Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
File:                     PryeUbqrPD5qtpn8tEPwB_VGw_s.mft (raw, json)
Hash identifier:          cDt3zRl4ruIASEQWW4d/j3M2iQfAshgiZBRFX2JpreQ=
Subject key identifier:   EE:6E:00:21:59:67:59:BE:25:98:87:FB:AD:E0:54:A0:B9:46:E8:B7
Authority key identifier: 3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
Certificate issuer:       /CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Certificate serial:       0193568A511C9234FAE706D1BA4C68E53245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:02:05 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:05 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:05 +0000
Files and hashes:         1: Fg_EZoeceqr39Rui-rGE6YxYzEM.roa (hash: UsXdQm4J4sfbna+Ew1NojjQbs2PbZLWIDh4TlsSZRe8=)
                          2: PryeUbqrPD5qtpn8tEPwB_VGw_s.crl (hash: 2jtxkcAU0klXjdZI3zfkuqj0IOLBltG0vS0w3kx6gIc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:51:1c:92:34:fa:e7:06:d1:ba:4c:68:e5:32:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
        Validity
            Not Before: Nov 23 01:02:05 2024 GMT
            Not After : Nov 24 01:02:05 2024 GMT
        Subject: CN=ee6e0021596759be259887fbade054a0b946e8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:78:04:3a:3e:98:c5:6b:5b:79:2b:75:aa:67:
                    e6:30:0e:76:cb:3c:97:17:d8:c6:87:d1:a5:eb:42:
                    b2:75:b0:99:88:ba:81:b5:99:8f:d4:96:6e:d2:d1:
                    cc:fe:43:98:9e:d4:2f:1b:92:f1:d0:3e:0e:f3:40:
                    65:6e:09:dc:56:7b:4d:69:6b:be:c8:96:5b:3a:f4:
                    11:56:a3:fb:29:11:26:b6:d5:91:85:57:12:b8:3b:
                    d4:df:6d:6d:d8:43:a8:84:fa:58:a4:13:07:9d:33:
                    87:72:cd:40:99:41:17:bd:09:21:bf:d7:0a:85:8e:
                    75:09:49:90:88:c1:6f:89:c0:af:0f:3f:c4:de:80:
                    cd:e3:d6:be:b1:f1:db:76:23:8f:74:55:bd:8a:24:
                    08:86:ad:b0:f0:d6:8e:58:bb:42:27:dd:4b:96:85:
                    25:36:74:da:d5:b0:7a:88:86:77:64:56:dd:ab:33:
                    3e:83:97:ff:f6:6c:be:12:58:d0:b4:36:76:f9:a1:
                    24:de:0c:39:71:3b:04:c7:83:d7:d9:3f:21:e2:d5:
                    51:a1:e2:40:c6:e1:10:ff:0e:7a:cc:e1:cd:89:de:
                    8f:d8:9a:38:6b:98:e5:df:1c:c9:28:64:fb:ed:f4:
                    b0:51:97:0d:1a:ed:a7:6d:84:1e:a8:bd:dc:fa:a9:
                    24:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6E:00:21:59:67:59:BE:25:98:87:FB:AD:E0:54:A0:B9:46:E8:B7
            X509v3 Authority Key Identifier:
