Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
File:                     a-tglLyrS9Ox9vVsUYK6EiDiK28.mft (raw, json)
Hash identifier:          riqhIR3hJK9cgj2rDd+hMw/RhVc+gei5SpquACLm778=
Subject key identifier:   B8:54:21:BB:10:7D:83:05:1A:9E:07:D6:C5:D3:FF:57:DA:F3:A3:72
Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
Certificate issuer:       /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Certificate serial:       0193696A9F6429EEA9FE81FED7E5BFD80BF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
Manifest number:          01F9
Signing time:             Tue 26 Nov 2024 17:00:15 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:15 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:15 +0000
Files and hashes:         1: JNqofKdTCyKuFPaKJyP6SgPUo-U.roa (hash: 45wsfdI11Lb9wpD2yzKU9os/SaZqc85cR8n+5rmxjjE=)
                          2: a-tglLyrS9Ox9vVsUYK6EiDiK28.crl (hash: FGTexH2O0cf3EmtFn010XRtIr0xWT0OJKmeFWR6oMT4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:9f:64:29:ee:a9:fe:81:fe:d7:e5:bf:d8:0b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
        Validity
            Not Before: Nov 26 17:00:15 2024 GMT
            Not After : Nov 27 17:00:15 2024 GMT
        Subject: CN=b85421bb107d83051a9e07d6c5d3ff57daf3a372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6f:22:1b:77:5a:0f:b4:59:43:ed:4d:f8:10:
                    09:2e:58:ac:3f:33:16:99:62:56:be:72:5b:f4:68:
                    65:1e:0a:64:91:a3:14:46:d8:d0:40:7d:5d:e5:e5:
                    2f:1b:6e:c7:95:fd:6d:ed:a6:b2:cc:69:d8:fe:be:
                    ba:14:24:62:8e:b2:93:1c:04:14:e6:0f:a4:7c:e3:
                    02:2c:c9:87:23:89:fe:42:f4:0f:f2:30:df:e1:32:
                    68:0e:5d:17:a9:c9:88:d7:25:db:ad:58:98:34:79:
                    f9:02:9a:8a:fa:af:03:b3:d4:d2:37:f0:71:28:64:
                    37:76:67:ab:53:c1:81:0a:76:a2:64:15:64:e3:22:
                    2d:4f:71:ce:5f:d6:47:07:6b:dd:42:fa:e3:ec:3f:
                    74:62:3e:3c:f9:5b:98:fc:24:21:c0:7e:2a:f2:69:
                    e3:04:02:60:8e:e5:d5:4e:61:b8:13:27:a7:97:32:
                    31:b2:4b:44:47:5b:b6:c7:38:b2:55:48:b8:5c:50:
                    26:52:6d:92:d0:65:f1:50:c8:14:15:3e:87:ef:9b:
                    84:9f:fa:d1:d9:ac:5e:2d:6e:b6:99:d0:1a:64:03:
                    67:8f:15:2d:23:6d:a8:cc:57:6e:bb:76:fd:43:9a:
                    c6:ca:39:e3:e9:ed:fe:ec:82:7f:8d:52:1e:7b:3c:
                    0e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:54:21:BB:10:7D:83:05:1A:9E:07:D6:C5:D3:FF:57:DA:F3:A3:72
            X509v3 Authority Key Identifier:
                keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8d:da:6a:9f:60:86:73:42:4b:61:db:6f:ec:44:c4:e9:d1:
         a6:fc:d6:90:84:e6:e1:31:7a:cd:42:d3:34:48:2c:13:09:f5:
         2c:1b:5a:92:87:fc:db:01:50:04:99:7c:2e:e0:4a:5d:ec:0c:
         e0:78:01:67:7b:4a:2c:0e:18:9a:f3:01:af:f9:12:32:d0:86:
         77:1e:97:5b:ed:60:07:92:88:69:57:10:a9:52:c1:0d:7c:b0:
         b1:42:28:0e:28:bb:cc:ed:03:8b:01:c6:8e:a9:8a:88:3f:17:
         da:80:49:9e:f7:61:4f:43:c3:99:37:ad:df:de:f3:1c:e2:2f:
         d4:e4:76:18:c4:b6:fa:c7:b7:eb:54:19:c0:3a:6b:fc:a2:52:
         30:3f:dc:e5:aa:c2:4d:05:3e:38:00:b0:03:aa:71:4d:b9:69:
         36:b3:12:41:18:25:e9:3a:7c:10:6c:7d:2c:2e:59:ea:3c:66:
         5a:ef:b3:58:56:1a:5a:51:67:f6:71:ef:87:27:28:83:31:84:
         4a:13:39:7b:17:0a:61:23:22:62:1a:75:26:b9:5a:1f:43:d3:
         cf:e3:75:74:bb:04:20:fd:f8:59:ba:dd:5f:04:95:65:b5:06:
         35:8d:3d:f6:fc:65:c2:10:f7:1a:85:ec:54:bd:bb:8e:d5:b2:
         c4:7a:43:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNpap9kKe6p/oH+1+W/2Av3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWI2MDk0YmNhYjRiZDNiMWY2ZjU2YzUxODJiYTEyMjBl
MjJiNmYwHhcNMjQxMTI2MTcwMDE1WhcNMjQxMTI3MTcwMDE1WjAzMTEwLwYDVQQD
EyhiODU0MjFiYjEwN2Q4MzA1MWE5ZTA3ZDZjNWQzZmY1N2RhZjNhMzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW8iG3daD7RZQ+1N+BAJLlisPzMW
mWJWvnJb9GhlHgpkkaMURtjQQH1d5eUvG27Hlf1t7aayzGnY/r66FCRijrKTHAQU
5g+kfOMCLMmHI4n+QvQP8jDf4TJoDl0XqcmI1yXbrViYNHn5ApqK+q8Ds9TSN/Bx
KGQ3dmerU8GBCnaiZBVk4yItT3HOX9ZHB2vdQvrj7D90Yj48+VuY/CQhwH4q8mnj
BAJgjuXVTmG4EyenlzIxsktER1u2xziyVUi4XFAmUm2S0GXxUMgUFT6H75uEn/rR
2axeLW62mdAaZANnjxUtI22ozFduu3b9Q5rGyjnj6e3+7IJ/jVIeezwOXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhUIbsQfYMFGp4H1sXT/1fa86NyMB8GA1UdIwQY
MBaAFGvrYJS8q0vTsfb1bFGCuhIg4itvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjkt
ZWE1ODdmZDY1OGIyLzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjktZWE1ODdmZDY1OGIy
LzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJo3aap9g
hnNCS2Hbb+xExOnRpvzWkITm4TF6zULTNEgsEwn1LBtakof82wFQBJl8LuBKXewM
4HgBZ3tKLA4YmvMBr/kSMtCGdx6XW+1gB5KIaVcQqVLBDXywsUIoDii7zO0DiwHG
jqmKiD8X2oBJnvdhT0PDmTet397zHOIv1OR2GMS2+se361QZwDpr/KJSMD/c5arC
TQU+OACwA6pxTblpNrMSQRgl6Tp8EGx9LC5Z6jxmWu+zWFYaWlFn9nHvhycogzGE
ShM5excKYSMiYhp1JrlaH0PTz+N1dLsEIP34WbrdXwSVZbUGNY099vxlwhD3GoXs
VL27jtWyxHpDSg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:17 2024 by rpki-client on console-fra.rpki-client.org