Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File:                     3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier:          aIgVKEuAbTdqp3+cQI4/COfmwFR1f/lFNLK+oJEz2tw=
Subject key identifier:   DF:9C:2D:28:7A:51:C7:18:77:C1:80:96:AB:88:43:6F:73:5A:AF:CE
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer:       /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial:       01936B22A7C49931DF929B70BCDD98D4A7FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number:          1188
Signing time:             Wed 27 Nov 2024 01:00:53 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:53 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:53 +0000
Files and hashes:         1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: JjwQRcas3H0iWcXQ9kguKFz1O72/2TjuuvH7dXzsPKs=)
                          2: aJgJCPHUoKR3eiIZmKxJ_5IbI-U.roa (hash: OnvJMYyvDCGLqpPxJa1hQ8S57z9YRXH9d21w9Pn+7uQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:a7:c4:99:31:df:92:9b:70:bc:dd:98:d4:a7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
        Validity
            Not Before: Nov 27 01:00:53 2024 GMT
            Not After : Nov 28 01:00:53 2024 GMT
        Subject: CN=df9c2d287a51c71877c18096ab88436f735aafce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c6:c1:e5:55:a4:20:2a:31:66:2d:04:37:3f:
                    d8:a4:6e:ca:8b:45:ea:1e:8f:be:f0:a6:01:99:09:
                    ed:73:21:76:da:8b:61:61:78:c5:66:c4:32:38:22:
                    d7:4d:9f:b9:04:09:6e:1d:60:c6:e7:60:0e:b5:d8:
                    61:ef:0b:a5:d3:a8:05:86:b0:77:fc:53:ed:6f:14:
                    66:08:2c:f6:d6:22:d3:9a:bc:57:8f:f1:7b:7e:91:
                    33:0b:b6:86:d7:c7:3f:00:34:22:f5:98:09:94:b1:
                    a2:bc:3b:fc:90:42:4c:5b:75:24:e6:37:ce:c3:fa:
                    db:f5:f5:0b:0d:36:09:23:a6:1a:e4:12:16:29:aa:
                    5d:c1:7f:10:03:90:eb:82:82:bd:ff:bf:cc:58:a2:
                    cc:01:34:fc:5a:a7:d2:8c:cc:26:3e:a7:b2:c4:ce:
                    3c:15:5e:7b:88:45:fd:13:2c:76:86:0d:c7:31:1e:
                    5e:c8:6b:7b:56:1f:51:a1:ae:e2:25:5d:bc:cd:cb:
                    2c:14:e6:a0:ce:56:fb:08:ce:f8:be:4b:9b:ab:2a:
                    10:ea:ef:84:a2:9a:54:e9:de:04:d3:9b:34:aa:c1:
                    d8:77:6a:5e:bb:72:89:27:ec:7c:99:cd:84:f8:a3:
                    8a:6f:62:e4:3c:b5:23:c7:77:01:3f:31:99:87:6a:
                    09:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9C:2D:28:7A:51:C7:18:77:C1:80:96:AB:88:43:6F:73:5A:AF:CE
            X509v3 Authority Key Identifier:
                keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d3:19:1a:f0:ce:56:35:68:c7:7b:f2:ed:25:dd:34:b6:69:
         f4:78:4d:2c:e3:fb:4e:9f:02:e8:db:fe:9e:34:39:bb:65:95:
         22:d2:bc:0e:0b:d0:dd:99:f1:6a:00:bf:49:50:9a:eb:9d:c9:
         20:10:f3:f3:81:21:7f:bd:ce:ca:5e:03:6e:04:5c:1a:17:ef:
         79:c7:d5:63:1e:c8:ad:8d:1a:6e:2e:da:ee:cf:05:8c:3e:25:
         c7:07:d6:91:cf:5d:55:9e:90:ea:ba:74:b1:e9:ea:41:95:1b:
         28:10:98:a8:9a:68:d8:61:02:34:9e:f9:da:da:1b:27:e6:34:
         b4:c8:05:58:bb:62:bf:88:ac:28:f6:a6:33:9f:80:48:f0:d7:
         ee:53:af:d8:7c:bb:e1:79:55:50:af:4b:dd:4a:8f:90:fb:67:
         c3:8c:6a:bf:9e:f1:84:e5:c1:a4:0d:de:27:4f:fc:8f:0f:28:
         20:ff:61:04:91:c9:8b:c6:83:ee:a7:19:81:9a:6e:2b:a3:56:
         df:49:6d:d8:40:14:87:23:9e:77:7b:36:ec:da:20:e7:d8:33:
         27:fa:ee:9b:7a:2b:84:ff:9b:54:9d:15:fc:ef:15:9f:20:5a:
         0e:37:64:71:1c:95:7d:de:8f:52:52:87:a9:93:6e:ab:28:eb:
         9f:5d:2e:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIqfEmTHfkptwvN2Y1Kf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWYxOWFkZmE2OTQ1NTg5YmMyZDEwMDE1NGU1YTU4YzQ0
OThhMTQwHhcNMjQxMTI3MDEwMDUzWhcNMjQxMTI4MDEwMDUzWjAzMTEwLwYDVQQD
EyhkZjljMmQyODdhNTFjNzE4NzdjMTgwOTZhYjg4NDM2ZjczNWFhZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sbB5VWkICoxZi0ENz/YpG7Ki0Xq
Ho++8KYBmQntcyF22othYXjFZsQyOCLXTZ+5BAluHWDG52AOtdhh7wul06gFhrB3
/FPtbxRmCCz21iLTmrxXj/F7fpEzC7aG18c/ADQi9ZgJlLGivDv8kEJMW3Uk5jfO
w/rb9fULDTYJI6Ya5BIWKapdwX8QA5DrgoK9/7/MWKLMATT8WqfSjMwmPqeyxM48
FV57iEX9Eyx2hg3HMR5eyGt7Vh9Roa7iJV28zcssFOagzlb7CM74vkubqyoQ6u+E
oppU6d4E05s0qsHYd2peu3KJJ+x8mc2E+KOKb2LkPLUjx3cBPzGZh2oJmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+cLSh6UccYd8GAlquIQ29zWq/OMB8GA1UdIwQY
MBaAFNzvGa36aUVYm8LRABVOWljESYoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQt
MjFkZWFkMGM1ZTljLzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQtMjFkZWFkMGM1ZTlj
LzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtMZGvDO
VjVox3vy7SXdNLZp9HhNLOP7Tp8C6Nv+njQ5u2WVItK8DgvQ3ZnxagC/SVCa653J
IBDz84Ehf73Oyl4DbgRcGhfvecfVYx7IrY0abi7a7s8FjD4lxwfWkc9dVZ6Q6rp0
senqQZUbKBCYqJpo2GECNJ752tobJ+Y0tMgFWLtiv4isKPamM5+ASPDX7lOv2Hy7
4XlVUK9L3UqPkPtnw4xqv57xhOXBpA3eJ0/8jw8oIP9hBJHJi8aD7qcZgZpuK6NW
30lt2EAUhyOed3s27Nog59gzJ/rum3orhP+bVJ0V/O8VnyBaDjdkcRyVfd6PUlKH
qZNuqyjrn10uJQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:53:10 2024 by rpki-client on console-fra.rpki-client.org