Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File:                     Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier:          u0M6opS7+L9qW9uhMO4gAa9coJ+1DDDjPtepV5lwgts=
Subject key identifier:   B7:C7:C4:12:C0:65:E4:BD:E4:48:2D:C1:C0:BC:07:B8:1F:B7:A5:CD
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer:       /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial:       0193553F7F5FA060C449EF5D07F145F84DEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number:          0BBD
Signing time:             Fri 22 Nov 2024 19:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:44 +0000
Files and hashes:         1: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: sOpTPGuqPfhZ5kXLUYN44vSpFi48i3WItdqr309Pm4M=)
                          2: MGUxPLxmQbSwHsgzk7XVBIBzEH0.roa (hash: KQjYGSGr29tW2gEfeRq7keHVn2KdKz1LIbb9rZC/wts=)
                          3: XzZ_eDvQudMjfrVt71MhBN20qFo.roa (hash: vWJnS4bVH9zSypK0qkycP1U2oX/uSpILb8Pat5uosaI=)
                          4: Ywm7NOBdz15EBQMtBjDlJDbL_vA.roa (hash: Tir6LHxWbnVFDyczAccPcscGVjEjU0bGz7Z+TNJR93I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:7f:5f:a0:60:c4:49:ef:5d:07:f1:45:f8:4d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
        Validity
            Not Before: Nov 22 19:00:44 2024 GMT
            Not After : Nov 23 19:00:44 2024 GMT
        Subject: CN=b7c7c412c065e4bde4482dc1c0bc07b81fb7a5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:1d:5a:8c:ba:d5:c7:8d:dd:e1:86:b0:df:
                    86:60:02:f1:75:3d:cd:b5:f1:7e:c9:87:7a:fa:3b:
                    0b:6f:38:77:5e:18:88:5a:37:bb:f7:8a:8b:aa:77:
                    71:cd:59:5d:6f:aa:d8:c1:cb:fa:c2:2e:01:11:ce:
                    af:03:23:47:23:ae:48:13:e3:9b:60:44:88:02:8e:
                    b1:c5:14:4d:98:03:a6:38:de:5f:74:c8:fc:a8:c2:
                    65:e6:ab:78:b6:99:f1:3c:b2:c0:c9:c4:fd:78:bd:
                    d5:62:c7:04:42:f0:88:9f:2b:8e:d0:a9:e1:1a:10:
                    ad:66:cd:dc:6d:8d:a2:28:09:d8:a6:84:c4:8b:9a:
                    a4:30:3d:a8:42:32:89:33:ff:1a:b5:e4:9b:58:98:
                    6e:e6:ac:c7:2d:b4:09:55:fb:28:92:82:00:ab:61:
                    5b:d1:49:7f:f0:33:c9:67:ef:ca:f7:0e:25:37:d2:
                    db:28:33:61:33:63:b7:3d:04:a0:25:76:18:7b:f8:
                    ec:63:09:9b:10:2e:58:b2:88:0a:1e:76:29:af:4f:
                    ea:69:f9:cb:c6:98:a7:d5:eb:48:67:96:da:3d:9d:
                    0b:db:4a:c2:52:5d:12:e3:66:c2:b1:b1:7f:c0:bd:
                    83:b5:a8:9d:b5:aa:3e:0f:42:94:cc:96:74:48:5f:
                    f7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C7:C4:12:C0:65:E4:BD:E4:48:2D:C1:C0:BC:07:B8:1F:B7:A5:CD
            X509v3 Authority Key Identifier:
                keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e5:45:f5:0e:ab:ae:ee:76:8e:c1:52:21:96:b6:d5:7b:64:
         15:35:4c:7d:98:18:0c:b7:b5:8c:bd:43:a3:ea:6b:2d:04:50:
         36:f1:c4:50:f5:3a:7f:69:77:82:d4:5e:fa:25:f4:62:5e:42:
         66:f7:a3:f0:07:ca:c9:42:5f:cd:59:9e:c0:d8:c7:5e:c8:45:
         47:f8:33:22:f3:1c:19:8b:d4:36:bd:6d:3b:be:3f:78:72:63:
         ce:37:c2:4f:be:9e:cd:94:86:09:ab:d7:d1:06:02:30:78:07:
         a5:05:ab:79:d0:a1:63:6f:fa:fd:58:d6:0e:84:de:67:23:92:
         b6:0a:b3:b5:0c:60:48:d3:2f:93:24:d7:bd:d4:7c:b0:dd:4b:
         9b:a2:6e:cf:d6:53:6d:42:3e:8b:c6:e2:80:a3:cf:8b:ca:da:
         32:a9:a8:e6:ec:fe:09:9f:20:4e:58:d5:8c:8e:90:aa:6f:f9:
         e9:95:5e:33:57:ba:f2:20:6f:9d:5f:f8:2e:ab:a9:db:2c:1e:
         c9:2a:d0:23:83:52:b6:51:a2:4d:ac:a5:d1:e5:ea:ff:c9:6c:
         7b:c7:82:69:c0:ff:07:f7:1d:33:dd:93:2c:3d:1d:85:6d:6e:
         d0:ee:8c:83:45:5b:4e:ae:46:4a:a0:92:7e:e9:48:8e:9c:43:
         08:06:7e:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVP39foGDESe9dB/FF+E3vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZGQ0MzhhN2NlM2NiMzc5ZjI4Y2ZhMDUxY2Y2M2Q1YWQ4
ZmUzY2EwHhcNMjQxMTIyMTkwMDQ0WhcNMjQxMTIzMTkwMDQ0WjAzMTEwLwYDVQQD
EyhiN2M3YzQxMmMwNjVlNGJkZTQ0ODJkYzFjMGJjMDdiODFmYjdhNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiAdWoy61ceN3eGGsN+GYALxdT3N
tfF+yYd6+jsLbzh3XhiIWje794qLqndxzVldb6rYwcv6wi4BEc6vAyNHI65IE+Ob
YESIAo6xxRRNmAOmON5fdMj8qMJl5qt4tpnxPLLAycT9eL3VYscEQvCInyuO0Knh
GhCtZs3cbY2iKAnYpoTEi5qkMD2oQjKJM/8ateSbWJhu5qzHLbQJVfsokoIAq2Fb
0Ul/8DPJZ+/K9w4lN9LbKDNhM2O3PQSgJXYYe/jsYwmbEC5YsogKHnYpr0/qafnL
xpin1etIZ5baPZ0L20rCUl0S42bCsbF/wL2Dtaidtao+D0KUzJZ0SF/3IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfHxBLAZeS95EgtwcC8B7gft6XNMB8GA1UdIwQY
MBaAFCrdQ4p848s3nyjPoFHPY9Wtj+PKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUt
MjBhMGQxMzBjNDU2LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUtMjBhMGQxMzBjNDU2
LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+VF9Q6r
ru52jsFSIZa21XtkFTVMfZgYDLe1jL1Do+prLQRQNvHEUPU6f2l3gtRe+iX0Yl5C
Zvej8AfKyUJfzVmewNjHXshFR/gzIvMcGYvUNr1tO74/eHJjzjfCT76ezZSGCavX
0QYCMHgHpQWredChY2/6/VjWDoTeZyOStgqztQxgSNMvkyTXvdR8sN1Lm6Juz9ZT
bUI+i8bigKPPi8raMqmo5uz+CZ8gTljVjI6Qqm/56ZVeM1e68iBvnV/4Lqup2ywe
ySrQI4NStlGiTayl0eXq/8lse8eCacD/B/cdM92TLD0dhW1u0O6Mg0VbTq5GSqCS
fulIjpxDCAZ+Fg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:40:21 2024 by rpki-client on console-fra.rpki-client.org