Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
File:                     1-3nCbzFXU0UVnIQO0nioeKklZhU.mft (raw, json)
Hash identifier:          xHBTQHjga2V684NC1Bu2Q6CCoi7zjrsWR1SNSjxKbvA=
Subject key identifier:   C9:17:F3:6D:AD:97:9C:5B:CC:C2:B3:1C:04:4F:41:CE:04:69:F2:44
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Certificate issuer:       /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial:       0193561ACC8AD77EEBF09DDEC85371937655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
Manifest number:          1378
Signing time:             Fri 22 Nov 2024 23:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:16 +0000
Files and hashes:         1: 081ryxyj9w6cctmFl2mAufUbJWU.roa (hash: qCftz/7HqpQ8pk1Vgruue5fCBxqFA21jKAhbqU/kAEo=)
                          2: 1-3nCbzFXU0UVnIQO0nioeKklZhU.crl (hash: Vwp008tNDKnD+/1nrBU6GODAda+rgj5sj4DcE10Mh1o=)
                          3: 6HGvJhPTSHKhj-Ke01VnWAwMa34.roa (hash: UgmXZJH+EdQ8BT9OxJ4wV2fJtNSoJfBSdSHRTC9/adA=)
                          4: jiU450SZbY72ODOkD7RKh7THjGo.roa (hash: +0rCNEAItW621V3SER36qpAUoHEYkhdNzZpX6C4NF+I=)
                          5: qVpcIxgcCVOENtlEklJ5Z7tL4CU.roa (hash: 97xnnWWQ/qH3NkmZ3NHsWn1q+HXCq0ObJ4RNp4BrFVI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:cc:8a:d7:7e:eb:f0:9d:de:c8:53:71:93:76:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
        Validity
            Not Before: Nov 22 23:00:16 2024 GMT
            Not After : Nov 23 23:00:16 2024 GMT
        Subject: CN=c917f36dad979c5bccc2b31c044f41ce0469f244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:6c:82:43:dc:73:d3:15:4a:9d:04:fb:28:
                    f7:1b:b3:0b:ac:d2:aa:18:b3:5d:e6:0a:48:34:3e:
                    7a:63:fc:a7:d1:76:d8:a9:e0:89:bd:c5:f1:55:28:
                    ab:e6:32:33:7f:2e:2d:b3:7b:93:98:bb:20:c6:3e:
                    6e:5d:db:f7:e1:f9:f7:e2:a4:ca:09:5e:14:59:c9:
                    6d:2d:18:4a:28:c0:f5:5f:8f:3e:ef:bc:97:3c:53:
                    e8:f6:66:1c:f6:fc:2e:5a:bd:c1:38:8b:a4:15:d8:
                    30:f2:6e:ce:55:66:f9:3e:75:87:b7:d4:97:0a:74:
                    08:a4:2a:85:f7:c5:ca:4f:24:36:0c:0c:25:b3:e5:
                    09:fa:e8:0b:ad:f9:3a:bb:12:57:03:c0:fe:7e:70:
                    e2:d8:99:ad:45:53:04:a0:dd:37:9b:00:fc:90:b6:
                    f7:1c:ca:16:0e:25:a8:e3:69:e1:05:c1:4a:a6:b8:
                    cb:58:8a:f1:79:37:53:46:06:5e:5b:cd:a0:4a:19:
                    ed:94:3e:b7:62:03:91:57:eb:47:b7:58:6e:15:f9:
                    35:3d:7f:c7:34:bb:ea:ec:29:f8:49:a6:17:82:a3:
                    aa:4b:dd:63:ac:b2:33:d8:73:74:a8:c1:a3:ae:53:
                    2e:a8:6d:63:00:64:f4:1d:d2:11:3f:9e:83:a5:a6:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:17:F3:6D:AD:97:9C:5B:CC:C2:B3:1C:04:4F:41:CE:04:69:F2:44
