Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
File:                     AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft (raw, json)
Hash identifier:          2sL1OGJ/5uKCae04a2FrorG0T/iNZ8Ktnc/ZzYxX8Os=
Subject key identifier:   66:B4:8C:20:46:20:45:C2:E6:50:69:DA:C4:D5:E0:54:B6:ED:55:E5
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Certificate issuer:       /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial:       01936368BF8F7EA6F0C42178AAD05F17167B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
Manifest number:          13E7
Signing time:             Mon 25 Nov 2024 13:00:29 +0000
Manifest this update:     Mon 25 Nov 2024 13:00:29 +0000
Manifest next update:     Tue 26 Nov 2024 13:00:29 +0000
Files and hashes:         1: 89jcpdk3OOYx83RPTGE5JieqoXs.roa (hash: 4gwR8TRqcRYx1bquU5UIPpDPIyjUMR3JzO3424kg2kI=)
                          2: AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl (hash: ZsA3CFZOucsHTbm/u8bIIBVXHlJi+iSdxh5gnJSEumE=)
                          3: _JUBTlfgUgutf-oX7lr06sNNDUw.roa (hash: ZrjW+UWuMTe/KPN7Y0IfMkC9e1VK9PKIUzKLSSzkEKM=)
                          4: cxLRTbU3CWgMqZrPKtwz01kZBzk.roa (hash: gn5UCzYjpiB6OzT05mw9GV1TtS9r2XbkMuWEnQSxZuI=)
                          5: gi40m2-6WIgq6s3y-vo93s5XQqI.roa (hash: ae7ASYvDDKYDz9UfcQjIs7W3reQaaL/BT/qjF4pNURU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:68:bf:8f:7e:a6:f0:c4:21:78:aa:d0:5f:17:16:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
        Validity
            Not Before: Nov 25 13:00:29 2024 GMT
            Not After : Nov 26 13:00:29 2024 GMT
        Subject: CN=66b48c20462045c2e65069dac4d5e054b6ed55e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:8f:f0:43:fb:bc:69:9b:37:8e:27:b0:3c:
                    94:90:42:8c:c5:2f:ee:3f:c0:b0:7c:58:fc:d4:76:
                    42:3a:e1:b2:57:ad:ca:ac:dc:1b:ef:cb:33:0c:c8:
                    b3:56:42:e4:1f:00:93:53:e4:8d:04:e1:86:ac:34:
                    d6:48:3b:71:b1:2c:2b:e4:9f:8c:6e:22:56:4e:32:
                    36:d7:65:38:6e:6c:2c:a5:aa:a5:b3:1e:76:83:36:
                    5e:98:2a:fd:33:5c:59:0b:2b:06:24:eb:4c:03:58:
                    37:9c:c0:99:b1:19:fb:9c:f5:21:82:4e:e3:cb:69:
                    a6:69:f5:37:2b:7e:20:bb:54:21:86:72:37:04:fb:
                    e6:e2:bc:f8:b9:e7:d5:3f:1f:04:a1:ea:1a:67:d4:
                    50:0c:35:01:fd:9b:00:c3:84:aa:94:2a:d0:8c:43:
                    70:42:d7:1c:0f:4e:4a:bb:7d:74:81:ab:7e:9e:32:
                    b5:fd:c4:a4:ac:7e:84:81:60:4d:b9:ed:84:3c:e3:
                    8c:e4:95:3f:e0:ca:a4:13:7d:ee:78:ce:66:4d:6b:
                    c1:d9:00:f6:5a:e8:93:0d:3a:f5:44:10:4d:0d:94:
                    94:a3:b7:9f:c6:fe:09:11:12:5c:f9:5b:34:eb:f0:
