Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File:                     3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier:          yrbeK1fMBY+oGe5y7+AWFxR/qXdTjAgFZetZELTfync=
Subject key identifier:   11:D4:6D:A4:70:92:D9:39:73:51:A6:35:60:3F:51:7D:50:1D:5D:B6
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer:       /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial:       019355AD6CA2B1F1C61CCE3705F6685F4A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number:          1374
Signing time:             Fri 22 Nov 2024 21:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:49 +0000
Files and hashes:         1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: +zYOg/9IGepDZ38W8g/JowIY46vqdWY5ncawtS4AXQM=)
                          2: CyempUs9G7crlKgEXGYkqL8B8wE.roa (hash: VrZnY0CvalO1rmNCe7+yc0tWyM+fD+ePoUBAvdy5Pvo=)
                          3: D8RtogzfsB_kP_gRk_gvTPM_aNk.roa (hash: UM6ufl/pzfW+mbY+58k2eg+dPIl66tHtZoY6C4PYT1M=)
                          4: NNjFOpBLRVEUX5OxHj__hE1Blwc.roa (hash: lHB1qkl5V12j5mwvNZLCnlEnmIOQHK42fB9f+fxa53o=)
                          5: YR4Mykm5WAmBOPtUiAJR9aA2ZP4.roa (hash: YauZjfnwU9X9l8XsstNAOs4CW/zhQvCYDGwtTLdiwro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:6c:a2:b1:f1:c6:1c:ce:37:05:f6:68:5f:4a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
        Validity
            Not Before: Nov 22 21:00:49 2024 GMT
            Not After : Nov 23 21:00:49 2024 GMT
        Subject: CN=11d46da47092d9397351a635603f517d501d5db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:55:c2:94:72:5a:c6:ab:41:b8:0a:90:31:
                    57:98:0d:cd:17:07:a2:d0:ff:54:3f:ae:d1:9e:4d:
                    ca:0b:20:ee:8a:35:14:98:c0:10:d4:c9:cb:e6:48:
                    b7:68:51:af:81:00:82:d8:ac:55:82:b1:f5:88:ea:
                    69:29:e6:1c:dd:13:57:a0:e3:93:a6:61:05:c3:66:
                    12:ad:fe:6b:67:e7:57:d3:94:f5:b8:8d:aa:bd:fb:
                    97:85:2e:82:82:33:5b:24:6d:7b:85:31:57:0e:a4:
                    21:49:b5:e8:6c:2a:82:e9:a9:c8:7c:8f:cb:f2:99:
                    c5:71:75:2b:5d:74:2d:5c:aa:a2:9e:61:a5:ac:db:
                    1c:09:52:ad:ae:a5:74:ec:c7:e9:f4:c1:99:1f:d3:
                    e0:53:8f:09:c9:f4:6d:0e:a9:3e:99:91:55:c3:ef:
                    9c:7d:b2:04:06:3b:1a:16:7f:1d:9d:4f:31:9b:86:
                    ab:bf:ba:89:7b:d4:65:b0:75:72:45:8c:32:ba:c8:
                    bb:ba:b0:cf:3f:a1:7e:d4:a3:83:a8:8d:dc:81:6b:
                    3b:bf:54:6c:2e:e2:04:99:42:b4:14:66:7f:da:6a:
                    76:88:da:e5:bc:7b:3b:78:d8:18:5c:8c:b6:ef:66:
                    27:2f:f0:dd:dc:37:82:ba:02:9c:37:15:4f:a2:8c:
                    87:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D4:6D:A4:70:92:D9:39:73:51:A6:35:60:3F:51:7D:50:1D:5D:B6
            X509v3 Authority Key Identifier:
                keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:dd:1b:a0:74:fa:5e:54:05:65:88:a5:3e:88:f9:2a:57:9b:
         52:e8:9e:f4:f6:b8:4c:b7:94:bb:9d:1c:36:c7:3a:0c:1b:2a:
         41:06:45:52:9a:2f:4b:db:27:5f:af:ce:8b:8e:6d:05:1d:a8:
         fb:13:0d:31:56:b3:99:3b:ed:7b:61:5b:46:4e:98:7a:57:73:
         6f:12:23:7f:f0:0b:6a:69:ae:a5:1f:4c:ac:2f:8c:bf:c2:fe:
         24:88:c3:65:1d:14:0a:68:07:39:46:62:00:25:5a:fd:1a:4a:
         80:d7:d9:d3:ac:0e:39:97:64:45:23:7b:9a:66:f5:06:59:71:
         29:56:ef:7b:c0:c7:3c:d3:b4:44:d9:5e:ed:c4:5b:6d:1b:e7:
         67:41:25:a8:6f:a1:dd:24:a7:ac:c3:80:02:cb:69:eb:8f:df:
         39:f6:68:87:bf:66:bd:77:31:4b:73:55:37:23:ce:1f:d6:ae:
         42:3a:c7:10:40:1e:1d:e6:cb:a3:ec:26:50:77:26:fb:00:9e:
         26:72:19:51:f7:65:e0:30:01:e5:c9:a8:1a:5c:46:a2:aa:a6:
         c1:73:9f:72:df:33:4e:db:c1:52:b3:6e:53:f6:96:ea:64:a5:
         5f:9a:a8:05:37:4c:8d:dd:b0:0f:a4:d0:73:2e:a0:4f:46:17:
         86:9d:39:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVrWyisfHGHM43BfZoX0oWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMzg4NDAyMWQxYjAyZThjMTZiNTU1NzQzZGZlYjlkYThl
NDhlMzEwHhcNMjQxMTIyMjEwMDQ5WhcNMjQxMTIzMjEwMDQ5WjAzMTEwLwYDVQQD
EygxMWQ0NmRhNDcwOTJkOTM5NzM1MWE2MzU2MDNmNTE3ZDUwMWQ1ZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6VVwpRyWsarQbgKkDFXmA3NFwei
0P9UP67Rnk3KCyDuijUUmMAQ1MnL5ki3aFGvgQCC2KxVgrH1iOppKeYc3RNXoOOT
pmEFw2YSrf5rZ+dX05T1uI2qvfuXhS6CgjNbJG17hTFXDqQhSbXobCqC6anIfI/L
8pnFcXUrXXQtXKqinmGlrNscCVKtrqV07Mfp9MGZH9PgU48JyfRtDqk+mZFVw++c
fbIEBjsaFn8dnU8xm4arv7qJe9RlsHVyRYwyusi7urDPP6F+1KODqI3cgWs7v1Rs
LuIEmUK0FGZ/2mp2iNrlvHs7eNgYXIy272YnL/Dd3DeCugKcNxVPooyHHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHUbaRwktk5c1GmNWA/UX1QHV22MB8GA1UdIwQY
MBaAFNw4hAIdGwLowWtVV0Pf652o5I4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEt
ZDhiNGUwZDBkNmQ1LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEtZDhiNGUwZDBkNmQ1
LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGt0boHT6
XlQFZYilPoj5KlebUuie9Pa4TLeUu50cNsc6DBsqQQZFUpovS9snX6/Oi45tBR2o
+xMNMVazmTvte2FbRk6YeldzbxIjf/ALammupR9MrC+Mv8L+JIjDZR0UCmgHOUZi
ACVa/RpKgNfZ06wOOZdkRSN7mmb1BllxKVbve8DHPNO0RNle7cRbbRvnZ0ElqG+h
3SSnrMOAAstp64/fOfZoh79mvXcxS3NVNyPOH9auQjrHEEAeHebLo+wmUHcm+wCe
JnIZUfdl4DAB5cmoGlxGoqqmwXOfct8zTtvBUrNuU/aW6mSlX5qoBTdMjd2wD6TQ
cy6gT0YXhp05EA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:08 2024 by rpki-client on console-ams.rpki-client.org