Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File:                     PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier:          e+3gh7L9kvtEKH3ccljxXhL2y1AHGI8M5DsMgcURzWI=
Subject key identifier:   7D:E3:98:B2:19:07:49:90:A8:DA:74:BA:65:DD:91:CF:4A:84:CB:08
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer:       /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial:       01923A02882DAF22F0E38DE510721AE7EF59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number:          12DB
Signing time:             Sat 28 Sep 2024 19:01:37 +0000
Manifest this update:     Sat 28 Sep 2024 19:01:37 +0000
Manifest next update:     Sun 29 Sep 2024 19:01:37 +0000
Files and hashes:         1: IGdMmviRCmy_t6x-wHMusjbjM6I.roa (hash: sj0IqPMDteadHm8SZwo+bQQ5S7Yi21X/PWew6NGU03M=)
                          2: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: 9pZi8wiHkWsH+1mXEaYg3y3UyPwaV1q3B+blEzuG9pA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:02:88:2d:af:22:f0:e3:8d:e5:10:72:1a:e7:ef:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
        Validity
            Not Before: Sep 28 19:01:37 2024 GMT
            Not After : Sep 29 19:01:37 2024 GMT
        Subject: CN=7de398b219074990a8da74ba65dd91cf4a84cb08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:0e:d2:15:55:f3:8f:50:76:c0:a9:7f:59:
                    53:29:91:5f:1c:46:50:0f:37:dc:47:14:ac:6d:4f:
                    9e:96:f2:1a:cb:30:59:43:ae:af:36:97:94:de:74:
                    ca:3a:ba:f8:08:a7:ae:81:d1:4c:1e:95:9f:8d:ba:
                    bc:9f:29:32:db:1a:9e:49:32:9f:85:4a:14:cd:98:
                    8c:eb:93:ef:f1:ba:b9:d8:ee:99:7b:79:af:1e:70:
                    72:49:bc:67:e8:cf:e1:47:57:97:83:50:9e:51:a4:
                    35:84:93:eb:72:86:98:b9:db:e1:bb:2c:ac:de:a4:
                    df:e1:3e:62:b5:fc:d3:32:03:48:db:05:1f:5e:ff:
                    9f:6b:ed:95:f1:ba:7b:f6:38:d4:81:2d:d6:84:3f:
                    f6:52:e5:79:9b:44:6b:c3:d3:8b:1a:1f:3c:8f:88:
                    ca:75:ce:72:af:86:9c:c2:4a:7d:e5:5a:a4:28:66:
                    57:bb:51:de:cd:22:7a:c4:67:b6:8f:6b:ba:c4:99:
                    41:f3:35:14:42:69:a0:c8:77:74:94:ab:5c:2f:ca:
                    8c:8a:b0:8e:41:47:fa:14:84:07:d7:9d:d3:1a:d8:
                    a5:29:c3:0d:b7:4e:dd:be:94:b3:ae:5d:c4:c4:27:
                    5f:4d:88:5f:d0:a7:cf:63:57:3b:8d:4a:85:87:26:
                    14:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E3:98:B2:19:07:49:90:A8:DA:74:BA:65:DD:91:CF:4A:84:CB:08
            X509v3 Authority Key Identifier:
                keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e8:3d:d7:d7:56:5a:11:8b:08:9e:64:4d:ce:f2:da:a6:52:
         29:7a:63:f6:31:37:50:de:e9:2a:54:aa:b5:68:72:05:c9:6b:
         8b:3f:f4:f0:df:0a:4e:f5:a7:97:1f:bf:23:88:6b:72:3b:76:
         a7:09:f2:92:66:b9:9f:3a:ee:c8:c6:fb:a6:1e:34:f1:d3:0c:
         a9:5a:74:5b:b3:2a:de:ed:11:11:cb:e6:bc:8d:70:d8:23:67:
         91:33:9e:84:f0:00:f2:a8:00:d0:5c:b5:b0:f0:d3:5d:49:7c:
         8c:00:07:ae:27:4b:7a:82:bf:b4:c5:de:f2:cb:5c:44:7b:01:
         ae:6d:17:ed:8c:28:5b:70:95:e1:12:8b:d4:b6:8c:7c:8b:28:
         5a:55:59:db:46:57:6b:be:9a:92:c2:c3:42:71:28:2c:97:7a:
         ff:73:8a:e8:dd:26:33:44:21:48:56:8d:cd:54:72:bb:a1:b3:
         b2:b2:aa:29:3a:44:3d:86:8f:b9:2a:18:b0:c8:6b:cc:be:5d:
         d8:b7:6b:16:2b:80:65:3c:76:9e:c7:5f:3d:1b:b5:99:0b:f9:
         40:0e:b5:81:ee:11:7c:27:7d:51:fe:a5:1b:46:1a:83:29:0e:
         13:79:55:f1:72:a3:c9:c1:4b:ea:a8:ea:34:f7:b1:6a:c8:f1:
         47:c3:90:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI6AogtryLw443lEHIa5+9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYTIxM2YwMmE2NzBiMDUzNzBjNTVlY2NjZTkwZmUxYWQ3
MGM0OWIwHhcNMjQwOTI4MTkwMTM3WhcNMjQwOTI5MTkwMTM3WjAzMTEwLwYDVQQD
Eyg3ZGUzOThiMjE5MDc0OTkwYThkYTc0YmE2NWRkOTFjZjRhODRjYjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiQO0hVV849QdsCpf1lTKZFfHEZQ
DzfcRxSsbU+elvIayzBZQ66vNpeU3nTKOrr4CKeugdFMHpWfjbq8nyky2xqeSTKf
hUoUzZiM65Pv8bq52O6Ze3mvHnBySbxn6M/hR1eXg1CeUaQ1hJPrcoaYudvhuyys
3qTf4T5itfzTMgNI2wUfXv+fa+2V8bp79jjUgS3WhD/2UuV5m0Rrw9OLGh88j4jK
dc5yr4acwkp95VqkKGZXu1HezSJ6xGe2j2u6xJlB8zUUQmmgyHd0lKtcL8qMirCO
QUf6FIQH153TGtilKcMNt07dvpSzrl3ExCdfTYhf0KfPY1c7jUqFhyYUiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3jmLIZB0mQqNp0umXdkc9KhMsIMB8GA1UdIwQY
MBaAFD2iE/AqZwsFNwxV7MzpD+GtcMSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lN2Y2YWEtNmVlNC00YjRjLTg2ODEt
N2RiOGViYTc5ZWYxLzEvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lN2Y2YWEtNmVlNC00YjRjLTg2ODEtN2RiOGViYTc5ZWYx
LzEvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXug919dW
WhGLCJ5kTc7y2qZSKXpj9jE3UN7pKlSqtWhyBclriz/08N8KTvWnlx+/I4hrcjt2
pwnykma5nzruyMb7ph408dMMqVp0W7Mq3u0REcvmvI1w2CNnkTOehPAA8qgA0Fy1
sPDTXUl8jAAHridLeoK/tMXe8stcRHsBrm0X7YwoW3CV4RKL1LaMfIsoWlVZ20ZX
a76aksLDQnEoLJd6/3OK6N0mM0QhSFaNzVRyu6GzsrKqKTpEPYaPuSoYsMhrzL5d
2LdrFiuAZTx2nsdfPRu1mQv5QA61ge4RfCd9Uf6lG0YagykOE3lV8XKjycFL6qjq
NPexasjxR8OQ5g==
-----END CERTIFICATE-----
Generated at Sun Sep 29 01:41:32 2024 by rpki-client on console-ams.rpki-client.org