Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
File:                     35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json)
Hash identifier:          lzK0OW/1BJ4c8JR0nC0CjAg25gMOFAwEE+5m6NvwDrI=
Subject key identifier:   BD:01:22:5B:56:26:73:80:74:7A:50:47:27:6A:BD:B1:C1:90:A4:C9
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Certificate issuer:       /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial:       01935162820D28C9EF789208E62F1F946FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
Manifest number:          0C9F
Signing time:             Fri 22 Nov 2024 01:00:30 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:30 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:30 +0000
Files and hashes:         1: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: dS3rZOrUGocWSi8T6zqxygUqw6E64jo0vTi9tGlzuK0=)
                          2: 5Dsuy3pwInf0DO5B0RNoed9MF2I.roa (hash: vhO85IJ6xa6a9MizAeI699B1jJv37rgdlwh9Hh3mWV8=)
                          3: MsrsF8pu_X6hSowibd-lhWOOCKA.roa (hash: JCLDVY9xV2IE9hzTIL0wKWXYDNMHsEQ8mpgNNxEAizw=)
                          4: PqPhveYy0qAF5pRRh7YlWU1Vr5s.roa (hash: X2YQZikzOdeTk3yTemCPklb4t7/SGCGC1DNnbU2fgTQ=)
                          5: hMfGc-wEmzwrPDdW6aT_41YgbMM.roa (hash: hfZoUykf7x20R9zDmcTdYwgvkk0Tql+VrdNsCl+LJjY=)
                          6: sZu2vx-WnN_r00ooyD4IdUOlHRc.roa (hash: JlxQXKYvhYVQmWIu9JlWwtoYNo30aW2OsvkzrpvaECw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:82:0d:28:c9:ef:78:92:08:e6:2f:1f:94:6f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
        Validity
            Not Before: Nov 22 01:00:30 2024 GMT
            Not After : Nov 23 01:00:30 2024 GMT
        Subject: CN=bd01225b56267380747a5047276abdb1c190a4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:85:77:29:c4:00:f4:45:45:e7:20:b9:7f:
                    1a:74:14:7b:a2:91:31:40:24:24:42:c9:16:9e:d7:
                    f0:24:28:95:3c:e8:3e:9c:5f:9b:15:c2:37:8d:88:
                    ea:eb:82:52:34:c1:5d:93:f5:7e:93:ca:28:77:ec:
                    f7:bc:55:e9:8e:b3:25:55:25:fc:01:1c:b4:d5:a0:
                    ed:06:af:77:a7:31:ef:79:32:de:37:4c:4b:08:77:
                    85:53:79:e8:f5:01:08:dd:79:ed:87:16:5e:52:e7:
                    93:53:00:b4:3b:b6:26:8e:ef:70:dc:5f:18:39:f9:
                    f6:44:7d:f8:93:7d:41:a3:5f:a2:0f:42:07:03:f3:
                    56:92:e5:9b:58:33:b3:db:79:cb:54:b2:db:58:c0:
                    4d:1c:d1:51:86:b4:dd:5e:8e:a6:57:b0:ab:95:3c:
                    11:63:b0:48:6b:ec:a9:f2:88:5f:45:0a:d1:3c:8e:
                    b3:47:cb:57:61:4f:12:5a:ce:03:73:3c:fe:95:7d:
                    7d:8a:8d:a3:e9:c9:6b:bb:a2:fb:24:85:4d:22:ac:
                    39:2b:4a:76:a9:dc:07:f8:1d:c2:22:e7:b3:f1:a1:
