Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
File:                     tGS0UjqJcrni9GpPShY06XAnrt8.mft (raw, json)
Hash identifier:          O69RUH3qEK5ptNqK3MmBeojtyU/cSi5Qx/iLs+GMM7A=
Subject key identifier:   69:28:B7:85:9F:4E:45:66:5A:FC:0B:1A:A7:56:A3:CF:4C:C0:AB:85
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Certificate issuer:       /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial:       019351D0C15295315233445750033877202C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
Manifest number:          0336
Signing time:             Fri 22 Nov 2024 03:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:55 +0000
Files and hashes:         1: Rm4UhpyggVOWhlCR05sap4Q3uK0.roa (hash: 4G0SSBpxcHAsImSQIKsOJjZKmtwLvOFeE8DkWTKXOsg=)
                          2: eM9DIP7OOON8NO1ngbKTR1YvH64.roa (hash: vUSwYNK6AKtA0Xv8NS50w4ct/iXQP3l8qUaZNit9bHM=)
                          3: tGS0UjqJcrni9GpPShY06XAnrt8.crl (hash: AiTGFkJYo9qeAR2pZADQN0zDT6NSMXsy73kdtz0st7I=)
                          4: x7wHDvFP4yEZZk3RBss4RjWxqwQ.roa (hash: VjfjU4W0jebgkCso9AoUff6fUNr2DERlC6IFoILLePY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:c1:52:95:31:52:33:44:57:50:03:38:77:20:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
        Validity
            Not Before: Nov 22 03:00:55 2024 GMT
            Not After : Nov 23 03:00:55 2024 GMT
        Subject: CN=6928b7859f4e45665afc0b1aa756a3cf4cc0ab85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:6a:97:ef:3d:e4:1f:e0:b2:f1:81:b7:7e:
                    9d:62:cf:5c:73:7e:6e:e3:31:3e:5d:6a:4e:b0:61:
                    2c:7e:09:f8:64:2a:18:7c:c6:76:10:40:e7:be:1e:
                    ab:6e:1d:01:be:b2:d9:91:f6:f4:8d:f2:77:52:21:
                    58:b6:4f:a1:00:11:26:af:95:aa:72:bd:df:ef:6f:
                    21:ed:d8:d0:a1:aa:4c:83:3a:ea:ae:a3:10:d8:c9:
                    66:ee:2d:eb:21:c7:88:46:f6:85:31:c4:69:40:6e:
                    0d:94:58:2a:6b:75:35:3b:02:50:4f:5f:bf:7d:7e:
                    ea:39:e2:89:89:67:f1:fe:23:b8:75:fc:cb:09:03:
                    3f:94:da:20:55:e2:50:05:57:58:9e:7f:27:2e:3d:
                    49:f2:72:22:91:e7:48:fd:fc:60:6b:a2:17:e7:92:
                    78:3c:92:b8:02:59:e0:e9:d3:01:5a:e2:59:dc:60:
                    af:0f:fb:4a:ea:58:cb:60:a2:73:b5:6a:e8:44:b8:
                    91:42:1d:b1:17:ce:c4:a6:d6:12:a9:f4:56:5e:85:
                    fb:94:f1:81:66:26:ad:b5:98:16:04:14:c8:bb:43:
                    00:10:f0:5b:89:74:5e:5b:5f:91:91:60:9d:a3:31:
                    01:66:cf:c5:07:f9:47:f5:14:f0:cd:f5:fe:73:3d:
                    66:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:28:B7:85:9F:4E:45:66:5A:FC:0B:1A:A7:56:A3:CF:4C:C0:AB:85
            X509v3 Authority Key Identifier:
                keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c9:b3:85:1a:f3:78:06:d7:01:0d:c7:b3:c7:5c:43:cf:1a:
         38:a9:c5:bc:db:5e:2d:d9:b1:2c:9f:bc:7a:9d:8a:ed:e2:3c:
         83:cd:52:13:a6:da:29:44:c8:75:dd:ac:a1:5f:fd:4d:74:7c:
         08:de:5f:36:4d:2f:97:35:b9:85:14:31:72:7a:60:26:ce:5e:
         e5:17:52:02:2c:0b:c0:73:4a:66:aa:ac:af:f3:d3:f5:34:0c:
         14:78:62:4b:d2:af:73:5e:2d:83:ba:3b:3e:11:4d:ab:fe:5b:
         fc:e1:bd:67:a4:83:6a:75:8d:78:82:be:6e:02:4e:95:37:9c:
         d1:33:6a:39:4d:36:e5:16:d8:22:0d:f6:c4:34:64:b8:db:ce:
         bf:97:c8:d2:63:36:07:8b:3c:c3:dc:35:41:c5:b4:1a:46:2c:
         de:7d:ac:8a:28:8b:a6:45:67:b6:91:16:5a:f3:b5:2b:85:fe:
         53:4d:61:e7:e9:e6:0e:25:6a:b7:45:6d:ca:b8:b9:e2:6a:24:
         25:cd:e3:3d:f4:42:4e:b7:e0:7c:7e:8a:f0:23:58:42:ab:cd:
         5a:1a:af:59:57:4b:cf:be:d7:ed:e9:7a:9b:70:3a:41:32:58:
         bf:bb:96:a0:6c:32:2e:07:1e:ab:29:12:bc:01:05:36:0c:e1:
         10:32:9d:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNR0MFSlTFSM0RXUAM4dyAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjRiNDUyM2E4OTcyYjllMmY0NmE0ZjRhMTYzNGU5NzAy
N2FlZGYwHhcNMjQxMTIyMDMwMDU1WhcNMjQxMTIzMDMwMDU1WjAzMTEwLwYDVQQD
Eyg2OTI4Yjc4NTlmNGU0NTY2NWFmYzBiMWFhNzU2YTNjZjRjYzBhYjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4dql+895B/gsvGBt36dYs9cc35u
4zE+XWpOsGEsfgn4ZCoYfMZ2EEDnvh6rbh0BvrLZkfb0jfJ3UiFYtk+hABEmr5Wq
cr3f728h7djQoapMgzrqrqMQ2Mlm7i3rIceIRvaFMcRpQG4NlFgqa3U1OwJQT1+/
fX7qOeKJiWfx/iO4dfzLCQM/lNogVeJQBVdYnn8nLj1J8nIikedI/fxga6IX55J4
PJK4Alng6dMBWuJZ3GCvD/tK6ljLYKJztWroRLiRQh2xF87EptYSqfRWXoX7lPGB
ZiattZgWBBTIu0MAEPBbiXReW1+RkWCdozEBZs/FB/lH9RTwzfX+cz1muwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkot4WfTkVmWvwLGqdWo89MwKuFMB8GA1UdIwQY
MBaAFLRktFI6iXK54vRqT0oWNOlwJ67fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1Yjct
ZmM2ZTc3ODg0MDU0LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1YjctZmM2ZTc3ODg0MDU0
LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8mzhRrz
eAbXAQ3Hs8dcQ88aOKnFvNteLdmxLJ+8ep2K7eI8g81SE6baKUTIdd2soV/9TXR8
CN5fNk0vlzW5hRQxcnpgJs5e5RdSAiwLwHNKZqqsr/PT9TQMFHhiS9Kvc14tg7o7
PhFNq/5b/OG9Z6SDanWNeIK+bgJOlTec0TNqOU025RbYIg32xDRkuNvOv5fI0mM2
B4s8w9w1QcW0GkYs3n2siiiLpkVntpEWWvO1K4X+U01h5+nmDiVqt0Vtyri54mok
Jc3jPfRCTrfgfH6K8CNYQqvNWhqvWVdLz77X7el6m3A6QTJYv7uWoGwyLgceqykS
vAEFNgzhEDKdrA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:58:20 2024 by rpki-client on console-ams.rpki-client.org