Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
File:                     bd2PHjjJH1sXw9GnI05JyccNwyQ.mft (raw, json)
Hash identifier:          VEmCTNTJQP1tzXGOu27EVQTe9cdKvrTy9+07I004KyM=
Subject key identifier:   3D:F7:F0:DE:D9:68:67:06:5D:87:9E:41:02:AB:16:DA:83:4D:0A:48
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Certificate issuer:       /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial:       0193568A396F7D82EED2646DA6D118E1BB90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:01:59 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:59 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:59 +0000
Files and hashes:         1: TB4UfTCf7H_Y9lVELhmXyNABCsA.roa (hash: 8foFwLd4uRihHgzUd4tAC2shCIoei/vs4U5r/Xl8hz0=)
                          2: ZBoBZ9VlZvcEbhg57ijrMQkYAWg.roa (hash: JUud99FApEFJG6It1Nve+K0wQ7bBQcFwV8AgCBZtPSk=)
                          3: bd2PHjjJH1sXw9GnI05JyccNwyQ.crl (hash: 5eGOoZZzbymmO0/5mcWA7EPD4ZpKVaOgzGVblhyQUuQ=)
                          4: guRstSWC4_9gua8FMQo6vyVl260.roa (hash: dHf2V2b4JMIXlXCnLkeve+1h1gpvMzmYpUhnWdHo3a0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:39:6f:7d:82:ee:d2:64:6d:a6:d1:18:e1:bb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
        Validity
            Not Before: Nov 23 01:01:59 2024 GMT
            Not After : Nov 24 01:01:59 2024 GMT
        Subject: CN=3df7f0ded96867065d879e4102ab16da834d0a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:93:7b:36:0a:e7:1a:a1:e5:18:a8:15:85:64:
                    19:74:8a:78:20:e4:c7:24:2a:b1:f4:c9:a9:70:ef:
                    90:0d:26:33:94:92:85:0d:5a:51:7d:9f:6a:3b:e3:
                    31:e2:7f:68:91:04:52:c4:84:a3:3e:93:20:a9:5a:
                    0f:25:12:2c:8b:00:d8:4f:b1:ab:a4:c0:7b:3e:af:
                    96:01:3b:ff:6f:af:e1:6c:a5:89:86:b9:b3:f1:f6:
                    81:38:5a:0f:f3:44:78:73:94:3a:de:71:2e:5a:d7:
                    1f:14:69:a2:f9:f3:29:45:e7:85:d8:ad:7f:f0:71:
                    5a:a0:a5:54:50:3d:49:f5:39:70:68:e3:8a:ff:ac:
                    9e:9f:4e:72:4a:24:84:18:cc:86:66:d0:0f:b9:be:
                    80:5a:2a:8f:14:83:70:df:c6:eb:47:5b:38:ba:cd:
                    dc:bb:56:28:9f:96:97:df:33:5b:a7:f3:b1:48:58:
                    e1:39:88:67:4f:79:ea:47:a8:df:7a:f0:2c:42:bd:
                    24:7f:d2:09:be:29:c7:31:f9:ff:15:4e:b4:11:f0:
                    ad:71:12:85:19:66:5e:6c:30:48:72:da:f4:39:0f:
                    fe:89:73:7e:0c:c1:92:68:27:e3:8d:1d:7f:33:24:
                    e6:e0:3d:b9:3d:6a:23:74:44:61:54:db:c9:14:fe:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F7:F0:DE:D9:68:67:06:5D:87:9E:41:02:AB:16:DA:83:4D:0A:48