            X509v3 Authority Key Identifier:
                keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:48:88:e4:16:95:4b:45:03:b8:98:d5:8e:ab:17:a1:c0:50:
         73:7d:85:d0:5e:07:4a:62:e2:18:e7:a8:80:8e:ec:76:9c:28:
         57:e5:4c:e8:6f:d9:81:55:b0:8c:7a:93:f1:34:cf:d6:0a:b6:
         65:a9:fa:11:cd:f3:2e:31:c9:e9:f7:b0:2f:8f:cc:dc:94:69:
         35:e7:41:bb:ac:cb:1d:b7:c4:b3:ad:f1:66:d2:d6:c0:b5:82:
         10:66:26:d9:76:c9:f3:7c:79:1b:62:31:0b:a4:02:bf:8b:74:
         36:a0:36:d3:10:48:60:42:1a:07:ea:d3:75:53:03:98:91:01:
         47:23:fd:c4:bb:83:7a:14:b5:31:b0:9a:b8:fe:4e:aa:d1:53:
         5f:32:54:9c:69:2a:df:94:a3:22:ee:0a:ab:4e:49:da:b2:e5:
         ed:c9:a0:15:f1:be:37:96:d4:1f:1b:50:10:42:55:5e:31:a7:
         cd:4b:f9:77:6b:5c:f5:8a:4c:84:48:fd:13:19:58:a9:3b:c6:
         f4:24:89:21:34:90:34:d1:7b:8c:9c:51:0d:aa:84:e5:30:2d:
         36:5c:de:8c:37:3d:53:bf:c6:69:d8:47:64:d4:ce:93:01:52:
         1e:d7:13:f6:95:97:b0:13:79:8a:db:33:56:c0:5f:54:bc:89:
         c3:c3:47:86
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNWGsyK137r8J3eyFNxk3ZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzljMjZmMzE1NzUzNDUxNTljODQwZWQyNzhhODc4YTky
NTY2MTUwHhcNMjQxMTIyMjMwMDE2WhcNMjQxMTIzMjMwMDE2WjAzMTEwLwYDVQQD
EyhjOTE3ZjM2ZGFkOTc5YzViY2NjMmIzMWMwNDRmNDFjZTA0NjlmMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTFsgkPcc9MVSp0E+yj3G7MLrNKq
GLNd5gpIND56Y/yn0XbYqeCJvcXxVSir5jIzfy4ts3uTmLsgxj5uXdv34fn34qTK
CV4UWcltLRhKKMD1X48+77yXPFPo9mYc9vwuWr3BOIukFdgw8m7OVWb5PnWHt9SX
CnQIpCqF98XKTyQ2DAwls+UJ+ugLrfk6uxJXA8D+fnDi2JmtRVMEoN03mwD8kLb3
HMoWDiWo42nhBcFKprjLWIrxeTdTRgZeW82gShntlD63YgORV+tHt1huFfk1PX/H
NLvq7Cn4SaYXgqOqS91jrLIz2HN0qMGjrlMuqG1jAGT0HdIRP56Dpaa3zQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMkX822tl5xbzMKzHARPQc4EafJEMB8GA1UdIwQY
MBaAFPt5wm8xV1NFFZyEDtJ4qHipJWYVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zbkNiekZYVTBVVm5JUU8wbmlvZUtrbFpoVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2Vh
LWJkMzdkYTBlNDQ3Yy8xLzEtM25DYnpGWFUwVVZuSVFPMG5pb2VLa2xaaFUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzgwLzEyZDY5MS0zN2E0LTRiMTUtYTdlYS1iZDM3ZGEwZTQ0
N2MvMS8xLTNuQ2J6RlhVMFVWbklRTzBuaW9lS2tsWmhVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEiI
5BaVS0UDuJjVjqsXocBQc32F0F4HSmLiGOeogI7sdpwoV+VM6G/ZgVWwjHqT8TTP
1gq2Zan6Ec3zLjHJ6fewL4/M3JRpNedBu6zLHbfEs63xZtLWwLWCEGYm2XbJ83x5
G2IxC6QCv4t0NqA20xBIYEIaB+rTdVMDmJEBRyP9xLuDehS1MbCauP5OqtFTXzJU
nGkq35SjIu4Kq05J2rLl7cmgFfG+N5bUHxtQEEJVXjGnzUv5d2tc9YpMhEj9ExlY
qTvG9CSJITSQNNF7jJxRDaqE5TAtNlzejDc9U7/GadhHZNTOkwFSHtcT9pWXsBN5
itszVsBfVLyJw8NHhg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:09:12 2024 by rpki-client on console-ams.rpki-client.org