Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
File:                     t_OeNnC0P1fxURt43eIIWWQBdFU.mft (raw, json)
Hash identifier:          q6OcU59JMJZ90JZNbgNlCmXVQwCpLEu6yXAhnmBkxKo=
Subject key identifier:   60:FA:EB:A5:C2:07:C8:DD:62:81:15:82:A0:A0:CA:2E:20:BB:DC:F9
Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
Certificate issuer:       /CN=b7f39e3670b43f57f1511b78dde2085964017455
Certificate serial:       019369DA5F0BE03AA8F4CEB972D38111EDD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
Manifest number:          0B03
Signing time:             Tue 26 Nov 2024 19:02:19 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:19 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:19 +0000
Files and hashes:         1: gMpTInTqdtB7pj6MZ68qjsurvUw.roa (hash: cwnuoHULVDwBTRHISosdYISepxzWd2ya6RvGbFf/j9w=)
                          2: t_OeNnC0P1fxURt43eIIWWQBdFU.crl (hash: ke+95yKmGd6RjsUGfiN0bPbVgVQFRtM+HbkZKz9R3yE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:5f:0b:e0:3a:a8:f4:ce:b9:72:d3:81:11:ed:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455
        Validity
            Not Before: Nov 26 19:02:19 2024 GMT
            Not After : Nov 27 19:02:19 2024 GMT
        Subject: CN=60faeba5c207c8dd62811582a0a0ca2e20bbdcf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:18:5e:0f:bd:b8:ad:26:2d:63:4d:86:02:e5:
                    36:99:5d:2d:52:c5:4e:52:4d:34:11:d5:9d:35:f6:
                    cc:f3:5c:a5:e7:f9:d4:ba:98:a7:3d:c3:d7:30:0d:
                    a5:fc:ee:db:82:23:81:7f:54:4f:42:82:e4:64:d1:
                    f0:27:ef:27:86:51:a3:05:10:57:ac:0a:c3:3e:20:
                    bd:f8:79:ff:48:a6:c9:e3:6a:42:33:95:6d:90:f5:
                    66:2b:ee:49:2f:47:4f:36:c6:99:e8:d7:1f:0d:70:
                    ab:f2:cb:07:34:0a:ce:c5:f2:6d:ae:62:6a:44:ea:
                    10:20:50:7f:33:e7:8a:4e:13:33:f8:c3:f1:bc:72:
                    e0:0d:de:aa:51:f4:a5:1b:d6:a8:25:24:4a:31:2e:
                    88:46:05:9c:fe:7a:f5:7f:c7:ec:ef:05:32:d0:40:
                    7e:12:40:76:9d:f3:1e:e2:9a:b5:97:ef:41:f8:e4:
                    26:1a:e7:6a:d7:e4:cf:3f:95:ff:6b:97:4b:08:a1:
                    37:51:57:da:08:9a:65:c3:83:18:dc:56:f0:32:51:
                    7b:69:f2:2d:93:d6:3d:6f:81:fc:47:61:ec:de:00:
                    66:ea:65:e5:17:85:65:19:9f:51:88:5e:bd:b2:71:
                    6c:ac:6c:76:68:55:b4:69:d4:80:0d:bb:99:c2:98:
                    59:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FA:EB:A5:C2:07:C8:DD:62:81:15:82:A0:A0:CA:2E:20:BB:DC:F9
