Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
File:                     zS0l92kTYIeMus6YWJC59e_PfZU.mft (raw, json)
Hash identifier:          9KGZVsDKWk79DdlLgEUUucDsCvHJAeWZ34Vs/p/RIuk=
Subject key identifier:   7E:CF:C4:B2:B6:2F:20:31:4D:D3:28:11:0C:C8:EB:4B:A3:9E:C6:05
Authority key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
Certificate issuer:       /CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Certificate serial:       0193561ACB92A2161198654ADA498386C1E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
Manifest number:          12C6
Signing time:             Fri 22 Nov 2024 23:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:16 +0000
Files and hashes:         1: hSgYiaZfixtGZunemF60MrFulhE.roa (hash: nPab10XVMgcuJv1GCw/n4Pc4QQN7zjq4uPj5XTRhjH0=)
                          2: zS0l92kTYIeMus6YWJC59e_PfZU.crl (hash: NKcpxwoKnGUAy/Wy1HJGEqtYXfgEG5CK2fJae6DAF0s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:cb:92:a2:16:11:98:65:4a:da:49:83:86:c1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd2d25f7691360878cbace985890b9f5efcf7d95
        Validity
            Not Before: Nov 22 23:00:16 2024 GMT
            Not After : Nov 23 23:00:16 2024 GMT
        Subject: CN=7ecfc4b2b62f20314dd328110cc8eb4ba39ec605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4d:53:a0:39:8b:a0:1c:50:c5:e2:5a:96:30:
                    04:10:92:f6:53:9d:7a:59:ab:d7:85:98:62:55:61:
                    86:f4:00:65:be:68:c6:09:3d:7e:a0:05:bf:26:14:
                    f3:79:00:06:27:43:6d:9d:b8:db:23:0a:f8:53:ba:
                    60:db:4e:a8:8b:12:29:10:bf:53:80:30:b4:eb:c1:
                    23:d2:13:48:f2:e0:93:ae:25:14:5c:45:2f:5c:4c:
                    35:e4:38:18:30:24:27:29:a1:b5:0b:3b:5d:e5:37:
                    43:b9:f4:2f:19:d2:c2:33:13:f3:31:ba:4e:a5:41:
                    2d:3e:cd:bb:8a:8c:7b:6b:0e:d2:3e:3b:ea:c9:e4:
                    ba:b6:1d:8c:13:56:3e:65:90:38:94:8a:81:88:e7:
                    50:9f:3a:43:b6:54:27:ac:8f:aa:72:b7:64:a1:0d:
                    e4:76:2c:6c:16:fc:ee:cf:6a:16:4e:fc:c7:8c:b5:
                    77:5a:c0:e5:ce:cf:f4:4c:7a:0c:e6:f5:c9:a2:c5:
                    5e:4a:4a:cf:26:56:98:52:f1:15:c0:f8:2a:7c:f4:
                    66:0f:3e:dd:a5:2e:a0:a3:35:99:3c:0f:ce:9c:03:
                    4a:b6:38:2a:5d:9d:bd:53:8a:c3:8f:f9:cf:da:94:
                    f3:f2:8c:74:15:62:63:49:04:81:c0:ec:ef:76:75:
                    58:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CF:C4:B2:B6:2F:20:31:4D:D3:28:11:0C:C8:EB:4B:A3:9E:C6:05
            X509v3 Authority Key Identifier:
                keyid:CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:7d:b2:8a:15:ab:e9:4e:58:a3:5e:d7:94:3a:c0:aa:77:6d:
         80:30:1d:61:5d:1e:5d:32:b1:ca:ef:b1:8f:cc:f7:47:3c:9c:
         5b:a3:29:f4:60:c3:2b:0a:1a:66:95:78:bf:12:3f:80:c0:75:
         aa:4c:e5:56:dc:65:b2:33:61:6b:4c:9d:fb:2d:6e:32:30:c9:
         f2:6e:eb:e2:7f:c6:a1:b4:02:50:0c:73:00:9a:9c:00:77:d7:
         74:29:53:f2:4e:48:30:d6:c4:e7:65:3e:79:f4:63:4e:07:b9:
         0a:13:12:d7:ef:4d:a1:7d:a0:83:2b:c8:5f:f4:b8:fc:a8:c5:
         18:c8:61:da:04:30:a9:22:22:9e:a3:39:69:6b:94:c1:83:70:
         86:80:92:a4:72:a9:d2:3d:d3:6f:f6:e6:95:ba:c2:2a:d6:f3:
         eb:09:d9:b4:81:43:21:1e:49:b7:9b:c0:0b:b1:3d:9c:7f:a0:
         c4:95:34:6c:a1:51:a9:6a:ff:e3:31:1a:76:4c:26:01:e8:2d:
         d1:a2:bd:cc:46:24:48:36:d6:4c:7e:46:c5:14:9a:c2:d4:b8:
         6d:a4:b2:b0:13:50:c6:64:6f:61:52:34:81:0e:16:dd:8a:66:
         31:0b:88:f6:01:50:3c:83:c0:02:3c:2f:2f:7d:52:51:06:b6:
         4d:3e:2d:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWGsuSohYRmGVK2kmDhsHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMmQyNWY3NjkxMzYwODc4Y2JhY2U5ODU4OTBiOWY1ZWZj
ZjdkOTUwHhcNMjQxMTIyMjMwMDE2WhcNMjQxMTIzMjMwMDE2WjAzMTEwLwYDVQQD
Eyg3ZWNmYzRiMmI2MmYyMDMxNGRkMzI4MTEwY2M4ZWI0YmEzOWVjNjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k1ToDmLoBxQxeJaljAEEJL2U516
WavXhZhiVWGG9ABlvmjGCT1+oAW/JhTzeQAGJ0NtnbjbIwr4U7pg206oixIpEL9T
gDC068Ej0hNI8uCTriUUXEUvXEw15DgYMCQnKaG1Cztd5TdDufQvGdLCMxPzMbpO
pUEtPs27iox7aw7SPjvqyeS6th2ME1Y+ZZA4lIqBiOdQnzpDtlQnrI+qcrdkoQ3k
dixsFvzuz2oWTvzHjLV3WsDlzs/0THoM5vXJosVeSkrPJlaYUvEVwPgqfPRmDz7d
pS6gozWZPA/OnANKtjgqXZ29U4rDj/nP2pTz8ox0FWJjSQSBwOzvdnVYpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7PxLK2LyAxTdMoEQzI60ujnsYFMB8GA1UdIwQY
MBaAFM0tJfdpE2CHjLrOmFiQufXvz32VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTct
NjM2OWIxN2ZmMTc4LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTctNjM2OWIxN2ZmMTc4
LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt32yihWr
6U5Yo17XlDrAqndtgDAdYV0eXTKxyu+xj8z3RzycW6Mp9GDDKwoaZpV4vxI/gMB1
qkzlVtxlsjNha0yd+y1uMjDJ8m7r4n/GobQCUAxzAJqcAHfXdClT8k5IMNbE52U+
efRjTge5ChMS1+9NoX2ggyvIX/S4/KjFGMhh2gQwqSIinqM5aWuUwYNwhoCSpHKp
0j3Tb/bmlbrCKtbz6wnZtIFDIR5Jt5vAC7E9nH+gxJU0bKFRqWr/4zEadkwmAegt
0aK9zEYkSDbWTH5GxRSawtS4baSysBNQxmRvYVI0gQ4W3YpmMQuI9gFQPIPAAjwv
L31SUQa2TT4tyg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:09:20 2024 by rpki-client on console-ams.rpki-client.org