Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
File:                     rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json)
Hash identifier:          ptFjNB7P3IVR/8iaWxUzwkmdWvDsMwWQosGLX+DA0L8=
Subject key identifier:   1B:BB:66:34:31:EA:C2:FE:2C:CC:89:3C:55:F4:2C:E7:A3:AF:60:BB
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Certificate issuer:       /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial:       0193568A840DC28E17FAEF414ABF47FE78C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
Manifest number:          1226
Signing time:             Sat 23 Nov 2024 01:02:18 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:18 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:18 +0000
Files and hashes:         1: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: TGLebYoHU0sxYuqkMww0Mqzw05MZ04HLIp1KaC8CL78=)
                          2: wLQugYlSgQyr3yNV7hUIHqNXV70.roa (hash: ZJdS8qAvMishv98cDv52EVPJq/co718ynF7lknQdfSI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:84:0d:c2:8e:17:fa:ef:41:4a:bf:47:fe:78:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
        Validity
            Not Before: Nov 23 01:02:18 2024 GMT
            Not After : Nov 24 01:02:18 2024 GMT
        Subject: CN=1bbb663431eac2fe2ccc893c55f42ce7a3af60bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ac:bf:f2:8d:3c:dc:60:82:ef:cf:58:71:78:
                    35:21:1f:bf:e8:3e:93:91:8f:5d:62:d8:17:78:ac:
                    f2:47:c9:7a:2f:61:08:59:0c:69:b2:df:01:f9:bb:
                    9a:4b:6f:3f:01:f0:84:99:5f:d8:03:5b:0c:f9:6b:
                    97:c2:1c:97:bc:58:b1:d5:59:67:a0:17:0a:6c:1c:
                    35:44:7d:49:38:18:8c:a2:e1:af:d0:96:ee:5d:d8:
                    87:6d:d2:f5:59:f3:d3:dc:d0:16:69:ff:2a:8c:aa:
                    ed:ef:ac:ef:9d:c0:77:f0:69:9a:b2:35:b0:8a:95:
                    03:e6:77:02:0c:2a:35:2c:ce:f7:4d:d6:62:8c:97:
                    a9:8b:92:e7:4f:0f:aa:a1:3a:f6:64:75:83:f2:b5:
                    0c:ca:4a:44:f8:12:e1:5b:87:60:c4:9a:03:19:37:
                    94:e7:5b:7b:57:78:c5:c8:b5:0f:e2:8d:9e:34:8a:
                    fe:80:cf:39:36:d2:d6:34:b9:2f:15:42:a8:c8:7c:
                    dd:ed:3a:c1:6a:6f:48:54:12:27:4b:81:5f:eb:80:
                    64:4d:f4:b6:48:3b:e0:86:f2:a7:7c:4a:32:5b:b7:
                    89:56:dd:4e:2f:49:d4:2d:ee:91:ec:f1:80:d1:7f:
                    77:d6:34:1b:27:a1:9f:fc:69:e9:5f:2b:5c:4b:f8:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BB:66:34:31:EA:C2:FE:2C:CC:89:3C:55:F4:2C:E7:A3:AF:60:BB
            X509v3 Authority Key Identifier:
                keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:dd:cd:22:1d:3c:e6:cf:25:d0:d1:8f:d6:08:ce:4d:99:bb:
         37:b6:9d:6e:93:cd:df:af:e1:75:90:c1:8d:f1:6e:85:15:84:
         bd:99:da:fc:b2:44:f9:f7:0a:c5:31:61:31:b6:79:44:2a:11:
         c0:77:2a:4a:d9:ab:b7:5f:80:36:37:56:40:98:97:9f:01:62:
         b7:14:c5:b9:d2:49:7b:ec:23:10:8b:b7:07:32:b9:30:41:af:
         0a:ec:08:dc:b2:32:90:8b:82:ce:47:74:2b:c4:fd:be:87:63:
         42:0b:a8:85:a0:f8:56:ef:93:90:b2:96:03:f4:b2:88:0d:79:
         fe:7f:d7:29:9b:88:19:9b:ea:d0:f6:d5:9b:e6:e3:54:50:36:
         bc:9d:c1:24:d4:43:33:b2:5c:0a:4b:12:b4:6e:19:6d:e2:33:
         30:ce:da:b9:17:7a:b9:75:3c:9d:b6:ec:e0:82:8f:54:00:61:
         7f:23:10:ca:02:c4:2d:7c:43:7d:27:62:e4:33:90:c9:10:b8:
         b3:d1:39:4d:d3:ed:9b:dd:4e:65:a2:aa:a5:44:8d:5a:69:2d:
         f1:6a:9f:a9:1c:c9:71:b6:d6:fd:3b:3b:f9:fc:37:3a:be:7d:
         4e:4f:09:3a:dc:aa:35:d8:e3:cc:26:05:f8:f2:44:ca:94:01:
         c0:2c:65:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWioQNwo4X+u9BSr9H/njBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYmMyZGE0ZmFjNzdiYmFhZDI5YTU5ODZiNDEwN2Y1MzFl
ZDJlM2UwHhcNMjQxMTIzMDEwMjE4WhcNMjQxMTI0MDEwMjE4WjAzMTEwLwYDVQQD
EygxYmJiNjYzNDMxZWFjMmZlMmNjYzg5M2M1NWY0MmNlN2EzYWY2MGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qy/8o083GCC789YcXg1IR+/6D6T
kY9dYtgXeKzyR8l6L2EIWQxpst8B+buaS28/AfCEmV/YA1sM+WuXwhyXvFix1Vln
oBcKbBw1RH1JOBiMouGv0JbuXdiHbdL1WfPT3NAWaf8qjKrt76zvncB38GmasjWw
ipUD5ncCDCo1LM73TdZijJepi5LnTw+qoTr2ZHWD8rUMykpE+BLhW4dgxJoDGTeU
51t7V3jFyLUP4o2eNIr+gM85NtLWNLkvFUKoyHzd7TrBam9IVBInS4Ff64BkTfS2
SDvghvKnfEoyW7eJVt1OL0nULe6R7PGA0X931jQbJ6Gf/GnpXytcS/hkaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBu7ZjQx6sL+LMyJPFX0LOejr2C7MB8GA1UdIwQY
MBaAFKy8LaT6x3u6rSmlmGtBB/Ux7S4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEt
ZTkyMzBlNTg4NjI2LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEtZTkyMzBlNTg4NjI2
LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAet3NIh08
5s8l0NGP1gjOTZm7N7adbpPN36/hdZDBjfFuhRWEvZna/LJE+fcKxTFhMbZ5RCoR
wHcqStmrt1+ANjdWQJiXnwFitxTFudJJe+wjEIu3BzK5MEGvCuwI3LIykIuCzkd0
K8T9vodjQguohaD4Vu+TkLKWA/SyiA15/n/XKZuIGZvq0PbVm+bjVFA2vJ3BJNRD
M7JcCksStG4ZbeIzMM7auRd6uXU8nbbs4IKPVABhfyMQygLELXxDfSdi5DOQyRC4
s9E5TdPtm91OZaKqpUSNWmkt8WqfqRzJcbbW/Ts7+fw3Or59Tk8JOtyqNdjjzCYF
+PJEypQBwCxlIA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:38 2024 by rpki-client on console-ams.rpki-client.org