Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File:                     3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier:          +jyUw1/xTSjWSaX2FvdUBGlqcRQIdy9yKQ/TSw39tNc=
Subject key identifier:   0C:8D:CB:2E:02:62:C6:4C:F1:F5:F4:CF:BD:F7:DE:44:71:D1:3A:82
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer:       /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial:       01935840382D187DCBA9168A07CD2437D9F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number:          137A
Signing time:             Sat 23 Nov 2024 09:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:23 +0000
Files and hashes:         1: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: kI3m5CBfHtjAgh8I44Agg9yV2SG90wUrbij4kT8bKbU=)
                          2: EeC9dXIfKNQX3vmx4QBu9kqjojU.roa (hash: kaU//+XuxfAsCiTXG7ignphzewftmi6mNXD+lpTydvo=)
                          3: TMzi1IVQ71J13Vc5pdXYCWaIVMA.roa (hash: ujBEo020KSu5+yzi4GP7sIWbkjyOBc7kBqe64svsXdU=)
                          4: hchHokWfaA5yJL4LIUk1ip9Cf2I.roa (hash: kBgDWUWbqCkmhazIJTVRl3vRTAvdEa1b5brvr2AnCYI=)
                          5: zZAcBvA6RSpJHlMTgCYA67FRK5o.roa (hash: U/OppZFgfILlFSwQjJLiLU0kqN7MJVXFczopCh/x/xA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:38:2d:18:7d:cb:a9:16:8a:07:cd:24:37:d9:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
        Validity
            Not Before: Nov 23 09:00:23 2024 GMT
            Not After : Nov 24 09:00:23 2024 GMT
        Subject: CN=0c8dcb2e0262c64cf1f5f4cfbdf7de4471d13a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:4a:6f:5b:2b:60:f1:5f:75:13:f4:c5:d8:
                    ce:aa:85:a4:ac:0d:c2:0c:25:9d:ac:a0:f2:1f:e4:
                    95:03:e2:e2:0e:b2:0b:63:1d:73:59:80:88:b8:46:
                    af:83:41:9a:fa:de:cb:1d:00:32:b8:47:2f:7b:c5:
                    b2:9a:75:d5:f3:60:4e:7c:ca:70:0b:3c:7b:fc:e3:
                    d2:f4:9f:38:fa:e6:a1:43:34:79:d3:37:67:28:4c:
                    9e:2b:e4:1f:9b:0f:a6:c4:2a:4a:95:c3:0f:d2:e6:
                    2d:bc:09:b7:a7:a2:2b:89:cd:d4:7c:99:41:6d:7d:
                    c5:d7:76:7c:1e:8a:b4:10:ca:36:34:32:10:2c:cf:
                    d4:3f:8a:09:e1:b5:5d:a5:90:3a:83:f0:6a:19:b8:
                    36:d1:29:5f:39:2b:6d:e7:53:11:ac:8f:50:de:9c:
                    49:5b:9d:f3:96:70:24:c1:dc:4c:ae:4c:34:7e:24:
                    00:83:47:62:d4:21:d8:cf:a2:7a:91:02:cc:5b:1a:
                    90:19:41:34:3f:67:14:d8:3d:a1:27:e6:b7:6c:4b:
                    7a:c7:1a:0b:82:fc:bc:ea:d2:ea:89:c6:10:1a:26:
                    6d:9b:8b:df:59:92:2c:3a:6b:16:57:97:77:dd:10:
                    5c:d9:6a:2a:69:ec:e9:68:9b:dd:da:f7:d9:aa:4d:
                    aa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8D:CB:2E:02:62:C6:4C:F1:F5:F4:CF:BD:F7:DE:44:71:D1:3A:82
            X509v3 Authority Key Identifier:
                keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:4f:f8:6b:7d:1a:68:b6:ff:2f:f8:d3:34:2c:bf:ab:98:4b:
         8a:ed:f3:a9:ae:7d:46:a7:24:24:a8:da:d3:33:b3:4c:00:3a:
         cc:ea:fc:41:68:37:56:2d:e8:89:fa:11:6a:4c:5a:3c:b5:ea:
         10:40:03:15:a8:41:1d:5c:78:a0:ae:50:62:ea:f0:98:84:c4:
         98:a7:4b:bb:40:8b:f1:9e:23:58:0c:5d:4e:0e:64:e4:90:d8:
         5d:38:4b:aa:2b:e2:41:32:d2:1e:8c:10:ad:43:3f:32:02:4a:
         9f:82:1f:04:79:93:ab:9e:d8:a7:6f:a2:fa:df:87:59:55:96:
         e2:5f:ad:88:7d:f5:7e:62:a6:95:c8:bc:3c:ac:ba:c7:10:91:
         98:22:70:85:9e:d2:82:71:55:a7:f0:ee:41:65:ba:6e:b5:bb:
         20:b8:01:88:b0:76:0a:16:ce:d1:07:a3:7c:86:6a:0b:63:ec:
         04:e1:cd:67:7e:51:4c:6e:f3:45:7c:64:d4:60:88:e5:84:9b:
         6f:74:d4:5e:d8:11:6f:93:50:4d:ba:51:15:63:74:b6:a4:16:
         22:55:3b:d9:c7:76:31:e4:3b:f8:05:5a:42:74:23:84:54:f7:
         a0:20:a5:4f:4b:bb:c1:8f:dd:82:c7:8f:16:7e:2b:2f:47:7a:
         3a:b0:98:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYQDgtGH3LqRaKB80kN9n5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYjY1YTkwZWQzY2Y0YWUwNDUyNTU0ZWUzNGI5MmE4NDc2
ZGNmMTAwHhcNMjQxMTIzMDkwMDIzWhcNMjQxMTI0MDkwMDIzWjAzMTEwLwYDVQQD
EygwYzhkY2IyZTAyNjJjNjRjZjFmNWY0Y2ZiZGY3ZGU0NDcxZDEzYTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSlKb1srYPFfdRP0xdjOqoWkrA3C
DCWdrKDyH+SVA+LiDrILYx1zWYCIuEavg0Ga+t7LHQAyuEcve8WymnXV82BOfMpw
Czx7/OPS9J84+uahQzR50zdnKEyeK+Qfmw+mxCpKlcMP0uYtvAm3p6Iric3UfJlB
bX3F13Z8Hoq0EMo2NDIQLM/UP4oJ4bVdpZA6g/BqGbg20SlfOStt51MRrI9Q3pxJ
W53zlnAkwdxMrkw0fiQAg0di1CHYz6J6kQLMWxqQGUE0P2cU2D2hJ+a3bEt6xxoL
gvy86tLqicYQGiZtm4vfWZIsOmsWV5d33RBc2WoqaezpaJvd2vfZqk2qQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyNyy4CYsZM8fX0z7333kRx0TqCMB8GA1UdIwQY
MBaAFNy2WpDtPPSuBFJVTuNLkqhHbc8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEt
ODVhOTU1ZjIxNjNiLzEvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEtODVhOTU1ZjIxNjNi
LzEvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnU/4a30a
aLb/L/jTNCy/q5hLiu3zqa59RqckJKja0zOzTAA6zOr8QWg3Vi3oifoRakxaPLXq
EEADFahBHVx4oK5QYurwmITEmKdLu0CL8Z4jWAxdTg5k5JDYXThLqiviQTLSHowQ
rUM/MgJKn4IfBHmTq57Yp2+i+t+HWVWW4l+tiH31fmKmlci8PKy6xxCRmCJwhZ7S
gnFVp/DuQWW6brW7ILgBiLB2ChbO0QejfIZqC2PsBOHNZ35RTG7zRXxk1GCI5YSb
b3TUXtgRb5NQTbpRFWN0tqQWIlU72cd2MeQ7+AVaQnQjhFT3oCClT0u7wY/dgseP
Fn4rL0d6OrCYxw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:11 2024 by rpki-client on console-fra.rpki-client.org