                keyid:3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:30:1d:40:51:f1:30:1d:e6:65:44:4b:56:f1:00:f3:e6:6c:
         cf:e3:b0:5b:38:4f:b4:70:76:54:55:0a:55:5e:32:c9:e7:f6:
         61:1d:8b:5a:53:40:4b:6f:d9:cb:a6:77:9e:c8:60:89:d8:9c:
         0c:3e:f7:e8:55:08:fb:57:cf:dd:2a:f1:a8:37:75:43:0f:20:
         98:a5:40:04:f5:56:a3:23:fb:00:68:41:25:63:14:a0:84:1d:
         87:2c:72:7f:72:63:ec:db:fb:a2:f6:26:51:5c:c5:b1:4a:36:
         4d:36:b4:94:c1:2a:0f:40:53:50:5f:5a:9e:4a:97:16:8f:e0:
         f5:4d:8d:c1:18:71:27:d6:e8:c1:95:36:ad:5f:7c:62:9c:4a:
         3c:74:b4:3c:39:54:bd:7f:7f:4f:3c:c3:13:4f:0e:03:fb:cc:
         3a:65:5f:6e:a1:47:4e:9f:2c:82:28:4d:15:f1:69:18:03:7c:
         4e:2a:54:c4:6b:8e:f3:54:06:36:d9:dc:61:a7:66:02:6a:90:
         56:29:89:f4:d6:2d:90:73:1d:6e:b3:80:26:ec:2a:87:6c:dc:
         34:12:e2:a2:90:4f:19:e2:10:d6:2a:cb:19:30:f7:5f:fc:89:
         1b:25:b8:13:b2:f5:5e:b5:c8:d9:3e:0a:92:1f:5b:ed:e8:2d:
         88:d1:6c:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWilEckjT65wbRukxo5TJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYmM5ZTUxYmFhYjNjM2U2YWI2OTlmY2I0NDNmMDA3ZjU0
NmMzZmIwHhcNMjQxMTIzMDEwMjA1WhcNMjQxMTI0MDEwMjA1WjAzMTEwLwYDVQQD
EyhlZTZlMDAyMTU5Njc1OWJlMjU5ODg3ZmJhZGUwNTRhMGI5NDZlOGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43gEOj6YxWtbeSt1qmfmMA52yzyX
F9jGh9Gl60KydbCZiLqBtZmP1JZu0tHM/kOYntQvG5Lx0D4O80BlbgncVntNaWu+
yJZbOvQRVqP7KREmttWRhVcSuDvU321t2EOohPpYpBMHnTOHcs1AmUEXvQkhv9cK
hY51CUmQiMFvicCvDz/E3oDN49a+sfHbdiOPdFW9iiQIhq2w8NaOWLtCJ91LloUl
NnTa1bB6iIZ3ZFbdqzM+g5f/9my+EljQtDZ2+aEk3gw5cTsEx4PX2T8h4tVRoeJA
xuEQ/w56zOHNid6P2Jo4a5jl3xzJKGT77fSwUZcNGu2nbYQeqL3c+qkk/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5uACFZZ1m+JZiH+63gVKC5Rui3MB8GA1UdIwQY
MBaAFD68nlG6qzw+araZ/LRD8Af1RsP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJ5ZVVicXJQRDVxdHBuOHRFUHdCX1ZHd19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC81NGMxZDEtMzYzYi00NWJhLTg5Mjct
OTY4OWZiZjZmNmVlLzEvUHJ5ZVVicXJQRDVxdHBuOHRFUHdCX1ZHd19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC81NGMxZDEtMzYzYi00NWJhLTg5MjctOTY4OWZiZjZmNmVl
LzEvUHJ5ZVVicXJQRDVxdHBuOHRFUHdCX1ZHd19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjAdQFHx
MB3mZURLVvEA8+Zsz+OwWzhPtHB2VFUKVV4yyef2YR2LWlNAS2/Zy6Z3nshgidic
DD736FUI+1fP3SrxqDd1Qw8gmKVABPVWoyP7AGhBJWMUoIQdhyxyf3Jj7Nv7ovYm
UVzFsUo2TTa0lMEqD0BTUF9ankqXFo/g9U2NwRhxJ9bowZU2rV98YpxKPHS0PDlU
vX9/TzzDE08OA/vMOmVfbqFHTp8sgihNFfFpGAN8TipUxGuO81QGNtncYadmAmqQ
VimJ9NYtkHMdbrOAJuwqh2zcNBLiopBPGeIQ1irLGTD3X/yJGyW4E7L1XrXI2T4K
kh9b7egtiNFsHw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:14:37 2024 by rpki-client on console-fra.rpki-client.org