Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
File:                     Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft (raw, json)
Hash identifier:          JGjaxchdILXKBcT3eDyNmbjqkxn5B31MWfuhwDrOW2E=
Subject key identifier:   63:50:02:FA:7F:EF:BF:5C:5F:93:C3:0E:F9:69:B2:AC:CF:3F:89:47
Authority key identifier: 4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
Certificate issuer:       /CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Certificate serial:       019239CB154C752FEFB20E4F0DD6CD3D09AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
Manifest number:          12DE
Signing time:             Sat 28 Sep 2024 18:01:03 +0000
Manifest this update:     Sat 28 Sep 2024 18:01:03 +0000
Manifest next update:     Sun 29 Sep 2024 18:01:03 +0000
Files and hashes:         1: RP9WmNzdhg2ADe_TOgMWT7NWkbY.roa (hash: UQaeI7F6bsXqmvB5qF6bfIee/Ern6rSh4tgVO+V8Q34=)
                          2: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl (hash: SzQowWc50gceqaeNyEx1pprr7nUZEC1irK8BquaTfY4=)
                          3: VkknxPqy99rmyEvPrhbTWmSaGUs.roa (hash: XM59uUMli+bnpQNw2/PerSSxIe3vp/rNL2JHbFQrCmY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:cb:15:4c:75:2f:ef:b2:0e:4f:0d:d6:cd:3d:09:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
        Validity
            Not Before: Sep 28 18:01:03 2024 GMT
            Not After : Sep 29 18:01:03 2024 GMT
        Subject: CN=635002fa7fefbf5c5f93c30ef969b2accf3f8947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f4:97:3c:34:7f:0e:8b:83:a4:51:7b:f1:8f:
                    a6:4e:21:01:17:ab:94:c2:33:86:09:ec:18:3d:ab:
                    20:2d:93:95:13:2d:fb:9b:55:ec:0f:e5:33:57:8d:
                    36:8d:b6:85:02:89:ed:8d:34:fa:80:32:7a:0d:e2:
                    51:5a:36:1c:4e:ae:e2:51:2a:46:e3:2f:14:0c:0e:
                    6d:ed:e2:61:99:a6:e8:47:97:65:aa:e5:a8:e1:25:
                    c6:91:8c:73:38:dc:ac:d0:ac:b3:ad:af:73:45:05:
                    8d:5e:a2:cd:b2:54:0b:54:f3:01:41:ec:0a:b0:62:
                    14:d3:dc:36:20:b6:ff:a5:e3:fa:2a:db:3b:2a:33:
                    dc:0d:ba:bf:db:30:7b:8b:16:44:3f:80:38:b7:20:
                    33:3e:82:39:7d:8d:35:ee:cd:d2:fb:39:71:a8:55:
                    5b:75:e0:a9:cd:cb:65:19:22:a4:9c:ef:67:d5:44:
                    2d:83:86:39:ca:3d:2d:f8:0e:d1:8d:31:14:a9:21:
                    d7:fb:bf:6e:f2:b5:5c:80:da:96:68:a6:50:db:03:
                    83:6b:4a:8b:1b:81:1e:4b:36:07:6e:16:b0:e2:15:
                    1a:64:e8:00:bb:a4:2c:94:3d:3a:49:b6:9f:7b:7a:
                    25:08:70:0d:b9:7b:b2:ca:96:dc:ca:ab:6e:4b:78:
                    a4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:50:02:FA:7F:EF:BF:5C:5F:93:C3:0E:F9:69:B2:AC:CF:3F:89:47