            X509v3 Authority Key Identifier:
                keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:fd:46:fc:fe:ea:b1:01:1e:b7:30:23:88:67:bc:54:a3:a8:
         f2:c0:07:59:be:d8:41:a2:0d:c4:9f:20:18:39:61:0d:67:60:
         e5:67:62:76:a9:22:70:0e:c1:60:24:7c:cc:47:ec:2e:ae:b2:
         d4:99:25:49:8a:60:ba:a6:84:ff:bc:35:6c:83:77:e3:fa:47:
         d1:a2:e5:78:5b:99:97:9b:33:95:df:54:cc:0e:67:c8:61:eb:
         0c:b9:49:0f:ea:5d:db:ff:78:a2:24:cb:d4:cb:29:57:af:3f:
         90:52:e6:e6:e9:1a:93:17:01:b6:36:ba:b2:e4:75:a7:3a:31:
         44:36:f8:75:bd:72:cd:c9:fb:c7:4a:cd:51:05:8e:05:62:bf:
         38:8e:9d:7e:15:c1:c3:90:bb:e9:06:a7:ff:88:07:c7:01:42:
         9d:7a:a5:ca:a0:e8:e8:b2:81:dd:c0:c9:5b:eb:bf:f6:bf:6b:
         14:43:fb:43:54:1e:de:07:b7:5e:0f:6f:b3:74:7d:3a:10:a0:
         dd:47:a7:29:9c:ed:60:76:cd:fc:24:54:06:1a:f3:aa:59:41:
         5e:de:be:f4:b3:99:13:d3:21:f9:f4:85:a5:14:84:b0:bf:00:
         d7:16:45:91:da:c2:4f:50:07:a7:50:d9:93:bc:a4:b0:c5:cc:
         46:47:ad:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWijlvfYLu0mRtptEY4buQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGQ4ZjFlMzhjOTFmNWIxN2MzZDFhNzIzNGU0OWM5Yzcw
ZGMzMjQwHhcNMjQxMTIzMDEwMTU5WhcNMjQxMTI0MDEwMTU5WjAzMTEwLwYDVQQD
EygzZGY3ZjBkZWQ5Njg2NzA2NWQ4NzllNDEwMmFiMTZkYTgzNGQwYTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZN7NgrnGqHlGKgVhWQZdIp4IOTH
JCqx9MmpcO+QDSYzlJKFDVpRfZ9qO+Mx4n9okQRSxISjPpMgqVoPJRIsiwDYT7Gr
pMB7Pq+WATv/b6/hbKWJhrmz8faBOFoP80R4c5Q63nEuWtcfFGmi+fMpReeF2K1/
8HFaoKVUUD1J9TlwaOOK/6yen05ySiSEGMyGZtAPub6AWiqPFINw38brR1s4us3c
u1Yon5aX3zNbp/OxSFjhOYhnT3nqR6jfevAsQr0kf9IJvinHMfn/FU60EfCtcRKF
GWZebDBIctr0OQ/+iXN+DMGSaCfjjR1/MyTm4D25PWojdERhVNvJFP6V3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD338N7ZaGcGXYeeQQKrFtqDTQpIMB8GA1UdIwQY
MBaAFG3djx44yR9bF8PRpyNOScnHDcMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMTZjOGYtNWUzNi00NzFmLTk1NTUt
ZjYyOTdhNzdhMzdiLzEvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMTZjOGYtNWUzNi00NzFmLTk1NTUtZjYyOTdhNzdhMzdi
LzEvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmv1G/P7q
sQEetzAjiGe8VKOo8sAHWb7YQaINxJ8gGDlhDWdg5WdidqkicA7BYCR8zEfsLq6y
1JklSYpguqaE/7w1bIN34/pH0aLleFuZl5szld9UzA5nyGHrDLlJD+pd2/94oiTL
1MspV68/kFLm5ukakxcBtja6suR1pzoxRDb4db1yzcn7x0rNUQWOBWK/OI6dfhXB
w5C76Qan/4gHxwFCnXqlyqDo6LKB3cDJW+u/9r9rFEP7Q1Qe3ge3Xg9vs3R9OhCg
3UenKZztYHbN/CRUBhrzqllBXt6+9LOZE9Mh+fSFpRSEsL8A1xZFkdrCT1AHp1DZ
k7yksMXMRketDw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:00 2024 by rpki-client on console-ams.rpki-client.org