Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
File:                     484GnfxbYIh21kJKMueDqYqS7_I.mft (raw, json)
Hash identifier:          WiO4B4D6RJM0EC8Z7u2l4tlpej1ya0CLaZezY4gvC6M=
Subject key identifier:   53:62:03:AB:DC:2A:BB:F5:40:B6:DF:E1:87:3B:D5:CC:28:5F:83:C8
Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
Certificate issuer:       /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Certificate serial:       01935764A0AA487DA3B185A5A033A86C8305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
Manifest number:          0A03
Signing time:             Sat 23 Nov 2024 05:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:32 +0000
Files and hashes:         1: 484GnfxbYIh21kJKMueDqYqS7_I.crl (hash: iGO9h77sZgDTb5O5nYTPnBC9x6e1XI5r2DJUE+jWxfE=)
                          2: xt47wHkM35P6tMvJpmpsr99vda8.roa (hash: 15WXc4Wcbd2cJFDZb+aW9fAQE6Ww2ST6pgXU2xtKE9k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:a0:aa:48:7d:a3:b1:85:a5:a0:33:a8:6c:83:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
        Validity
            Not Before: Nov 23 05:00:32 2024 GMT
            Not After : Nov 24 05:00:32 2024 GMT
        Subject: CN=536203abdc2abbf540b6dfe1873bd5cc285f83c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5f:cf:33:6a:a1:9b:63:08:b9:09:b8:dd:10:
                    20:1b:66:fd:0b:94:37:56:ac:f7:7a:f6:e5:cf:c5:
                    76:85:79:c1:25:ef:b7:7c:75:ca:f9:a8:b3:cc:e4:
                    2d:35:45:1e:a1:d6:76:42:42:81:5b:b1:97:25:de:
                    db:00:af:e5:ac:49:b3:e8:bc:41:a0:f1:d6:e5:4e:
                    9c:66:39:41:1c:36:1e:0b:01:4c:ac:31:6c:f5:56:
                    60:3e:6a:2a:62:19:7a:98:b6:ef:56:9b:29:a9:52:
                    9f:73:f2:e7:c3:fe:b7:12:e1:b9:9f:40:17:06:bc:
                    b6:91:23:e7:52:5d:55:f7:a6:ff:37:5b:36:a4:eb:
                    3a:12:43:6b:45:23:c8:fb:1e:bf:88:14:ec:9b:8f:
                    e5:56:0b:e4:67:ab:f0:1b:0e:01:96:ef:e4:78:93:
                    45:df:2d:5a:23:54:ad:28:b2:0e:7d:2c:4c:b9:41:
                    47:9f:22:a5:4c:84:b5:9a:c9:40:b7:e2:fa:f5:43:
                    ec:2a:ea:95:35:96:6f:56:bb:51:c5:29:3f:85:a2:
                    94:bd:91:06:4f:5c:f3:71:86:06:6d:23:6a:7a:40:
                    0f:5b:9d:5e:64:27:11:9a:1f:14:c5:66:1d:a0:bd:
                    74:c2:76:df:52:b6:e3:36:1a:be:29:0a:3e:9d:96:
                    66:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:62:03:AB:DC:2A:BB:F5:40:B6:DF:E1:87:3B:D5:CC:28:5F:83:C8
            X509v3 Authority Key Identifier:
                keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:bc:97:84:25:a8:a9:9f:1f:15:11:18:fd:b0:53:8d:38:72:
         03:8b:4e:8d:ba:b4:58:55:e1:0e:4e:2b:72:76:ae:a3:a0:a6:
         11:5d:9c:ef:21:cd:71:f6:d0:b6:05:f3:d0:48:2f:44:dd:75:
         ef:f9:b6:49:ce:8e:c7:ce:74:c0:41:53:0f:f0:21:bc:e8:9b:
         ed:52:98:f3:12:f8:c1:de:7c:b6:98:08:f4:8c:c3:c0:08:fc:
         73:87:8a:6d:ed:6d:36:f4:bb:5c:ac:bc:c4:f4:29:fc:bd:23:
         ee:ca:aa:f0:c3:0d:da:ff:87:74:ca:1f:24:9e:aa:6b:90:42:
         ef:e9:ae:a6:28:03:d7:78:c4:45:75:1f:70:a0:dd:8f:3e:54:
         85:4a:9f:17:ff:54:01:c3:fd:ff:05:d7:f0:35:23:0c:13:79:
         76:e7:8a:07:19:82:5d:26:f1:42:45:88:c1:bf:0a:45:f1:df:
         2b:fc:09:fc:a9:e0:66:3f:66:b8:84:04:cc:bb:00:21:ee:e9:
         99:e1:5a:16:6b:99:37:f5:81:9f:a3:bd:97:51:16:49:22:99:
         5b:f2:fd:7a:0a:5b:a8:b1:29:c8:29:6e:67:09:18:96:df:43:
         72:cd:0f:4e:fa:4e:61:b5:08:45:e2:37:71:f3:4c:dc:91:6b:
         a1:e8:59:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZKCqSH2jsYWloDOobIMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzY2UwNjlkZmM1YjYwODg3NmQ2NDI0YTMyZTc4M2E5OGE5
MmVmZjIwHhcNMjQxMTIzMDUwMDMyWhcNMjQxMTI0MDUwMDMyWjAzMTEwLwYDVQQD
Eyg1MzYyMDNhYmRjMmFiYmY1NDBiNmRmZTE4NzNiZDVjYzI4NWY4M2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8V/PM2qhm2MIuQm43RAgG2b9C5Q3
Vqz3evblz8V2hXnBJe+3fHXK+aizzOQtNUUeodZ2QkKBW7GXJd7bAK/lrEmz6LxB
oPHW5U6cZjlBHDYeCwFMrDFs9VZgPmoqYhl6mLbvVpspqVKfc/Lnw/63EuG5n0AX
Bry2kSPnUl1V96b/N1s2pOs6EkNrRSPI+x6/iBTsm4/lVgvkZ6vwGw4Blu/keJNF
3y1aI1StKLIOfSxMuUFHnyKlTIS1mslAt+L69UPsKuqVNZZvVrtRxSk/haKUvZEG
T1zzcYYGbSNqekAPW51eZCcRmh8UxWYdoL10wnbfUrbjNhq+KQo+nZZmUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNiA6vcKrv1QLbf4Yc71cwoX4PIMB8GA1UdIwQY
MBaAFOPOBp38W2CIdtZCSjLng6mKku/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81NWFlMmQtMzdhMi00ZjY3LTk1MTYt
OTA4MTU0NWY1NjkxLzEvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81NWFlMmQtMzdhMi00ZjY3LTk1MTYtOTA4MTU0NWY1Njkx
LzEvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbyXhCWo
qZ8fFREY/bBTjThyA4tOjbq0WFXhDk4rcnauo6CmEV2c7yHNcfbQtgXz0EgvRN11
7/m2Sc6Ox850wEFTD/AhvOib7VKY8xL4wd58tpgI9IzDwAj8c4eKbe1tNvS7XKy8
xPQp/L0j7sqq8MMN2v+HdMofJJ6qa5BC7+mupigD13jERXUfcKDdjz5UhUqfF/9U
AcP9/wXX8DUjDBN5dueKBxmCXSbxQkWIwb8KRfHfK/wJ/KngZj9muIQEzLsAIe7p
meFaFmuZN/WBn6O9l1EWSSKZW/L9egpbqLEpyCluZwkYlt9Dcs0PTvpOYbUIReI3
cfNM3JFroehZYw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:12 2024 by rpki-client on console-ams.rpki-client.org