Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
File:                     pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json)
Hash identifier:          J1INHOKI1QKJooWEbariV6FRnqFk/k86udUzMP4nAw8=
Subject key identifier:   56:7C:F2:E2:EA:78:9B:6C:EA:B2:BE:2D:43:86:50:A8:80:7A:9C:B0
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Certificate issuer:       /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial:       019369DA0C05EE029C69A14C1AF1914EDBCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
Manifest number:          05A3
Signing time:             Tue 26 Nov 2024 19:01:57 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:57 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:57 +0000
Files and hashes:         1: 1tDKNKLegnS7HfxTgmMp_-Unfrw.roa (hash: uGdHrSBjfxX/CT87Ww76VmIASZxYeUSG1IdO00oSUiQ=)
                          2: W-jYS_PCrAq3_zdWEcwjUf3Wi1I.roa (hash: IVV5CVl2S9wNArhrvTucQri2efMJot4DbuYaM57L0e8=)
                          3: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: hLPxfKh4L75RJLkE6aHM/oW/lJUf223rDpSqJwM+ZIA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:0c:05:ee:02:9c:69:a1:4c:1a:f1:91:4e:db:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
        Validity
            Not Before: Nov 26 19:01:57 2024 GMT
            Not After : Nov 27 19:01:57 2024 GMT
        Subject: CN=567cf2e2ea789b6ceab2be2d438650a8807a9cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:6f:61:68:a2:8f:ab:58:5b:8f:cb:0e:83:
                    7d:42:e8:1f:42:34:d4:05:da:a1:3a:0b:b2:69:2c:
                    66:56:4b:c8:be:5e:16:54:2f:3d:92:10:83:ac:7d:
                    d5:75:32:a3:ad:cb:34:18:49:ce:a5:03:75:a3:4a:
                    10:a0:54:df:ab:6e:29:72:58:f4:f1:e7:82:34:e3:
                    d8:58:90:87:55:b9:98:6b:0b:13:8f:e1:8c:5e:a9:
                    3a:13:ca:7a:ed:7f:30:ff:45:8c:b5:4b:f0:b7:e4:
                    65:e0:3e:80:93:1c:4a:27:cc:cb:f3:12:b6:c7:24:
                    18:7c:dd:db:c5:a3:04:86:23:a5:16:ac:d0:66:76:
                    17:1c:2a:d3:3c:49:ac:1d:25:c2:59:e2:11:b5:93:
                    c2:4b:bd:cd:b0:83:28:0c:b4:0c:ae:8e:32:28:95:
                    07:a5:c9:ec:b8:6a:4c:80:15:f8:7c:f7:44:e6:23:
                    f2:2c:fa:47:4b:69:99:a7:01:7d:3e:bc:ae:3e:a9:
                    95:c2:07:b3:18:9e:1d:6d:17:bf:fa:03:3e:13:dc:
                    ce:70:2d:af:7f:0f:9b:4e:3c:94:fc:8b:92:5e:2e:
                    b0:72:4c:51:ac:20:d7:0f:45:91:4f:fa:47:4d:04:
                    43:8b:05:c1:86:09:42:45:0a:e4:b5:a3:00:ab:e3:
                    82:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7C:F2:E2:EA:78:9B:6C:EA:B2:BE:2D:43:86:50:A8:80:7A:9C:B0
            X509v3 Authority Key Identifier:
                keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:dd:db:1b:a1:b1:e2:19:3e:bf:1e:f6:4d:dc:5f:c1:7e:83:
         55:10:ab:ed:e3:fb:90:f9:3d:d5:79:46:96:0d:2b:7c:e6:5c:
         3f:fe:3f:a8:d3:4c:d7:31:62:05:82:0d:7e:a1:c5:d3:87:af:
         3a:1b:ed:4e:45:5f:be:f0:85:a8:d8:a5:14:c2:0c:3e:8a:78:
         aa:74:6b:46:21:0b:73:2f:18:45:10:dc:fc:f2:c7:fa:23:ac:
         8f:4d:bc:2d:55:99:40:60:b0:f5:87:d2:4a:98:a5:40:7f:71:
         9c:37:3d:49:c6:5c:47:cd:9a:71:10:c6:11:66:45:c5:2c:5a:
         bf:c2:49:08:fe:13:e8:e3:8b:c3:1e:0e:ac:52:f1:7c:0a:a5:
         31:de:b8:2b:2e:89:de:fa:10:83:d1:4e:24:50:51:b6:fa:8f:
         8c:26:18:74:1c:b5:19:e0:19:0d:0c:b9:8d:34:64:e4:17:f5:
         44:6d:fe:9a:fb:64:2a:7e:ab:20:61:e7:94:76:86:30:6b:47:
         c1:2b:c4:36:a2:de:99:1c:bd:f6:c2:b6:3d:2a:0a:8f:6c:4f:
         a9:40:41:6c:91:a0:78:0a:92:d8:94:a5:8e:76:f6:f7:0d:f3:
         2d:07:82:4f:1d:13:0e:d8:27:85:76:be:59:e1:5f:e1:62:f6:
         48:b7:f5:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2gwF7gKcaaFMGvGRTtvLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NjFjY2IwMzc0MTA1NjcxNWE2YmU0ODA1MzIxNjYyZDg4
ZTdlN2MwHhcNMjQxMTI2MTkwMTU3WhcNMjQxMTI3MTkwMTU3WjAzMTEwLwYDVQQD
Eyg1NjdjZjJlMmVhNzg5YjZjZWFiMmJlMmQ0Mzg2NTBhODgwN2E5Y2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6xvYWiij6tYW4/LDoN9QugfQjTU
BdqhOguyaSxmVkvIvl4WVC89khCDrH3VdTKjrcs0GEnOpQN1o0oQoFTfq24pclj0
8eeCNOPYWJCHVbmYawsTj+GMXqk6E8p67X8w/0WMtUvwt+Rl4D6AkxxKJ8zL8xK2
xyQYfN3bxaMEhiOlFqzQZnYXHCrTPEmsHSXCWeIRtZPCS73NsIMoDLQMro4yKJUH
pcnsuGpMgBX4fPdE5iPyLPpHS2mZpwF9PryuPqmVwgezGJ4dbRe/+gM+E9zOcC2v
fw+bTjyU/IuSXi6wckxRrCDXD0WRT/pHTQRDiwXBhglCRQrktaMAq+OCMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZ88uLqeJts6rK+LUOGUKiAepywMB8GA1UdIwQY
MBaAFKVhzLA3QQVnFaa+SAUyFmLYjn58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODkt
YWU0ZTY5ODY2NGYxLzEvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODktYWU0ZTY5ODY2NGYx
LzEvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4N3bG6Gx
4hk+vx72TdxfwX6DVRCr7eP7kPk91XlGlg0rfOZcP/4/qNNM1zFiBYINfqHF04ev
OhvtTkVfvvCFqNilFMIMPop4qnRrRiELcy8YRRDc/PLH+iOsj028LVWZQGCw9YfS
SpilQH9xnDc9ScZcR82acRDGEWZFxSxav8JJCP4T6OOLwx4OrFLxfAqlMd64Ky6J
3voQg9FOJFBRtvqPjCYYdBy1GeAZDQy5jTRk5Bf1RG3+mvtkKn6rIGHnlHaGMGtH
wSvENqLemRy99sK2PSoKj2xPqUBBbJGgeAqS2JSljnb29w3zLQeCTx0TDtgnhXa+
WeFf4WL2SLf1Sw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 23:03:38 2024 by rpki-client on console-fra.rpki-client.org