                    fc:1e:f2:b9:18:b5:38:6c:56:85:29:bc:cb:4a:27:
                    c5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B4:8C:20:46:20:45:C2:E6:50:69:DA:C4:D5:E0:54:B6:ED:55:E5
            X509v3 Authority Key Identifier:
                keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:47:2c:40:03:77:76:b4:41:4a:a7:e7:97:7c:29:f7:67:5b:
         05:04:f4:93:2e:e3:39:66:cd:e9:2d:92:e2:b3:f3:12:9d:d9:
         fe:99:61:1f:79:33:75:d0:87:f5:29:91:6f:14:71:cf:fa:91:
         b9:b8:11:06:37:73:67:9f:01:d9:71:bd:41:06:03:da:65:56:
         12:3a:ea:6e:01:76:ac:c3:86:77:53:5b:7f:43:0d:22:d8:2c:
         7f:f9:63:98:df:27:18:39:3e:8b:7e:0d:bb:51:74:a4:da:36:
         32:d3:30:cf:f5:53:7f:b4:93:7b:69:ec:63:bf:61:d9:98:9c:
         c1:42:17:e5:09:81:ed:10:8a:54:3e:f9:0f:a9:1f:73:50:c5:
         3a:e9:07:1e:f5:76:fe:dc:c2:f7:e5:67:03:1f:88:16:96:b6:
         ff:04:b6:9d:66:35:71:3b:ee:06:5c:b1:9e:a0:9d:8c:b1:3e:
         42:35:87:1a:bd:cd:86:6b:fa:34:c7:55:c5:b1:7d:bb:40:f7:
         f9:ad:01:47:c3:b5:b2:17:7f:ab:9d:e3:d4:29:23:af:77:b7:
         f7:ad:8f:88:4b:1a:7a:e1:2f:d7:78:0f:e6:ca:76:db:4c:31:
         42:77:b5:6e:84:e7:d4:ce:a3:21:c0:cc:78:2c:22:46:01:37:
         77:1d:2c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNjaL+PfqbwxCF4qtBfFxZ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDFhMTM1M2Y3ZjhiNTA1ZmM5ODc1MGU4Njc4N2Y0ZTA0
NjQzMmUwHhcNMjQxMTI1MTMwMDI5WhcNMjQxMTI2MTMwMDI5WjAzMTEwLwYDVQQD
Eyg2NmI0OGMyMDQ2MjA0NWMyZTY1MDY5ZGFjNGQ1ZTA1NGI2ZWQ1NWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/WP8EP7vGmbN44nsDyUkEKMxS/u
P8CwfFj81HZCOuGyV63KrNwb78szDMizVkLkHwCTU+SNBOGGrDTWSDtxsSwr5J+M
biJWTjI212U4bmwspaqlsx52gzZemCr9M1xZCysGJOtMA1g3nMCZsRn7nPUhgk7j
y2mmafU3K34gu1QhhnI3BPvm4rz4uefVPx8EoeoaZ9RQDDUB/ZsAw4SqlCrQjENw
QtccD05Ku310gat+njK1/cSkrH6EgWBNue2EPOOM5JU/4MqkE33ueM5mTWvB2QD2
WuiTDTr1RBBNDZSUo7efxv4JERJc+Vs06/D8HvK5GLU4bFaFKbzLSifFWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGa0jCBGIEXC5lBp2sTV4FS27VXlMB8GA1UdIwQY
MBaAFAHRoTU/f4tQX8mHUOhnh/TgRkMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEt
NjQzYTQxNTlhYjQ2LzEvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEtNjQzYTQxNTlhYjQ2
LzEvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkcsQAN3
drRBSqfnl3wp92dbBQT0ky7jOWbN6S2S4rPzEp3Z/plhH3kzddCH9SmRbxRxz/qR
ubgRBjdzZ58B2XG9QQYD2mVWEjrqbgF2rMOGd1Nbf0MNItgsf/ljmN8nGDk+i34N
u1F0pNo2MtMwz/VTf7STe2nsY79h2ZicwUIX5QmB7RCKVD75D6kfc1DFOukHHvV2
/tzC9+VnAx+IFpa2/wS2nWY1cTvuBlyxnqCdjLE+QjWHGr3Nhmv6NMdVxbF9u0D3
+a0BR8O1shd/q53j1Ckjr3e3962PiEsaeuEv13gP5sp220wxQne1boTn1M6jIcDM
eCwiRgE3dx0sww==
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:11:45 2024 by rpki-client on console-fra.rpki-client.org