Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
File:                     PtW83-CttrlBURh__axK6PMRpvE.mft (raw, json)
Hash identifier:          9a6EkJcMy21gEzKtS951aBkjQGespY9gBfBajTyULUU=
Subject key identifier:   DF:C9:AA:DB:70:A4:68:1B:DD:70:8C:D0:35:2A:D2:42:F5:84:C0:CD
Authority key identifier: 3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
Certificate issuer:       /CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Certificate serial:       01935688E52091B773404A7A25A82C84C0A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
Manifest number:          1305
Signing time:             Sat 23 Nov 2024 01:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:32 +0000
Files and hashes:         1: PtW83-CttrlBURh__axK6PMRpvE.crl (hash: maSbF7zwU52mvAQ8u/a/OTZN9Az+gGvEAnh91E0Z3h0=)
                          2: mKl3AWTjae80mbhiq_gpq5M51PY.roa (hash: GDYGvUGzhRKfpsiQH+NI4irS4GEZtLiAUePq28Cc8Ak=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:e5:20:91:b7:73:40:4a:7a:25:a8:2c:84:c0:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
        Validity
            Not Before: Nov 23 01:00:32 2024 GMT
            Not After : Nov 24 01:00:32 2024 GMT
        Subject: CN=dfc9aadb70a4681bdd708cd0352ad242f584c0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:08:d4:8a:3c:a0:00:11:ec:3a:9e:a6:7b:
                    b7:f6:43:2e:60:f5:b5:c9:96:86:e0:7d:38:84:39:
                    3b:ec:1e:4d:cf:c9:81:a6:1e:8a:fb:62:0f:f0:e8:
                    d7:4e:ba:ec:cb:ee:9e:4b:21:29:dd:04:79:65:60:
                    bd:b6:e8:49:14:35:a9:f8:d2:d5:fa:77:f8:e2:a8:
                    df:84:4b:52:70:c1:bf:96:69:a7:05:4f:3a:26:8d:
                    f0:b4:ef:76:08:c9:7c:57:c5:c4:59:b3:61:e0:38:
                    dd:e0:2b:fb:26:c1:a8:91:00:99:62:f5:fd:5c:66:
                    8e:12:5f:53:d0:37:c2:7b:0d:b6:99:69:90:3e:2c:
                    29:f9:2e:14:d2:86:7e:10:66:fe:a5:30:5a:75:66:
                    25:5f:4f:58:83:cc:f9:be:ae:e8:52:56:ce:02:c0:
                    3d:f0:36:57:51:46:49:df:f9:50:26:6a:08:e8:f0:
                    c7:08:9f:49:3a:8f:ec:ea:25:df:f8:51:62:08:6e:
                    11:1e:94:38:71:98:0b:ae:23:13:69:0e:de:9c:b6:
                    d6:ec:75:b2:a4:87:cb:2e:e6:ba:99:6a:e9:af:66:
                    50:5c:7e:d9:1a:83:bd:f5:6c:e8:fd:5c:8b:5c:df:
                    be:43:31:d6:0d:26:36:03:92:22:33:64:68:aa:af:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C9:AA:DB:70:A4:68:1B:DD:70:8C:D0:35:2A:D2:42:F5:84:C0:CD
            X509v3 Authority Key Identifier:
                keyid:3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d6:58:dd:c1:e7:86:96:27:9a:d3:42:84:56:04:4f:38:3d:
         03:00:20:df:ea:4f:45:c3:ca:ce:2c:c5:be:27:ac:e0:c7:33:
         a0:a4:54:b3:02:52:34:07:28:db:8a:98:85:13:2a:62:62:70:
         69:6e:20:f3:7c:71:32:44:df:0f:33:df:6b:40:fa:e4:4d:40:
         ba:31:33:7f:59:04:27:9f:62:b1:ff:e6:33:f6:2c:23:31:98:
         14:94:7e:11:80:da:01:a7:ff:19:5c:13:aa:31:15:0f:31:89:
         b7:bf:68:70:73:e3:ae:7c:83:37:5d:51:3a:d8:77:09:42:95:
         07:89:74:55:86:e9:42:61:69:73:46:f3:04:48:46:36:40:ef:
         91:d4:24:f4:21:03:cf:69:9d:ff:6b:3e:84:2c:e3:5b:ea:a4:
         9b:d2:6e:64:7e:f3:8b:39:d1:38:e9:e7:35:bf:c0:55:81:7b:
         a8:8b:be:ce:63:9d:d5:01:de:57:fe:28:ef:be:bb:c3:41:3b:
         58:bb:d0:7e:8f:84:cd:de:59:a8:ea:b0:bd:d3:49:96:1c:24:
         3e:74:5d:53:56:69:a8:7a:77:22:9f:29:e8:05:7e:20:99:ec:
         a9:b3:2d:de:a2:1c:30:64:ab:d1:aa:a1:09:5c:b6:05:81:1d:
         94:fd:b4:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiOUgkbdzQEp6JagshMCnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZDViY2RmZTBhZGI2Yjk0MTUxMTg3ZmZkYWM0YWU4ZjMx
MWE2ZjEwHhcNMjQxMTIzMDEwMDMyWhcNMjQxMTI0MDEwMDMyWjAzMTEwLwYDVQQD
EyhkZmM5YWFkYjcwYTQ2ODFiZGQ3MDhjZDAzNTJhZDI0MmY1ODRjMGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmwI1Io8oAAR7Dqepnu39kMuYPW1
yZaG4H04hDk77B5Nz8mBph6K+2IP8OjXTrrsy+6eSyEp3QR5ZWC9tuhJFDWp+NLV
+nf44qjfhEtScMG/lmmnBU86Jo3wtO92CMl8V8XEWbNh4Djd4Cv7JsGokQCZYvX9
XGaOEl9T0DfCew22mWmQPiwp+S4U0oZ+EGb+pTBadWYlX09Yg8z5vq7oUlbOAsA9
8DZXUUZJ3/lQJmoI6PDHCJ9JOo/s6iXf+FFiCG4RHpQ4cZgLriMTaQ7enLbW7HWy
pIfLLua6mWrpr2ZQXH7ZGoO99Wzo/VyLXN++QzHWDSY2A5IiM2Roqq8KbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/JqttwpGgb3XCM0DUq0kL1hMDNMB8GA1UdIwQY
MBaAFD7VvN/grba5QVEYf/2sSujzEabxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHRXODMtQ3R0cmxCVVJoX19heEs2UE1ScHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xYjgyOTItODZlNy00ZmI1LWEzODct
MmFlOTBjM2ZhZTMxLzEvUHRXODMtQ3R0cmxCVVJoX19heEs2UE1ScHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8xYjgyOTItODZlNy00ZmI1LWEzODctMmFlOTBjM2ZhZTMx
LzEvUHRXODMtQ3R0cmxCVVJoX19heEs2UE1ScHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNZY3cHn
hpYnmtNChFYETzg9AwAg3+pPRcPKzizFvies4MczoKRUswJSNAco24qYhRMqYmJw
aW4g83xxMkTfDzPfa0D65E1AujEzf1kEJ59isf/mM/YsIzGYFJR+EYDaAaf/GVwT
qjEVDzGJt79ocHPjrnyDN11ROth3CUKVB4l0VYbpQmFpc0bzBEhGNkDvkdQk9CED
z2md/2s+hCzjW+qkm9JuZH7ziznROOnnNb/AVYF7qIu+zmOd1QHeV/4o7767w0E7
WLvQfo+Ezd5ZqOqwvdNJlhwkPnRdU1ZpqHp3Ip8p6AV+IJnsqbMt3qIcMGSr0aqh
CVy2BYEdlP206g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:54 2024 by rpki-client on console-fra.rpki-client.org