Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File:                     n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier:          eM/mwH+KSjpbwA0gIlD/ioaH/L0dLJmkSKl13mjEAVA=
Subject key identifier:   08:15:A6:67:A2:8B:1D:93:2A:CD:5F:E0:5C:D7:F7:19:C3:11:1C:6F
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer:       /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial:       019352AC30AD79AE7FCFBF4CEC9FA0979155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 07:00:36 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:36 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:36 +0000
Files and hashes:         1: AxAZUrsO080BrDtNclJ03R5zOj4.roa (hash: AbBTOY8Hv010cTuCsl/Aw3abYUv+81YBqU0xGovQxdA=)
                          2: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: M/UmhMkuuiasBLLzaOimIDMtIbLqt6jetifP+1uVZ48=)
                          3: t1cpLqBoH5Wf4VI52apT-hbwR9I.roa (hash: 1Ixpv3NxS67aP1slViaj9cwBhkbv+sCUGL1L5b/0EqY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:30:ad:79:ae:7f:cf:bf:4c:ec:9f:a0:97:91:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
        Validity
            Not Before: Nov 22 07:00:36 2024 GMT
            Not After : Nov 23 07:00:36 2024 GMT
        Subject: CN=0815a667a28b1d932acd5fe05cd7f719c3111c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9a:9f:5c:95:6d:2b:b1:52:eb:1d:22:02:9d:
                    ed:55:df:a1:48:9d:97:98:9d:83:13:31:65:d3:c2:
                    d4:c2:69:0f:79:1a:4b:de:92:9b:73:de:78:7e:26:
                    93:4b:ee:6d:62:f5:b2:c2:ef:c0:a9:0c:80:05:3a:
                    1d:33:32:7e:54:59:0e:f5:f7:f5:fb:64:47:5a:bc:
                    b6:d9:2f:25:bc:b4:2c:e4:c7:47:ec:6d:be:cf:af:
                    87:93:23:c5:66:c8:a2:f5:78:c0:e9:9e:68:c6:80:
                    05:a2:2a:42:49:2a:a6:17:29:72:ec:c0:47:a9:a4:
                    c8:49:26:71:f6:f1:cb:00:70:8a:f8:29:75:23:5c:
                    84:e7:49:b9:1c:a1:51:38:94:fc:68:20:43:10:97:
                    6c:85:9e:8d:76:ab:94:37:7f:6c:26:da:f9:09:8f:
                    27:10:73:44:86:44:0b:ff:b3:8e:50:0b:c6:5d:fa:
                    23:1b:f8:58:8b:c3:6a:16:d0:23:f8:4e:9c:b4:ab:
                    39:05:d5:00:d4:fa:f9:b6:3e:c2:c7:3a:bf:ff:55:
                    3f:94:89:4f:bd:e2:aa:51:10:5b:29:fe:91:3e:58:
                    77:2d:25:49:ff:41:98:f9:38:dd:fb:80:e0:7f:d1:
                    27:ef:30:38:11:71:67:60:ef:ae:c9:35:38:28:5b:
                    ea:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:15:A6:67:A2:8B:1D:93:2A:CD:5F:E0:5C:D7:F7:19:C3:11:1C:6F
            X509v3 Authority Key Identifier:
                keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:25:d8:22:42:f1:48:23:77:c6:ca:16:4e:60:78:f9:3b:dc:
         02:16:f6:d2:f0:eb:1c:28:df:e2:df:88:f3:7e:7e:a6:9c:21:
         be:4f:e7:ec:b2:d4:a8:24:07:34:44:8d:49:ee:5a:be:c3:ac:
         d6:40:3b:e9:9d:8e:70:63:0a:33:86:74:8d:62:be:b3:ec:7f:
         4f:6f:7b:15:42:a2:16:a4:fb:8c:30:b8:37:a6:74:09:a7:2e:
         38:e5:ba:94:b6:ac:e0:dd:46:03:96:24:75:63:c7:e9:73:10:
         b0:3b:6d:0b:3c:d7:fa:34:93:0b:ac:42:9d:d5:10:78:7b:e4:
         f8:26:a7:c1:a1:0d:ef:af:b8:bb:9d:9e:f2:ab:47:c3:e0:02:
         93:af:e2:79:df:83:9b:a0:86:5e:69:b0:59:25:37:4a:8e:89:
         b1:51:40:09:83:cf:ff:bb:33:e2:b3:11:3a:09:ee:88:3e:3d:
         7d:c4:a4:9d:81:6e:69:97:ab:1f:35:4b:88:fb:db:7b:7c:99:
         cb:6e:11:a3:8d:29:d9:65:bf:ea:48:66:77:08:72:16:d3:8b:
         29:41:b1:1f:3d:9d:be:f9:c3:1c:8c:d9:a8:8a:40:6d:e1:a4:
         27:0d:8f:c2:a3:78:e7:5c:f8:d0:07:2e:08:76:01:30:af:69:
         f6:95:6b:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrDCtea5/z79M7J+gl5FVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNmZiNzk1NDE3OWE5NjY2YjRjYjZhZmUzNDZkMWUyMWVj
MzBlNDUwHhcNMjQxMTIyMDcwMDM2WhcNMjQxMTIzMDcwMDM2WjAzMTEwLwYDVQQD
EygwODE1YTY2N2EyOGIxZDkzMmFjZDVmZTA1Y2Q3ZjcxOWMzMTExYzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJqfXJVtK7FS6x0iAp3tVd+hSJ2X
mJ2DEzFl08LUwmkPeRpL3pKbc954fiaTS+5tYvWywu/AqQyABTodMzJ+VFkO9ff1
+2RHWry22S8lvLQs5MdH7G2+z6+HkyPFZsii9XjA6Z5oxoAFoipCSSqmFyly7MBH
qaTISSZx9vHLAHCK+Cl1I1yE50m5HKFROJT8aCBDEJdshZ6NdquUN39sJtr5CY8n
EHNEhkQL/7OOUAvGXfojG/hYi8NqFtAj+E6ctKs5BdUA1Pr5tj7Cxzq//1U/lIlP
veKqURBbKf6RPlh3LSVJ/0GY+Tjd+4Dgf9En7zA4EXFnYO+uyTU4KFvqOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgVpmeiix2TKs1f4FzX9xnDERxvMB8GA1UdIwQY
MBaAFJ9vt5VBealma0y2r+NG0eIeww5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYt
NzM1NGE3M2JkYTdlLzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYtNzM1NGE3M2JkYTdl
LzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiXYIkLx
SCN3xsoWTmB4+TvcAhb20vDrHCjf4t+I835+ppwhvk/n7LLUqCQHNESNSe5avsOs
1kA76Z2OcGMKM4Z0jWK+s+x/T297FUKiFqT7jDC4N6Z0CacuOOW6lLas4N1GA5Yk
dWPH6XMQsDttCzzX+jSTC6xCndUQeHvk+CanwaEN76+4u52e8qtHw+ACk6/ied+D
m6CGXmmwWSU3So6JsVFACYPP/7sz4rMROgnuiD49fcSknYFuaZerHzVLiPvbe3yZ
y24Ro40p2WW/6khmdwhyFtOLKUGxHz2dvvnDHIzZqIpAbeGkJw2PwqN451z40Acu
CHYBMK9p9pVrpA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:16:42 2024 by rpki-client on console-fra.rpki-client.org