Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File:                     ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier:          ct6N5zEfNvTrUBw/g8Ar9az5zuwZBveYkLu0Talektc=
Subject key identifier:   2E:28:70:93:87:1E:8F:E6:2B:E5:7A:86:4D:44:C3:C6:23:B6:11:36
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer:       /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial:       0193549B3FD1483B839DB240C536442AF022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 16:01:20 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:20 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:20 +0000
Files and hashes:         1: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: wD69pRzEaamO27mt7xagL20OXPhwb0mzcm43Y38JqDA=)
                          2: dKtAHFlVdItnqZ3pVgm_HN4AmR4.roa (hash: MQ5kFrVVvp3ZOMg/DcbVXA/5EDT1w9XP/Fgj8Ev1rEM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:3f:d1:48:3b:83:9d:b2:40:c5:36:44:2a:f0:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
        Validity
            Not Before: Nov 22 16:01:20 2024 GMT
            Not After : Nov 23 16:01:20 2024 GMT
        Subject: CN=2e287093871e8fe62be57a864d44c3c623b61136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ab:e8:d4:08:c0:e7:30:f6:2a:85:b7:90:a1:
                    c2:2b:05:e2:3c:76:50:9a:f6:e4:ad:42:e3:19:a7:
                    6e:ab:73:31:31:83:43:ec:6b:55:f2:ae:8f:9a:cc:
                    75:37:66:51:6d:e0:51:bf:60:09:0a:4f:a4:3f:a5:
                    24:20:3b:1e:de:dd:6f:76:cb:ce:14:fc:72:26:d2:
                    7a:5d:f0:ec:71:50:d0:88:2f:cb:f4:59:26:6c:3c:
                    46:19:54:11:a6:36:e0:e9:6f:09:fc:ec:57:35:a0:
                    85:7f:76:ea:bb:9e:fd:3e:fd:af:0b:fd:8b:60:30:
                    a0:f2:bd:73:ae:00:6d:0f:3b:39:50:b4:e5:48:be:
                    76:36:31:00:e4:1c:fa:ad:d3:62:89:d8:aa:48:26:
                    53:06:e7:77:6d:97:b0:fe:b0:53:86:61:89:69:40:
                    a7:3f:74:77:52:8e:e0:44:91:75:7e:99:11:83:b9:
                    83:2a:31:e2:80:e0:c4:ed:be:af:2a:f1:93:7a:86:
                    13:da:3c:16:9c:5d:18:93:95:a7:33:25:0a:e6:67:
                    2b:a7:9a:1f:50:de:99:9e:be:e4:1c:19:aa:91:9c:
                    f2:76:3e:74:e4:06:77:6d:67:96:05:5e:7e:3d:d4:
                    3e:c3:62:a6:1a:97:ab:a0:f4:13:af:9d:e9:72:be:
                    50:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:28:70:93:87:1E:8F:E6:2B:E5:7A:86:4D:44:C3:C6:23:B6:11:36
            X509v3 Authority Key Identifier:
                keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:49:98:91:4d:6e:fa:d3:a2:2f:b3:05:6f:7b:19:cf:c7:fd:
         6a:d0:ad:9c:05:c6:a3:26:08:7d:b2:49:72:9c:e3:5f:c5:56:
         c6:3d:ff:d8:15:d6:bf:13:28:48:a3:ea:ec:3f:d8:04:b6:b4:
         e5:e1:0f:6a:ab:55:19:b9:52:1a:71:9b:19:e8:b6:5a:f5:f0:
         e5:ae:c5:57:5c:a8:9c:5d:79:f7:94:1b:ce:75:c0:3a:ad:d4:
         c8:ef:f7:0a:51:c6:68:8f:c0:43:e5:24:2e:c1:8e:c2:4f:10:
         2c:ef:39:40:e0:88:1d:71:f8:c0:c7:13:85:d0:69:40:e2:a0:
         05:d8:46:b1:6d:86:1c:d4:92:99:48:1e:7e:f1:ad:3a:30:59:
         43:ac:31:b1:28:2a:a8:02:d9:03:9a:00:74:96:47:4d:d6:6d:
         83:b0:67:4e:ce:5e:99:22:a8:28:0f:0f:e5:33:ce:d0:60:98:
         5c:7c:b8:d1:70:d7:ca:9d:6f:a7:71:7a:05:65:be:c0:ad:97:
         a3:8b:e2:c4:39:8d:41:83:59:b2:fa:2a:65:1d:aa:45:be:89:
         41:99:f1:08:a4:c0:f7:23:c5:0f:e6:01:3e:08:82:02:e4:2c:
         ab:2a:fa:d4:de:41:5d:45:7f:88:56:59:85:a9:2b:ff:3a:12:
         d9:e6:d7:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmz/RSDuDnbJAxTZEKvAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YzI5MzM4MGJjNDFmNTJkOTEzMTU4NWE4NTgwMDM4Zjky
ZjVkY2MwHhcNMjQxMTIyMTYwMTIwWhcNMjQxMTIzMTYwMTIwWjAzMTEwLwYDVQQD
EygyZTI4NzA5Mzg3MWU4ZmU2MmJlNTdhODY0ZDQ0YzNjNjIzYjYxMTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qvo1AjA5zD2KoW3kKHCKwXiPHZQ
mvbkrULjGaduq3MxMYND7GtV8q6Pmsx1N2ZRbeBRv2AJCk+kP6UkIDse3t1vdsvO
FPxyJtJ6XfDscVDQiC/L9FkmbDxGGVQRpjbg6W8J/OxXNaCFf3bqu579Pv2vC/2L
YDCg8r1zrgBtDzs5ULTlSL52NjEA5Bz6rdNiidiqSCZTBud3bZew/rBThmGJaUCn
P3R3Uo7gRJF1fpkRg7mDKjHigODE7b6vKvGTeoYT2jwWnF0Yk5WnMyUK5mcrp5of
UN6Znr7kHBmqkZzydj505AZ3bWeWBV5+PdQ+w2KmGperoPQTr53pcr5QAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4ocJOHHo/mK+V6hk1Ew8YjthE2MB8GA1UdIwQY
MBaAFGXCkzgLxB9S2RMVhahYADj5L13MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iMTcwZmItYTFiZS00YmQ5LWFkYjYt
ZmU2ZGMxNzU4M2UzLzEvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9iMTcwZmItYTFiZS00YmQ5LWFkYjYtZmU2ZGMxNzU4M2Uz
LzEvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0mYkU1u
+tOiL7MFb3sZz8f9atCtnAXGoyYIfbJJcpzjX8VWxj3/2BXWvxMoSKPq7D/YBLa0
5eEPaqtVGblSGnGbGei2WvXw5a7FV1yonF1595QbznXAOq3UyO/3ClHGaI/AQ+Uk
LsGOwk8QLO85QOCIHXH4wMcThdBpQOKgBdhGsW2GHNSSmUgefvGtOjBZQ6wxsSgq
qALZA5oAdJZHTdZtg7BnTs5emSKoKA8P5TPO0GCYXHy40XDXyp1vp3F6BWW+wK2X
o4vixDmNQYNZsvoqZR2qRb6JQZnxCKTA9yPFD+YBPgiCAuQsqyr61N5BXUV/iFZZ
hakr/zoS2ebXYw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:22:16 2024 by rpki-client on console-fra.rpki-client.org