Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File:                     pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier:          K29mzLGz4qYVR7I2Pl1kpt85g6oiAuCU7STUaMT0us8=
Subject key identifier:   25:B4:FC:FE:92:DB:AB:42:F2:86:6A:C1:0B:98:4F:28:11:4A:CE:04
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer:       /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial:       019357D244410A2FB2F1C648F4B9FA93AD24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 07:00:17 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:17 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:17 +0000
Files and hashes:         1: RkdU9GCGBDr2eVANEpwczZxOmE4.roa (hash: 6ZdgJCTd5FxZ990U5ame1n9/OlAr8GHJE2fUnPV/F/E=)
                          2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: 9z1HQBHuEzE4qGCXR2wZi466uO1dpSHDh7e0OcP6F8g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:44:41:0a:2f:b2:f1:c6:48:f4:b9:fa:93:ad:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
        Validity
            Not Before: Nov 23 07:00:17 2024 GMT
            Not After : Nov 24 07:00:17 2024 GMT
        Subject: CN=25b4fcfe92dbab42f2866ac10b984f28114ace04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7f:88:d8:a1:c1:fa:fb:5b:5d:6b:73:ca:64:
                    f4:80:10:98:e6:0e:38:da:8d:73:86:cf:f0:8e:ca:
                    13:5d:2b:ff:5f:9f:e5:2b:47:37:f0:ea:27:93:e6:
                    c6:a3:14:fd:2f:36:49:6a:f0:74:ed:fd:82:4a:52:
                    d9:60:6e:54:01:6f:d0:56:9a:3e:c1:03:7f:cc:18:
                    a5:4d:6c:32:25:c6:86:77:5f:2e:19:03:e2:7e:af:
                    69:43:cd:50:03:0a:ec:02:12:6e:50:81:04:0e:63:
                    9d:a5:5e:a3:da:1a:d9:8c:d5:07:4b:22:54:5a:ed:
                    b9:9e:e7:3a:0f:91:f5:5e:99:ef:d5:e0:24:2d:1b:
                    bb:0c:07:d1:78:cd:ae:fb:df:1f:ec:09:c3:e0:01:
                    e9:62:b1:af:50:05:ee:00:e5:89:0e:70:8f:4f:b8:
                    29:1b:b6:e0:0d:43:ff:89:97:a5:33:5f:28:1b:41:
                    d2:11:1c:ee:1a:fb:84:4e:69:8c:e1:b2:da:09:b2:
                    b0:1c:06:54:68:cc:31:09:62:09:7b:71:83:01:c2:
                    17:25:05:89:0a:6b:eb:5b:47:62:ee:0a:dc:35:65:
                    e7:a3:d8:23:93:3d:d1:8f:0f:a0:bc:cf:2f:c7:ba:
                    82:17:4f:b5:d8:5a:a4:c6:b4:a3:b2:26:50:c4:95:
                    eb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B4:FC:FE:92:DB:AB:42:F2:86:6A:C1:0B:98:4F:28:11:4A:CE:04
            X509v3 Authority Key Identifier:
                keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0a:00:2a:df:5e:0b:15:64:c4:50:7c:66:ee:cd:7a:b9:2e:
         64:af:c3:82:9c:90:6f:fe:29:b7:48:c3:77:b7:92:fd:80:0b:
         90:8a:03:65:fa:88:39:87:62:62:99:3a:ab:20:53:0b:6e:84:
         a4:f8:99:ce:45:41:a5:7b:1f:98:44:c3:d6:55:e3:cd:02:f7:
         31:b3:78:e7:fa:7c:e1:ca:ce:0a:a6:fa:c6:4b:6e:43:c8:20:
         d3:a5:29:ca:c5:d6:a8:2c:7b:6d:c0:be:d7:c1:00:14:ae:ce:
         85:ea:2d:05:c3:a6:38:42:19:6f:f4:0a:c1:b6:af:1e:f3:9c:
         17:07:82:1c:21:fd:6a:08:2e:f1:67:3a:71:fa:78:b7:79:61:
         05:ef:59:19:55:3c:7f:15:71:75:e9:ae:7e:78:cc:aa:25:d2:
         23:f5:88:56:1c:95:03:27:1f:90:1a:a3:a3:12:da:bb:97:77:
         f4:60:05:82:e6:d1:42:b6:4d:a7:a6:e3:8e:7a:27:8c:7e:69:
         d9:3a:b5:08:20:3f:22:20:3a:48:ee:97:fc:24:5f:ae:b0:2f:
         48:aa:7f:7b:48:2e:a9:49:85:57:78:aa:60:99:cd:62:9e:c1:
         87:4b:63:ef:9b:1c:97:81:21:6b:3b:63:ad:46:c5:0d:f0:9a:
         26:29:57:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0kRBCi+y8cZI9Ln6k60kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjUyM2Q5NDgzODdkOGM1ZmNkZjc1MmUwYTFjYzQwOGNm
ZTgzOTUwHhcNMjQxMTIzMDcwMDE3WhcNMjQxMTI0MDcwMDE3WjAzMTEwLwYDVQQD
EygyNWI0ZmNmZTkyZGJhYjQyZjI4NjZhYzEwYjk4NGYyODExNGFjZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X+I2KHB+vtbXWtzymT0gBCY5g44
2o1zhs/wjsoTXSv/X5/lK0c38Oonk+bGoxT9LzZJavB07f2CSlLZYG5UAW/QVpo+
wQN/zBilTWwyJcaGd18uGQPifq9pQ81QAwrsAhJuUIEEDmOdpV6j2hrZjNUHSyJU
Wu25nuc6D5H1Xpnv1eAkLRu7DAfReM2u+98f7AnD4AHpYrGvUAXuAOWJDnCPT7gp
G7bgDUP/iZelM18oG0HSERzuGvuETmmM4bLaCbKwHAZUaMwxCWIJe3GDAcIXJQWJ
CmvrW0di7grcNWXno9gjkz3Rjw+gvM8vx7qCF0+12FqkxrSjsiZQxJXrIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCW0/P6S26tC8oZqwQuYTygRSs4EMB8GA1UdIwQY
MBaAFKT1I9lIOH2MX833UuChzECM/oOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEt
MjBhOTAwYmM3NzZhLzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEtMjBhOTAwYmM3NzZh
LzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAoAKt9e
CxVkxFB8Zu7NerkuZK/DgpyQb/4pt0jDd7eS/YALkIoDZfqIOYdiYpk6qyBTC26E
pPiZzkVBpXsfmETD1lXjzQL3MbN45/p84crOCqb6xktuQ8gg06UpysXWqCx7bcC+
18EAFK7OheotBcOmOEIZb/QKwbavHvOcFweCHCH9aggu8Wc6cfp4t3lhBe9ZGVU8
fxVxdemufnjMqiXSI/WIVhyVAycfkBqjoxLau5d39GAFgubRQrZNp6bjjnonjH5p
2Tq1CCA/IiA6SO6X/CRfrrAvSKp/e0guqUmFV3iqYJnNYp7Bh0tj75scl4Ehaztj
rUbFDfCaJilXrA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:13:05 2024 by rpki-client on console-ams.rpki-client.org