Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File:                     J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier:          Z5gQyY3M6cIRmTTP9stzkNleDQAHOAMXC4KoJtM2dFY=
Subject key identifier:   F9:BF:3E:75:41:F1:5A:B4:F4:B8:00:3F:CB:D1:FC:5E:E1:46:F6:29
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer:       /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial:       019366D77EFAFFC24A6060745912535F6A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number:          0A5A
Signing time:             Tue 26 Nov 2024 05:00:18 +0000
Manifest this update:     Tue 26 Nov 2024 05:00:18 +0000
Manifest next update:     Wed 27 Nov 2024 05:00:18 +0000
Files and hashes:         1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: yrKJ/rxchmAYm/UH4WeMjOqlF16Gt6abU4O/PuLG+Rc=)
                          2: WwrNp1o0gQoA_a78lzDI76zCqg4.roa (hash: O+Pz2qHsSnexIiEhDKkRQJ45GChXh5UhUF7LtvnI59U=)
                          3: gFPKMP1wkKTyoT3IRFaLVZbCwlE.roa (hash: fWv88D1cmjUwT3vFEAPYUmlyHggyRsbHx6XoYeUBU3c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 05:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:d7:7e:fa:ff:c2:4a:60:60:74:59:12:53:5f:6a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
        Validity
            Not Before: Nov 26 05:00:18 2024 GMT
            Not After : Nov 27 05:00:18 2024 GMT
        Subject: CN=f9bf3e7541f15ab4f4b8003fcbd1fc5ee146f629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:93:80:2e:24:e4:50:f2:97:e5:18:a0:46:
                    6c:14:d5:03:e5:55:ff:df:5a:04:21:ed:be:38:da:
                    75:dd:d4:70:8b:d5:4d:a3:7a:1d:03:0d:d4:29:63:
                    37:2b:9f:f2:e0:b1:7a:2b:50:df:37:06:6f:1b:65:
                    b4:03:c3:1b:5c:63:0d:b3:c7:58:ae:ea:3b:5c:7c:
                    f9:61:1a:4d:c5:83:46:cf:5d:9d:09:f2:b3:1b:1c:
                    68:69:a9:bb:cd:2e:34:40:97:a6:fa:6b:61:1f:cc:
                    aa:b2:c1:ef:87:a6:3e:a9:bb:00:e1:32:04:94:d9:
                    76:20:44:bd:85:1c:b1:eb:22:94:68:e1:92:79:9e:
                    2d:24:9b:88:df:56:66:60:46:5c:5e:f3:25:88:2d:
                    b0:cd:64:bd:98:09:2e:8e:17:d7:d5:87:02:d4:30:
                    07:ae:ad:ee:5a:09:f6:e1:08:50:8b:af:88:17:54:
                    83:7f:e5:a6:b7:e5:9c:13:5b:db:74:58:36:18:c7:
                    48:8a:9f:2c:b9:2a:88:0c:f6:45:5a:c6:4a:11:5d:
                    e7:fb:8c:7a:b1:c0:02:ad:4b:51:e4:49:6e:06:7c:
                    fe:da:3c:3c:b7:ff:17:71:a5:cb:ac:ba:02:9d:bf:
                    1a:1d:b0:69:08:33:df:71:ee:48:07:e7:62:8c:af:
                    97:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BF:3E:75:41:F1:5A:B4:F4:B8:00:3F:CB:D1:FC:5E:E1:46:F6:29
            X509v3 Authority Key Identifier:
                keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:fe:ce:78:80:0d:0b:af:92:db:dc:e5:3b:2e:db:d9:33:7e:
         41:9b:d6:ea:7e:b6:2f:2e:00:79:4b:13:c8:e6:d4:c5:ff:ca:
         9a:8b:86:a8:9e:d8:02:89:73:ec:f1:6f:ac:84:ac:50:ad:df:
         75:c0:20:ba:8d:f6:f5:2d:5c:6e:a0:95:66:9c:7a:66:e1:21:
         54:8b:ad:29:1c:f1:04:ce:cf:67:ed:2f:ea:89:86:4f:6a:1d:
         3a:51:9a:42:51:bd:ec:b9:81:66:90:9b:98:59:1c:ba:31:db:
         5c:fc:97:6a:07:83:ae:99:34:20:02:b2:7d:82:78:09:83:6f:
         3f:dd:f2:3f:9a:01:2e:44:86:2e:71:91:48:6d:5b:39:2a:b6:
         65:a8:30:c0:16:9a:45:20:cf:90:a1:76:ba:01:72:12:e6:c3:
         79:a4:e5:f0:1a:f4:5c:33:24:26:b4:25:1c:a8:f3:a3:0c:10:
         d3:ef:f3:7e:91:25:de:06:a4:0c:ea:1c:8a:55:7c:8c:70:30:
         65:a3:a4:8b:a7:b3:2f:4c:78:77:c5:ce:6d:70:de:a3:aa:21:
         14:0b:16:35:9f:51:bf:6a:5f:12:21:b3:92:d0:07:78:93:55:
         18:bd:71:c9:2c:df:1c:28:78:a1:1b:24:53:44:e8:a0:c6:1a:
         7f:bb:8f:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNm1376/8JKYGB0WRJTX2pmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmMyMTg1NmNkOGUwMzdhN2JiOGM2MzkyYTYxOTgyMTNh
OGI0ZjYwHhcNMjQxMTI2MDUwMDE4WhcNMjQxMTI3MDUwMDE4WjAzMTEwLwYDVQQD
EyhmOWJmM2U3NTQxZjE1YWI0ZjRiODAwM2ZjYmQxZmM1ZWUxNDZmNjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpqTgC4k5FDyl+UYoEZsFNUD5VX/
31oEIe2+ONp13dRwi9VNo3odAw3UKWM3K5/y4LF6K1DfNwZvG2W0A8MbXGMNs8dY
ruo7XHz5YRpNxYNGz12dCfKzGxxoaam7zS40QJem+mthH8yqssHvh6Y+qbsA4TIE
lNl2IES9hRyx6yKUaOGSeZ4tJJuI31ZmYEZcXvMliC2wzWS9mAkujhfX1YcC1DAH
rq3uWgn24QhQi6+IF1SDf+Wmt+WcE1vbdFg2GMdIip8suSqIDPZFWsZKEV3n+4x6
scACrUtR5EluBnz+2jw8t/8XcaXLrLoCnb8aHbBpCDPfce5IB+dijK+XGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPm/PnVB8Vq09LgAP8vR/F7hRvYpMB8GA1UdIwQY
MBaAFCf8IYVs2OA3p7uMY5KmGYITqLT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jN2ZhNDgtMjg3Ni00MjJiLTg4MjUt
ZTFmMzY3ZTc5NjIwLzEvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9jN2ZhNDgtMjg3Ni00MjJiLTg4MjUtZTFmMzY3ZTc5NjIw
LzEvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/7OeIAN
C6+S29zlOy7b2TN+QZvW6n62Ly4AeUsTyObUxf/KmouGqJ7YAolz7PFvrISsUK3f
dcAguo329S1cbqCVZpx6ZuEhVIutKRzxBM7PZ+0v6omGT2odOlGaQlG97LmBZpCb
mFkcujHbXPyXageDrpk0IAKyfYJ4CYNvP93yP5oBLkSGLnGRSG1bOSq2ZagwwBaa
RSDPkKF2ugFyEubDeaTl8Br0XDMkJrQlHKjzowwQ0+/zfpEl3gakDOocilV8jHAw
ZaOki6ezL0x4d8XObXDeo6ohFAsWNZ9Rv2pfEiGzktAHeJNVGL1xySzfHCh4oRsk
U0TooMYaf7uPoA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 11:22:19 2024 by rpki-client on console-fra.rpki-client.org