Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
File:                     VzCjLzFiRs4LFHu4lejN8K7UPtY.mft (raw, json)
Hash identifier:          B9PH/0dwkbtyyfvdGdIrrIEuTxzipZs2i1JdDhYqf+w=
Subject key identifier:   AB:F2:E6:2B:5E:1E:6F:E4:86:C4:AA:EA:11:A0:AA:87:67:7A:D8:B6
Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
Certificate issuer:       /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Certificate serial:       019238BAACDF3852E81B0F2B0AD4B933EB2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
Manifest number:          058B
Signing time:             Sat 28 Sep 2024 13:03:30 +0000
Manifest this update:     Sat 28 Sep 2024 13:03:30 +0000
Manifest next update:     Sun 29 Sep 2024 13:03:30 +0000
Files and hashes:         1: VzCjLzFiRs4LFHu4lejN8K7UPtY.crl (hash: vFqQTMdZbbu0kvJvsXh2uxVrlQ7tmq62o3CcO3FUVVo=)
                          2: X9pVM54M0qJ2FeE74Z2B7De4cXg.roa (hash: K8wYuIvCqhOrI96l/vVV+98yMJf8Z84tY/oi9SFi0cg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:ba:ac:df:38:52:e8:1b:0f:2b:0a:d4:b9:33:eb:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
        Validity
            Not Before: Sep 28 13:03:30 2024 GMT
            Not After : Sep 29 13:03:30 2024 GMT
        Subject: CN=abf2e62b5e1e6fe486c4aaea11a0aa87677ad8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:4b:a5:20:1b:a3:d5:68:dd:2f:fc:4b:eb:
                    9f:c7:91:a0:88:de:94:1d:80:26:da:c9:ca:8e:b9:
                    39:84:c2:35:ee:b8:09:15:0e:00:f3:38:c0:68:2f:
                    32:78:cb:bc:18:66:76:82:6f:cd:eb:d5:b1:42:85:
                    9c:e3:bd:4f:2a:f9:38:cc:6d:ca:c5:c7:67:c8:68:
                    32:17:2d:00:b1:71:29:85:40:e3:bb:5f:55:e5:70:
                    01:3c:bb:36:cc:2e:b5:e7:7f:b7:a3:e9:c0:25:bc:
                    01:c9:11:14:f6:85:f4:67:f4:83:17:c6:40:33:40:
                    69:ec:5c:ee:51:f2:56:86:41:60:bd:b6:2e:46:f8:
                    05:59:cc:28:12:60:06:4c:28:aa:2d:b7:35:36:ff:
                    b4:12:19:5a:77:e5:45:6e:c6:ed:90:f3:4c:60:b0:
                    78:8b:ad:5c:00:3b:65:f2:be:44:14:bb:6e:a6:be:
                    bb:50:5b:65:45:c1:70:e5:19:fc:d4:39:0f:a3:1b:
                    d0:9f:c5:79:d3:34:f5:aa:5b:8a:06:d3:cc:6d:fc:
                    43:2d:b4:18:bd:5b:bd:dd:70:d2:73:e6:59:2a:ab:
                    5f:87:11:88:c9:76:6a:8a:e9:a9:e8:a9:ab:ce:df:
                    7d:73:d8:f0:a7:d2:79:09:e7:db:ba:c8:5e:c8:d7:
                    22:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F2:E6:2B:5E:1E:6F:E4:86:C4:AA:EA:11:A0:AA:87:67:7A:D8:B6
            X509v3 Authority Key Identifier:
                keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:cc:36:ba:83:8f:e9:80:99:97:49:ab:ab:62:2c:4c:98:55:
         bc:eb:f9:8e:65:f0:47:5d:4c:e5:62:62:9a:63:e8:46:92:d5:
         8d:86:0a:d0:39:9e:e7:b7:8a:44:1d:7c:71:ae:bf:b9:e1:8d:
         c8:00:da:c9:c8:24:32:41:80:0a:e6:33:84:47:15:16:00:9d:
         a8:36:9e:2a:dd:b1:ab:da:1b:b3:f9:1a:ed:81:35:ad:e4:d3:
         78:37:a5:e0:f6:b8:8a:c3:65:c6:25:d6:44:50:72:3d:e0:ef:
         19:1d:a1:e4:ac:6b:95:2a:56:d5:da:a6:01:f4:1c:a8:a9:2b:
         43:25:21:cd:9e:e0:8c:36:0d:b8:aa:e3:f6:11:b7:0b:c0:61:
         1b:44:94:d3:b9:21:b4:89:d1:68:27:d7:84:f3:03:eb:c1:38:
         6a:68:17:f9:00:7a:c4:f2:05:12:e9:4e:d1:8a:0f:0a:d3:fc:
         6d:da:61:64:a9:6e:46:c0:8e:a6:b7:2d:31:af:7d:32:0d:96:
         b7:7f:78:9d:c7:66:83:1e:94:2c:40:7d:11:8b:72:95:a4:85:
         5a:0e:72:76:c6:8f:b2:58:cf:45:72:dd:62:8d:8d:c8:00:e7:
         aa:3a:30:a4:6b:07:02:ae:64:cc:44:36:20:66:90:12:3a:cc:
         0f:72:72:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI4uqzfOFLoGw8rCtS5M+ssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MzBhMzJmMzE2MjQ2Y2UwYjE0N2JiODk1ZThjZGYwYWVk
NDNlZDYwHhcNMjQwOTI4MTMwMzMwWhcNMjQwOTI5MTMwMzMwWjAzMTEwLwYDVQQD
EyhhYmYyZTYyYjVlMWU2ZmU0ODZjNGFhZWExMWEwYWE4NzY3N2FkOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHtLpSAbo9Vo3S/8S+ufx5GgiN6U
HYAm2snKjrk5hMI17rgJFQ4A8zjAaC8yeMu8GGZ2gm/N69WxQoWc471PKvk4zG3K
xcdnyGgyFy0AsXEphUDju19V5XABPLs2zC6153+3o+nAJbwByREU9oX0Z/SDF8ZA
M0Bp7FzuUfJWhkFgvbYuRvgFWcwoEmAGTCiqLbc1Nv+0Ehlad+VFbsbtkPNMYLB4
i61cADtl8r5EFLtupr67UFtlRcFw5Rn81DkPoxvQn8V50zT1qluKBtPMbfxDLbQY
vVu93XDSc+ZZKqtfhxGIyXZqiump6Kmrzt99c9jwp9J5CefbusheyNcifQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvy5iteHm/khsSq6hGgqodneti2MB8GA1UdIwQY
MBaAFFcwoy8xYkbOCxR7uJXozfCu1D7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnpDakx6RmlSczRMRkh1NGxlak44SzdVUHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mM2MzYjItYjY0YS00OWUxLTlhNDgt
YzkzOTg5Y2M5YjY3LzEvVnpDakx6RmlSczRMRkh1NGxlak44SzdVUHRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9mM2MzYjItYjY0YS00OWUxLTlhNDgtYzkzOTg5Y2M5YjY3
LzEvVnpDakx6RmlSczRMRkh1NGxlak44SzdVUHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsw2uoOP
6YCZl0mrq2IsTJhVvOv5jmXwR11M5WJimmPoRpLVjYYK0Dme57eKRB18ca6/ueGN
yADaycgkMkGACuYzhEcVFgCdqDaeKt2xq9obs/ka7YE1reTTeDel4Pa4isNlxiXW
RFByPeDvGR2h5KxrlSpW1dqmAfQcqKkrQyUhzZ7gjDYNuKrj9hG3C8BhG0SU07kh
tInRaCfXhPMD68E4amgX+QB6xPIFEulO0YoPCtP8bdphZKluRsCOprctMa99Mg2W
t394ncdmgx6ULEB9EYtylaSFWg5ydsaPsljPRXLdYo2NyADnqjowpGsHAq5kzEQ2
IGaQEjrMD3JyXg==
-----END CERTIFICATE-----
Generated at Sat Sep 28 16:00:17 2024 by rpki-client on console-fra.rpki-client.org