Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File:                     3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier:          Vu6TBnuPNcnLEW9QKL6gUhHAwgNrYGLBRzW6187ZNVQ=
Subject key identifier:   F5:7B:2A:16:9C:9B:84:04:31:D9:3A:48:DE:68:34:90:6E:8E:9A:BC
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer:       /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial:       01935162C45FAF6E80C54532F2C9F0AB8167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number:          0E0B
Signing time:             Fri 22 Nov 2024 01:00:47 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:47 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:47 +0000
Files and hashes:         1: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: z//jHGMwHMZ8unXUpxRB/+IYuqrjei9FbOfhbTXyl44=)
                          2: 4eUF8UOZX5FMNqdUI28BW7117IU.roa (hash: ldb9vL8gVRh/junCrsg7RSQ8N/KcrR63tXvc8ZfPcmU=)
                          3: ffTNedAo1k_aUDDvHXkyQliR0W0.roa (hash: w6XBYRfWdW5Ffkmr0EBxtqzdmlwoZ4rCdGclxzW1gms=)
                          4: uzJJ7YNp54w7AigY03NpDfK0jnQ.roa (hash: b7+yh7G5zgTmUhGoW8OB4xVow0wAGJ9fFdVlMjjtspA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:c4:5f:af:6e:80:c5:45:32:f2:c9:f0:ab:81:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
        Validity
            Not Before: Nov 22 01:00:47 2024 GMT
            Not After : Nov 23 01:00:47 2024 GMT
        Subject: CN=f57b2a169c9b840431d93a48de6834906e8e9abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:77:9b:c8:12:94:77:34:57:5f:38:cd:62:
                    c1:6a:8e:c2:a6:25:01:1d:cd:bf:63:54:57:20:2f:
                    4f:74:17:84:62:6b:d4:63:f7:a3:b6:d7:ac:cc:f7:
                    25:7a:70:70:5d:be:61:a9:bb:f2:b6:0b:95:0d:19:
                    54:56:e2:eb:36:69:dc:e4:0b:6f:a2:dc:25:cc:d5:
                    f3:60:72:dc:1f:bb:bd:62:58:2c:8a:3b:9e:b0:cc:
                    84:31:a8:28:d1:07:6c:f9:ff:9c:61:4f:b9:a0:0b:
                    03:8c:85:d1:d8:3e:d7:66:9a:de:31:8d:89:b2:06:
                    0f:c9:bd:29:68:5a:0b:a1:f2:8c:2c:7c:11:cf:b5:
                    f7:68:7c:1b:3a:ab:6a:a0:f9:4c:5b:94:f4:fd:31:
                    b6:65:4f:43:be:37:14:99:5c:ad:2d:f6:ff:95:7d:
                    7a:28:34:67:c3:68:f8:b0:31:f2:3a:58:a0:e0:98:
                    87:0c:0f:08:9a:6f:67:14:77:71:39:f1:66:2c:f5:
                    bf:1f:7e:5f:a3:31:e5:7c:a9:67:88:b6:ab:80:65:
                    d0:db:54:c7:d4:a9:05:37:8a:4f:cb:a6:45:c6:87:
                    11:83:26:06:a9:c4:e3:39:80:bc:92:2b:a2:59:49:
                    d7:23:5b:ec:86:76:ba:66:81:92:56:f3:dd:8d:13:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7B:2A:16:9C:9B:84:04:31:D9:3A:48:DE:68:34:90:6E:8E:9A:BC
            X509v3 Authority Key Identifier:
                keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:6f:0c:94:76:60:4d:4a:83:a7:b7:68:0d:0c:33:7b:a7:54:
         7f:29:fa:f6:1e:11:3f:35:79:52:ad:4b:aa:99:04:8c:58:d4:
         d8:ca:70:10:65:a6:7b:cd:d4:c0:26:df:cb:9d:f1:88:5b:52:
         25:7f:b7:dc:dd:e7:cd:0d:88:56:4e:76:99:62:d7:ab:31:af:
         17:f8:c2:79:fa:01:e6:4b:5e:86:19:49:df:d7:78:17:04:cb:
         a5:78:18:a5:85:a5:1a:31:a7:fb:25:d6:06:1f:c7:47:fc:ce:
         0d:92:e2:c0:35:0f:44:5b:96:42:5a:4f:c4:f1:d2:32:66:01:
         98:23:2e:67:37:7a:f7:0b:7c:97:f8:09:9f:1d:35:4e:cb:0a:
         6b:88:de:53:05:9c:0f:b6:40:58:54:1a:0a:dc:03:c6:9d:e2:
         85:7b:94:7b:26:62:80:8b:15:08:8f:12:f5:27:1d:1f:6d:44:
         1e:6c:26:08:f2:f0:46:c7:38:67:96:66:93:ed:b8:ab:56:a0:
         42:7a:ad:f3:21:8d:da:9d:78:eb:94:70:fb:5f:05:48:42:c6:
         a1:01:b5:02:c6:96:e5:16:a9:a7:d8:52:53:b8:36:dc:d4:37:
         6d:8f:f5:ce:0c:de:45:bb:eb:8a:62:41:89:d8:89:20:1d:99:
         ba:3b:27:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRYsRfr26AxUUy8snwq4FnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTQ2MWMyMTFiZjM1NTFjNTUwN2M5MzBiNDIwNGM2ZWM0
M2IzMjIwHhcNMjQxMTIyMDEwMDQ3WhcNMjQxMTIzMDEwMDQ3WjAzMTEwLwYDVQQD
EyhmNTdiMmExNjljOWI4NDA0MzFkOTNhNDhkZTY4MzQ5MDZlOGU5YWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro13m8gSlHc0V184zWLBao7CpiUB
Hc2/Y1RXIC9PdBeEYmvUY/ejtteszPclenBwXb5hqbvytguVDRlUVuLrNmnc5Atv
otwlzNXzYHLcH7u9YlgsijuesMyEMago0Qds+f+cYU+5oAsDjIXR2D7XZpreMY2J
sgYPyb0paFoLofKMLHwRz7X3aHwbOqtqoPlMW5T0/TG2ZU9DvjcUmVytLfb/lX16
KDRnw2j4sDHyOlig4JiHDA8Imm9nFHdxOfFmLPW/H35fozHlfKlniLargGXQ21TH
1KkFN4pPy6ZFxocRgyYGqcTjOYC8kiuiWUnXI1vshna6ZoGSVvPdjROL3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPV7Khacm4QEMdk6SN5oNJBujpq8MB8GA1UdIwQY
MBaAFN6UYcIRvzVRxVB8kwtCBMbsQ7MiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2Zjct
ODIwMmE0NjdkNzUzLzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2ZjctODIwMmE0NjdkNzUz
LzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr28MlHZg
TUqDp7doDQwze6dUfyn69h4RPzV5Uq1LqpkEjFjU2MpwEGWme83UwCbfy53xiFtS
JX+33N3nzQ2IVk52mWLXqzGvF/jCefoB5ktehhlJ39d4FwTLpXgYpYWlGjGn+yXW
Bh/HR/zODZLiwDUPRFuWQlpPxPHSMmYBmCMuZzd69wt8l/gJnx01TssKa4jeUwWc
D7ZAWFQaCtwDxp3ihXuUeyZigIsVCI8S9ScdH21EHmwmCPLwRsc4Z5Zmk+24q1ag
Qnqt8yGN2p1465Rw+18FSELGoQG1AsaW5Rapp9hSU7g23NQ3bY/1zgzeRbvrimJB
idiJIB2ZujsnMg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:36:58 2024 by rpki-client on console-fra.rpki-client.org