Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
File:                     tW-ivPsboZnQpll_uIlUwKbFEtU.mft (raw, json)
Hash identifier:          RcPmrIRJFY8WkHp0pdDPywr2+NR576LxGWOBBVQYRGc=
Subject key identifier:   7D:B3:AF:68:CF:59:17:9F:60:24:EA:83:99:2B:56:8C:F6:47:1C:0E
Authority key identifier: B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
Certificate issuer:       /CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Certificate serial:       019352AC10546D11C22095387DB9308E0664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
Manifest number:          0861
Signing time:             Fri 22 Nov 2024 07:00:28 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:28 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:28 +0000
Files and hashes:         1: XpA3Ot4osrzBZeRyBzLUTxkXZ1w.roa (hash: bV4gioYZr1HZtPr+tZUBtIzY/TYPSJ/ULmdreJHa6rw=)
                          2: tW-ivPsboZnQpll_uIlUwKbFEtU.crl (hash: 1VBxiQpvTkdZxITvFSmOPV04jsmS9QcJnt1nykCHK3w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:10:54:6d:11:c2:20:95:38:7d:b9:30:8e:06:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
        Validity
            Not Before: Nov 22 07:00:28 2024 GMT
            Not After : Nov 23 07:00:28 2024 GMT
        Subject: CN=7db3af68cf59179f6024ea83992b568cf6471c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:07:12:53:29:0a:25:36:27:aa:2b:e7:0c:
                    df:45:85:42:01:68:d4:d1:49:0d:3f:7b:17:1c:47:
                    74:cb:35:99:a9:f5:e0:3b:28:6a:90:4a:b9:ce:0c:
                    7b:d8:cd:8c:8d:ff:a6:5e:0b:15:1d:21:2f:60:60:
                    14:89:32:b0:4c:c0:4f:80:19:12:c0:a7:a2:39:92:
                    2c:b4:59:cb:f4:3f:1a:93:24:b6:88:70:71:92:f8:
                    cb:7b:a6:26:f3:b8:d2:03:bc:d8:43:5a:0a:8e:d3:
                    f3:75:de:c6:ca:a7:ef:ee:03:df:5d:40:66:87:45:
                    e1:d3:f8:98:ec:02:23:ac:f3:6f:d7:cf:f5:7e:c7:
                    b3:0c:78:aa:7b:5c:9d:b7:b0:b1:00:40:f0:7e:15:
                    5c:e5:cb:54:f7:fa:3a:6a:5e:d0:d8:8e:ec:90:7f:
                    10:4f:34:4a:f3:b6:1e:66:ef:b1:45:e4:77:17:53:
                    cc:e0:29:ce:24:4e:d2:c2:51:d9:6f:a7:9e:87:9e:
                    e8:e3:b2:71:7a:93:cc:68:2c:55:b8:ab:2c:e4:de:
                    53:e3:1f:52:5e:55:d3:1e:1c:e1:cf:62:fe:7b:92:
                    fa:8f:91:36:1a:10:75:63:cf:b0:63:aa:65:89:29:
                    60:53:11:12:89:1e:3e:53:e7:c7:b5:fb:e0:82:8a:
                    ac:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B3:AF:68:CF:59:17:9F:60:24:EA:83:99:2B:56:8C:F6:47:1C:0E
            X509v3 Authority Key Identifier:
                keyid:B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:50:a9:62:c0:3d:f5:1f:c7:87:f7:a6:2d:6e:92:77:2b:f9:
         4b:3b:c3:95:6b:e4:46:e7:37:47:c6:6a:77:ea:71:34:a5:f9:
         17:85:cc:74:3e:1b:b9:c5:3a:58:1f:bc:91:87:cd:d1:8d:7d:
         5a:2f:2f:49:5c:41:2f:ba:97:f7:bb:08:67:94:16:91:f2:f4:
         75:2f:4a:d6:aa:39:84:1f:c3:f7:96:d0:08:ff:3d:76:24:77:
         d5:11:98:2c:11:9c:77:95:88:6f:cc:27:28:26:29:7b:86:08:
         4a:2f:e0:ab:63:11:08:c6:bd:68:85:0e:47:f1:13:25:7e:a2:
         6d:ee:27:76:8b:5a:2c:cc:68:90:52:a8:3a:ae:2a:51:c2:85:
         bc:78:d5:57:89:c1:bb:06:b2:5a:53:f4:52:cc:06:ce:d9:be:
         60:e2:a7:3e:1f:be:9d:db:55:36:7e:c2:20:6d:c7:16:73:9b:
         c9:44:31:5b:1f:c3:1f:da:74:ca:41:cb:3b:d1:2c:ae:b4:e0:
         f5:da:1e:8a:fc:14:92:f4:c9:29:c5:7b:d4:0b:60:0b:a0:2d:
         00:2a:03:ab:c2:75:86:cd:04:63:f7:15:5c:f7:c8:f0:10:8f:
         a3:47:0e:e3:2c:e2:12:06:1d:f8:aa:d3:a7:eb:d1:7c:e7:4e:
         41:e0:e1:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrBBUbRHCIJU4fbkwjgZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmZhMmJjZmIxYmExOTlkMGE2NTk3ZmI4ODk1NGMwYTZj
NTEyZDUwHhcNMjQxMTIyMDcwMDI4WhcNMjQxMTIzMDcwMDI4WjAzMTEwLwYDVQQD
Eyg3ZGIzYWY2OGNmNTkxNzlmNjAyNGVhODM5OTJiNTY4Y2Y2NDcxYzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscEHElMpCiU2J6or5wzfRYVCAWjU
0UkNP3sXHEd0yzWZqfXgOyhqkEq5zgx72M2Mjf+mXgsVHSEvYGAUiTKwTMBPgBkS
wKeiOZIstFnL9D8akyS2iHBxkvjLe6Ym87jSA7zYQ1oKjtPzdd7Gyqfv7gPfXUBm
h0Xh0/iY7AIjrPNv18/1fsezDHiqe1ydt7CxAEDwfhVc5ctU9/o6al7Q2I7skH8Q
TzRK87YeZu+xReR3F1PM4CnOJE7SwlHZb6eeh57o47JxepPMaCxVuKss5N5T4x9S
XlXTHhzhz2L+e5L6j5E2GhB1Y8+wY6pliSlgUxESiR4+U+fHtfvggoqsjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2zr2jPWRefYCTqg5krVoz2RxwOMB8GA1UdIwQY
MBaAFLVvorz7G6GZ0KZZf7iJVMCmxRLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFctaXZQc2JvWm5RcGxsX3VJbFV3S2JGRXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MTQ2ZDgtMzFiMC00MDIyLWFmN2Ut
ZmE1YjIxOTlhNzM5LzEvdFctaXZQc2JvWm5RcGxsX3VJbFV3S2JGRXRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84MTQ2ZDgtMzFiMC00MDIyLWFmN2UtZmE1YjIxOTlhNzM5
LzEvdFctaXZQc2JvWm5RcGxsX3VJbFV3S2JGRXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlCpYsA9
9R/Hh/emLW6Sdyv5SzvDlWvkRuc3R8Zqd+pxNKX5F4XMdD4bucU6WB+8kYfN0Y19
Wi8vSVxBL7qX97sIZ5QWkfL0dS9K1qo5hB/D95bQCP89diR31RGYLBGcd5WIb8wn
KCYpe4YISi/gq2MRCMa9aIUOR/ETJX6ibe4ndotaLMxokFKoOq4qUcKFvHjVV4nB
uwayWlP0UswGztm+YOKnPh++ndtVNn7CIG3HFnObyUQxWx/DH9p0ykHLO9EsrrTg
9doeivwUkvTJKcV71AtgC6AtACoDq8J1hs0EY/cVXPfI8BCPo0cO4yziEgYd+KrT
p+vRfOdOQeDhVA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:38 2024 by rpki-client on console-fra.rpki-client.org