Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File:                     PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier:          t/TA3WejSBKbYIXNxAsTIWOiWhkMgUEFP9iExWlvZ7w=
Subject key identifier:   06:FF:2B:35:15:4F:CB:D0:BD:4F:2F:A0:D7:56:6B:5E:A9:96:00:70
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer:       /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial:       01935689FEAACCCE1565B885C92F13FA061F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number:          0976
Signing time:             Sat 23 Nov 2024 01:01:44 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:44 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:44 +0000
Files and hashes:         1: NYLery1DL2okJXx86uYCdrawKV8.roa (hash: AZ11c8RNzM/FsPg6QxoGocvTq2bD3l8YhNDrqV1qIN4=)
                          2: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: bRCK64evsiYy2XrcbKkO2FGh/fTneBkci+Am4+qvUnA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:fe:aa:cc:ce:15:65:b8:85:c9:2f:13:fa:06:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
        Validity
            Not Before: Nov 23 01:01:44 2024 GMT
            Not After : Nov 24 01:01:44 2024 GMT
        Subject: CN=06ff2b35154fcbd0bd4f2fa0d7566b5ea9960070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:67:68:52:2d:dc:20:84:bf:ed:d4:e6:94:
                    03:93:39:99:f5:4f:23:dc:e4:e0:f1:69:eb:74:7b:
                    fc:7f:dd:ac:98:16:aa:5c:13:9e:89:b4:9c:c9:98:
                    41:b9:70:e4:5b:c8:3b:1e:7c:4a:4d:2a:78:e6:9e:
                    82:9a:b2:dc:2f:fe:9f:f2:78:96:c0:04:86:9f:8b:
                    d2:e8:dc:ea:cb:6e:85:b9:f1:1f:b6:99:e4:fe:db:
                    de:59:0e:dc:f8:78:e7:f1:e4:1f:b3:d0:8b:d2:fe:
                    59:d3:e7:8d:6b:07:55:cc:e5:b1:77:33:90:f3:37:
                    93:e0:24:d6:18:62:48:14:ed:d9:41:17:39:ea:8c:
                    cc:c3:fb:05:5d:0e:8a:ed:2c:3f:6e:dc:e8:c2:1b:
                    05:4e:22:90:59:a6:20:9e:6e:8e:5d:1a:11:7f:0c:
                    1c:84:32:9a:68:45:63:b3:eb:1d:ad:d9:14:e5:4e:
                    8d:93:9a:d2:ef:26:db:74:71:b4:a2:63:96:fa:fd:
                    e5:29:ef:87:a9:8f:44:c8:91:d6:53:5c:39:15:91:
                    c9:40:11:cf:eb:3f:0e:14:4e:f7:91:e0:c1:cb:e4:
                    ee:35:69:66:43:c5:4b:f7:bf:b7:bc:9a:54:7b:4c:
                    ef:a3:ad:b6:65:b7:ec:f9:82:d6:d1:8b:ca:d5:55:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FF:2B:35:15:4F:CB:D0:BD:4F:2F:A0:D7:56:6B:5E:A9:96:00:70
            X509v3 Authority Key Identifier:
                keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d8:ae:82:87:2c:02:33:1d:bf:d1:ff:1b:15:7e:06:42:6d:
         74:34:ec:a8:f6:4f:56:f2:e3:63:86:76:42:96:9f:c6:c6:50:
         8e:ef:c5:dd:9c:55:9a:15:92:23:7d:89:c6:fe:fe:42:e7:8b:
         fd:52:0a:c8:a8:29:f6:df:49:6c:32:a8:26:75:17:6d:59:be:
         56:4a:7c:6c:c0:6d:f6:1b:56:57:b5:a7:7f:88:35:6b:07:c3:
         5c:44:39:28:60:23:8a:3c:f1:c4:e0:aa:ad:a0:f9:70:4e:9d:
         d1:21:5d:e7:6b:a9:26:52:12:95:24:ba:c6:0b:2d:17:1f:c4:
         45:21:11:64:6f:24:7e:e1:07:de:d5:07:a0:31:2e:13:17:d9:
         14:8a:3d:2f:9c:9a:ac:75:59:9f:87:b5:1b:e2:2b:cc:7b:d6:
         3f:ad:57:20:84:6c:60:1d:0e:1c:d2:7e:51:bb:93:33:f7:ee:
         48:be:70:26:ad:ed:3d:46:94:4f:e5:f1:03:23:0e:a0:93:73:
         e1:da:ed:62:63:a2:60:4e:c7:64:32:cb:fd:61:5a:33:41:4f:
         a1:f6:c8:48:9d:60:a3:b0:75:55:4b:99:fc:2b:01:1e:f2:0f:
         d2:89:4b:ce:fb:2f:81:24:a6:3b:3a:35:19:6a:95:30:f1:35:
         44:24:23:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWif6qzM4VZbiFyS8T+gYfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlOGM2Y2M0NDhmOTYzNWM1NmZmMjJiMTFjZDgwYzFhYTlj
NTJkNGYwHhcNMjQxMTIzMDEwMTQ0WhcNMjQxMTI0MDEwMTQ0WjAzMTEwLwYDVQQD
EygwNmZmMmIzNTE1NGZjYmQwYmQ0ZjJmYTBkNzU2NmI1ZWE5OTYwMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7RnaFIt3CCEv+3U5pQDkzmZ9U8j
3OTg8WnrdHv8f92smBaqXBOeibScyZhBuXDkW8g7HnxKTSp45p6CmrLcL/6f8niW
wASGn4vS6Nzqy26FufEftpnk/tveWQ7c+Hjn8eQfs9CL0v5Z0+eNawdVzOWxdzOQ
8zeT4CTWGGJIFO3ZQRc56ozMw/sFXQ6K7Sw/btzowhsFTiKQWaYgnm6OXRoRfwwc
hDKaaEVjs+sdrdkU5U6Nk5rS7ybbdHG0omOW+v3lKe+HqY9EyJHWU1w5FZHJQBHP
6z8OFE73keDBy+TuNWlmQ8VL97+3vJpUe0zvo622Zbfs+YLW0YvK1VWLYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAb/KzUVT8vQvU8voNdWa16plgBwMB8GA1UdIwQY
MBaAFD6MbMRI+WNcVv8isRzYDBqpxS1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTct
ZDI4MTA1ZTNmMzgwLzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTctZDI4MTA1ZTNmMzgw
LzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9iugocs
AjMdv9H/GxV+BkJtdDTsqPZPVvLjY4Z2QpafxsZQju/F3ZxVmhWSI32Jxv7+QueL
/VIKyKgp9t9JbDKoJnUXbVm+Vkp8bMBt9htWV7Wnf4g1awfDXEQ5KGAjijzxxOCq
raD5cE6d0SFd52upJlISlSS6xgstFx/ERSERZG8kfuEH3tUHoDEuExfZFIo9L5ya
rHVZn4e1G+IrzHvWP61XIIRsYB0OHNJ+UbuTM/fuSL5wJq3tPUaUT+XxAyMOoJNz
4drtYmOiYE7HZDLL/WFaM0FPofbISJ1go7B1VUuZ/CsBHvIP0olLzvsvgSSmOzo1
GWqVMPE1RCQjmQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:26 2024 by rpki-client on console-ams.rpki-client.org