            X509v3 Authority Key Identifier:
                keyid:4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ad:d6:fc:91:89:7d:4a:70:d7:07:db:6a:b0:76:46:5c:c4:
         7b:a5:41:ee:7d:20:16:c4:a3:3c:94:31:d9:fc:f1:54:88:31:
         b8:6e:55:0f:c4:21:df:c4:e2:11:34:b5:fe:40:c0:ce:80:f2:
         70:c2:28:e7:9a:21:b8:ca:76:41:bb:60:94:a1:5e:1f:e8:a6:
         46:49:f4:52:eb:16:e3:c7:36:17:0d:bf:7e:12:c4:8b:2e:84:
         b4:4a:f2:75:db:c6:a7:a0:f2:4f:c8:9a:0d:58:4e:07:0d:f8:
         20:b9:0e:b9:58:a9:6a:6b:55:9a:23:35:8a:2a:29:f8:0d:6b:
         b4:d7:78:a1:69:28:27:4b:7c:31:92:c4:fd:33:a0:ab:79:8d:
         ec:4c:5d:08:d2:35:ea:1d:71:4e:c1:50:b4:e5:64:a7:82:c4:
         21:0c:3d:c5:6d:43:0f:94:6a:d7:bb:b1:0d:93:15:e7:79:ee:
         f3:65:b4:d3:5f:ae:27:9f:41:08:ac:ac:9e:a5:d4:ae:be:79:
         f4:a0:4b:80:31:e0:58:6a:a5:3f:be:1b:fe:4e:c5:7f:f2:76:
         63:93:ef:79:16:bc:00:60:41:39:b9:57:99:72:20:96:56:e2:
         c2:17:dd:20:7f:12:1f:0c:c3:12:dc:b6:3d:46:85:5b:39:28:
         ab:1d:d7:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI5yxVMdS/vsg5PDdbNPQmuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMmU5M2NhOWY5ZDQ2ZGU1NDNmZjdjMmQwNTQwZTg5N2Rj
MTRmZWUwHhcNMjQwOTI4MTgwMTAzWhcNMjQwOTI5MTgwMTAzWjAzMTEwLwYDVQQD
Eyg2MzUwMDJmYTdmZWZiZjVjNWY5M2MzMGVmOTY5YjJhY2NmM2Y4OTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/SXPDR/DouDpFF78Y+mTiEBF6uU
wjOGCewYPasgLZOVEy37m1XsD+UzV402jbaFAontjTT6gDJ6DeJRWjYcTq7iUSpG
4y8UDA5t7eJhmaboR5dlquWo4SXGkYxzONys0Kyzra9zRQWNXqLNslQLVPMBQewK
sGIU09w2ILb/peP6Kts7KjPcDbq/2zB7ixZEP4A4tyAzPoI5fY017s3S+zlxqFVb
deCpzctlGSKknO9n1UQtg4Y5yj0t+A7RjTEUqSHX+79u8rVcgNqWaKZQ2wODa0qL
G4EeSzYHbhaw4hUaZOgAu6QslD06Sbafe3olCHANuXuyypbcyqtuS3ikAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNQAvp/779cX5PDDvlpsqzPP4lHMB8GA1UdIwQY
MBaAFEsuk8qfnUbeVD/3wtBUDol9wU/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3k2VHlwLWRSdDVVUF9mQzBGUU9pWDNCVC00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81MTIxMGMtYTM4MC00YjU5LWIyYWQt
NDVhMjFiMjkwMjNkLzEvU3k2VHlwLWRSdDVVUF9mQzBGUU9pWDNCVC00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81MTIxMGMtYTM4MC00YjU5LWIyYWQtNDVhMjFiMjkwMjNk
LzEvU3k2VHlwLWRSdDVVUF9mQzBGUU9pWDNCVC00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADq3W/JGJ
fUpw1wfbarB2RlzEe6VB7n0gFsSjPJQx2fzxVIgxuG5VD8Qh38TiETS1/kDAzoDy
cMIo55ohuMp2QbtglKFeH+imRkn0UusW48c2Fw2/fhLEiy6EtEryddvGp6DyT8ia
DVhOBw34ILkOuVipamtVmiM1iiop+A1rtNd4oWkoJ0t8MZLE/TOgq3mN7ExdCNI1
6h1xTsFQtOVkp4LEIQw9xW1DD5Rq17uxDZMV53nu82W001+uJ59BCKysnqXUrr55
9KBLgDHgWGqlP74b/k7Ff/J2Y5PveRa8AGBBOblXmXIgllbiwhfdIH8SHwzDEty2
PUaFWzkoqx3XYQ==
-----END CERTIFICATE-----
Generated at Sun Sep 29 00:14:06 2024 by rpki-client on console-fra.rpki-client.org