Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File:                     x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier:          Y7l7iaIeRMZjJigvUj5BCumyIRCAqjzsANRIuYImQoQ=
Subject key identifier:   88:70:BA:A0:06:8D:E5:40:FE:64:91:89:4B:98:A7:88:2A:C6:7E:25
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer:       /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial:       0193633212910B96476933CE70E62B060D3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number:          1378
Signing time:             Mon 25 Nov 2024 12:00:46 +0000
Manifest this update:     Mon 25 Nov 2024 12:00:46 +0000
Manifest next update:     Tue 26 Nov 2024 12:00:46 +0000
Files and hashes:         1: QzCWfKkIlTsn7OABmpPfVZdjA08.roa (hash: 1exvlOb88X97bceqP4vdNjyHuPQ8qEkX7JXwHu4JOCE=)
                          2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: NQvu1FtGt/ufGYY+Ji+67A2nnkgqJqPCplqPYaqciyU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:32:12:91:0b:96:47:69:33:ce:70:e6:2b:06:0d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
        Validity
            Not Before: Nov 25 12:00:46 2024 GMT
            Not After : Nov 26 12:00:46 2024 GMT
        Subject: CN=8870baa0068de540fe6491894b98a7882ac67e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:33:0e:3d:83:ab:1d:ff:13:7f:7b:2b:47:77:
                    b0:a6:74:4e:d8:13:2f:f7:6a:6c:36:92:f3:db:68:
                    dd:b0:f1:dd:04:dd:55:05:81:7c:85:a0:1c:f6:3b:
                    8f:3e:a5:5e:c4:44:59:86:73:b7:af:7d:80:74:7b:
                    d4:ec:3b:75:da:78:a8:30:d9:7a:22:f0:b8:56:9f:
                    24:10:44:f1:15:d5:b4:a8:7a:bd:25:20:1a:76:cc:
                    74:71:01:c8:dc:57:96:97:a6:2a:35:26:d8:ab:f5:
                    4e:ba:3a:eb:75:b0:c7:13:a6:91:87:80:d8:b4:ff:
                    28:7b:00:5f:cf:20:82:e5:13:e0:f7:e8:ce:59:a4:
                    ed:00:c2:40:f7:8f:75:d5:77:16:6d:f0:b2:a7:ee:
                    36:03:15:db:05:fe:91:ff:17:48:04:9d:6c:f4:21:
                    95:d8:2c:77:e3:60:41:e2:7e:22:72:8d:98:cb:cc:
                    c3:6f:ae:d8:32:c0:6a:14:58:63:a2:7e:bc:35:21:
                    3b:fa:1b:db:d2:26:d3:9d:8f:2e:f7:f3:2f:e4:72:
                    d3:19:45:8e:13:0b:77:0f:4f:78:25:25:24:dd:d4:
                    74:2f:70:68:59:9c:cc:57:d3:42:2d:b4:ba:76:e3:
                    09:0b:b3:cb:5f:30:30:90:0a:19:b1:f9:52:72:ff:
                    74:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:70:BA:A0:06:8D:E5:40:FE:64:91:89:4B:98:A7:88:2A:C6:7E:25
            X509v3 Authority Key Identifier:
                keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e9:ef:38:a4:5d:56:db:31:15:5e:24:db:7b:5f:65:57:f0:
         06:a8:f7:ce:82:63:08:d8:15:8d:a4:b0:f0:16:7d:b8:3c:11:
         f9:68:15:5b:ee:99:7f:94:c6:b9:2c:94:10:5a:fa:64:10:cf:
         8b:01:b8:dc:28:bd:9c:45:05:d1:94:f5:ea:e3:13:9f:35:e8:
         60:bb:93:a5:b6:c1:9a:b5:6a:33:36:8c:7b:a2:bd:16:d2:ac:
         d8:5f:87:22:89:43:65:a5:34:0f:ca:11:a8:85:95:80:9e:15:
         73:fa:e4:b4:5f:b8:59:c2:be:fd:f8:56:04:4f:f3:2f:0d:a5:
         9c:45:ee:d1:64:50:16:66:10:fd:18:2e:6d:79:89:15:f4:c9:
         8e:94:46:9e:47:16:0b:ed:0e:55:1e:60:7f:16:c3:3d:cc:61:
         9b:9e:f4:ff:fe:6d:40:b0:c7:1c:31:3f:67:04:00:4f:9b:b4:
         e2:87:2b:a9:16:66:b9:cc:d5:4c:ba:15:42:16:f2:6d:41:a9:
         ca:ad:f8:c6:ea:7b:75:1b:15:2b:f0:f6:c6:4a:5b:13:7a:49:
         a1:e9:c2:7b:5a:d8:50:a2:3a:17:d6:d2:54:e7:b9:22:0f:ee:
         85:9d:bc:8c:58:f2:c0:dd:10:29:29:c6:1d:95:df:09:23:0b:
         95:d2:82:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNjMhKRC5ZHaTPOcOYrBg0+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2E3NjM5MjU1NjExOGEwY2VlYjU0MTMwNjY5YzhlNjk2
ZjE1NWIwHhcNMjQxMTI1MTIwMDQ2WhcNMjQxMTI2MTIwMDQ2WjAzMTEwLwYDVQQD
Eyg4ODcwYmFhMDA2OGRlNTQwZmU2NDkxODk0Yjk4YTc4ODJhYzY3ZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjMOPYOrHf8Tf3srR3ewpnRO2BMv
92psNpLz22jdsPHdBN1VBYF8haAc9juPPqVexERZhnO3r32AdHvU7Dt12nioMNl6
IvC4Vp8kEETxFdW0qHq9JSAadsx0cQHI3FeWl6YqNSbYq/VOujrrdbDHE6aRh4DY
tP8oewBfzyCC5RPg9+jOWaTtAMJA94911XcWbfCyp+42AxXbBf6R/xdIBJ1s9CGV
2Cx342BB4n4ico2Yy8zDb67YMsBqFFhjon68NSE7+hvb0ibTnY8u9/Mv5HLTGUWO
Ewt3D094JSUk3dR0L3BoWZzMV9NCLbS6duMJC7PLXzAwkAoZsflScv90owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhwuqAGjeVA/mSRiUuYp4gqxn4lMB8GA1UdIwQY
MBaAFMd6djklVhGKDO61QTBmnI5pbxVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQt
ZmZiM2E5NjUzOGFkLzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQtZmZiM2E5NjUzOGFk
LzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnunvOKRd
VtsxFV4k23tfZVfwBqj3zoJjCNgVjaSw8BZ9uDwR+WgVW+6Zf5TGuSyUEFr6ZBDP
iwG43Ci9nEUF0ZT16uMTnzXoYLuTpbbBmrVqMzaMe6K9FtKs2F+HIolDZaU0D8oR
qIWVgJ4Vc/rktF+4WcK+/fhWBE/zLw2lnEXu0WRQFmYQ/RgubXmJFfTJjpRGnkcW
C+0OVR5gfxbDPcxhm570//5tQLDHHDE/ZwQAT5u04ocrqRZmuczVTLoVQhbybUGp
yq34xup7dRsVK/D2xkpbE3pJoenCe1rYUKI6F9bSVOe5Ig/uhZ28jFjywN0QKSnG
HZXfCSMLldKCMw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:15:54 2024 by rpki-client on console-ams.rpki-client.org