Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File:                     2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier:          yTcqPPHmKj4OX7cLgTueP3SeObf7+mS6UxEMsUx2/fM=
Subject key identifier:   C3:93:5F:5C:5D:9D:7F:C9:CB:DE:38:0D:99:3E:5E:F4:B9:3E:C9:B6
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer:       /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial:       019367EB42803B8A36EB4CE2C5072083A3CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number:          0C4C
Signing time:             Tue 26 Nov 2024 10:01:31 +0000
Manifest this update:     Tue 26 Nov 2024 10:01:31 +0000
Manifest next update:     Wed 27 Nov 2024 10:01:31 +0000
Files and hashes:         1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: EIf2oiV57qASaOd/yTkla+Zo18CyBQ+WjEkXj8hZemo=)
                          2: WjUSvvqd2NfntnyJgr5Wdbs_bsE.roa (hash: ti/gWUl/FlIxtlJj15yq7iGn0Dj39cw04IT4Pkc4wgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:eb:42:80:3b:8a:36:eb:4c:e2:c5:07:20:83:a3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
        Validity
            Not Before: Nov 26 10:01:31 2024 GMT
            Not After : Nov 27 10:01:31 2024 GMT
        Subject: CN=c3935f5c5d9d7fc9cbde380d993e5ef4b93ec9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0d:5a:a8:c0:f6:e8:12:5c:ed:4d:ff:27:c2:
                    d1:44:55:11:1e:1b:32:48:ba:de:ab:74:6c:d9:73:
                    09:f9:3d:9a:33:1f:9e:2b:f6:ee:88:5b:7b:f3:79:
                    04:cb:70:a0:88:a6:72:8a:d8:33:da:67:c3:0b:0d:
                    76:1e:3e:06:ca:d2:54:b1:56:cb:a1:12:d2:44:34:
                    02:c5:98:fc:5c:e6:f9:01:2a:ab:3b:8d:94:c0:7c:
                    bd:cd:2b:c8:fd:aa:ca:9a:96:8f:9b:3d:83:15:ae:
                    76:53:42:84:a8:71:1d:e1:a2:5c:17:55:9c:7e:b0:
                    b5:90:fd:e0:1f:9d:49:f2:79:ab:82:37:97:bd:a6:
                    64:c5:b5:9f:61:7b:10:bf:5e:9c:c8:54:6c:c4:36:
                    8e:b0:ba:49:b0:65:e0:dc:b0:50:88:38:8a:ad:eb:
                    60:4a:85:b1:68:c3:68:0a:0d:93:f8:81:3a:f0:f8:
                    45:7f:78:bd:e8:fa:97:ed:c2:d7:8c:13:95:3c:46:
                    29:ef:a6:38:5e:7f:04:2c:b5:d8:5f:3a:dd:ac:35:
                    61:54:69:1b:64:d6:57:88:2e:8e:d4:a9:f9:23:ab:
                    7a:10:98:fb:60:32:2a:5f:3e:24:89:14:c1:63:6b:
                    a2:26:43:f6:1c:62:5c:2f:42:c5:ba:46:82:81:84:
                    5b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:93:5F:5C:5D:9D:7F:C9:CB:DE:38:0D:99:3E:5E:F4:B9:3E:C9:B6
            X509v3 Authority Key Identifier:
                keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:16:b3:d3:1c:ef:3d:3b:1e:86:36:f1:aa:a7:33:4b:06:48:
         bb:4e:1b:b4:28:40:df:c4:2f:64:5b:3c:ab:48:44:32:97:d2:
         3f:79:64:79:3c:23:6f:57:08:78:02:78:70:0f:54:c7:0a:d9:
         50:05:df:49:d2:1a:de:88:b0:d7:7a:07:e3:a6:27:fe:1f:5c:
         e4:e9:df:f3:1c:ee:69:c5:17:de:8e:3b:b5:8e:f3:66:4a:d7:
         cd:8d:19:ae:85:1b:ff:01:d2:29:59:32:ee:a3:6a:c3:b5:e8:
         20:49:11:86:dc:bd:d6:a9:0e:cf:ee:ab:2e:e5:49:52:d4:49:
         97:d9:1e:5a:29:bb:32:2a:b7:21:45:f2:10:66:1b:47:64:55:
         2f:1e:cf:9d:3c:3f:6e:f4:78:96:d2:a1:18:df:6a:75:b7:33:
         bf:b3:b2:b9:26:0a:63:88:0a:26:61:39:ae:7f:a0:9a:2e:b6:
         ab:47:a3:ec:65:69:cf:b5:e7:fe:4e:cd:e5:3b:f7:68:55:15:
         0d:1a:6a:81:39:1d:ae:54:a5:08:23:a9:70:4d:e5:15:ca:23:
         a9:ea:dc:83:26:7c:92:85:6e:6e:72:29:de:44:91:e5:68:4d:
         f5:e2:74:ee:04:d4:23:eb:b9:8e:02:01:7a:70:07:a1:0c:6a:
         d6:75:5c:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNn60KAO4o260zixQcgg6PMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZjkwZGE0MmEzM2ZmZDkxNjRkMGMwNWIwZGU0ZjY1NjI4
NzA3NmUwHhcNMjQxMTI2MTAwMTMxWhcNMjQxMTI3MTAwMTMxWjAzMTEwLwYDVQQD
EyhjMzkzNWY1YzVkOWQ3ZmM5Y2JkZTM4MGQ5OTNlNWVmNGI5M2VjOWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg1aqMD26BJc7U3/J8LRRFURHhsy
SLreq3Rs2XMJ+T2aMx+eK/buiFt783kEy3CgiKZyitgz2mfDCw12Hj4GytJUsVbL
oRLSRDQCxZj8XOb5ASqrO42UwHy9zSvI/arKmpaPmz2DFa52U0KEqHEd4aJcF1Wc
frC1kP3gH51J8nmrgjeXvaZkxbWfYXsQv16cyFRsxDaOsLpJsGXg3LBQiDiKretg
SoWxaMNoCg2T+IE68PhFf3i96PqX7cLXjBOVPEYp76Y4Xn8ELLXYXzrdrDVhVGkb
ZNZXiC6O1Kn5I6t6EJj7YDIqXz4kiRTBY2uiJkP2HGJcL0LFukaCgYRbbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOTX1xdnX/Jy944DZk+XvS5Psm2MB8GA1UdIwQY
MBaAFNj5DaQqM//ZFk0MBbDeT2VihwduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNzNkMzEtNzE4Mi00YWE4LWIwZjkt
MjNiNDYzYjVlYTc3LzEvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNzNkMzEtNzE4Mi00YWE4LWIwZjktMjNiNDYzYjVlYTc3
LzEvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRaz0xzv
PTsehjbxqqczSwZIu04btChA38QvZFs8q0hEMpfSP3lkeTwjb1cIeAJ4cA9UxwrZ
UAXfSdIa3oiw13oH46Yn/h9c5Onf8xzuacUX3o47tY7zZkrXzY0ZroUb/wHSKVky
7qNqw7XoIEkRhty91qkOz+6rLuVJUtRJl9keWim7Miq3IUXyEGYbR2RVLx7PnTw/
bvR4ltKhGN9qdbczv7OyuSYKY4gKJmE5rn+gmi62q0ej7GVpz7Xn/k7N5Tv3aFUV
DRpqgTkdrlSlCCOpcE3lFcojqercgyZ8koVubnIp3kSR5WhN9eJ07gTUI+u5jgIB
enAHoQxq1nVcHw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 20:13:31 2024 by rpki-client on console-ams.rpki-client.org