Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File:                     A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier:          nj0kUjmQaYkekg+XmyJAs57U1magh8z6eX7NHmGdWso=
Subject key identifier:   3F:80:1C:41:EE:C9:08:18:E9:E9:89:D7:53:22:70:FC:E2:25:58:69
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer:       /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial:       019356F6F41012DF6B1FF332D039AE3AE344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number:          0AF4
Signing time:             Sat 23 Nov 2024 03:00:45 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:45 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:45 +0000
Files and hashes:         1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: Q+bFWBJqIEwMYNUpULYD2PXba6lDF1l0svA8SlfWets=)
                          2: S0NkA3KRFwtcCrJm_7yVhQju3cA.roa (hash: gF2785rFDsLVDgiXKjJWxCc0DvDL4yrjjTTOMADCIH8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:f4:10:12:df:6b:1f:f3:32:d0:39:ae:3a:e3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
        Validity
            Not Before: Nov 23 03:00:45 2024 GMT
            Not After : Nov 24 03:00:45 2024 GMT
        Subject: CN=3f801c41eec90818e9e989d7532270fce2255869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:13:96:14:9b:c3:75:b7:04:33:c7:f4:b9:50:
                    4d:3f:e1:ee:f6:b1:1f:a7:1b:8c:b1:b9:8d:16:80:
                    e4:74:fc:84:82:ac:7d:51:3d:e3:65:23:fa:79:9b:
                    6b:84:4e:c9:f2:00:c6:ae:d1:ea:66:05:35:c6:79:
                    ee:fa:84:16:ac:f8:c8:a3:1e:2f:33:82:31:f2:05:
                    08:e2:30:94:1e:1b:1c:a7:28:13:38:2b:78:fa:92:
                    dc:81:25:7f:02:4a:5d:32:70:ed:37:a0:c3:15:a4:
                    91:ce:70:2c:d9:24:13:99:3f:c6:d2:ac:a9:de:10:
                    b0:41:ac:9c:71:a6:13:ad:fa:85:50:64:a3:09:9e:
                    7c:16:52:06:fb:51:cd:9d:61:ff:ff:6b:3e:e2:6c:
                    d7:1f:21:e8:d7:07:0a:ac:c3:25:cd:d6:a5:ff:fc:
                    03:55:a1:01:0c:a1:8c:f0:c2:af:99:93:a2:a1:72:
                    f7:16:32:89:24:61:85:db:94:72:f1:4a:47:03:11:
                    4d:c8:7d:2d:91:b2:16:e2:e2:67:f9:f3:79:cb:dd:
                    31:52:3a:ef:ea:96:ed:d2:1c:a4:6e:27:40:85:4f:
                    75:e6:31:6f:2b:47:27:83:70:e5:a6:fc:b6:f8:c1:
                    e5:18:28:63:4f:8c:e5:8d:3e:9b:93:e2:57:31:5c:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:80:1C:41:EE:C9:08:18:E9:E9:89:D7:53:22:70:FC:E2:25:58:69
            X509v3 Authority Key Identifier:
                keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9c:46:c4:8c:76:df:e1:d7:b9:3d:f3:8e:d2:fb:46:85:21:
         80:01:05:1d:3f:e8:2f:e1:05:77:6b:98:3d:13:82:f0:41:21:
         5f:41:ae:19:81:4f:48:84:d9:0c:00:2c:8d:11:95:9e:31:ec:
         ed:48:78:cd:52:37:b2:b3:68:55:2e:64:66:c5:63:9a:59:9d:
         5b:f2:c2:26:9d:3a:45:57:95:5e:d1:cd:ff:87:9c:ab:a6:f7:
         41:98:32:24:c1:b8:94:90:ef:2e:4e:3d:2d:37:d1:36:31:bb:
         21:78:38:5d:0b:f7:11:86:ad:e8:98:ab:7e:38:9b:e9:a0:87:
         57:d2:e1:e9:53:3f:1b:f3:d9:b1:2f:39:90:d8:ce:bc:10:e4:
         11:99:ee:78:d6:3d:e3:f3:13:0a:89:2d:dc:6d:47:37:da:dc:
         6b:be:f2:ae:af:e2:99:14:7a:c4:3f:ce:7d:ce:c1:4d:73:6a:
         dd:db:08:53:60:9a:aa:3a:fe:f3:74:5b:7e:f7:70:a6:c4:62:
         33:b8:cd:d4:75:9f:0c:93:6e:ec:72:e6:6b:5e:4e:93:03:ae:
         3f:df:2c:75:f0:b8:f3:31:ee:2b:77:15:38:7e:31:df:16:3f:
         eb:45:f5:62:2f:e5:79:73:3d:9f:70:9b:f0:f3:69:92:f9:f5:
         47:86:85:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9vQQEt9rH/My0DmuOuNEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZWJiMDAxNTI4MjgxNzM0YmY1Yzk0YmM0YmVmNmY2ZTk5
YTM3N2UwHhcNMjQxMTIzMDMwMDQ1WhcNMjQxMTI0MDMwMDQ1WjAzMTEwLwYDVQQD
EygzZjgwMWM0MWVlYzkwODE4ZTllOTg5ZDc1MzIyNzBmY2UyMjU1ODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxOWFJvDdbcEM8f0uVBNP+Hu9rEf
pxuMsbmNFoDkdPyEgqx9UT3jZSP6eZtrhE7J8gDGrtHqZgU1xnnu+oQWrPjIox4v
M4Ix8gUI4jCUHhscpygTOCt4+pLcgSV/AkpdMnDtN6DDFaSRznAs2SQTmT/G0qyp
3hCwQayccaYTrfqFUGSjCZ58FlIG+1HNnWH//2s+4mzXHyHo1wcKrMMlzdal//wD
VaEBDKGM8MKvmZOioXL3FjKJJGGF25Ry8UpHAxFNyH0tkbIW4uJn+fN5y90xUjrv
6pbt0hykbidAhU915jFvK0cng3Dlpvy2+MHlGChjT4zljT6bk+JXMVwW3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+AHEHuyQgY6emJ11MicPziJVhpMB8GA1UdIwQY
MBaAFAPrsAFSgoFzS/XJS8S+9vbpmjd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZDNmNTEtYWY3My00MDQ1LWEwZjEt
ZWFiODI4ZWNhNDViLzEvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wZDNmNTEtYWY3My00MDQ1LWEwZjEtZWFiODI4ZWNhNDVi
LzEvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJxGxIx2
3+HXuT3zjtL7RoUhgAEFHT/oL+EFd2uYPROC8EEhX0GuGYFPSITZDAAsjRGVnjHs
7Uh4zVI3srNoVS5kZsVjmlmdW/LCJp06RVeVXtHN/4ecq6b3QZgyJMG4lJDvLk49
LTfRNjG7IXg4XQv3EYat6Jirfjib6aCHV9Lh6VM/G/PZsS85kNjOvBDkEZnueNY9
4/MTCokt3G1HN9rca77yrq/imRR6xD/Ofc7BTXNq3dsIU2Caqjr+83RbfvdwpsRi
M7jN1HWfDJNu7HLma15OkwOuP98sdfC48zHuK3cVOH4x3xY/60X1Yi/leXM9n3Cb
8PNpkvn1R4aFqg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:05 2024 by rpki-client on console-fra.rpki-client.org