Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
File:                     1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft (raw, json)
Hash identifier:          +Glbj3wYzRQqsEL/E/h2gAjV8IsB5NGihyGkP+t3IbY=
Subject key identifier:   17:69:C6:3C:34:D5:9C:04:8D:88:0B:67:5E:FD:95:40:FC:B1:A7:72
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Certificate issuer:       /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial:       019363D678C722A00C3F7C99C0A54634C7E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
Manifest number:          13A3
Signing time:             Mon 25 Nov 2024 15:00:20 +0000
Manifest this update:     Mon 25 Nov 2024 15:00:20 +0000
Manifest next update:     Tue 26 Nov 2024 15:00:20 +0000
Files and hashes:         1: 1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl (hash: ucCyTs7mdzqy+MZC/0kAjKOyR+PDG/fBUuMO8knB4Dw=)
                          2: PtOtUYTbzICj-_1zm36_1Cs5EsM.roa (hash: 9fL2zC0bZ6RPW0z71q5Hy5yitoGs5zwYblsICBuM4pA=)
                          3: SVSI0d7G1j-3T8K3pS8691bz8jQ.roa (hash: g1F9pbLmcb19X+eOplLsUtv0Hkrps1Fcaaqnt/ThEZU=)
                          4: g11Luu_KdONz9gNQEEe4A5BciK4.roa (hash: Mulmo7NCfhkWqysjG452jYO/8GqflSEOr0H185YoRNQ=)
                          5: uqx2MUlWFqdSQW1V38k1yrkjSRY.roa (hash: 3cdsX6aLS8xWFZIVHq+xA4jFW7VbGSZxQWByTuibcMs=)
                          6: yYbEQWwbtrm4_00A5vx1jR7lBn0.roa (hash: lvh65dSxZK1xkMM/7l95bg0i1Q38UC4jEiiAPo2Fa6g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 15:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:d6:78:c7:22:a0:0c:3f:7c:99:c0:a5:46:34:c7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
        Validity
            Not Before: Nov 25 15:00:20 2024 GMT
            Not After : Nov 26 15:00:20 2024 GMT
        Subject: CN=1769c63c34d59c048d880b675efd9540fcb1a772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:22:fe:5d:d0:09:09:cf:0d:36:0b:c8:7b:
                    66:be:8c:70:a7:08:2f:1f:23:c3:2c:ac:bd:3e:2b:
                    8c:ec:1d:7b:3a:a3:51:b5:25:8b:c8:a4:2c:21:e5:
                    17:af:12:86:de:96:98:28:0d:5e:63:cf:67:83:b6:
                    fc:b2:3f:12:70:aa:20:53:4f:29:bd:a8:46:de:52:
                    2c:81:df:90:21:98:31:b5:f7:39:2b:e3:d5:2a:3d:
                    b3:d6:2c:d4:2a:5a:cf:2f:91:db:b1:2d:21:c6:81:
                    e3:10:45:a6:f6:81:5b:b4:04:62:0f:2b:de:88:d9:
                    01:06:d9:0c:ed:d7:82:04:c8:2d:1c:bc:bd:7a:05:
                    5b:5e:03:c3:ec:44:7e:26:a6:63:1b:00:f0:d1:b7:
                    ca:e6:d3:18:92:a2:6f:58:cd:55:e4:14:ed:1f:78:
                    f0:9f:74:d3:73:f4:23:88:54:0c:3c:6a:c4:c0:04:
                    f3:d5:7b:94:8b:3a:40:08:2b:68:2f:3a:24:67:c1:
                    c6:11:e0:bd:9d:22:6d:bb:50:ee:77:0e:26:04:98:
                    bd:3d:dd:83:f4:d8:bd:d9:ed:9f:fb:6b:76:56:47:
                    5d:df:ff:08:e6:88:99:8d:4c:82:37:78:02:d8:bc:
                    d3:fe:16:47:55:8e:9d:3d:fc:22:46:0f:5e:59:db:
                    d8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:69:C6:3C:34:D5:9C:04:8D:88:0B:67:5E:FD:95:40:FC:B1:A7:72
            X509v3 Authority Key Identifier:
                keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d0:77:d2:74:59:76:59:b0:71:d4:39:2a:a7:a1:1c:eb:3d:
         7f:cc:7c:11:98:97:54:bb:55:a3:47:3f:f5:51:72:a5:a3:80:
         5c:5f:ae:e6:f0:73:ce:b1:db:cb:cc:25:8e:f1:df:a9:fc:68:
         62:0b:bb:e4:c7:bb:38:5a:5f:12:71:e6:36:dd:1c:ec:46:8e:
         1e:d0:e0:da:47:80:f6:db:2a:cd:4d:dc:65:09:f1:62:24:db:
         75:52:96:66:ed:62:7b:68:90:8d:16:a8:4a:a2:40:a2:73:e3:
         ad:d7:4c:94:2d:6c:70:9a:b9:66:33:6a:99:7a:70:e5:b8:00:
         0a:5c:d5:16:93:9c:01:96:af:7f:3d:9a:e1:53:85:c2:c6:e9:
         f6:b6:6c:4b:b2:ca:e4:e4:f1:26:d9:ee:fe:a8:2d:b9:d2:dc:
         0d:89:b6:88:2a:96:d4:af:e5:ba:9c:0e:b1:c5:26:ff:b0:75:
         b4:7c:58:13:bb:43:39:99:dd:53:1a:7f:d7:99:c7:34:69:47:
         30:36:50:ea:bf:88:71:3e:8e:7c:2d:dc:f9:bb:f5:b1:34:68:
         cc:b2:7c:f9:d4:24:6a:96:ba:f4:7e:9d:0a:8a:25:07:65:f7:
         75:47:e1:d7:22:5a:cf:00:62:66:1e:ea:fe:35:19:7d:e4:7b:
         d2:74:2d:61
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNj1njHIqAMP3yZwKVGNMfkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMzJlOWY0YWEzMmFiYTczMTJmYWIwNTRiMTc0ZGNlOGM1
MTVjYTMwHhcNMjQxMTI1MTUwMDIwWhcNMjQxMTI2MTUwMDIwWjAzMTEwLwYDVQQD
EygxNzY5YzYzYzM0ZDU5YzA0OGQ4ODBiNjc1ZWZkOTU0MGZjYjFhNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBQi/l3QCQnPDTYLyHtmvoxwpwgv
HyPDLKy9PiuM7B17OqNRtSWLyKQsIeUXrxKG3paYKA1eY89ng7b8sj8ScKogU08p
vahG3lIsgd+QIZgxtfc5K+PVKj2z1izUKlrPL5HbsS0hxoHjEEWm9oFbtARiDyve
iNkBBtkM7deCBMgtHLy9egVbXgPD7ER+JqZjGwDw0bfK5tMYkqJvWM1V5BTtH3jw
n3TTc/QjiFQMPGrEwATz1XuUizpACCtoLzokZ8HGEeC9nSJtu1Dudw4mBJi9Pd2D
9Ni92e2f+2t2Vkdd3/8I5oiZjUyCN3gC2LzT/hZHVY6dPfwiRg9eWdvYJwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBdpxjw01ZwEjYgLZ179lUD8sadyMB8GA1UdIwQY
MBaAFPsy6fSqMqunMS+rBUsXTc6MUVyjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS16THA5S295cTZjeEw2c0ZTeGROem94UlhLTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvMjc4NjYzLWIxMzUtNGRiMS1hMDQ0
LTIwNjI0YjNjMTU3Zi8xLzEtekxwOUtveXE2Y3hMNnNGU3hkTnpveFJYS00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UyLzI3ODY2My1iMTM1LTRkYjEtYTA0NC0yMDYyNGIzYzE1
N2YvMS8xLXpMcDlLb3lxNmN4TDZzRlN4ZE56b3hSWEtNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtB3
0nRZdlmwcdQ5KqehHOs9f8x8EZiXVLtVo0c/9VFypaOAXF+u5vBzzrHby8wljvHf
qfxoYgu75Me7OFpfEnHmNt0c7EaOHtDg2keA9tsqzU3cZQnxYiTbdVKWZu1ie2iQ
jRaoSqJAonPjrddMlC1scJq5ZjNqmXpw5bgAClzVFpOcAZavfz2a4VOFwsbp9rZs
S7LK5OTxJtnu/qgtudLcDYm2iCqW1K/lupwOscUm/7B1tHxYE7tDOZndUxp/15nH
NGlHMDZQ6r+IcT6OfC3c+bv1sTRozLJ8+dQkapa69H6dCoolB2X3dUfh1yJazwBi
Zh7q/jUZfeR70nQtYQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:56:44 2024 by rpki-client on console-ams.rpki-client.org