMwMTAwWjAzMTEwLwYDVQQD
EygzMjc1MTg4ZTZiM2RmZWJmM2U3Yzk0NzhkZGZmNzQxNmYyMjc1Yjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX/q8xCt+Gn8FKBrdO5ifs+XTqDr
g1VfLk0ZGkeVTxOjbkQL1tlO/4G4BCGADC/9LtJOhLl/fzDEyShgzHSufhM7FOjJ
aEIQTY5jWX6W6ASpuQBKNCOBXmjsHSJH/AMvOjXffVKsdS3/s0QGOyc9SsP0pUE3
HOO9H8FhsLeNB2oa1zRHLt371nEtUKQ2zklsQnBvCCnOaOk0loA4palnMk+GEhCj
Ll3DHFt3hNcfm/CeBj+qHQrStbLDSM86mKBFxdrQ2dTDcMJbCx0lQWtNmHTTHKue
p90JJ/McjReelBgbZHQa02szj+uzdaHyrRK24owbIpZE6NXS7JvcU6cwTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJ1GI5rPf6/PnyUeN3/dBbyJ1uJMB8GA1UdIwQY
MBaAFJ0GbLhIja5+QjSqfIkkMNrRH+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQt
M2VmMDJkNTE0MGI3LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQtM2VmMDJkNTE0MGI3
LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRQnPKvw
bQ2q/ReX9DqsMN+gEdBk31prJ9q1XvTYlunUFJlqCLvRrfRgtGcWIyMjAnVK821b
e9xBmL+ksJGJU78cXbveWGZ/wc0qlw6rfJmkyyjD1vJaXd9/V24PEnml377oAr2a
IJ/uJsJlMXxiRSCL/BMSTf0fxL8FK2aYFH3LeK61mFs1qsTbE5gnlDo+05AMKLo4
U1kNpGyq0YpoBe87ObbNePhPZ7Fvxer2js652mkGiQm5pzCBgSlewFsGtsKS1W6h
KeTAnfuSA0bdh1hTtmgF4aIoRdUWWltzifVqpn1ofkwAwRnF4srM4v5Y26oEMSkt
D6NZKaFt/fCiwg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:29 2024 by rpki-client on console-fra.rpki-client.org