Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
File:                     2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json)
Hash identifier:          EkZN0dWJQJufg61SbgxBv5swk/B3tjANcpMrq5VAHIk=
Subject key identifier:   3E:77:4A:74:97:14:95:66:8F:BC:41:4A:C7:56:73:EA:5B:3B:59:C9
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Certificate issuer:       /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial:       0193523E26B847B096D1D53F7B80DB27D81B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 05:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 05:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 05:00:24 +0000
Files and hashes:         1: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: X+Lqmvd+MqtA8gA2iLakH38E5V8GJcJLxSIXVShxfhw=)
                          2: 6GMz6HrG4CmkoY4FYdNv3ZZZsfU.roa (hash: D6KkuY5KrQAXrlhw72esUlARUjx0mHTWETxothMbICc=)
                          3: JAFOFfTdCadUKBvfP20wEW_Ba8I.roa (hash: k+aHntixeZfxe3mZZEI94ekKG4/YO2xROymPOKI9bO8=)
                          4: M4-dilm0dE68cBNMCub-hgXflr0.roa (hash: B16ZsOUbMWxJkpFgU7lcPBfy/4Y4N59Ws9HK+YOY/iM=)
                          5: bCSLKJvZXNNFLYvW7QoKnnAdBJ0.roa (hash: 8ocvgqsLZncNFhevIuGKH93prmdrD2POSgMHD4h/VuI=)
                          6: tZvf94bSVkxHRpKHhvGCobQS5Vc.roa (hash: pMl6rFvwsM6IsKVEzQGc8S7Wg3WPHGJwav8CaMX1ZKU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:3e:26:b8:47:b0:96:d1:d5:3f:7b:80:db:27:d8:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
        Validity
            Not Before: Nov 22 05:00:24 2024 GMT
            Not After : Nov 23 05:00:24 2024 GMT
        Subject: CN=3e774a74971495668fbc414ac75673ea5b3b59c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3d:c7:45:0d:79:18:e0:31:71:15:c5:9f:cd:
                    fb:42:fa:c8:04:7d:43:81:03:c4:7a:9c:3c:67:a0:
                    11:d4:b4:4e:67:92:0c:4a:51:89:d1:8c:b5:d5:e0:
                    b8:03:55:99:02:8e:4c:11:de:ee:d3:64:5d:3c:13:
                    70:82:34:b1:0c:60:0e:ff:b7:42:d3:a0:4d:9f:b2:
                    12:10:6a:5b:25:59:7a:0d:e4:73:15:47:24:9f:d1:
                    86:a8:14:be:23:53:62:5e:db:62:77:19:31:bd:9b:
                    2c:55:d4:f2:29:6b:83:20:e4:5b:21:e3:74:1c:6d:
                    07:4c:06:d7:ed:e4:b0:27:b7:77:a1:b4:e7:e2:60:
                    42:40:27:e7:e2:0e:85:1a:c8:93:80:d6:d1:66:aa:
                    37:f3:9c:49:93:58:da:7d:50:fa:da:fa:74:e6:cb:
                    08:71:c1:0c:b9:d3:d4:43:99:5b:44:23:08:f1:93:
                    86:84:af:8d:00:63:a5:b8:70:9a:42:2d:a7:21:f4:
                    b4:be:e0:5e:83:49:5c:f2:dc:c0:3b:5e:60:e8:5b:
                    4f:f3:d7:cf:a8:b1:cf:fb:e3:b2:e8:70:39:e4:f1:
                    a6:a4:c1:5a:e0:40:cf:05:b9:58:93:68:33:0a:80:
                    7f:75:7b:a2:50:79:6f:ab:1f:57:9f:7e:eb:88:87:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:77:4A:74:97:14:95:66:8F:BC:41:4A:C7:56:73:EA:5B:3B:59:C9
            X509v3 Authority Key Identifier:
                keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:2a:68:91:97:90:74:d6:b4:4f:a1:0b:b5:59:75:51:d5:fa:
         b8:fc:6d:7b:e8:30:12:68:2c:66:f8:58:54:18:58:f4:4d:cf:
         02:c6:e8:dc:08:ad:9f:1e:15:bb:ee:e6:27:a9:6c:b3:64:be:
         1a:f5:74:3c:27:14:40:24:e1:38:76:ff:05:5b:b9:b4:bb:54:
         6a:7d:f9:94:ad:08:58:b2:88:dc:45:8f:f2:67:45:82:0d:e0:
         bc:b5:33:cb:56:e7:46:c2:71:b0:96:31:e2:ec:ae:f7:bc:81:
         53:26:e9:de:e3:26:61:d9:3d:92:c1:b2:c2:27:a8:74:9d:03:
         2f:7e:6b:c9:3b:51:74:00:37:33:33:00:23:d8:29:e7:62:5e:
         3d:76:72:3c:96:8b:5c:1c:33:d9:d4:79:8d:d6:98:62:84:bd:
         47:af:cc:01:06:cd:c9:c3:f7:5c:7b:20:92:e7:dd:fd:02:31:
         17:d3:6a:11:8e:0d:56:ac:09:39:0a:b6:66:7e:c5:a3:ee:11:
         be:ac:71:7b:e4:16:17:28:f5:f8:a2:3c:58:1f:f9:a6:eb:a7:
         fe:a3:43:4c:50:0a:f4:c9:95:8d:db:48:d6:bb:75:14:d5:41:
         6f:fd:90:55:36:df:c3:7c:16:56:1d:ba:22:13:c8:cc:9f:41:
         9d:98:da:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSPia4R7CW0dU/e4DbJ9gbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZmMwYmVjNjBkMGJhY2UxODg5Njc3YmQ5YmI5MDE5MGNj
NGZkMjIwHhcNMjQxMTIyMDUwMDI0WhcNMjQxMTIzMDUwMDI0WjAzMTEwLwYDVQQD
EygzZTc3NGE3NDk3MTQ5NTY2OGZiYzQxNGFjNzU2NzNlYTViM2I1OWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T3HRQ15GOAxcRXFn837QvrIBH1D
gQPEepw8Z6AR1LROZ5IMSlGJ0Yy11eC4A1WZAo5MEd7u02RdPBNwgjSxDGAO/7dC
06BNn7ISEGpbJVl6DeRzFUckn9GGqBS+I1NiXttidxkxvZssVdTyKWuDIORbIeN0
HG0HTAbX7eSwJ7d3obTn4mBCQCfn4g6FGsiTgNbRZqo385xJk1jafVD62vp05ssI
ccEMudPUQ5lbRCMI8ZOGhK+NAGOluHCaQi2nIfS0vuBeg0lc8tzAO15g6FtP89fP
qLHP++Oy6HA55PGmpMFa4EDPBblYk2gzCoB/dXuiUHlvqx9Xn37riIffBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD53SnSXFJVmj7xBSsdWc+pbO1nJMB8GA1UdIwQY
MBaAFNn8C+xg0LrOGIlne9m7kBkMxP0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjkt
MzQ2OTAzNGZhNDQxLzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjktMzQ2OTAzNGZhNDQx
LzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhipokZeQ
dNa0T6ELtVl1UdX6uPxte+gwEmgsZvhYVBhY9E3PAsbo3Aitnx4Vu+7mJ6lss2S+
GvV0PCcUQCThOHb/BVu5tLtUan35lK0IWLKI3EWP8mdFgg3gvLUzy1bnRsJxsJYx
4uyu97yBUybp3uMmYdk9ksGywieodJ0DL35ryTtRdAA3MzMAI9gp52JePXZyPJaL
XBwz2dR5jdaYYoS9R6/MAQbNycP3XHsgkufd/QIxF9NqEY4NVqwJOQq2Zn7Fo+4R
vqxxe+QWFyj1+KI8WB/5puun/qNDTFAK9MmVjdtI1rt1FNVBb/2QVTbfw3wWVh26
IhPIzJ9BnZjalw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:53:17 2024 by rpki-client on console-fra.rpki-client.org