Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
File:                     O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft (raw, json)
Hash identifier:          m75xZKhiUQwJlStpvE+CbZgnQQUG3RnL7PzmZbtcKII=
Subject key identifier:   3F:27:EC:EB:C8:19:C9:41:FF:D9:21:16:C2:78:5C:64:E3:3D:27:85
Authority key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
Certificate issuer:       /CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Certificate serial:       01935207792CE76E12E117E1089869A54E29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
Manifest number:          011F
Signing time:             Fri 22 Nov 2024 04:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:41 +0000
Files and hashes:         1: F0zXC1kK07vvB8iHUHNAJ81OMhs.roa (hash: i9zFj2ZfA/o8ZpAFqEBZcGU3Io72pZxjwijQV7gw0QM=)
                          2: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl (hash: ns7YB+hN/jz9YKEukKM2OP7cEAjiMAPRqdc+7a1/pfQ=)
                          3: sN6K7blStdXV5QiGCoT_v-Nm0hI.roa (hash: M6loonIqxNr0p/pWO7s8QG9xtT65Y3FkWkTKosktrSI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:79:2c:e7:6e:12:e1:17:e1:08:98:69:a5:4e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
        Validity
            Not Before: Nov 22 04:00:41 2024 GMT
            Not After : Nov 23 04:00:41 2024 GMT
        Subject: CN=3f27ecebc819c941ffd92116c2785c64e33d2785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d8:ec:4c:7b:50:05:e2:a2:f7:59:4b:87:d8:
                    92:c1:11:de:2f:ca:ff:ef:5b:54:6d:b0:ba:fe:54:
                    2e:f2:b0:f5:4d:3c:f1:e3:63:62:c4:ee:4e:49:17:
                    69:fd:db:26:4d:b7:d0:bc:90:4c:c4:7a:3b:a1:e8:
                    f6:6d:0e:35:e7:59:6f:a3:de:73:99:16:53:68:12:
                    fb:d6:e3:e0:dd:db:6c:e7:29:f8:fd:50:4b:60:33:
                    1e:71:88:32:4a:e3:8c:a5:4f:e3:3e:da:90:83:d6:
                    ac:7b:24:7b:fb:82:f0:b4:a2:36:90:37:12:fe:0a:
                    a0:92:a1:6a:48:78:e8:33:5c:81:3e:e9:5e:fa:78:
                    f2:5e:4d:30:fc:7b:5d:e4:08:71:d2:68:12:07:ad:
                    31:3e:55:c0:0f:ca:3d:5f:28:8a:32:81:7e:69:f0:
                    fd:68:ec:9d:39:c5:b9:2f:79:b0:c9:12:aa:80:9c:
                    49:3c:d6:30:af:95:30:59:cc:2f:3e:3b:10:ff:96:
                    7b:cf:28:89:43:ad:4f:2d:80:9a:d1:75:49:b5:f9:
                    2e:ab:f3:f1:af:ea:0b:10:0a:f5:8e:50:bb:bd:c2:
                    54:ce:28:8b:39:6b:df:28:8f:be:75:65:15:40:ec:
                    a9:d2:a6:d6:6c:0c:bf:76:cc:b5:b2:6c:c5:de:01:
                    f9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:27:EC:EB:C8:19:C9:41:FF:D9:21:16:C2:78:5C:64:E3:3D:27:85
