Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.mft
File:                     K3xCZNrN-ss7ejru7VZZdapSQ0w.mft (raw, json)
Hash identifier:          77Xg8ZXLukcrNsgxYnmZyE+Tz+Ml931f3Q70qCKptpg=
Subject key identifier:   D2:75:42:90:DE:F2:0C:75:CB:00:96:E4:1F:C7:05:D3:4B:8F:96:73
Authority key identifier: 2B:7C:42:64:DA:CD:FA:CB:3B:7A:3A:EE:ED:56:59:75:AA:52:43:4C
Certificate issuer:       /CN=2b7c4264dacdfacb3b7a3aeeed565975aa52434c
Certificate serial:       01935199C99D42101ECB08898224D4754D6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K3xCZNrN-ss7ejru7VZZdapSQ0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.mft
Manifest number:          0E3B
Signing time:             Fri 22 Nov 2024 02:00:53 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:53 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:53 +0000
Files and hashes:         1: 1-KvYMWJATPxtEC1Zj6bjDZBBxF4.roa (hash: iMoZy60HRf6GWQ8zG2gcgKS9jslpq/esHb9BexHjLdc=)
                          2: K3xCZNrN-ss7ejru7VZZdapSQ0w.crl (hash: oaCJNi9gzJdiKUh85H8enX3uAf3m3U3yg5ovEOyKVAw=)
                          3: XTUgVvqZkMKvQ_lHF1o75eq2S4c.roa (hash: 4U8tjl6TmCB3cb1s4eT3hx6DVBSTvM8lTtEnDDrYASg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K3xCZNrN-ss7ejru7VZZdapSQ0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:c9:9d:42:10:1e:cb:08:89:82:24:d4:75:4d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7c4264dacdfacb3b7a3aeeed565975aa52434c
        Validity
            Not Before: Nov 22 02:00:53 2024 GMT
            Not After : Nov 23 02:00:53 2024 GMT
        Subject: CN=d2754290def20c75cb0096e41fc705d34b8f9673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:a0:de:e8:b7:af:d6:d1:e5:0e:53:4b:7b:
                    e6:8e:e7:43:66:de:7d:8d:57:76:70:55:19:ae:ca:
                    4a:e8:ff:36:98:86:11:1a:21:cd:16:c4:e9:81:90:
                    0b:65:e7:c0:21:75:fb:b8:94:cc:83:81:64:fc:6b:
                    4d:aa:b5:56:b9:44:df:74:62:64:19:9c:c3:bd:c3:
                    9a:ce:7a:6b:1e:54:17:64:73:87:b7:b5:4c:fd:83:
                    d5:cd:09:05:3f:85:04:e1:2a:67:96:45:8f:a9:a0:
                    cf:b4:14:a1:25:48:2d:6e:01:d6:ec:7f:e4:7e:bc:
                    86:43:e7:8a:5c:a2:55:75:ba:38:b6:14:43:ab:a2:
                    c8:24:5c:cc:b9:2f:b7:56:4f:e8:6d:2c:c1:a9:17:
                    a2:2c:8c:f9:b9:3b:35:14:a8:68:35:fc:27:36:c7:
                    08:ff:b0:45:cd:88:ee:a0:ea:b4:07:30:05:15:29:
                    53:c6:7b:66:5d:cc:51:5b:b7:a0:78:75:25:7c:ce:
                    1f:30:3f:0d:2f:c7:a0:d0:8d:dc:15:18:b8:b9:f8:
                    87:bd:8e:a3:3d:cd:6c:4d:2c:92:89:ad:7d:04:d6:
                    3c:8a:6a:ae:5b:a4:16:3e:b4:56:47:77:11:37:11:
                    00:b1:3f:9b:32:e4:a4:fb:d1:31:b9:40:6b:82:c2:
                    e8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:75:42:90:DE:F2:0C:75:CB:00:96:E4:1F:C7:05:D3:4B:8F:96:73
            X509v3 Authority Key Identifier:
