Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File:                     3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier:          VPOpdQFwhlFB44lfzuvWt73o05QayJMxwKC/EXfZifQ=
Subject key identifier:   B9:EC:B8:7F:31:1E:9B:17:CC:91:BC:9E:7B:ED:11:A5:9C:7B:5D:97
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer:       /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial:       01935319D21F84E01E33EDC77B7DEF298FB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number:          0B54
Signing time:             Fri 22 Nov 2024 09:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 09:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 09:00:21 +0000
Files and hashes:         1: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: QqUgsFH7kdjeXKUBFzuqwuI9X/M71PliI7P1MxMLSaU=)
                          2: 6fkN5rOLJ6gL-NpTeta8_RIxCBE.roa (hash: f2ZwlMcvJoCKbYL6euCpxwS8YGFQEIwUnezA/2zOaSo=)
                          3: SznUuWQXY42y86-2y9O4J3VaL9E.roa (hash: DKAxOfGUZHljgYta1c/W9dzKmlbhy9oxWOvCTaV2SYE=)
                          4: xCfTRuUS3uwyEmrVx2w1GJrMFKg.roa (hash: 34fBiPxM8cORffxmx2+b8/RXm5L8WztubAuK7vSGYPo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:19:d2:1f:84:e0:1e:33:ed:c7:7b:7d:ef:29:8f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
        Validity
            Not Before: Nov 22 09:00:21 2024 GMT
            Not After : Nov 23 09:00:21 2024 GMT
        Subject: CN=b9ecb87f311e9b17cc91bc9e7bed11a59c7b5d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:5a:1c:91:2b:05:54:5a:2c:0d:6e:41:ea:
                    c7:97:48:6d:e2:06:be:86:05:d7:15:d0:4a:74:7e:
                    43:2a:3b:2d:de:89:a2:dc:53:d8:8a:19:79:2f:56:
                    3f:11:95:b9:f7:87:2d:41:2b:26:bb:7f:17:e1:40:
                    0c:dd:df:32:4c:00:3a:0d:54:73:e5:d6:31:8a:d5:
                    2e:5d:9e:e1:74:48:c2:02:9f:e4:9f:10:41:44:db:
                    62:36:4c:99:1d:72:db:ce:24:d2:1c:0a:63:b7:39:
                    05:90:c0:fd:67:a7:85:98:28:a8:00:f9:c0:1f:81:
                    6a:0e:73:18:5a:41:80:e3:a6:46:03:c9:fe:4b:0c:
                    52:2e:12:79:2d:87:df:ca:5a:d1:b4:64:da:d5:bd:
                    01:1f:e6:77:74:b0:8e:5b:1e:47:15:c3:66:c6:db:
                    39:f6:cd:44:7c:ec:c2:1c:69:84:fd:a1:72:c2:bb:
                    78:99:46:73:f6:f1:de:55:76:f6:78:fd:5b:be:34:
                    d6:5d:f9:e8:13:76:a1:00:d4:87:8d:47:c8:50:1b:
                    18:02:b0:31:d6:b8:00:9f:be:d1:33:65:5b:57:40:
                    6a:00:9e:d4:23:ef:70:92:69:ba:ee:23:35:2c:e9:
                    b3:74:b5:22:3b:4a:d5:2a:20:70:22:c9:6d:17:55:
                    df:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EC:B8:7F:31:1E:9B:17:CC:91:BC:9E:7B:ED:11:A5:9C:7B:5D:97
            X509v3 Authority Key Identifier:
                keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:42:62:a9:ca:5d:ad:93:97:8c:bc:9a:a4:84:c8:5b:fb:1c:
         af:d3:e2:22:83:d7:a8:d7:97:10:88:69:cf:1d:ce:0a:a7:38:
         2c:86:0d:40:01:1c:14:61:3b:22:09:eb:bc:79:da:d8:a6:45:
         be:7d:da:48:b9:55:66:d7:18:4c:fc:db:98:8f:cb:26:ed:73:
         a2:d5:ed:e6:9d:34:1a:81:8f:f4:2c:93:09:09:af:1f:e5:f6:
         5e:76:76:4f:2e:e1:5f:93:57:7d:9f:98:86:1e:e7:94:69:7a:
         7c:97:2b:2b:2f:52:a3:95:65:0d:76:c8:f5:ce:8f:2e:e5:f6:
         2d:23:f3:52:18:15:0f:6a:4e:d0:7e:9e:64:45:00:50:6d:65:
         e4:0c:30:9f:6d:ae:11:9e:10:16:50:b9:ed:47:c4:64:46:4f:
         0d:5b:a8:78:a0:9f:9f:51:16:d4:5a:49:67:09:9d:eb:10:06:
         35:34:b1:b7:c8:d3:c2:5a:7a:5a:25:17:31:59:ac:f2:50:2e:
         c3:1f:c7:86:ea:26:bc:3a:fb:04:b4:44:3c:67:90:71:89:d3:
         0e:d9:bc:cf:a6:c0:ab:56:5a:69:ec:25:b4:67:09:27:d8:8b:
         03:d3:21:73:19:f6:58:92:e3:cb:3e:f2:f7:bf:49:77:48:cf:
         18:35:f6:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTGdIfhOAeM+3He33vKY+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNjQwMzM5ZTU5YWRkYzc1ZmQ5NzgxMDFiNDAwODJiNWQy
Yjg3OTYwHhcNMjQxMTIyMDkwMDIxWhcNMjQxMTIzMDkwMDIxWjAzMTEwLwYDVQQD
EyhiOWVjYjg3ZjMxMWU5YjE3Y2M5MWJjOWU3YmVkMTFhNTljN2I1ZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkFaHJErBVRaLA1uQerHl0ht4ga+
hgXXFdBKdH5DKjst3omi3FPYihl5L1Y/EZW594ctQSsmu38X4UAM3d8yTAA6DVRz
5dYxitUuXZ7hdEjCAp/knxBBRNtiNkyZHXLbziTSHApjtzkFkMD9Z6eFmCioAPnA
H4FqDnMYWkGA46ZGA8n+SwxSLhJ5LYffylrRtGTa1b0BH+Z3dLCOWx5HFcNmxts5
9s1EfOzCHGmE/aFywrt4mUZz9vHeVXb2eP1bvjTWXfnoE3ahANSHjUfIUBsYArAx
1rgAn77RM2VbV0BqAJ7UI+9wkmm67iM1LOmzdLUiO0rVKiBwIsltF1XfpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnsuH8xHpsXzJG8nnvtEaWce12XMB8GA1UdIwQY
MBaAFN1kAznlmt3HX9l4EBtACCtdK4eWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAt
NjFiNzMzNTRhYmRiLzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAtNjFiNzMzNTRhYmRi
LzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUJiqcpd
rZOXjLyapITIW/scr9PiIoPXqNeXEIhpzx3OCqc4LIYNQAEcFGE7IgnrvHna2KZF
vn3aSLlVZtcYTPzbmI/LJu1zotXt5p00GoGP9CyTCQmvH+X2XnZ2Ty7hX5NXfZ+Y
hh7nlGl6fJcrKy9So5VlDXbI9c6PLuX2LSPzUhgVD2pO0H6eZEUAUG1l5Awwn22u
EZ4QFlC57UfEZEZPDVuoeKCfn1EW1FpJZwmd6xAGNTSxt8jTwlp6WiUXMVms8lAu
wx/HhuomvDr7BLREPGeQcYnTDtm8z6bAq1ZaaewltGcJJ9iLA9Mhcxn2WJLjyz7y
979Jd0jPGDX2Hg==
-----END CERTIFICATE-----