Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File:                     pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier:          mw+zRZtPg6b7VHW6Zwmwf1688ttkX5G6OHojlPj5Eko=
Subject key identifier:   2B:D6:79:4F:E6:9A:E5:9F:A6:8A:B7:57:24:6E:D3:0E:24:3F:0D:73
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer:       /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial:       01935688E34DB0A533D96D4946BE8AD00965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:00:31 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:31 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:31 +0000
Files and hashes:         1: I-f2fNxKATl0FpiDPthh_9zbLk4.roa (hash: +8lNeaVlqzFXYfVui+ekAH9ab6omisvEbi0vBuTCUWE=)
                          2: NqDKNL-isTZ-wWyfDswPlCRiVT8.roa (hash: AeyMzF0Rd7T964kWDaQ5vkoNyQF00AxrTLAxW4N9s7k=)
                          3: b-49N0MafHtldcWRMuIjUEiTSAE.roa (hash: kPaR5Q+7WOXlASzgsf57xxz9ar75eNBNIyBvCekUVsc=)
                          4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: uMKiOE1+Edlkn2H5A7EXnEPdVxSfNVpEJWwhnlXOUfM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:e3:4d:b0:a5:33:d9:6d:49:46:be:8a:d0:09:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
        Validity
            Not Before: Nov 23 01:00:31 2024 GMT
            Not After : Nov 24 01:00:31 2024 GMT
        Subject: CN=2bd6794fe69ae59fa68ab757246ed30e243f0d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ef:74:58:73:d7:3b:22:e8:99:e0:dd:4d:02:
                    aa:83:3e:a9:5e:39:5b:30:6f:fc:4c:d2:03:ce:4f:
                    c0:7e:98:8d:bc:b0:05:37:3f:48:db:f8:cb:a0:a8:
                    7e:1f:7d:77:c4:25:42:12:f7:4e:4f:51:c3:ca:ed:
                    2b:6c:6d:84:55:45:52:f8:f2:b5:ad:da:8a:6b:68:
                    f0:53:d0:b5:46:d6:f5:ad:09:cb:e2:0d:63:9b:8c:
                    3f:b2:f6:64:e0:a3:86:9b:ce:2d:ad:0f:76:ff:92:
                    9f:31:d7:c8:e8:8c:2f:ca:73:ea:c6:95:67:5f:6d:
                    c0:52:61:14:6c:0c:1d:bc:41:51:18:72:0b:56:56:
                    db:9a:a1:d6:e3:7e:eb:f1:08:66:80:f1:60:44:fd:
                    18:09:e1:dc:f8:e5:59:be:68:bf:1f:ed:0f:e4:ff:
                    a4:74:34:ff:9f:38:18:85:ce:cf:8b:33:b8:60:1d:
                    6b:3b:04:aa:92:8f:03:0f:34:c4:84:54:3e:5a:e4:
                    68:94:53:69:db:84:09:4c:be:ed:66:a5:9e:eb:9d:
                    29:74:2f:0c:2a:dd:09:ce:22:89:88:70:a3:25:2f:
                    bc:4b:bc:af:14:d6:be:39:6b:5e:f4:90:53:de:ca:
                    78:0d:c1:3e:22:66:00:07:6c:68:e9:ff:76:bd:42:
                    87:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D6:79:4F:E6:9A:E5:9F:A6:8A:B7:57:24:6E:D3:0E:24:3F:0D:73
