Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
File:                     rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft (raw, json)
Hash identifier:          LTtCWBvduTofJZvNvFUhhoTXLlq4tV9HHPA7uJXMKA4=
Subject key identifier:   6D:D2:9F:2E:8D:D4:9D:5F:1F:DC:07:C6:CE:40:80:8B:69:C6:86:77
Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
Certificate issuer:       /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Certificate serial:       019367EBD8F1F0519B236DAB754F0A35B95C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
Manifest number:          0F3F
Signing time:             Tue 26 Nov 2024 10:02:09 +0000
Manifest this update:     Tue 26 Nov 2024 10:02:09 +0000
Manifest next update:     Wed 27 Nov 2024 10:02:09 +0000
Files and hashes:         1: Z1834X2M1YEYAAAIsY2KQZX5KvU.roa (hash: yj5GqDel4zXYI9gA5PHvvy/nGqsmnRG6evD4Rp8YDjA=)
                          2: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl (hash: ObxEwx18/F3f3w/N6Qxi7cYCAySFay+OSvLFecczI64=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:eb:d8:f1:f0:51:9b:23:6d:ab:75:4f:0a:35:b9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
        Validity
            Not Before: Nov 26 10:02:09 2024 GMT
            Not After : Nov 27 10:02:09 2024 GMT
        Subject: CN=6dd29f2e8dd49d5f1fdc07c6ce40808b69c68677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:b9:13:f9:d2:1f:9f:50:39:46:e2:7e:be:
                    72:b3:17:15:a3:a6:86:e7:3e:fa:90:fb:a4:34:a6:
                    8f:43:17:5d:fa:4c:41:7a:a4:68:60:e2:74:ea:0d:
                    79:e2:e5:b1:f3:5f:66:f2:21:ea:1a:5f:49:53:84:
                    4b:5e:1b:ae:ab:45:0d:a4:aa:32:b9:fa:93:14:51:
                    91:08:9e:4f:5f:ed:56:99:c1:fd:19:9f:d7:32:c1:
                    31:66:16:43:ed:2d:38:2f:7e:6a:75:ac:3e:2f:41:
                    69:86:b3:04:f7:27:c2:5f:07:88:7c:ba:55:4a:4b:
                    a0:eb:6d:1e:01:de:9b:7d:34:52:cb:43:d5:83:65:
                    5d:74:8f:9a:ab:98:fd:ff:3e:58:0d:8a:f1:59:38:
                    e7:22:20:70:88:d5:73:8c:9d:4b:9e:b9:14:6e:b3:
                    a2:40:9a:67:ad:28:cd:7f:bb:cc:82:db:a8:36:87:
                    95:b1:3a:49:a8:ff:ca:53:e8:1f:5b:dc:88:3e:b7:
                    d1:1b:e8:3b:ac:ea:c5:20:ae:69:ea:48:62:7f:95:
                    1d:b0:c7:9f:59:30:00:61:06:a6:3f:ab:9a:e5:0f:
                    34:9b:46:03:f2:46:29:a7:6f:00:3c:b1:df:f3:76:
                    e3:bb:30:f5:6d:39:55:1d:8f:bf:f3:56:73:f9:5d:
                    c3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D2:9F:2E:8D:D4:9D:5F:1F:DC:07:C6:CE:40:80:8B:69:C6:86:77
            X509v3 Authority Key Identifier:
                keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:be:8e:b8:4f:eb:b7:c5:02:c9:e8:82:f8:e2:b4:63:ec:41:
         cf:e1:37:f6:69:6b:1c:1a:1e:16:f0:b5:08:e0:87:64:55:a9:
         12:de:6b:de:fe:65:71:9e:a1:2d:a8:e4:d5:5b:f0:f4:b5:81:
         e6:be:3c:c3:e6:02:7f:93:84:5b:69:e8:60:6a:ef:e8:26:9b:
         b5:d0:d6:d3:5e:df:8e:86:9b:2f:6f:a4:dc:46:c0:3e:b4:f0:
         c2:00:58:86:2d:86:ad:92:43:4c:2f:92:c1:6c:87:c0:bd:b3:
         12:2b:28:13:fa:03:c0:15:87:87:f6:43:aa:3c:ee:5e:98:84:
         e2:93:bb:e6:37:00:89:b2:7b:c1:5b:e4:bd:99:95:81:5e:45:
         e0:eb:a5:9a:82:3c:44:2c:b1:f4:75:dc:a6:91:46:ec:0a:f3:
         20:8b:73:8c:7e:7a:46:64:51:1d:d8:52:30:af:2c:49:65:65:
         5c:79:47:d0:53:86:80:1b:85:a6:73:d0:a6:45:5d:b6:e5:cd:
         a1:d1:d2:2a:f3:52:c4:ff:80:2b:49:e4:f3:55:80:5e:c5:13:
         61:b9:98:6d:3c:57:85:e2:82:3f:7d:d4:07:e3:bf:ef:a6:d9:
         30:fe:31:68:61:e2:59:0c:7f:51:6f:d2:d5:10:51:1c:82:4b:
         df:46:f6:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNn69jx8FGbI22rdU8KNblcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkM2RkOGQzMmNmYzcxN2E2ZTY5MGViZTNlMWRiNDM4NmQ4
ZjZjNjQwHhcNMjQxMTI2MTAwMjA5WhcNMjQxMTI3MTAwMjA5WjAzMTEwLwYDVQQD
Eyg2ZGQyOWYyZThkZDQ5ZDVmMWZkYzA3YzZjZTQwODA4YjY5YzY4Njc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCu5E/nSH59QOUbifr5ysxcVo6aG
5z76kPukNKaPQxdd+kxBeqRoYOJ06g154uWx819m8iHqGl9JU4RLXhuuq0UNpKoy
ufqTFFGRCJ5PX+1WmcH9GZ/XMsExZhZD7S04L35qdaw+L0FphrME9yfCXweIfLpV
Skug620eAd6bfTRSy0PVg2VddI+aq5j9/z5YDYrxWTjnIiBwiNVzjJ1LnrkUbrOi
QJpnrSjNf7vMgtuoNoeVsTpJqP/KU+gfW9yIPrfRG+g7rOrFIK5p6khif5UdsMef
WTAAYQamP6ua5Q80m0YD8kYpp28APLHf83bjuzD1bTlVHY+/81Zz+V3DEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3Sny6N1J1fH9wHxs5AgItpxoZ3MB8GA1UdIwQY
MBaAFK092NMs/HF6bmkOvj4dtDhtj2xkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQt
M2JjZDIzOTllZTY0LzEvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQtM2JjZDIzOTllZTY0
LzEvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ76OuE/r
t8UCyeiC+OK0Y+xBz+E39mlrHBoeFvC1COCHZFWpEt5r3v5lcZ6hLajk1Vvw9LWB
5r48w+YCf5OEW2noYGrv6CabtdDW017fjoabL2+k3EbAPrTwwgBYhi2GrZJDTC+S
wWyHwL2zEisoE/oDwBWHh/ZDqjzuXpiE4pO75jcAibJ7wVvkvZmVgV5F4OulmoI8
RCyx9HXcppFG7ArzIItzjH56RmRRHdhSMK8sSWVlXHlH0FOGgBuFpnPQpkVdtuXN
odHSKvNSxP+AK0nk81WAXsUTYbmYbTxXheKCP33UB+O/76bZMP4xaGHiWQx/UW/S
1RBRHIJL30b2zw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 20:13:30 2024 by rpki-client on console-ams.rpki-client.org