Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
File:                     rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json)
Hash identifier:          /NdXUQmZsr0HtyJ2XGIYHpW2G53wBTowRBRuOMPZOGA=
Subject key identifier:   3F:D4:99:6C:DD:F7:5E:75:BB:44:12:60:96:73:B7:10:E2:A6:B6:B3
Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
Certificate issuer:       /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Certificate serial:       01936AB496B478C3249A2C694BE228E74C74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
Manifest number:          0AA3
Signing time:             Tue 26 Nov 2024 23:00:40 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:40 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:40 +0000
Files and hashes:         1: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: AG20+x6nawgTuDOVeRxzz1CUBhrAnQpBbwW8a6oYnQE=)
                          2: xx1RSleLkv8dV3phwO40UDiukFo.roa (hash: q7EMb0e96VKtY8mE40rudwTF9iEoA6wxXkzFEJRp/uA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:96:b4:78:c3:24:9a:2c:69:4b:e2:28:e7:4c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
        Validity
            Not Before: Nov 26 23:00:40 2024 GMT
            Not After : Nov 27 23:00:40 2024 GMT
        Subject: CN=3fd4996cddf75e75bb4412609673b710e2a6b6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:ce:cc:f9:05:da:e6:8c:51:1b:c9:40:8d:
                    e6:41:13:27:7d:b0:49:a9:04:16:ee:ab:55:06:1b:
                    13:b9:be:ac:0c:e0:dc:32:3a:08:60:a7:c5:29:8e:
                    85:ef:29:c0:9d:11:65:67:1a:0a:66:30:94:13:e3:
                    ca:73:c8:4c:57:c9:3f:70:c0:e7:a3:5c:11:c8:66:
                    74:78:d8:78:db:9a:06:99:12:f6:cb:42:92:a2:ad:
                    e3:94:10:a3:10:1f:64:8c:dd:61:7a:4d:b7:95:23:
                    a7:f5:31:aa:8e:88:91:d5:d0:fa:5c:3d:ab:50:0d:
                    f6:f8:4e:52:b2:b4:b4:54:c7:1d:3c:a9:82:7b:ef:
                    ea:98:f9:d8:ef:54:b8:cc:3e:44:74:20:2e:d3:99:
                    0c:4b:22:61:23:d3:fb:d4:08:dd:f0:f4:86:8a:f8:
                    d7:09:fc:39:21:36:6e:5c:8b:40:ac:fc:fb:87:2a:
                    db:7e:ed:6c:51:29:6d:3e:c8:96:d0:74:6b:43:c0:
                    6d:c9:66:b4:fc:ca:1a:08:8a:ee:43:ad:b7:6b:70:
                    50:5f:55:2a:ba:80:93:7a:f6:73:64:b8:68:fc:7c:
                    01:96:a9:3d:4d:e9:16:eb:7e:c2:01:9e:07:ee:bb:
                    e6:eb:95:2e:7a:28:f8:13:67:09:4f:c5:0d:60:6c:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D4:99:6C:DD:F7:5E:75:BB:44:12:60:96:73:B7:10:E2:A6:B6:B3
            X509v3 Authority Key Identifier:
                keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e7:f9:ba:ca:a8:c9:64:a5:90:42:a6:34:36:0b:70:53:90:
         74:46:30:ab:ea:e9:c7:16:fb:26:21:6a:8d:43:9d:27:88:cc:
         65:d9:5a:1b:e1:e9:fa:35:8b:43:4d:1e:35:90:d3:6f:5f:44:
         86:74:fb:e0:99:c8:0c:41:3b:96:b0:dd:51:2b:b7:7b:a8:75:
         a8:65:98:b8:e4:7a:77:6b:76:bb:b6:5d:5c:71:01:92:2b:55:
         33:84:95:eb:b4:47:9d:d7:8e:f8:d7:c2:0c:40:6e:66:5f:bf:
         76:a6:c6:96:ce:a5:d7:c6:ab:34:8d:80:33:0e:cb:c1:e4:63:
         9f:75:ab:ab:5e:a8:f3:90:6a:0c:39:ac:2e:c5:22:d2:4a:bb:
         ec:12:fe:b9:2d:4f:a1:af:86:d7:f2:be:68:78:10:cb:ef:b5:
         e7:62:84:7d:c4:e8:3a:e9:dc:ac:f6:27:ce:0f:cb:79:4c:a6:
         5f:bb:bd:f7:c8:38:a7:07:6c:21:46:de:f6:c5:7a:be:d9:95:
         48:b2:5a:51:fd:4d:92:c1:df:43:ef:f4:fd:a5:98:8c:66:67:
         47:a0:03:d0:c0:cc:d4:e1:4b:f0:b9:98:71:d7:84:47:6b:82:
         ff:08:6d:d2:c5:37:e8:1a:af:80:73:8e:5b:97:c7:7f:e5:8b:
         44:84:56:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtJa0eMMkmixpS+Io50x0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYmM1Zjc3MjFhNGFjY2I5NjM1ZGUxNzViYmM2ZDMxZTE3
YzlhOGQwHhcNMjQxMTI2MjMwMDQwWhcNMjQxMTI3MjMwMDQwWjAzMTEwLwYDVQQD
EygzZmQ0OTk2Y2RkZjc1ZTc1YmI0NDEyNjA5NjczYjcxMGUyYTZiNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpzOzPkF2uaMURvJQI3mQRMnfbBJ
qQQW7qtVBhsTub6sDODcMjoIYKfFKY6F7ynAnRFlZxoKZjCUE+PKc8hMV8k/cMDn
o1wRyGZ0eNh425oGmRL2y0KSoq3jlBCjEB9kjN1hek23lSOn9TGqjoiR1dD6XD2r
UA32+E5SsrS0VMcdPKmCe+/qmPnY71S4zD5EdCAu05kMSyJhI9P71Ajd8PSGivjX
Cfw5ITZuXItArPz7hyrbfu1sUSltPsiW0HRrQ8BtyWa0/MoaCIruQ623a3BQX1Uq
uoCTevZzZLho/HwBlqk9TekW637CAZ4H7rvm65Uueij4E2cJT8UNYGwc8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/UmWzd9151u0QSYJZztxDiprazMB8GA1UdIwQY
MBaAFK28X3chpKzLljXeF1u8bTHhfJqNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUt
YWJiZjFmMDc4YWQzLzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUtYWJiZjFmMDc4YWQz
LzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+f5usqo
yWSlkEKmNDYLcFOQdEYwq+rpxxb7JiFqjUOdJ4jMZdlaG+Hp+jWLQ00eNZDTb19E
hnT74JnIDEE7lrDdUSu3e6h1qGWYuOR6d2t2u7ZdXHEBkitVM4SV67RHndeO+NfC
DEBuZl+/dqbGls6l18arNI2AMw7LweRjn3Wrq16o85BqDDmsLsUi0kq77BL+uS1P
oa+G1/K+aHgQy++152KEfcToOuncrPYnzg/LeUymX7u998g4pwdsIUbe9sV6vtmV
SLJaUf1NksHfQ+/0/aWYjGZnR6AD0MDM1OFL8LmYcdeER2uC/wht0sU36BqvgHOO
W5fHf+WLRIRWtQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:31:27 2024 by rpki-client on console-ams.rpki-client.org