Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft
File:                     zPKS2CwKIlLdMoWihzMfRFDtNZo.mft (raw, json)
Hash identifier:          y3vgYtS+sJSSrbCIXv1o6ks21w8rBmF4zq319qM2sZ4=
Subject key identifier:   3E:40:52:8E:42:AE:8D:D5:E5:1B:EF:6B:57:02:32:0F:23:2E:EE:06
Authority key identifier: CC:F2:92:D8:2C:0A:22:52:DD:32:85:A2:87:33:1F:44:50:ED:35:9A
Certificate issuer:       /CN=ccf292d82c0a2252dd3285a287331f4450ed359a
Certificate serial:       0193579B6695E5A62E45438A80B3D882BB9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zPKS2CwKIlLdMoWihzMfRFDtNZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft
Manifest number:          074B
Signing time:             Sat 23 Nov 2024 06:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:22 +0000
Files and hashes:         1: ZxZmylmgr70ikLsaLCL-y5se2ko.roa (hash: BjYX1zdgsHxyvYn2GWvSLuGpF1uaMvdoto+Hpgj4AXI=)
                          2: zPKS2CwKIlLdMoWihzMfRFDtNZo.crl (hash: UA9jRBKdXKJuvnV/LJEvy0IjrUmepLHwhEbehfd2EZg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zPKS2CwKIlLdMoWihzMfRFDtNZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:66:95:e5:a6:2e:45:43:8a:80:b3:d8:82:bb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccf292d82c0a2252dd3285a287331f4450ed359a
        Validity
            Not Before: Nov 23 06:00:22 2024 GMT
            Not After : Nov 24 06:00:22 2024 GMT
        Subject: CN=3e40528e42ae8dd5e51bef6b5702320f232eee06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c3:e2:7d:73:c8:c9:56:ae:a7:3a:dc:b9:b1:
                    a6:12:62:de:cb:a3:f7:72:ee:36:c1:60:eb:45:e6:
                    5d:b1:36:89:69:c8:0b:34:33:27:4d:7b:3e:6c:aa:
                    87:e1:f8:e4:c8:d5:77:53:e8:e5:12:64:5c:81:46:
                    d0:ed:fd:27:c5:af:9a:1a:2f:d7:2c:0f:af:2e:b8:
                    c0:25:d7:b7:ba:b9:35:d4:21:99:71:37:60:10:07:
                    b3:4c:d3:14:fa:f5:ba:24:68:75:b4:26:8f:e5:81:
                    d4:3a:10:f7:3e:50:0a:77:2f:d4:04:d0:51:e4:80:
                    bb:cf:0b:c5:2d:0f:bb:3c:0d:4b:6d:23:6d:4c:77:
                    ed:32:de:be:01:a1:d9:78:65:90:e0:4a:b7:6e:1b:
                    63:d9:d7:9b:29:92:61:03:e6:f6:0b:a8:96:0d:f9:
                    8d:8b:91:94:99:df:ca:79:c1:fa:9f:71:5f:16:e1:
                    74:39:44:8f:fa:40:3c:01:b3:ab:37:b0:c2:22:31:
                    73:ea:45:3f:8b:fa:94:5b:d3:f0:dd:2b:6d:80:ec:
                    38:ea:13:cb:50:ce:98:93:ae:c0:c8:9a:98:0a:f9:
                    93:60:e7:ab:8e:08:d6:27:1e:34:d2:5b:26:86:a5:
                    eb:e9:42:be:5e:ad:c9:5b:7b:5a:ea:6e:35:0f:cf:
                    73:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:40:52:8E:42:AE:8D:D5:E5:1B:EF:6B:57:02:32:0F:23:2E:EE:06
            X509v3 Authority Key Identifier:
