Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.mft
File:                     dOTD4A_D7u6TartSfjUuSvA96Js.mft (raw, json)
Hash identifier:          N+UE9DZfiFXslhB9L6jReOURVBVu+KvzyDsCxifWZSg=
Subject key identifier:   C0:B1:F6:DA:0F:5B:4C:67:91:5A:55:B1:77:CF:73:06:1B:75:8E:E6
Authority key identifier: 74:E4:C3:E0:0F:C3:EE:EE:93:6A:BB:52:7E:35:2E:4A:F0:3D:E8:9B
Certificate issuer:       /CN=74e4c3e00fc3eeee936abb527e352e4af03de89b
Certificate serial:       019369D970C496DF5BE2085FFA503E8B03E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOTD4A_D7u6TartSfjUuSvA96Js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.mft
Manifest number:          0451
Signing time:             Tue 26 Nov 2024 19:01:18 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:18 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:18 +0000
Files and hashes:         1: Px73qpboSDz0oVnM5I1MqClfxkg.roa (hash: x6S37nFlRxiV8a+J9rSPxwtTAJpIT7vbq5YqaQR08n4=)
                          2: dOTD4A_D7u6TartSfjUuSvA96Js.crl (hash: SO4q16nJYCcFhiCZxLTJ42u9kuiXLAO3HjzZqAPzdPo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dOTD4A_D7u6TartSfjUuSvA96Js.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:70:c4:96:df:5b:e2:08:5f:fa:50:3e:8b:03:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e4c3e00fc3eeee936abb527e352e4af03de89b
        Validity
            Not Before: Nov 26 19:01:18 2024 GMT
            Not After : Nov 27 19:01:18 2024 GMT
        Subject: CN=c0b1f6da0f5b4c67915a55b177cf73061b758ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:de:49:f2:be:7c:85:43:d9:7a:60:9b:bc:
                    db:5c:eb:04:ab:33:3a:fe:30:2e:e2:4a:49:98:37:
                    de:89:2b:dc:30:42:9e:64:37:e3:3d:cb:7d:f0:40:
                    f7:e5:d1:76:6a:c5:4b:61:0e:89:b6:6e:1c:5c:73:
                    7f:c2:a8:43:5e:d1:d6:2b:3d:87:87:6e:05:70:29:
                    d7:31:04:85:3a:bc:b4:60:35:c9:8a:e2:33:f6:27:
                    cf:66:fd:5f:24:31:d0:0d:f6:23:0e:97:d4:59:41:
                    6a:65:dd:34:2b:e6:b3:99:44:1a:94:e4:30:e3:2a:
                    cc:22:4c:df:38:3c:4e:1c:fe:80:71:af:eb:51:cd:
                    77:3f:0b:02:98:12:9d:fb:43:c3:4a:98:80:ae:19:
                    24:17:9f:6d:1b:b0:9c:81:50:43:03:36:1f:da:f2:
                    e9:69:3b:4b:c2:a6:42:80:5c:7d:d9:1b:74:b3:d3:
                    16:30:88:ff:6d:7a:d0:0b:1d:6e:8d:05:ec:76:ff:
                    92:95:5e:15:c7:61:f7:08:60:98:c6:79:ad:44:be:
                    c1:44:f5:7b:60:b5:0a:e6:45:5b:49:cf:0a:dc:45:
                    42:10:71:37:79:93:1d:40:51:4c:13:ef:50:ff:a2:
                    de:3b:b8:4f:a4:11:87:b9:01:e5:ce:d9:d4:c3:9a:
                    67:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B1:F6:DA:0F:5B:4C:67:91:5A:55:B1:77:CF:73:06:1B:75:8E:E6
            X509v3 Authority Key Identifier:
