Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
File:                     d-PCkAtZl1QoPyfztOjX9sRRCXI.mft (raw, json)
Hash identifier:          6iJEMW8XVk+Wo7n1/6j1fyKdATr3IAiK02urGRp7csM=
Subject key identifier:   C0:CB:15:F4:4F:88:96:C5:DF:76:DA:70:14:DA:26:D2:35:46:EB:C4
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Certificate issuer:       /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial:       01938C6473858EEE1E375C7DC80D9C2DA531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
Manifest number:          0ADE
Signing time:             Tue 03 Dec 2024 12:00:13 +0000
Manifest this update:     Tue 03 Dec 2024 12:00:13 +0000
Manifest next update:     Wed 04 Dec 2024 12:00:13 +0000
Files and hashes:         1: 11mDY_WAyffjgrg6UR7cuV1-Ctw.roa (hash: t8+XQWYpPZY4iq5iQQ1yD2gO81XI1tetULz8vd6rIyk=)
                          2: 5vwPWQmDwxoPTl0OSESIdbVTHBY.roa (hash: WY1Lu6VpBM6OfLLRhivpLOXDPVEkgNGX4QY6nlFhAaM=)
                          3: 9LhloSjE8YTbTqnUR5iaRv2Cwwo.roa (hash: wmygWmo/EFSBlVvc9JnYtL3j3MjA6dnnhXbuGBlf798=)
                          4: bP72NvFLhP7k1vFnBDjyI6195s8.roa (hash: kw0XtIH42mLABTud1HvTQ4NFeAOjaGEp4yMWnK9EqGE=)
                          5: d-PCkAtZl1QoPyfztOjX9sRRCXI.crl (hash: LAYj7jOwjMQqoTSkOFd8diuuaKQ4Pb16AddXx+UZ1R0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 12:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8c:64:73:85:8e:ee:1e:37:5c:7d:c8:0d:9c:2d:a5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
        Validity
            Not Before: Dec  3 12:00:13 2024 GMT
            Not After : Dec  4 12:00:13 2024 GMT
        Subject: CN=c0cb15f44f8896c5df76da7014da26d23546ebc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b2:60:ef:15:3b:44:f9:23:cd:95:c7:2f:dd:
                    d6:2a:cb:db:85:1c:aa:f1:02:bc:83:e3:31:6d:8a:
                    86:1d:72:6f:2a:ea:50:16:bc:3b:40:1e:02:84:5c:
                    78:6b:b8:bb:b5:8e:44:2f:f9:8c:e0:7a:e5:ec:17:
                    e9:03:fe:42:b5:4e:ea:57:ca:7b:81:ce:23:66:1e:
                    f0:48:89:eb:39:e2:9a:fd:10:f6:da:7c:0e:d0:0f:
                    8f:df:34:22:cd:da:8c:d4:35:0c:f7:93:86:1d:e9:
                    56:29:f6:eb:50:44:c9:b4:7e:b7:92:ec:ac:13:3a:
                    d6:a1:01:12:03:0c:0e:50:7e:dc:27:0e:86:94:03:
                    47:84:e3:3d:78:f9:0c:09:c0:63:cb:02:16:75:49:
                    b7:83:c0:53:77:23:a8:d9:4f:0c:25:0a:a3:2f:71:
                    90:33:b0:37:3a:a0:1b:9f:a1:da:21:a6:6b:6a:42:
                    bc:68:f3:e3:de:22:ab:83:5d:07:28:87:4b:a0:b5:
                    30:19:d0:8d:13:59:ad:58:8c:1f:f4:fc:b5:42:e0:
                    67:a9:9f:36:ec:58:f0:35:83:5a:e0:0a:c4:07:9d:
                    b6:89:08:6b:f7:65:3f:82:d6:af:d2:1d:0b:2f:29:
                    63:92:24:88:6e:ee:76:78:26:7d:9f:43:55:11:c8:
                    d8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CB:15:F4:4F:88:96:C5:DF:76:DA:70:14:DA:26:D2:35:46:EB:C4
            X509v3 Authority Key Identifier:
                keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:63:16:8f:b6:f2:a9:f6:14:34:ad:6d:68:fe:72:8c:9c:26:
         d2:18:f7:20:b5:a9:50:df:e3:42:e7:96:f4:bd:91:5f:50:7d:
         7e:c5:41:d6:98:fd:79:55:b4:65:8d:72:ed:63:60:64:b6:08:
         ce:0a:fd:d1:62:0e:0b:62:9e:92:24:a9:6c:9e:d4:91:28:b7:
         13:8f:f8:4f:c3:1b:56:0d:b0:f4:a5:5c:e9:99:af:2b:1b:7f:
         b2:cc:ed:29:38:01:6b:b5:8f:cd:7f:ef:83:33:0b:04:d4:69:
         00:73:c4:de:dd:9e:7f:25:31:2b:b8:23:05:dc:ec:c2:f8:03:
         ba:c8:0e:bf:5b:61:0a:bb:c7:54:c2:eb:fb:52:ab:11:9b:5b:
         74:90:7b:2b:f3:49:1e:38:fc:c2:60:20:ac:ed:73:0c:7d:02:
         71:3c:19:e6:de:a9:10:cc:bd:65:5c:2d:fe:46:67:b1:0d:85:
         c0:de:0c:65:c1:26:88:46:03:84:82:a5:35:d8:b9:a9:79:f4:
         79:34:96:9a:0d:a2:bf:41:ea:b1:c2:85:fb:7f:24:22:1f:b9:
         ed:6c:3d:62:96:9e:5d:30:9e:cc:36:c1:d8:f4:41:9a:ef:2b:
         c5:0b:75:80:f5:27:6f:cc:2d:88:bd:d6:97:00:b0:db:a1:2d:
         e8:fd:0a:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZOMZHOFju4eN1x9yA2cLaUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZTNjMjkwMGI1OTk3NTQyODNmMjdmM2I0ZThkN2Y2YzQ1
MTA5NzIwHhcNMjQxMjAzMTIwMDEzWhcNMjQxMjA0MTIwMDEzWjAzMTEwLwYDVQQD
EyhjMGNiMTVmNDRmODg5NmM1ZGY3NmRhNzAxNGRhMjZkMjM1NDZlYmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbJg7xU7RPkjzZXHL93WKsvbhRyq
8QK8g+MxbYqGHXJvKupQFrw7QB4ChFx4a7i7tY5EL/mM4Hrl7BfpA/5CtU7qV8p7
gc4jZh7wSInrOeKa/RD22nwO0A+P3zQizdqM1DUM95OGHelWKfbrUETJtH63kuys
EzrWoQESAwwOUH7cJw6GlANHhOM9ePkMCcBjywIWdUm3g8BTdyOo2U8MJQqjL3GQ
M7A3OqAbn6HaIaZrakK8aPPj3iKrg10HKIdLoLUwGdCNE1mtWIwf9Py1QuBnqZ82
7FjwNYNa4ArEB522iQhr92U/gtav0h0LLyljkiSIbu52eCZ9n0NVEcjY6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDLFfRPiJbF33bacBTaJtI1RuvEMB8GA1UdIwQY
MBaAFHfjwpALWZdUKD8n87To1/bEUQlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEt
ZDNjNTVkNGZkYTlkLzEvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEtZDNjNTVkNGZkYTlk
LzEvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2MWj7by
qfYUNK1taP5yjJwm0hj3ILWpUN/jQueW9L2RX1B9fsVB1pj9eVW0ZY1y7WNgZLYI
zgr90WIOC2KekiSpbJ7UkSi3E4/4T8MbVg2w9KVc6ZmvKxt/ssztKTgBa7WPzX/v
gzMLBNRpAHPE3t2efyUxK7gjBdzswvgDusgOv1thCrvHVMLr+1KrEZtbdJB7K/NJ
Hjj8wmAgrO1zDH0CcTwZ5t6pEMy9ZVwt/kZnsQ2FwN4MZcEmiEYDhIKlNdi5qXn0
eTSWmg2iv0HqscKF+38kIh+57Ww9YpaeXTCezDbB2PRBmu8rxQt1gPUnb8wtiL3W
lwCw26Et6P0Kcg==
-----END CERTIFICATE-----
Generated at Tue Dec 3 17:27:24 2024 by rpki-client on console-ams.rpki-client.org