                keyid:CC:F2:92:D8:2C:0A:22:52:DD:32:85:A2:87:33:1F:44:50:ED:35:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPKS2CwKIlLdMoWihzMfRFDtNZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0683c3-61f9-4db8-94a8-5bdf61551a06/1/zPKS2CwKIlLdMoWihzMfRFDtNZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:3e:f0:8e:13:9a:e2:0e:2d:34:4d:33:d2:7d:54:c6:17:82:
         80:37:0d:8c:a3:c8:b3:e0:92:01:70:87:a2:49:1b:30:a8:e1:
         4c:ae:bb:a6:1b:93:15:24:34:26:3b:40:fc:60:6c:f0:8d:ac:
         c7:df:39:c8:82:3a:51:29:e6:dd:86:2f:80:c3:db:2e:a0:6c:
         bd:9c:20:b9:60:ae:58:62:5b:dd:10:ea:c6:3a:42:e6:91:04:
         11:b9:29:12:14:cc:90:be:da:91:dc:d4:40:5e:c3:ba:35:10:
         4b:32:f0:a0:cb:4a:37:5b:6a:43:92:3f:88:78:a1:e8:0b:76:
         1a:87:47:81:d6:64:2f:af:f0:76:f6:65:88:9e:89:a0:42:df:
         63:73:4b:fa:d2:06:8f:6a:18:b2:eb:86:94:9a:24:19:1f:bf:
         53:08:64:8c:85:dd:d8:56:9e:ab:18:31:bf:29:e1:9a:22:ed:
         46:55:c4:61:58:7b:cc:c1:10:6a:22:f1:84:06:18:d4:4d:c8:
         cd:e1:ea:65:30:09:80:47:49:ec:ec:17:1d:72:f1:4f:12:86:
         4c:5d:e5:35:39:ac:ca:ff:8e:4e:7a:b9:31:b1:e5:75:3e:1d:
         68:8a:94:cf:f8:12:92:89:de:ff:01:bb:7e:9a:ba:c4:35:d1:
         0c:f3:75:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm2aV5aYuRUOKgLPYgrudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZjI5MmQ4MmMwYTIyNTJkZDMyODVhMjg3MzMxZjQ0NTBl
ZDM1OWEwHhcNMjQxMTIzMDYwMDIyWhcNMjQxMTI0MDYwMDIyWjAzMTEwLwYDVQQD
EygzZTQwNTI4ZTQyYWU4ZGQ1ZTUxYmVmNmI1NzAyMzIwZjIzMmVlZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28PifXPIyVaupzrcubGmEmLey6P3
cu42wWDrReZdsTaJacgLNDMnTXs+bKqH4fjkyNV3U+jlEmRcgUbQ7f0nxa+aGi/X
LA+vLrjAJde3urk11CGZcTdgEAezTNMU+vW6JGh1tCaP5YHUOhD3PlAKdy/UBNBR
5IC7zwvFLQ+7PA1LbSNtTHftMt6+AaHZeGWQ4Eq3bhtj2debKZJhA+b2C6iWDfmN
i5GUmd/KecH6n3FfFuF0OUSP+kA8AbOrN7DCIjFz6kU/i/qUW9Pw3SttgOw46hPL
UM6Yk67AyJqYCvmTYOerjgjWJx400lsmhqXr6UK+Xq3JW3ta6m41D89ztQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5AUo5Cro3V5Rvva1cCMg8jLu4GMB8GA1UdIwQY
MBaAFMzyktgsCiJS3TKFooczH0RQ7TWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBLUzJDd0tJbExkTW9XaWh6TWZSRkR0TlpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wNjgzYzMtNjFmOS00ZGI4LTk0YTgt
NWJkZjYxNTUxYTA2LzEvelBLUzJDd0tJbExkTW9XaWh6TWZSRkR0TlpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8wNjgzYzMtNjFmOS00ZGI4LTk0YTgtNWJkZjYxNTUxYTA2
LzEvelBLUzJDd0tJbExkTW9XaWh6TWZSRkR0TlpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtD7wjhOa
4g4tNE0z0n1UxheCgDcNjKPIs+CSAXCHokkbMKjhTK67phuTFSQ0JjtA/GBs8I2s
x985yII6USnm3YYvgMPbLqBsvZwguWCuWGJb3RDqxjpC5pEEEbkpEhTMkL7akdzU
QF7DujUQSzLwoMtKN1tqQ5I/iHih6At2GodHgdZkL6/wdvZliJ6JoELfY3NL+tIG
j2oYsuuGlJokGR+/UwhkjIXd2FaeqxgxvynhmiLtRlXEYVh7zMEQaiLxhAYY1E3I
zeHqZTAJgEdJ7OwXHXLxTxKGTF3lNTmsyv+OTnq5MbHldT4daIqUz/gSkone/wG7
fpq6xDXRDPN17w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:52 2024 by rpki-client on console-ams.rpki-client.org