                keyid:74:E4:C3:E0:0F:C3:EE:EE:93:6A:BB:52:7E:35:2E:4A:F0:3D:E8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOTD4A_D7u6TartSfjUuSvA96Js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/bd8a16-000a-4917-9061-b5821e33de0d/1/dOTD4A_D7u6TartSfjUuSvA96Js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:57:8f:7d:76:17:88:df:81:73:05:d3:b1:8c:b9:ca:02:32:
         06:00:27:c7:c8:06:5d:cc:0e:3e:06:9d:ea:d0:2d:0b:43:fd:
         bd:ef:95:bc:9f:2e:55:c3:50:c4:bf:bb:55:56:3b:97:8b:8c:
         78:13:98:8f:93:9b:ef:a8:3e:f3:aa:2a:4e:8b:26:2d:63:19:
         0a:f3:86:47:c0:06:b6:13:65:cf:92:44:e8:a8:20:bb:f0:3c:
         90:67:c4:77:3e:77:64:ac:5b:80:8f:88:07:aa:c9:7c:c5:1b:
         5c:fc:fd:ef:16:b8:6b:d7:8a:39:95:94:62:56:b7:36:e3:c2:
         0f:0a:14:eb:d4:fc:68:77:d3:d8:9b:50:f7:b2:31:65:21:e6:
         a8:d4:30:8b:67:83:0d:ed:1d:4c:c4:88:35:49:e1:51:29:ae:
         11:c0:03:fb:6d:68:97:51:fc:4b:e9:9c:d6:99:77:58:1c:ac:
         f6:0e:b6:e5:5a:fd:c2:53:0a:80:e5:58:1c:22:15:19:80:23:
         fa:3f:a8:a3:15:ec:ca:90:4d:2f:49:a1:ce:2b:c1:b0:69:58:
         e1:f8:87:20:b0:41:89:f7:ee:08:77:5f:71:b1:ef:df:79:ca:
         c9:95:6f:8e:c7:0d:7f:16:b1:ed:60:6c:13:16:d6:e9:e4:58:
         b7:ae:e7:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2XDElt9b4ghf+lA+iwPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTRjM2UwMGZjM2VlZWU5MzZhYmI1MjdlMzUyZTRhZjAz
ZGU4OWIwHhcNMjQxMTI2MTkwMTE4WhcNMjQxMTI3MTkwMTE4WjAzMTEwLwYDVQQD
EyhjMGIxZjZkYTBmNWI0YzY3OTE1YTU1YjE3N2NmNzMwNjFiNzU4ZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/LeSfK+fIVD2Xpgm7zbXOsEqzM6
/jAu4kpJmDfeiSvcMEKeZDfjPct98ED35dF2asVLYQ6Jtm4cXHN/wqhDXtHWKz2H
h24FcCnXMQSFOry0YDXJiuIz9ifPZv1fJDHQDfYjDpfUWUFqZd00K+azmUQalOQw
4yrMIkzfODxOHP6Aca/rUc13PwsCmBKd+0PDSpiArhkkF59tG7CcgVBDAzYf2vLp
aTtLwqZCgFx92Rt0s9MWMIj/bXrQCx1ujQXsdv+SlV4Vx2H3CGCYxnmtRL7BRPV7
YLUK5kVbSc8K3EVCEHE3eZMdQFFME+9Q/6LeO7hPpBGHuQHlztnUw5pntQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCx9toPW0xnkVpVsXfPcwYbdY7mMB8GA1UdIwQY
MBaAFHTkw+APw+7uk2q7Un41LkrwPeibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9URDRBX0Q3dTZUYXJ0U2ZqVXVTdkE5NkpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9iZDhhMTYtMDAwYS00OTE3LTkwNjEt
YjU4MjFlMzNkZTBkLzEvZE9URDRBX0Q3dTZUYXJ0U2ZqVXVTdkE5NkpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9iZDhhMTYtMDAwYS00OTE3LTkwNjEtYjU4MjFlMzNkZTBk
LzEvZE9URDRBX0Q3dTZUYXJ0U2ZqVXVTdkE5NkpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1ePfXYX
iN+BcwXTsYy5ygIyBgAnx8gGXcwOPgad6tAtC0P9ve+VvJ8uVcNQxL+7VVY7l4uM
eBOYj5Ob76g+86oqTosmLWMZCvOGR8AGthNlz5JE6Kggu/A8kGfEdz53ZKxbgI+I
B6rJfMUbXPz97xa4a9eKOZWUYla3NuPCDwoU69T8aHfT2JtQ97IxZSHmqNQwi2eD
De0dTMSINUnhUSmuEcAD+21ol1H8S+mc1pl3WBys9g625Vr9wlMKgOVYHCIVGYAj
+j+ooxXsypBNL0mhzivBsGlY4fiHILBBiffuCHdfcbHv33nKyZVvjscNfxax7WBs
ExbW6eRYt67nmQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:30 2024 by rpki-client on console-ams.rpki-client.org