Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
File:                     P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json)
Hash identifier:          uYckOPgfdpdSPsRjd5DCZJVfokVHjZPqiU1B9NGF144=
Subject key identifier:   C7:A0:28:41:79:E7:83:FA:9B:3D:C2:B8:BA:8A:71:E0:F2:EE:28:B5
Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
Certificate issuer:       /CN=3fda630213cd423880f9fef16d78fb436e08f247
Certificate serial:       0193568A85D9D5720642265C79EA07CE8733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
Manifest number:          0A51
Signing time:             Sat 23 Nov 2024 01:02:18 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:18 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:18 +0000
Files and hashes:         1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: 4tB0pcVAaKhMggYbkU9lJfYk5L6TZhn4rcdQqwegEnU=)
                          2: h99NXphOtb3Z6-pga4Mlgr6JMR4.roa (hash: 1Q0QVgCKU/dxoXcyWP7vDK2P5dB8gYkIo1cOxEQkTQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:85:d9:d5:72:06:42:26:5c:79:ea:07:ce:87:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247
        Validity
            Not Before: Nov 23 01:02:18 2024 GMT
            Not After : Nov 24 01:02:18 2024 GMT
        Subject: CN=c7a0284179e783fa9b3dc2b8ba8a71e0f2ee28b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:33:59:d8:9d:a5:6f:b4:ac:30:58:61:53:a5:
                    92:67:bf:ba:d2:40:27:c9:41:45:52:e7:42:59:e7:
                    4e:37:70:80:50:41:74:77:f4:cb:59:26:0f:c9:75:
                    f0:90:0c:5b:b0:27:9e:f6:44:60:99:ce:bd:b2:3d:
                    dc:cc:b2:26:40:9e:6a:7f:6d:e1:f5:69:53:21:92:
                    d9:6b:53:2a:e6:06:ef:96:93:6f:cf:9c:d0:76:a6:
                    ba:58:2b:e0:85:30:b0:be:c5:ea:34:59:b7:fb:72:
                    4d:fd:c8:20:1e:09:b1:b2:8d:4f:d2:1c:d6:9f:fc:
                    82:6e:5b:9c:f9:3b:d9:6f:8a:30:f2:44:09:ba:7e:
                    82:fe:6c:ce:ed:04:12:6f:be:0f:3d:ee:ba:d2:51:
                    56:b0:91:04:66:82:e1:78:1f:fd:62:1f:84:ba:64:
                    42:e5:dd:a5:2c:8d:9c:1b:c1:3d:d4:9b:b1:60:f3:
                    a9:9a:c9:95:59:8e:fb:07:4a:85:35:f5:83:e0:39:
                    fc:ab:41:aa:74:8b:b0:6d:01:0c:5d:34:24:d0:75:
                    4e:a7:61:09:d6:18:5e:10:09:f6:63:be:8f:a4:b0:
                    43:44:20:54:9d:d0:7c:6f:ef:05:66:e3:23:5b:c4:
                    ca:2f:91:04:3d:55:83:ce:2d:8d:8a:dc:07:9b:1a:
                    87:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A0:28:41:79:E7:83:FA:9B:3D:C2:B8:BA:8A:71:E0:F2:EE:28:B5
            X509v3 Authority Key Identifier:
                keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e7:64:15:c8:bb:64:e8:0c:12:38:31:a5:9e:5e:8c:59:d4:
         5a:e8:a5:83:7a:9f:a5:6f:04:d2:0b:cf:be:73:0c:51:af:e0:
         53:82:6b:53:bd:cd:9d:6c:ca:3a:fd:c1:a4:89:f4:af:b9:5c:
         4b:00:6c:13:27:8c:7e:52:57:e6:be:8b:c4:69:cd:d3:69:fb:
         85:f4:6c:e0:33:32:5a:2b:e8:f0:73:27:41:8b:22:30:6d:72:
         8d:24:74:5c:a8:bb:0e:97:5b:19:10:e5:62:69:5a:5f:97:de:
         6d:59:9e:dd:f4:20:72:55:7d:bf:a0:11:17:38:4b:c7:0c:6e:
         c4:b3:95:5a:26:bb:df:bc:24:f4:85:57:38:1a:f0:86:1e:ac:
         ef:73:a0:97:af:26:e1:e5:d7:ae:d4:ac:64:ea:48:36:74:ef:
         b7:9c:58:b6:67:7b:8a:76:4d:1b:0d:9c:2a:fd:28:04:ba:79:
         ac:80:83:8a:39:57:42:ae:58:6e:cf:19:9f:ce:fc:6d:7d:07:
         09:ba:36:a1:4b:30:c5:fe:dd:bc:a6:46:63:3e:da:67:d8:b6:
         0d:04:a6:a4:47:20:12:97:3c:b0:33:c9:5b:3f:f9:f7:30:24:
         72:59:c9:60:e0:3e:8e:7b:df:1f:20:21:0f:a8:62:d6:87:34:
         2f:a8:95:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWioXZ1XIGQiZceeoHzoczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZGE2MzAyMTNjZDQyMzg4MGY5ZmVmMTZkNzhmYjQzNmUw
OGYyNDcwHhcNMjQxMTIzMDEwMjE4WhcNMjQxMTI0MDEwMjE4WjAzMTEwLwYDVQQD
EyhjN2EwMjg0MTc5ZTc4M2ZhOWIzZGMyYjhiYThhNzFlMGYyZWUyOGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zNZ2J2lb7SsMFhhU6WSZ7+60kAn
yUFFUudCWedON3CAUEF0d/TLWSYPyXXwkAxbsCee9kRgmc69sj3czLImQJ5qf23h
9WlTIZLZa1Mq5gbvlpNvz5zQdqa6WCvghTCwvsXqNFm3+3JN/cggHgmxso1P0hzW
n/yCbluc+TvZb4ow8kQJun6C/mzO7QQSb74PPe660lFWsJEEZoLheB/9Yh+EumRC
5d2lLI2cG8E91JuxYPOpmsmVWY77B0qFNfWD4Dn8q0GqdIuwbQEMXTQk0HVOp2EJ
1hheEAn2Y76PpLBDRCBUndB8b+8FZuMjW8TKL5EEPVWDzi2NitwHmxqHSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMegKEF554P6mz3CuLqKceDy7ii1MB8GA1UdIwQY
MBaAFD/aYwITzUI4gPn+8W14+0NuCPJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My81NGM2OTEtOWZiYi00MzhhLWE1NWYt
MzgyMzdmZTRlNDE0LzEvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My81NGM2OTEtOWZiYi00MzhhLWE1NWYtMzgyMzdmZTRlNDE0
LzEvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOdkFci7
ZOgMEjgxpZ5ejFnUWuilg3qfpW8E0gvPvnMMUa/gU4JrU73NnWzKOv3BpIn0r7lc
SwBsEyeMflJX5r6LxGnN02n7hfRs4DMyWivo8HMnQYsiMG1yjSR0XKi7DpdbGRDl
YmlaX5febVme3fQgclV9v6ARFzhLxwxuxLOVWia737wk9IVXOBrwhh6s73Ogl68m
4eXXrtSsZOpINnTvt5xYtmd7inZNGw2cKv0oBLp5rICDijlXQq5Ybs8Zn878bX0H
Cbo2oUswxf7dvKZGYz7aZ9i2DQSmpEcgEpc8sDPJWz/59zAkclnJYOA+jnvfHyAh
D6hi1oc0L6iVuA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:21 2024 by rpki-client on console-ams.rpki-client.org