                keyid:2B:7C:42:64:DA:CD:FA:CB:3B:7A:3A:EE:ED:56:59:75:AA:52:43:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3xCZNrN-ss7ejru7VZZdapSQ0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bbed40-6281-48bf-9e9d-31d5ac3ac9b5/1/K3xCZNrN-ss7ejru7VZZdapSQ0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:2f:93:4d:e9:c8:f0:ac:92:ea:46:04:c1:e7:02:0b:88:b4:
         2d:be:b5:df:cb:17:24:43:a2:1d:12:ec:2a:86:ac:21:8d:0e:
         44:cc:48:83:9c:ce:46:9c:9d:cf:96:24:14:02:a9:19:fc:0f:
         3d:dc:10:c2:86:a2:06:04:21:3c:e3:e8:c4:0d:bb:ac:e9:c0:
         3e:f1:26:fa:86:2e:03:3e:72:8b:58:10:dd:b9:01:bd:4c:a3:
         be:6c:96:33:04:e0:9d:7c:7e:2e:8d:a2:81:6e:e8:c6:fd:0b:
         88:0f:77:8c:59:81:cc:76:10:97:8f:54:e5:6d:31:e2:9e:51:
         d4:7e:83:c9:02:78:7d:1d:bf:01:48:f0:5e:2d:61:66:95:35:
         67:20:33:15:92:45:e2:5c:ce:a5:97:97:97:96:a4:4d:95:19:
         e3:66:db:89:7e:05:93:7d:b7:0c:22:0b:8b:b7:37:1f:29:85:
         2a:8c:de:50:ad:f5:ac:b9:0c:1c:f0:4c:c6:4b:c1:8f:8c:62:
         e2:6f:a4:a5:1d:82:8d:8a:07:55:bf:08:2b:3a:f8:a0:a5:21:
         76:a3:00:2d:c7:b8:6d:96:bf:e9:d2:96:cc:65:ee:05:f9:55:
         11:80:df:b5:c0:f2:6d:20:64:96:0d:79:8c:5d:93:17:f2:04:
         ec:79:39:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRmcmdQhAeywiJgiTUdU1qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiN2M0MjY0ZGFjZGZhY2IzYjdhM2FlZWVkNTY1OTc1YWE1
MjQzNGMwHhcNMjQxMTIyMDIwMDUzWhcNMjQxMTIzMDIwMDUzWjAzMTEwLwYDVQQD
EyhkMjc1NDI5MGRlZjIwYzc1Y2IwMDk2ZTQxZmM3MDVkMzRiOGY5NjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Sg3ui3r9bR5Q5TS3vmjudDZt59
jVd2cFUZrspK6P82mIYRGiHNFsTpgZALZefAIXX7uJTMg4Fk/GtNqrVWuUTfdGJk
GZzDvcOaznprHlQXZHOHt7VM/YPVzQkFP4UE4SpnlkWPqaDPtBShJUgtbgHW7H/k
fryGQ+eKXKJVdbo4thRDq6LIJFzMuS+3Vk/obSzBqReiLIz5uTs1FKhoNfwnNscI
/7BFzYjuoOq0BzAFFSlTxntmXcxRW7egeHUlfM4fMD8NL8eg0I3cFRi4ufiHvY6j
Pc1sTSySia19BNY8imquW6QWPrRWR3cRNxEAsT+bMuSk+9ExuUBrgsLoEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJ1QpDe8gx1ywCW5B/HBdNLj5ZzMB8GA1UdIwQY
MBaAFCt8QmTazfrLO3o67u1WWXWqUkNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzN4Q1pOck4tc3M3ZWpydTdWWlpkYXBTUTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iYmVkNDAtNjI4MS00OGJmLTllOWQt
MzFkNWFjM2FjOWI1LzEvSzN4Q1pOck4tc3M3ZWpydTdWWlpkYXBTUTB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iYmVkNDAtNjI4MS00OGJmLTllOWQtMzFkNWFjM2FjOWI1
LzEvSzN4Q1pOck4tc3M3ZWpydTdWWlpkYXBTUTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkC+TTenI
8KyS6kYEwecCC4i0Lb6138sXJEOiHRLsKoasIY0ORMxIg5zORpydz5YkFAKpGfwP
PdwQwoaiBgQhPOPoxA27rOnAPvEm+oYuAz5yi1gQ3bkBvUyjvmyWMwTgnXx+Lo2i
gW7oxv0LiA93jFmBzHYQl49U5W0x4p5R1H6DyQJ4fR2/AUjwXi1hZpU1ZyAzFZJF
4lzOpZeXl5akTZUZ42bbiX4Fk323DCILi7c3HymFKozeUK31rLkMHPBMxkvBj4xi
4m+kpR2CjYoHVb8IKzr4oKUhdqMALce4bZa/6dKWzGXuBflVEYDftcDybSBklg15
jF2TF/IE7Hk5tw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:09 2024 by rpki-client on console-ams.rpki-client.org