Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft
File:                     DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft (raw, json)
Hash identifier:          6gFON9EuT9L/mqGgyCalbggf6t3vcNZVCDI5ZM2mD+k=
Subject key identifier:   46:6A:1F:3D:6E:F1:F5:E2:6E:12:06:31:A2:6A:5F:EE:A5:07:79:1B
Authority key identifier: 0E:03:F3:C3:CF:F6:D8:CD:4B:15:24:0F:61:72:83:6C:7B:53:EB:24
Certificate issuer:       /CN=0e03f3c3cff6d8cd4b15240f6172836c7b53eb24
Certificate serial:       019353BEBF7A7BFE6E2630AD198444688B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgPzw8_22M1LFSQPYXKDbHtT6yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft
Manifest number:          0550
Signing time:             Fri 22 Nov 2024 12:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:29 +0000
Files and hashes:         1: DgPzw8_22M1LFSQPYXKDbHtT6yQ.crl (hash: BCKqHScTt/Zh0CsLupS9MIXnuYkZA+Ix0DU0ueV9lxw=)
                          2: OMTAIQWzRxbB5jtG8nYhSkptjZE.roa (hash: Va2l+poKBCwFzczwIjtPQCCd757aRhyfP222Ypk/+6k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgPzw8_22M1LFSQPYXKDbHtT6yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:be:bf:7a:7b:fe:6e:26:30:ad:19:84:44:68:8b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e03f3c3cff6d8cd4b15240f6172836c7b53eb24
        Validity
            Not Before: Nov 22 12:00:29 2024 GMT
            Not After : Nov 23 12:00:29 2024 GMT
        Subject: CN=466a1f3d6ef1f5e26e120631a26a5feea507791b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c2:29:9c:35:ac:55:31:35:99:9d:8e:86:ed:
                    89:cf:04:36:1b:8d:d3:98:39:9a:a8:08:62:15:87:
                    60:61:0b:9b:1c:38:6f:fa:26:de:13:6d:33:13:5b:
                    a1:16:54:5f:e8:d4:13:70:c8:7b:d3:6d:81:6f:26:
                    29:7c:70:2c:96:cf:00:e7:ab:f9:97:57:0c:00:e6:
                    ff:68:d6:03:c8:d5:9f:ac:ac:5a:a7:d5:68:3c:7a:
                    bb:ca:6e:ce:63:e3:76:58:dd:12:bf:d8:92:4d:ad:
                    6f:56:43:83:94:87:35:df:e2:82:63:62:24:ef:45:
                    ab:df:bd:b9:5a:08:2e:11:f7:d1:b2:22:42:b3:4b:
                    62:d1:70:8f:b1:f1:68:99:04:60:ee:30:2b:57:fc:
                    57:b7:59:5a:f5:e2:d4:4d:6a:3f:a4:5a:5a:d7:3a:
                    39:c3:c2:11:33:0b:8a:3d:50:25:9e:b3:f8:2d:f5:
                    c1:eb:63:86:2a:e1:0f:2f:65:b3:94:66:47:97:93:
                    76:95:0b:bd:d1:e0:bc:7b:2b:0c:25:b1:1a:c0:30:
                    c7:dc:c8:f9:f3:f6:69:e0:0e:8b:1d:51:c8:f0:d4:
                    55:e1:73:0d:5a:83:10:3f:30:b3:89:df:c8:54:60:
                    82:5b:63:39:5d:68:43:29:b1:07:f7:0e:90:e5:f3:
                    93:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6A:1F:3D:6E:F1:F5:E2:6E:12:06:31:A2:6A:5F:EE:A5:07:79:1B
            X509v3 Authority Key Identifier:
                keyid:0E:03:F3:C3:CF:F6:D8:CD:4B:15:24:0F:61:72:83:6C:7B:53:EB:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgPzw8_22M1LFSQPYXKDbHtT6yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f49614-6c51-49a2-9ffa-f75f48bd94f4/1/DgPzw8_22M1LFSQPYXKDbHtT6yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:28:5d:43:8a:a4:36:e3:32:dd:12:29:f8:d1:35:04:de:6a:
         99:9c:24:79:a2:6e:8e:54:6b:8b:98:44:43:c2:ac:3f:93:f5:
         2d:34:e8:be:f5:0b:5e:7f:3e:e9:28:35:88:45:4d:17:28:f2:
         fa:7a:91:6c:73:d8:22:f9:8b:c7:9e:38:17:e6:17:2a:2e:c4:
         5c:70:4d:da:cd:c3:8a:89:ca:d0:d3:1a:95:f4:d4:f2:28:95:
         94:59:42:d1:dd:62:1c:8d:f2:94:7f:8a:ca:6e:df:9d:3d:78:
         25:23:3a:15:b1:06:eb:17:c2:df:c0:1f:a0:70:4f:87:05:26:
         f5:8e:67:59:ed:de:e5:7a:d2:b5:63:47:68:1e:af:0a:d8:37:
         3f:a0:87:31:63:07:25:96:31:76:ab:80:08:04:e7:fc:13:15:
         b6:8b:b4:5f:4e:45:8e:63:1f:ac:b4:59:47:53:63:4e:c0:d3:
         da:82:b3:b3:73:4e:71:a4:ac:47:d4:dd:25:3f:a3:12:e5:dc:
         89:b8:ab:b8:19:cf:3c:a2:cf:34:61:6c:18:3f:89:9a:5f:d6:
         e0:ee:f3:1d:a0:2d:2c:2a:1a:8c:64:5f:45:d3:aa:c4:41:6e:
         70:62:59:b6:da:44:c4:cb:16:63:cd:47:9f:72:4e:b5:f6:8f:
         68:43:50:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTvr96e/5uJjCtGYREaItcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDNmM2MzY2ZmNmQ4Y2Q0YjE1MjQwZjYxNzI4MzZjN2I1
M2ViMjQwHhcNMjQxMTIyMTIwMDI5WhcNMjQxMTIzMTIwMDI5WjAzMTEwLwYDVQQD
Eyg0NjZhMWYzZDZlZjFmNWUyNmUxMjA2MzFhMjZhNWZlZWE1MDc3OTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MIpnDWsVTE1mZ2Ohu2JzwQ2G43T
mDmaqAhiFYdgYQubHDhv+ibeE20zE1uhFlRf6NQTcMh7022BbyYpfHAsls8A56v5
l1cMAOb/aNYDyNWfrKxap9VoPHq7ym7OY+N2WN0Sv9iSTa1vVkODlIc13+KCY2Ik
70Wr3725WgguEffRsiJCs0ti0XCPsfFomQRg7jArV/xXt1la9eLUTWo/pFpa1zo5
w8IRMwuKPVAlnrP4LfXB62OGKuEPL2WzlGZHl5N2lQu90eC8eysMJbEawDDH3Mj5
8/Zp4A6LHVHI8NRV4XMNWoMQPzCzid/IVGCCW2M5XWhDKbEH9w6Q5fOTewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZqHz1u8fXibhIGMaJqX+6lB3kbMB8GA1UdIwQY
MBaAFA4D88PP9tjNSxUkD2Fyg2x7U+skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdQenc4XzIyTTFMRlNRUFlYS0RiSHRUNnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDk2MTQtNmM1MS00OWEyLTlmZmEt
Zjc1ZjQ4YmQ5NGY0LzEvRGdQenc4XzIyTTFMRlNRUFlYS0RiSHRUNnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDk2MTQtNmM1MS00OWEyLTlmZmEtZjc1ZjQ4YmQ5NGY0
LzEvRGdQenc4XzIyTTFMRlNRUFlYS0RiSHRUNnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfShdQ4qk
NuMy3RIp+NE1BN5qmZwkeaJujlRri5hEQ8KsP5P1LTTovvULXn8+6Sg1iEVNFyjy
+nqRbHPYIvmLx544F+YXKi7EXHBN2s3DionK0NMalfTU8iiVlFlC0d1iHI3ylH+K
ym7fnT14JSM6FbEG6xfC38AfoHBPhwUm9Y5nWe3e5XrStWNHaB6vCtg3P6CHMWMH
JZYxdquACATn/BMVtou0X05FjmMfrLRZR1NjTsDT2oKzs3NOcaSsR9TdJT+jEuXc
ibiruBnPPKLPNGFsGD+Jml/W4O7zHaAtLCoajGRfRdOqxEFucGJZttpExMsWY81H
n3JOtfaPaENQpg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:14:09 2024 by rpki-client on console-fra.rpki-client.org