Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
File:                     IMotTLPla10plwqX_GResv1odqE.mft (raw, json)
Hash identifier:          4bC6/MK8DCl0WgAGTk/gwz7Rb+73SnQj5zym+USv4O4=
Subject key identifier:   0D:00:B2:58:BF:C1:AF:E9:6A:9E:D0:D5:68:0F:36:90:1C:1A:D0:A8
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Certificate issuer:       /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial:       019369A1B9DD3F315D87D258F2C9766254CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
Manifest number:          10AC
Signing time:             Tue 26 Nov 2024 18:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:26 +0000
Files and hashes:         1: IMotTLPla10plwqX_GResv1odqE.crl (hash: RaxA2UAbdTvJedtJXfDBRUz2IxLDzctNKIsdRkmbq4g=)
                          2: nrhTqG25YUU6xsAK8Z5GsgtqrGA.roa (hash: cFPI+6+Oe1PQq9q+uUpOpUBFtvwk0UZ+3ljl5wiaXx8=)
                          3: pYhICl89Ls11vtEswoMsnUNSRuQ.roa (hash: fQ5yFNa9lxcOfLBJ7cM3WnpRj9cJzZm0OE0+CUsUxM4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:b9:dd:3f:31:5d:87:d2:58:f2:c9:76:62:54:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
        Validity
            Not Before: Nov 26 18:00:26 2024 GMT
            Not After : Nov 27 18:00:26 2024 GMT
        Subject: CN=0d00b258bfc1afe96a9ed0d5680f36901c1ad0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:d1:12:d9:21:38:5d:e0:33:54:4d:46:b1:
                    fd:4e:55:b2:bf:8b:15:b4:5e:ef:aa:ab:83:0f:bd:
                    a2:7b:dd:29:82:d8:37:4f:63:e2:1e:4e:b4:a2:36:
                    cd:34:e7:0e:5a:e4:e4:4f:b4:fb:80:dc:65:ce:f1:
                    e8:95:91:a4:36:48:a6:94:85:87:49:f3:a3:41:69:
                    45:42:5b:a2:d3:48:db:de:5a:e8:d9:06:61:10:29:
                    97:63:58:36:ea:c2:2b:59:a5:0b:7a:d0:90:1c:20:
                    dd:03:6f:a3:05:ef:87:a1:b6:fb:66:42:0d:62:96:
                    98:86:ff:72:4a:af:f9:b4:95:d9:50:fd:f7:60:2e:
                    01:0b:3a:ea:a3:f6:0e:fe:e2:af:ad:e9:d0:81:dd:
                    c0:d6:d9:e3:bf:38:0d:68:f1:61:69:8b:96:f2:7e:
                    d6:73:c1:59:a8:99:42:c0:48:e6:d9:ee:29:45:9a:
                    45:c5:f4:3a:12:6d:87:02:b2:a8:98:f7:26:cd:1c:
                    2d:80:21:0e:19:b1:7f:61:5f:07:3f:4f:59:c5:28:
                    18:d4:c8:fd:88:4e:f6:cc:85:2c:91:bf:9f:29:63:
                    6d:40:8a:bd:4c:8b:6d:06:14:f6:03:af:72:df:fb:
                    29:0d:bd:4f:a5:a5:e6:80:c4:1c:1d:09:61:6b:96:
                    f2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:00:B2:58:BF:C1:AF:E9:6A:9E:D0:D5:68:0F:36:90:1C:1A:D0:A8
            X509v3 Authority Key Identifier:
                keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:13:32:b1:7b:5f:ba:8c:bc:fc:b7:b9:2a:5b:ce:b5:23:34:
         ee:f6:58:88:ac:cc:57:39:da:56:2b:16:67:fd:be:48:7f:09:
         4b:42:a7:89:bb:3c:7b:8f:63:12:9e:f2:78:1d:c7:f2:79:31:
         d6:48:50:87:dc:1b:ff:2e:d6:be:14:0e:fe:81:83:ae:4d:f1:
         99:cf:5b:2f:1e:11:73:41:6c:e1:ef:d4:4a:33:f5:56:0c:10:
         f4:8c:1c:35:f1:01:be:09:f2:86:45:05:f3:d2:69:f1:06:e0:
         f2:fc:75:24:ce:9f:91:75:f9:25:a8:79:e2:02:a5:5a:4d:db:
         30:f5:73:39:4e:fd:72:50:ce:d2:41:a1:3c:a2:84:1f:5b:9a:
         57:b7:9f:63:67:32:80:ef:02:06:85:5e:47:47:bf:50:f9:22:
         59:fc:cb:fc:6d:3f:12:92:6f:bf:10:42:3f:3f:cf:92:e7:83:
         07:f1:c2:02:bd:01:57:a5:d7:74:09:ff:c9:b4:8e:68:89:69:
         5e:e3:08:14:88:36:a5:b0:13:2f:3c:c4:53:77:47:aa:2e:19:
         ea:db:ea:1e:ab:d7:27:90:cc:3f:61:da:ac:7b:a2:8b:d3:3f:
         42:b4:ae:93:a0:31:6e:70:ee:8b:c1:7e:50:3c:1f:a0:f3:ea:
         5f:54:bf:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNpobndPzFdh9JY8sl2YlTPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwY2EyZDRjYjNlNTZiNWQyOTk3MGE5N2ZjNjQ1ZWIyZmQ2
ODc2YTEwHhcNMjQxMTI2MTgwMDI2WhcNMjQxMTI3MTgwMDI2WjAzMTEwLwYDVQQD
EygwZDAwYjI1OGJmYzFhZmU5NmE5ZWQwZDU2ODBmMzY5MDFjMWFkMGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6zREtkhOF3gM1RNRrH9TlWyv4sV
tF7vqquDD72ie90pgtg3T2PiHk60ojbNNOcOWuTkT7T7gNxlzvHolZGkNkimlIWH
SfOjQWlFQlui00jb3lro2QZhECmXY1g26sIrWaULetCQHCDdA2+jBe+Hobb7ZkIN
YpaYhv9ySq/5tJXZUP33YC4BCzrqo/YO/uKvrenQgd3A1tnjvzgNaPFhaYuW8n7W
c8FZqJlCwEjm2e4pRZpFxfQ6Em2HArKomPcmzRwtgCEOGbF/YV8HP09ZxSgY1Mj9
iE72zIUskb+fKWNtQIq9TIttBhT2A69y3/spDb1PpaXmgMQcHQlha5byDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0Asli/wa/pap7Q1WgPNpAcGtCoMB8GA1UdIwQY
MBaAFCDKLUyz5WtdKZcKl/xkXrL9aHahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQt
ZWVjNDg4NWM0ZjhkLzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQtZWVjNDg4NWM0Zjhk
LzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRMysXtf
uoy8/Le5KlvOtSM07vZYiKzMVznaVisWZ/2+SH8JS0Knibs8e49jEp7yeB3H8nkx
1khQh9wb/y7WvhQO/oGDrk3xmc9bLx4Rc0Fs4e/USjP1VgwQ9IwcNfEBvgnyhkUF
89Jp8Qbg8vx1JM6fkXX5Jah54gKlWk3bMPVzOU79clDO0kGhPKKEH1uaV7efY2cy
gO8CBoVeR0e/UPkiWfzL/G0/EpJvvxBCPz/PkueDB/HCAr0BV6XXdAn/ybSOaIlp
XuMIFIg2pbATLzzEU3dHqi4Z6tvqHqvXJ5DMP2HarHuii9M/QrSuk6AxbnDui8F+
UDwfoPPqX1S/UQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:08 2024 by rpki-client on console-ams.rpki-client.org