            X509v3 Authority Key Identifier:
                keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:10:1a:aa:bd:e4:5f:7d:c1:e5:84:11:e6:32:bd:23:aa:3f:
         d3:c9:ba:c3:0e:a8:1d:dc:e0:07:7d:f8:2f:09:d6:3c:f1:62:
         d6:8e:79:4c:9d:a6:05:7b:d4:5d:b7:66:99:85:31:e8:cf:49:
         f7:15:88:f6:65:c7:a1:d2:22:68:85:54:52:95:8f:0d:f1:ce:
         4e:ef:6d:4f:28:76:6a:71:f0:53:67:b7:92:16:3b:1d:4e:28:
         a9:70:5b:cd:84:5b:4b:5d:9a:d0:49:55:31:6f:60:cb:c9:fa:
         94:5a:88:68:ba:c7:ac:e9:54:c9:a6:ef:dc:60:8d:36:8f:5a:
         6d:5a:3d:1a:4f:df:e7:a2:5f:aa:18:91:c7:20:47:ee:fe:6d:
         06:d5:9b:b9:f0:a4:1a:7a:69:ae:73:bc:af:0a:47:da:b0:6b:
         c6:b4:6a:51:ca:6a:01:e2:b8:fc:11:53:5a:10:c9:40:cb:41:
         d5:88:2a:54:8c:89:66:5d:a1:4f:29:48:74:7d:a2:bc:3e:6c:
         97:26:41:d1:a5:e4:f0:c5:c8:fd:da:cf:85:ad:72:27:db:65:
         70:45:67:0d:2a:b8:9f:db:1b:8e:0e:8b:80:20:c6:8b:6b:b8:
         99:87:7d:c6:9a:3c:65:bd:79:58:88:c2:d6:08:78:2d:1d:a6:
         c7:b9:93:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2l8L4Dqo9M65ctOBEe3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZjM5ZTM2NzBiNDNmNTdmMTUxMWI3OGRkZTIwODU5NjQw
MTc0NTUwHhcNMjQxMTI2MTkwMjE5WhcNMjQxMTI3MTkwMjE5WjAzMTEwLwYDVQQD
Eyg2MGZhZWJhNWMyMDdjOGRkNjI4MTE1ODJhMGEwY2EyZTIwYmJkY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RheD724rSYtY02GAuU2mV0tUsVO
Uk00EdWdNfbM81yl5/nUupinPcPXMA2l/O7bgiOBf1RPQoLkZNHwJ+8nhlGjBRBX
rArDPiC9+Hn/SKbJ42pCM5VtkPVmK+5JL0dPNsaZ6NcfDXCr8ssHNArOxfJtrmJq
ROoQIFB/M+eKThMz+MPxvHLgDd6qUfSlG9aoJSRKMS6IRgWc/nr1f8fs7wUy0EB+
EkB2nfMe4pq1l+9B+OQmGudq1+TPP5X/a5dLCKE3UVfaCJplw4MY3FbwMlF7afIt
k9Y9b4H8R2Hs3gBm6mXlF4VlGZ9RiF69snFsrGx2aFW0adSADbuZwphZXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGD666XCB8jdYoEVgqCgyi4gu9z5MB8GA1UdIwQY
MBaAFLfznjZwtD9X8VEbeN3iCFlkAXRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTY0Y2ItYTdmNS00MmIwLWFjMTUt
Y2UyOWZkMzUyNmE4LzEvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80YTY0Y2ItYTdmNS00MmIwLWFjMTUtY2UyOWZkMzUyNmE4
LzEvdF9PZU5uQzBQMWZ4VVJ0NDNlSUlXV1FCZEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxAaqr3k
X33B5YQR5jK9I6o/08m6ww6oHdzgB334LwnWPPFi1o55TJ2mBXvUXbdmmYUx6M9J
9xWI9mXHodIiaIVUUpWPDfHOTu9tTyh2anHwU2e3khY7HU4oqXBbzYRbS12a0ElV
MW9gy8n6lFqIaLrHrOlUyabv3GCNNo9abVo9Gk/f56JfqhiRxyBH7v5tBtWbufCk
GnpprnO8rwpH2rBrxrRqUcpqAeK4/BFTWhDJQMtB1YgqVIyJZl2hTylIdH2ivD5s
lyZB0aXk8MXI/drPha1yJ9tlcEVnDSq4n9sbjg6LgCDGi2u4mYd9xpo8Zb15WIjC
1gh4LR2mx7mTDw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:22 2024 by rpki-client on console-ams.rpki-client.org