                    c8:ef:7f:97:41:73:27:d4:dc:35:6f:c7:a0:63:e7:
                    33:64:a1:7c:a8:05:38:69:14:1d:d5:e6:c9:c2:42:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:01:22:5B:56:26:73:80:74:7A:50:47:27:6A:BD:B1:C1:90:A4:C9
            X509v3 Authority Key Identifier:
                keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:81:25:01:22:ad:31:1d:b9:24:8d:19:b5:0f:08:06:fb:b0:
         a4:83:20:af:d3:67:e1:f7:23:f3:d6:b1:c6:61:89:bd:69:8e:
         7a:45:72:a6:4b:d2:c9:57:a7:1c:27:60:a0:e2:09:16:a8:b3:
         05:91:cb:ae:84:6c:55:04:eb:c6:90:8c:32:ed:4c:05:d9:4b:
         bb:4a:5f:9a:fa:26:0e:09:1e:56:9b:85:f2:6b:de:ce:9f:2c:
         52:e9:8a:71:15:43:bc:98:d9:65:d4:28:5c:8b:01:59:41:75:
         2f:84:7d:39:65:f4:c1:68:c0:bf:dd:7d:69:fd:38:a7:a1:9c:
         f7:43:cf:22:b5:fe:c4:e4:7f:c1:c7:97:47:6a:bf:e0:9a:2f:
         7a:fb:c0:f8:7d:95:9b:b6:44:09:d5:a6:a7:1c:06:53:07:03:
         e3:05:5c:82:c9:5f:71:65:cd:e5:30:ac:2a:e7:c0:12:de:ea:
         10:ee:f1:26:60:ca:b5:49:3a:6f:09:12:56:47:13:00:75:39:
         77:83:1b:b4:82:37:87:d3:5b:1b:80:7c:25:ca:4a:7b:28:51:
         80:70:c9:41:e6:e9:0a:09:73:a9:f7:64:06:0c:88:2a:40:f9:
         4f:0b:a6:ad:51:59:31:5a:63:cf:60:0f:43:04:10:81:0a:ea:
         d5:fb:0b:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRYoINKMnveJII5i8flG/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOWM2NGUxNzBiN2YyNTVkN2NhMzAwMzVkNjUzMmM4OTU3
ZWIxNjkwHhcNMjQxMTIyMDEwMDMwWhcNMjQxMTIzMDEwMDMwWjAzMTEwLwYDVQQD
EyhiZDAxMjI1YjU2MjY3MzgwNzQ3YTUwNDcyNzZhYmRiMWMxOTBhNGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF6FdynEAPRFRecguX8adBR7opEx
QCQkQskWntfwJCiVPOg+nF+bFcI3jYjq64JSNMFdk/V+k8ood+z3vFXpjrMlVSX8
ARy01aDtBq93pzHveTLeN0xLCHeFU3no9QEI3XnthxZeUueTUwC0O7Ymju9w3F8Y
Ofn2RH34k31Bo1+iD0IHA/NWkuWbWDOz23nLVLLbWMBNHNFRhrTdXo6mV7CrlTwR
Y7BIa+yp8ohfRQrRPI6zR8tXYU8SWs4Dczz+lX19io2j6clru6L7JIVNIqw5K0p2
qdwH+B3CIuez8aHI73+XQXMn1Nw1b8egY+czZKF8qAU4aRQd1ebJwkJdcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0BIltWJnOAdHpQRydqvbHBkKTJMB8GA1UdIwQY
MBaAFN+cZOFwt/JV18owA11lMsiVfrFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTIt
MjhjYjNiYmYwNWFlLzEvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9hYmQxMmYtMWQ2Ni00MTJmLTliZTItMjhjYjNiYmYwNWFl
LzEvMzV4azRYQzM4bFhYeWpBRFhXVXl5SlYtc1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4ElASKt
MR25JI0ZtQ8IBvuwpIMgr9Nn4fcj89axxmGJvWmOekVypkvSyVenHCdgoOIJFqiz
BZHLroRsVQTrxpCMMu1MBdlLu0pfmvomDgkeVpuF8mvezp8sUumKcRVDvJjZZdQo
XIsBWUF1L4R9OWX0wWjAv919af04p6Gc90PPIrX+xOR/wceXR2q/4JovevvA+H2V
m7ZECdWmpxwGUwcD4wVcgslfcWXN5TCsKufAEt7qEO7xJmDKtUk6bwkSVkcTAHU5
d4MbtII3h9NbG4B8JcpKeyhRgHDJQebpCglzqfdkBgyIKkD5TwumrVFZMVpjz2AP
QwQQgQrq1fsLDQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:50 2024 by rpki-client on console-fra.rpki-client.org