Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
File:                     iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json)
Hash identifier:          FFosuX+360dH0a6el2laE0nWB1oFWZ8xv5Gronw0x5Y=
Subject key identifier:   4B:39:99:CF:E5:EF:F7:1C:5D:A2:84:D4:5F:BA:4F:9B:1B:55:81:AC
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Certificate issuer:       /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial:       0193553F57FB64B90256C5469C8A13A568C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
Manifest number:          0C36
Signing time:             Fri 22 Nov 2024 19:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:34 +0000
Files and hashes:         1: Em2SapYD_yKejxx-Rn4EKD3tZJk.roa (hash: ZxJzyV6fsGu1pvAx6hfiLoItmBsTYz7QGPwtm82l5EA=)
                          2: SvNwP0_xoK4s-S62kuyzj6zvNVg.roa (hash: Qd4OUEos5fBvVmMe6Cy8jL5H4XdEoi8J5GMpJ8yKD8s=)
                          3: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: 8VX2cKUyF+72OLSGQsG4mV2li3AwFzjChiw9JCAQpO0=)
                          4: oSxZkX1UU_wxJC0jhxe_ZGv0-C8.roa (hash: oAs81hsdg6xkcwZ4gkbjlJDPL3TLU2gAgCEWV4n0Srg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:57:fb:64:b9:02:56:c5:46:9c:8a:13:a5:68:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
        Validity
            Not Before: Nov 22 19:00:34 2024 GMT
            Not After : Nov 23 19:00:34 2024 GMT
        Subject: CN=4b3999cfe5eff71c5da284d45fba4f9b1b5581ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:16:2a:9e:72:53:2c:4e:51:00:ad:45:3a:c6:
                    b0:b3:aa:67:43:04:f6:3a:4c:9a:75:26:3c:32:7b:
                    e1:98:d5:6a:a1:dc:8a:43:45:93:60:46:bf:6a:bc:
                    20:1f:27:c7:bb:0a:2f:66:96:10:07:c9:c9:0d:69:
                    45:24:71:fb:1b:d9:f8:7f:77:44:c4:e9:3e:3b:ee:
                    ff:16:8a:d8:64:ae:a8:1c:36:5b:9f:a5:00:b8:0e:
                    71:6a:e4:54:b5:2d:c1:06:f5:38:0c:7d:06:3b:3d:
                    fd:93:2a:c9:eb:b8:4d:1d:7d:9c:f9:17:ba:59:51:
                    62:04:b2:47:4f:3a:34:12:03:23:4d:63:02:68:cc:
                    56:f9:62:f1:8e:7e:7c:85:cf:27:7e:96:34:45:84:
                    57:70:7a:96:fb:58:71:c1:1d:cd:5b:7c:f8:56:7d:
                    61:af:4a:67:62:b0:23:e3:5c:05:55:05:29:d6:15:
                    5e:12:97:25:29:e8:25:bd:6d:58:78:cf:e5:57:3a:
                    d0:b1:1f:3b:2a:c5:7a:7e:b4:df:e2:05:30:fc:89:
                    62:0f:c6:c9:d9:14:8a:5f:98:61:82:86:06:b3:a5:
                    df:9c:b4:93:84:4d:d1:29:a2:80:de:f2:94:0f:a4:
                    4f:76:b7:95:60:9c:9b:3f:f0:4e:9e:74:7f:f1:ec:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:39:99:CF:E5:EF:F7:1C:5D:A2:84:D4:5F:BA:4F:9B:1B:55:81:AC
            X509v3 Authority Key Identifier:
                keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:13:92:ab:04:33:bf:32:77:81:cb:b3:88:e2:f1:03:25:5c:
         74:28:69:d8:23:04:39:93:ed:3c:66:1f:d9:23:cb:6f:90:1f:
         74:b8:2a:ce:52:57:14:aa:49:cb:83:50:d1:9c:c4:17:8b:49:
         27:0f:89:9e:53:7c:7b:62:f7:5a:77:8b:fa:9f:c4:1d:50:a2:
         ee:97:fa:e3:9d:b7:57:1d:37:56:c0:aa:c3:54:43:46:03:aa:
         e5:70:ad:99:c2:ed:c6:4d:1f:66:45:58:55:96:cd:01:5c:d4:
         7c:76:16:19:17:d5:18:18:eb:84:eb:60:c1:06:92:a3:60:05:
         e4:c9:01:82:54:8b:eb:66:1b:e6:89:f8:45:e6:bf:3f:e8:3a:
         36:fe:74:2b:a2:0a:5e:67:c3:a3:f1:7d:8e:70:b2:58:71:16:
         56:79:8e:94:ed:2d:97:85:8e:4a:b3:d1:b7:f6:13:bd:96:f7:
         2b:f0:b4:41:0c:a5:b4:ee:ea:e1:59:12:fa:d4:2d:cc:87:61:
         58:d0:8f:f7:ca:97:f8:61:6e:e4:74:64:c9:f4:5c:f8:f5:f9:
         de:03:9b:35:a3:8c:27:39:e0:60:7a:60:94:5f:55:46:40:ee:
         40:72:b6:91:cf:98:b9:ec:56:12:73:34:06:81:0f:4b:ca:19:
         49:8b:04:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVP1f7ZLkCVsVGnIoTpWjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MWJkMTQwMjkyNGVjMmE2NDRlOGY1NGU2OTk0Y2I0YWM4
ZTI0YTYwHhcNMjQxMTIyMTkwMDM0WhcNMjQxMTIzMTkwMDM0WjAzMTEwLwYDVQQD
Eyg0YjM5OTljZmU1ZWZmNzFjNWRhMjg0ZDQ1ZmJhNGY5YjFiNTU4MWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxYqnnJTLE5RAK1FOsaws6pnQwT2
OkyadSY8MnvhmNVqodyKQ0WTYEa/arwgHyfHuwovZpYQB8nJDWlFJHH7G9n4f3dE
xOk+O+7/ForYZK6oHDZbn6UAuA5xauRUtS3BBvU4DH0GOz39kyrJ67hNHX2c+Re6
WVFiBLJHTzo0EgMjTWMCaMxW+WLxjn58hc8nfpY0RYRXcHqW+1hxwR3NW3z4Vn1h
r0pnYrAj41wFVQUp1hVeEpclKeglvW1YeM/lVzrQsR87KsV6frTf4gUw/IliD8bJ
2RSKX5hhgoYGs6XfnLSThE3RKaKA3vKUD6RPdreVYJybP/BOnnR/8eywowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEs5mc/l7/ccXaKE1F+6T5sbVYGsMB8GA1UdIwQY
MBaAFIgb0UApJOwqZE6PVOaZTLSsjiSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMt
N2EwYjE0NWNmNjJiLzEvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMtN2EwYjE0NWNmNjJi
LzEvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhOSqwQz
vzJ3gcuziOLxAyVcdChp2CMEOZPtPGYf2SPLb5AfdLgqzlJXFKpJy4NQ0ZzEF4tJ
Jw+JnlN8e2L3WneL+p/EHVCi7pf64523Vx03VsCqw1RDRgOq5XCtmcLtxk0fZkVY
VZbNAVzUfHYWGRfVGBjrhOtgwQaSo2AF5MkBglSL62Yb5on4Rea/P+g6Nv50K6IK
XmfDo/F9jnCyWHEWVnmOlO0tl4WOSrPRt/YTvZb3K/C0QQyltO7q4VkS+tQtzIdh
WNCP98qX+GFu5HRkyfRc+PX53gObNaOMJzngYHpglF9VRkDuQHK2kc+YuexWEnM0
BoEPS8oZSYsENw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:54:09 2024 by rpki-client on console-fra.rpki-client.org