Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
File:                     NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json)
Hash identifier:          LAmV40knlg7rmdme0v8K6WTrQCOI9qEWZRB2nS4ljSM=
Subject key identifier:   CB:B4:7E:E1:EE:E2:08:E6:35:51:1C:58:7D:14:42:17:64:7D:C5:D5
Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
Certificate issuer:       /CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Certificate serial:       019369DA0731B667E4D797FF6B355B440160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
Manifest number:          0535
Signing time:             Tue 26 Nov 2024 19:01:56 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:56 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:56 +0000
Files and hashes:         1: IVdvCjwN5awaBx5Ys_3rUhe8X-k.roa (hash: K3qN5E3K3+Dk4y6AFYkfSfFbghynepZiwI7lRk60g+s=)
                          2: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: M0kM7D+fD/ufYia4bQ66l/5/SqYUqYGbiqkGQWRfq7s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:07:31:b6:67:e4:d7:97:ff:6b:35:5b:44:01:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0
        Validity
            Not Before: Nov 26 19:01:56 2024 GMT
            Not After : Nov 27 19:01:56 2024 GMT
        Subject: CN=cbb47ee1eee208e635511c587d144217647dc5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1e:31:54:7d:68:c1:79:95:ce:9b:05:3e:f0:
                    5b:3b:89:28:33:58:9c:2c:a9:4c:87:70:25:0b:b1:
                    30:84:92:67:be:1f:b8:31:56:06:c0:a2:f2:7b:4a:
                    96:38:0a:01:4c:cf:61:08:fc:88:72:79:19:3d:99:
                    4e:48:ae:a0:bc:0b:06:54:ac:2a:3d:5e:14:e1:e4:
                    36:71:54:51:4e:df:82:3f:81:c8:a1:60:34:a4:f4:
                    b3:e7:53:47:9e:5e:cb:c9:ca:21:e7:28:68:ed:99:
                    a1:23:6a:bc:4b:48:2a:d9:cc:3f:51:8f:f2:2e:bc:
                    16:9b:a6:cf:07:d5:9e:1b:7f:c9:e7:7b:3c:c2:d5:
                    a9:89:6b:f2:06:c1:84:d7:ad:6d:83:93:c7:72:6d:
                    54:1e:be:9b:2e:3e:a8:a8:8b:3d:95:89:c3:df:a5:
                    a2:c7:e5:71:19:11:f4:9e:cd:79:d0:37:29:ae:92:
                    e2:02:87:51:e6:6e:f5:67:72:c8:e0:77:53:38:00:
                    7a:62:6a:9f:32:4e:be:fd:4b:fb:47:37:92:50:06:
                    91:93:c7:22:4c:ff:06:4e:ec:64:69:c5:d9:c3:34:
                    f3:10:c3:e0:8e:9d:9d:40:a1:12:a7:7d:89:8e:e4:
                    97:bb:7d:3d:bb:8c:8e:7b:08:33:4e:a9:e3:1a:72:
                    78:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B4:7E:E1:EE:E2:08:E6:35:51:1C:58:7D:14:42:17:64:7D:C5:D5
            X509v3 Authority Key Identifier:
                keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0f:6b:03:3e:e8:64:55:71:2e:13:e9:4f:6c:75:22:9e:1b:
         0a:51:60:f2:d5:6c:b6:68:89:aa:94:af:24:03:67:b0:d1:23:
         3e:0f:ef:ed:cb:98:97:9c:42:cb:53:57:e1:ba:91:8c:8b:7b:
         3b:38:4d:2c:83:6c:dc:85:44:9b:16:3c:8d:e0:63:8d:57:1a:
         9f:90:cb:d9:f5:92:78:16:37:8a:6d:60:32:ab:d4:54:26:3b:
         41:5b:1a:91:66:03:bf:57:76:68:28:8c:12:24:c0:aa:c9:03:
         10:24:9e:f6:30:4b:4a:62:91:d9:cc:d9:27:76:02:b6:b4:51:
         dc:69:b5:24:02:84:ef:43:a5:f3:c9:89:ca:d2:73:71:fc:7d:
         b6:ba:da:ad:21:ff:8a:79:8c:06:09:33:1f:a4:72:34:93:96:
         f4:66:5b:47:18:fb:cf:e3:9b:3e:13:40:00:2a:86:8b:63:12:
         f4:23:47:15:4c:ef:47:b5:bf:a6:ba:62:2a:3c:96:bf:f5:eb:
         7d:af:f7:02:ad:59:fc:cd:0e:96:5d:77:5c:cf:0d:20:0a:a1:
         93:8b:97:38:83:4d:0e:87:30:b2:90:b4:29:1c:3e:b2:3a:c5:
         7d:c2:68:6d:c6:2e:33:0b:a4:5f:9f:f2:9f:4c:b2:f2:6c:4b:
         5b:32:5b:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2gcxtmfk15f/azVbRAFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDZmZjQ1Y2U1MDU1N2VkYzRjMDMwNmUxZjg2OTQ4MmFk
NDIzZTAwHhcNMjQxMTI2MTkwMTU2WhcNMjQxMTI3MTkwMTU2WjAzMTEwLwYDVQQD
EyhjYmI0N2VlMWVlZTIwOGU2MzU1MTFjNTg3ZDE0NDIxNzY0N2RjNWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x4xVH1owXmVzpsFPvBbO4koM1ic
LKlMh3AlC7EwhJJnvh+4MVYGwKLye0qWOAoBTM9hCPyIcnkZPZlOSK6gvAsGVKwq
PV4U4eQ2cVRRTt+CP4HIoWA0pPSz51NHnl7Lycoh5yho7ZmhI2q8S0gq2cw/UY/y
LrwWm6bPB9WeG3/J53s8wtWpiWvyBsGE161tg5PHcm1UHr6bLj6oqIs9lYnD36Wi
x+VxGRH0ns150DcprpLiAodR5m71Z3LI4HdTOAB6YmqfMk6+/Uv7RzeSUAaRk8ci
TP8GTuxkacXZwzTzEMPgjp2dQKESp32JjuSXu309u4yOewgzTqnjGnJ43QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMu0fuHu4gjmNVEcWH0UQhdkfcXVMB8GA1UdIwQY
MBaAFDVG/0XOUFV+3EwDBuH4aUgq1CPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUt
NjQwYzc0YTk0Y2M2LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUtNjQwYzc0YTk0Y2M2
LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQ9rAz7o
ZFVxLhPpT2x1Ip4bClFg8tVstmiJqpSvJANnsNEjPg/v7cuYl5xCy1NX4bqRjIt7
OzhNLINs3IVEmxY8jeBjjVcan5DL2fWSeBY3im1gMqvUVCY7QVsakWYDv1d2aCiM
EiTAqskDECSe9jBLSmKR2czZJ3YCtrRR3Gm1JAKE70Ol88mJytJzcfx9trrarSH/
inmMBgkzH6RyNJOW9GZbRxj7z+ObPhNAACqGi2MS9CNHFUzvR7W/prpiKjyWv/Xr
fa/3Aq1Z/M0Oll13XM8NIAqhk4uXOINNDocwspC0KRw+sjrFfcJobcYuMwukX5/y
n0yy8mxLWzJbVg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:39 2024 by rpki-client on console-ams.rpki-client.org