            X509v3 Authority Key Identifier:
                keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ba:b2:9c:e6:f0:36:47:63:b5:a8:ee:a6:fc:70:35:7f:b9:
         ac:56:f3:88:01:99:53:5d:b7:9c:41:96:df:56:f6:92:89:a7:
         b1:eb:cd:82:4a:a2:2f:0d:5f:93:01:49:88:5c:e4:8a:23:3d:
         52:6e:07:29:11:e2:9d:e8:a2:4e:21:91:55:9d:15:7f:97:ec:
         92:69:25:da:4f:51:cd:02:a2:96:c1:aa:cc:37:81:87:73:be:
         b2:8b:c1:1e:35:43:db:d8:35:27:08:9e:67:2e:d9:db:3b:fe:
         fb:91:9c:3a:31:b6:e8:3e:c6:f2:92:1f:5a:3a:37:80:6f:95:
         99:9c:7d:98:51:c3:f9:e5:89:6f:b4:ba:b8:80:16:ce:5e:34:
         c1:c0:47:2a:74:ff:cf:9b:00:b6:5c:61:1f:6a:71:9c:53:87:
         d3:4c:e3:04:89:02:7c:cc:3e:18:b2:81:ab:84:39:69:a7:ce:
         89:81:5d:ac:bf:1a:eb:d1:6c:f0:14:14:bc:76:f5:24:e4:0d:
         dc:1a:8c:aa:57:d2:07:f2:52:ad:07:29:5a:b4:45:72:3f:19:
         4f:47:98:d5:b8:a3:37:4f:83:6d:0c:99:6f:4b:7b:a2:95:ad:
         e0:d9:c5:4d:1f:df:b5:5e:24:11:9b:43:12:fb:de:91:5a:32:
         fe:bc:ac:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiONNsKUz2W1JRr6K0AllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MmZjNjBkMzZlMjhiYjhkZjE0NWM4NGFjYWIxOWNmYTUz
YjAyNWEwHhcNMjQxMTIzMDEwMDMxWhcNMjQxMTI0MDEwMDMxWjAzMTEwLwYDVQQD
EygyYmQ2Nzk0ZmU2OWFlNTlmYTY4YWI3NTcyNDZlZDMwZTI0M2YwZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku90WHPXOyLomeDdTQKqgz6pXjlb
MG/8TNIDzk/AfpiNvLAFNz9I2/jLoKh+H313xCVCEvdOT1HDyu0rbG2EVUVS+PK1
rdqKa2jwU9C1Rtb1rQnL4g1jm4w/svZk4KOGm84trQ92/5KfMdfI6IwvynPqxpVn
X23AUmEUbAwdvEFRGHILVlbbmqHW437r8QhmgPFgRP0YCeHc+OVZvmi/H+0P5P+k
dDT/nzgYhc7PizO4YB1rOwSqko8DDzTEhFQ+WuRolFNp24QJTL7tZqWe650pdC8M
Kt0JziKJiHCjJS+8S7yvFNa+OWte9JBT3sp4DcE+ImYAB2xo6f92vUKHZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvWeU/mmuWfpoq3VyRu0w4kPw1zMB8GA1UdIwQY
MBaAFKUvxg024ou43xRchKyrGc+lOwJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mMGI5NjAtODZkOC00MDYyLWE1OTct
OWI0YTJkNWYzYTc2LzEvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9mMGI5NjAtODZkOC00MDYyLWE1OTctOWI0YTJkNWYzYTc2
LzEvcFNfR0RUYmlpN2pmRkZ5RXJLc1p6NlU3QWxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbqynObw
NkdjtajupvxwNX+5rFbziAGZU123nEGW31b2komnsevNgkqiLw1fkwFJiFzkiiM9
Um4HKRHineiiTiGRVZ0Vf5fskmkl2k9RzQKilsGqzDeBh3O+sovBHjVD29g1Jwie
Zy7Z2zv++5GcOjG26D7G8pIfWjo3gG+VmZx9mFHD+eWJb7S6uIAWzl40wcBHKnT/
z5sAtlxhH2pxnFOH00zjBIkCfMw+GLKBq4Q5aafOiYFdrL8a69Fs8BQUvHb1JOQN
3BqMqlfSB/JSrQcpWrRFcj8ZT0eY1bijN0+DbQyZb0t7opWt4NnFTR/ftV4kEZtD
EvvekVoy/rysWg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:30 2024 by rpki-client on console-fra.rpki-client.org