Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File:                     V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier:          WHe8UEukK7e8eAjdel6SpKhB0q0yfPO6ulq5fjxAPcg=
Subject key identifier:   0E:E4:B5:9F:59:DA:B2:8B:0D:96:11:2B:2B:95:8A:24:6E:65:EA:FA
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer:       /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial:       01923AA710DFD37A17DDC1BA867808B180B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number:          12E1
Signing time:             Sat 28 Sep 2024 22:01:20 +0000
Manifest this update:     Sat 28 Sep 2024 22:01:20 +0000
Manifest next update:     Sun 29 Sep 2024 22:01:20 +0000
Files and hashes:         1: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: SFsCPG7v3eBeiuGTj0P9RCSR2AFfBwoY/lek77tph7o=)
                          2: fXtxj-xTmTzEcNiHXYZinkl6Kvk.roa (hash: 6le+Q6CPEfBwE3CNaVvUQkq9aYEZEhR1xFlDoBT/nJ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:a7:10:df:d3:7a:17:dd:c1:ba:86:78:08:b1:80:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
        Validity
            Not Before: Sep 28 22:01:20 2024 GMT
            Not After : Sep 29 22:01:20 2024 GMT
        Subject: CN=0ee4b59f59dab28b0d96112b2b958a246e65eafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:5d:2e:92:e2:ba:00:9f:a0:61:cb:c5:95:d4:
                    e9:63:16:c2:74:2d:c9:d0:04:fa:6a:36:b7:25:b2:
                    f5:de:37:d1:f2:fa:ac:5f:21:99:c3:54:4c:00:5b:
                    82:d0:7c:31:6d:32:a4:be:4e:e3:c6:31:a7:b6:fe:
                    5b:86:75:1a:78:80:ee:f6:fb:26:75:ac:0f:96:40:
                    06:a1:10:65:1f:ae:46:e1:98:bb:aa:dd:79:70:0e:
                    cc:be:74:a2:49:28:97:62:ff:51:b6:34:60:12:3a:
                    4a:fd:44:1d:d8:77:ad:bb:e8:5b:ac:d6:1f:95:74:
                    8b:b4:da:f2:2e:5d:87:98:b2:a1:95:4b:0d:bc:76:
                    23:09:98:54:94:fa:14:37:2e:97:db:20:6b:47:87:
                    16:ed:83:ee:45:a2:1a:ce:10:83:6e:42:63:a7:0a:
                    14:c7:9e:4f:63:07:51:6b:ae:63:4a:71:6e:b7:ae:
                    b8:75:df:5c:6b:a1:ac:84:92:63:2f:8d:38:7e:12:
                    ef:98:5a:39:2c:7d:33:df:bc:22:c3:82:36:4c:e8:
                    34:cf:f3:98:18:bd:90:aa:f5:de:f2:ed:91:9e:9f:
                    04:ae:36:62:e1:54:90:73:55:b7:d4:53:09:2b:5e:
                    eb:bb:41:25:e8:0b:98:f8:9b:06:9f:c9:89:a0:3f:
                    2f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E4:B5:9F:59:DA:B2:8B:0D:96:11:2B:2B:95:8A:24:6E:65:EA:FA
            X509v3 Authority Key Identifier:
                keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:37:0d:93:ac:51:ba:fc:67:67:92:cb:b3:e6:3d:11:b4:0a:
         91:aa:4d:98:5f:c8:29:2a:67:3a:4e:37:ec:68:1b:3c:d4:94:
         0a:53:d5:95:51:8b:3e:cb:1b:5a:98:2c:1d:21:5a:05:90:f2:
         b5:ba:55:5c:d9:06:5b:b1:c0:7c:8f:1c:87:a8:b8:f2:34:bb:
         ad:d6:b0:32:04:0f:14:4b:79:8b:04:55:cd:10:01:dd:d3:f4:
         ce:6c:c3:50:87:79:da:b9:34:04:7a:0f:d7:e1:04:78:7f:56:
         ac:e3:b2:cf:df:96:a0:f1:5f:c9:ff:8f:a7:49:d8:0d:1d:f5:
         8c:bb:bf:90:0f:30:d1:63:96:d1:31:60:66:17:20:b2:12:31:
         ff:9f:ed:bb:32:54:76:4b:3a:0a:fa:58:d0:f1:16:67:d7:6b:
         7a:03:cb:d3:d7:d1:0a:71:e5:50:2e:ea:a2:91:15:d4:4f:44:
         7d:1b:cd:5a:1e:c2:bf:67:b0:03:22:e2:c0:c9:54:05:41:c9:
         c6:a5:58:34:ae:d6:63:11:ef:89:eb:a7:99:ed:86:67:c6:cb:
         f7:2f:b8:cc:e3:23:22:cf:fd:4e:98:9d:3b:bf:2a:4c:6e:9d:
         14:1d:43:1c:e6:be:82:77:e4:97:55:de:ac:a9:ba:73:dc:34:
         2e:90:3b:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI6pxDf03oX3cG6hngIsYCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NDUzN2Q1NGYzNmYxNDIyMzFiYzgxNzAzODg3MmNiNjA3
YjIxZTcwHhcNMjQwOTI4MjIwMTIwWhcNMjQwOTI5MjIwMTIwWjAzMTEwLwYDVQQD
EygwZWU0YjU5ZjU5ZGFiMjhiMGQ5NjExMmIyYjk1OGEyNDZlNjVlYWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+l0ukuK6AJ+gYcvFldTpYxbCdC3J
0AT6aja3JbL13jfR8vqsXyGZw1RMAFuC0HwxbTKkvk7jxjGntv5bhnUaeIDu9vsm
dawPlkAGoRBlH65G4Zi7qt15cA7MvnSiSSiXYv9RtjRgEjpK/UQd2Hetu+hbrNYf
lXSLtNryLl2HmLKhlUsNvHYjCZhUlPoUNy6X2yBrR4cW7YPuRaIazhCDbkJjpwoU
x55PYwdRa65jSnFut664dd9ca6GshJJjL404fhLvmFo5LH0z37wiw4I2TOg0z/OY
GL2QqvXe8u2Rnp8ErjZi4VSQc1W31FMJK17ru0El6AuY+JsGn8mJoD8v1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7ktZ9Z2rKLDZYRKyuViiRuZer6MB8GA1UdIwQY
MBaAFFdFN9VPNvFCIxvIFwOIcstgeyHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQt
NGI4OWQzNzc4MDhlLzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQtNGI4OWQzNzc4MDhl
LzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTcNk6xR
uvxnZ5LLs+Y9EbQKkapNmF/IKSpnOk437GgbPNSUClPVlVGLPssbWpgsHSFaBZDy
tbpVXNkGW7HAfI8ch6i48jS7rdawMgQPFEt5iwRVzRAB3dP0zmzDUId52rk0BHoP
1+EEeH9WrOOyz9+WoPFfyf+Pp0nYDR31jLu/kA8w0WOW0TFgZhcgshIx/5/tuzJU
dks6CvpY0PEWZ9dregPL09fRCnHlUC7qopEV1E9EfRvNWh7Cv2ewAyLiwMlUBUHJ
xqVYNK7WYxHvieunme2GZ8bL9y+4zOMjIs/9TpidO78qTG6dFB1DHOa+gnfkl1Xe
rKm6c9w0LpA7fQ==
-----END CERTIFICATE-----
Generated at Sat Sep 28 23:36:39 2024 by rpki-client on console-ams.rpki-client.org