Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
File:                     2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json)
Hash identifier:          2EhCDIUHjnk6NaScboH+wyhJ6f4AHFXiWE37n/K+AmE=
Subject key identifier:   38:22:4A:EE:78:7D:82:54:B3:E0:5D:5D:18:6E:FC:48:A9:EB:98:F5
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Certificate issuer:       /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial:       01936220DCA424E7FCE2C4D35683FE6F2153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
Manifest number:          0690
Signing time:             Mon 25 Nov 2024 07:02:20 +0000
Manifest this update:     Mon 25 Nov 2024 07:02:20 +0000
Manifest next update:     Tue 26 Nov 2024 07:02:20 +0000
Files and hashes:         1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: PSHZnzIfwMao1TJzr84hFsBiwEll940PFftUSOl7n14=)
                          2: CElCJSw-W2kVI2MjSAGMnSEF7C0.roa (hash: KruhnqAlNx/S083StbP1UHllzU4Ylb73fh0HEKlmqzQ=)
                          3: eSrUspaQOCRxUsfFahCR6t-kFmc.roa (hash: vTkEsgk1bI9SrzLLBSkPf/ZSmt+JAwkTrouz96MtbDs=)
                          4: hzFPEgqgrLZ304HPFsU19-s2y88.roa (hash: kc2vTGb+BjO7m2HTS4HmIV3Zqqje6pjZZQHbVNOQfg8=)
                          5: iy9K4Hze5dXCreYtZv0NttTqcas.roa (hash: AVBurdvPNRlGepMff0NnwbYDGfBCooPFh7tZerQuDlo=)
                          6: o4w3hLIRzpGbIJPYIf4uvRU0t4o.roa (hash: a5oMGQM7iGRQYbZtjSoZT4IRPvSllrw3VZphU1gzyY4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:20:dc:a4:24:e7:fc:e2:c4:d3:56:83:fe:6f:21:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
        Validity
            Not Before: Nov 25 07:02:20 2024 GMT
            Not After : Nov 26 07:02:20 2024 GMT
        Subject: CN=38224aee787d8254b3e05d5d186efc48a9eb98f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0e:e8:37:66:76:53:f0:1a:07:8d:d2:ff:7e:
                    42:c0:8b:3d:22:5b:b2:58:4f:75:cc:b4:49:d0:6b:
                    ab:d9:8c:10:a4:bb:bd:ae:e8:47:91:a3:f2:91:80:
                    50:b3:54:ac:b3:8a:2f:bb:44:54:6e:fd:4d:8a:c2:
                    47:e4:94:2f:99:e4:6a:c7:a7:9b:d8:b9:56:58:56:
                    3d:95:bb:b8:da:f6:93:1a:5e:d4:a3:a4:0a:6a:3b:
                    b1:74:ab:cc:35:bc:ae:46:c3:07:58:ed:2a:dd:b5:
                    f4:3e:d0:dc:46:d6:19:d6:a2:b4:26:cd:0e:75:87:
                    8e:69:59:1f:dc:c1:09:ed:58:d8:17:ec:4e:c6:1a:
                    97:f0:99:66:76:61:74:22:b1:cc:49:b5:e2:59:ae:
                    57:8e:36:d5:e1:79:90:17:a2:be:01:b4:42:d9:0c:
                    92:59:ca:97:74:dc:3a:fe:6b:8d:98:ff:71:11:27:
                    f2:3b:94:13:db:78:3a:95:3b:b1:a9:ac:14:f7:f8:
                    3e:6d:c0:90:0c:03:0d:1f:7f:3b:24:1b:6d:6f:7c:
                    c1:0b:d4:91:1c:2a:a1:de:4a:96:58:a1:eb:0d:de:
                    4d:93:37:70:dc:73:cb:67:e9:ae:39:17:9b:e0:88:
                    1e:ae:22:6b:ff:05:5d:88:56:88:35:ab:06:aa:4b:
                    39:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:22:4A:EE:78:7D:82:54:B3:E0:5D:5D:18:6E:FC:48:A9:EB:98:F5
            X509v3 Authority Key Identifier:
                keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5d:92:9e:37:4b:ed:f5:e9:4a:a3:f6:e5:54:af:a4:6e:38:
         17:8a:ce:82:0d:23:89:4a:e5:f3:81:33:ac:da:68:04:00:b3:
         70:8f:f4:13:7f:3d:08:0b:88:eb:e6:f9:08:d4:75:94:2d:8a:
         8a:88:76:47:fe:44:39:8f:44:45:54:40:ad:79:d1:dc:6a:0f:
         8c:70:57:cd:b8:1a:ff:8d:c2:49:f1:60:b3:02:e9:4b:7a:51:
         0a:ba:4f:44:42:97:db:cf:19:11:4b:c3:97:9d:e1:fe:d4:01:
         18:d4:f9:48:a4:bf:11:bb:c7:02:16:d8:2a:84:48:29:9a:e2:
         10:43:af:af:c4:f7:53:97:b7:00:b6:cb:e7:5a:ae:5a:5a:41:
         95:97:17:cd:d3:c3:1c:f3:95:e6:69:3a:26:91:e2:c9:96:a1:
         f9:41:6d:56:8f:5b:a6:eb:2a:61:6f:e1:53:4e:8b:b4:1c:81:
         7e:89:bb:cd:dd:7b:da:3c:f2:40:59:21:f1:5a:24:7a:57:21:
         13:ab:2c:86:84:49:6c:fd:ed:09:60:65:d3:c8:f8:c0:b5:31:
         c6:b2:a7:ca:cc:95:a5:08:ce:95:a4:16:8b:7e:98:7b:52:b5:
         cf:8f:b4:f8:21:e5:15:8b:c5:aa:ea:8f:35:59:c0:25:e1:76:
         7a:c9:61:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNiINykJOf84sTTVoP+byFTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk
ZTBlYzAwHhcNMjQxMTI1MDcwMjIwWhcNMjQxMTI2MDcwMjIwWjAzMTEwLwYDVQQD
EygzODIyNGFlZTc4N2Q4MjU0YjNlMDVkNWQxODZlZmM0OGE5ZWI5OGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww7oN2Z2U/AaB43S/35CwIs9Iluy
WE91zLRJ0Gur2YwQpLu9ruhHkaPykYBQs1Sss4ovu0RUbv1NisJH5JQvmeRqx6eb
2LlWWFY9lbu42vaTGl7Uo6QKajuxdKvMNbyuRsMHWO0q3bX0PtDcRtYZ1qK0Js0O
dYeOaVkf3MEJ7VjYF+xOxhqX8JlmdmF0IrHMSbXiWa5XjjbV4XmQF6K+AbRC2QyS
WcqXdNw6/muNmP9xESfyO5QT23g6lTuxqawU9/g+bcCQDAMNH387JBttb3zBC9SR
HCqh3kqWWKHrDd5Nkzdw3HPLZ+muOReb4IgeriJr/wVdiFaINasGqks5cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgiSu54fYJUs+BdXRhu/Eip65j1MB8GA1UdIwQY
MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt
NmYyY2Y0ZjAzY2ViLzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi
LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABl2SnjdL
7fXpSqP25VSvpG44F4rOgg0jiUrl84EzrNpoBACzcI/0E389CAuI6+b5CNR1lC2K
ioh2R/5EOY9ERVRArXnR3GoPjHBXzbga/43CSfFgswLpS3pRCrpPREKX288ZEUvD
l53h/tQBGNT5SKS/EbvHAhbYKoRIKZriEEOvr8T3U5e3ALbL51quWlpBlZcXzdPD
HPOV5mk6JpHiyZah+UFtVo9bpusqYW/hU06LtByBfom7zd172jzyQFkh8Vokelch
E6sshoRJbP3tCWBl08j4wLUxxrKnysyVpQjOlaQWi36Ye1K1z4+0+CHlFYvFquqP
NVnAJeF2eslhpw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 11:48:34 2024 by rpki-client on console-ams.rpki-client.org