            X509v3 Authority Key Identifier:
                keyid:3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e3:68:44:f4:31:e1:6b:aa:7d:1a:97:d9:cd:49:fc:7e:e9:
         29:de:63:e2:42:77:dd:30:15:d7:19:21:1b:f1:5c:76:84:f9:
         4a:53:4b:23:b8:18:2c:9a:1a:13:76:ee:de:5d:f5:49:47:4c:
         c4:d2:28:ef:ab:82:96:3e:87:a4:ca:d9:60:7e:d7:7c:60:4c:
         27:44:e7:a0:c9:03:2e:58:18:80:b4:4f:cf:37:9b:a4:fd:1e:
         c1:10:f8:af:7c:10:d6:57:1d:5c:30:2f:2b:cd:46:6d:d2:d2:
         36:fc:1d:63:b5:35:3a:21:3b:b5:9e:fe:da:63:aa:46:d3:25:
         02:b3:d3:59:fb:6b:1d:f5:57:78:9e:49:d4:9a:c8:c4:dd:b3:
         c4:cf:6b:b7:c6:87:1a:b9:b0:12:ba:06:5b:29:ad:a9:3b:0a:
         4a:39:02:00:a5:af:4b:da:c2:85:14:60:83:f8:14:f1:40:46:
         9e:e4:88:3f:2e:3d:3c:f7:6f:49:57:ab:b4:e6:36:a9:b2:54:
         f9:4d:e3:e3:e9:bc:c6:65:f7:83:90:e6:d7:97:f9:32:29:dd:
         5f:90:54:f0:ff:c8:09:69:64:4f:8e:dd:0c:4c:29:03:49:f9:
         0d:c1:fc:34:6c:5c:19:cc:db:6d:cf:bf:cc:fe:6b:1b:54:9c:
         f7:e6:85:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSB3ks524S4RfhCJhppU4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNWZjNjliN2M2ZWU4Njk5MzBjZTBiODM5MWVlNWQ4NGM1
MzQ5NGEwHhcNMjQxMTIyMDQwMDQxWhcNMjQxMTIzMDQwMDQxWjAzMTEwLwYDVQQD
EygzZjI3ZWNlYmM4MTljOTQxZmZkOTIxMTZjMjc4NWM2NGUzM2QyNzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NjsTHtQBeKi91lLh9iSwRHeL8r/
71tUbbC6/lQu8rD1TTzx42NixO5OSRdp/dsmTbfQvJBMxHo7oej2bQ4151lvo95z
mRZTaBL71uPg3dts5yn4/VBLYDMecYgySuOMpU/jPtqQg9aseyR7+4LwtKI2kDcS
/gqgkqFqSHjoM1yBPule+njyXk0w/Htd5Ahx0mgSB60xPlXAD8o9XyiKMoF+afD9
aOydOcW5L3mwyRKqgJxJPNYwr5UwWcwvPjsQ/5Z7zyiJQ61PLYCa0XVJtfkuq/Px
r+oLEAr1jlC7vcJUziiLOWvfKI++dWUVQOyp0qbWbAy/dsy1smzF3gH5twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8n7OvIGclB/9khFsJ4XGTjPSeFMB8GA1UdIwQY
MBaAFDtfxpt8buhpkwzguDke5dhMU0lKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFfR20zeHU2R21URE9DNE9SN2wyRXhUU1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83YzE3MjctOWVhZi00OWM5LWFhZmMt
Zjk5NDUzYTk1YTk5LzEvTzFfR20zeHU2R21URE9DNE9SN2wyRXhUU1VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC83YzE3MjctOWVhZi00OWM5LWFhZmMtZjk5NDUzYTk1YTk5
LzEvTzFfR20zeHU2R21URE9DNE9SN2wyRXhUU1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuNoRPQx
4WuqfRqX2c1J/H7pKd5j4kJ33TAV1xkhG/FcdoT5SlNLI7gYLJoaE3bu3l31SUdM
xNIo76uClj6HpMrZYH7XfGBMJ0TnoMkDLlgYgLRPzzebpP0ewRD4r3wQ1lcdXDAv
K81GbdLSNvwdY7U1OiE7tZ7+2mOqRtMlArPTWftrHfVXeJ5J1JrIxN2zxM9rt8aH
GrmwEroGWymtqTsKSjkCAKWvS9rChRRgg/gU8UBGnuSIPy49PPdvSVertOY2qbJU
+U3j4+m8xmX3g5Dm15f5MindX5BU8P/ICWlkT47dDEwpA0n5DcH8NGxcGczbbc+/
zP5rG1Sc9+aFFg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:45 2024 by rpki-client on console-ams.rpki-client.org