Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
File:                     S9Kz8xprCl18Bpijd5alHXsMtqQ.mft (raw, json)
Hash identifier:          CHVC1M84nAX+VT3PDAaoYCU02XjnSlZdcQHnD8ZBmFI=
Subject key identifier:   B0:04:C5:04:DE:0C:04:EF:28:64:BB:C9:86:F4:04:99:18:3A:EF:D5
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Certificate issuer:       /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial:       019238B91017497F0E751B0EBCDB24C8CF33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
Manifest number:          12DE
Signing time:             Sat 28 Sep 2024 13:01:45 +0000
Manifest this update:     Sat 28 Sep 2024 13:01:45 +0000
Manifest next update:     Sun 29 Sep 2024 13:01:45 +0000
Files and hashes:         1: S9Kz8xprCl18Bpijd5alHXsMtqQ.crl (hash: mbvvA/DJ+bSxd/t4dHavLKfVhX+6YheL325/Alce/SU=)
                          2: X0rvLGmXE2EuV_Yt3SpAZ73hTfc.roa (hash: XVZa/5kTaoovGRcIDI3NMoxBmwU3ad0M7b/OTFnAYgw=)
                          3: vlA_e2d-NDeL5Sb3an8msFGv_k4.roa (hash: VSNnGjblDNDAU/QtbyZfBkpvVze0yV54yNPdgqpQtrI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:b9:10:17:49:7f:0e:75:1b:0e:bc:db:24:c8:cf:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
        Validity
            Not Before: Sep 28 13:01:45 2024 GMT
            Not After : Sep 29 13:01:45 2024 GMT
        Subject: CN=b004c504de0c04ef2864bbc986f40499183aefd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:29:62:84:05:a5:73:6f:a5:3b:15:b5:6a:c6:
                    09:73:22:fd:49:6f:2a:c4:1d:65:e4:df:19:eb:f9:
                    65:b9:df:0d:1d:ae:43:b5:5c:3d:a0:78:77:94:a4:
                    f6:0e:30:db:45:a9:03:86:e9:38:94:10:e0:fa:16:
                    34:3b:e5:1f:09:87:df:5b:26:4e:ac:b4:b8:9f:d0:
                    f5:f1:33:e8:06:48:a2:50:50:ff:e4:68:e2:1a:f3:
                    dd:02:dc:34:6b:74:12:02:19:43:09:58:4f:2d:60:
                    ac:b6:76:4c:c0:f9:4c:bf:ab:a9:0b:04:0f:80:85:
                    63:77:b4:d6:6c:cc:2a:cd:99:6f:8a:f4:22:a1:e9:
                    38:bd:14:ff:ec:06:e9:a7:8a:3d:28:f3:d1:ae:31:
                    77:a0:51:8a:a8:4a:0e:8c:26:02:a0:c1:b8:40:e8:
                    ef:42:b3:10:63:fb:3c:26:37:7e:e2:4f:6c:09:09:
                    fb:df:51:4f:62:7f:1d:e0:e6:c1:f6:78:50:c7:a0:
                    8f:cc:68:32:5d:47:a9:24:7a:ce:a9:f9:a5:7c:58:
                    45:32:04:32:3e:80:ed:04:14:0c:2b:72:db:48:06:
                    39:1a:b3:ee:29:85:e8:a4:b6:4b:a1:0c:cc:59:57:
                    94:08:f9:a8:3c:9a:75:d2:e5:bb:28:d8:d7:99:32:
                    ed:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:04:C5:04:DE:0C:04:EF:28:64:BB:C9:86:F4:04:99:18:3A:EF:D5
            X509v3 Authority Key Identifier:
                keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:af:de:8b:50:59:d5:80:de:09:b9:e3:b0:14:72:5a:ab:2f:
         65:e3:bc:66:ab:66:ee:45:cb:0d:ae:0b:35:bb:77:02:15:3c:
         4c:f2:70:64:2d:61:ba:a2:cc:f2:91:45:36:51:01:c6:2f:9e:
         0f:23:9d:3a:12:e9:07:fc:67:d0:f1:27:98:35:c5:84:7b:80:
         6f:fe:5b:82:17:11:48:84:10:24:5e:4f:e6:58:02:2f:7a:20:
         0f:2e:80:51:6b:7b:04:6e:9f:08:c9:68:3d:92:fe:8c:65:69:
         34:53:2a:24:7e:8c:a3:1a:57:73:4f:ee:18:55:64:51:e8:1f:
         8b:2b:a4:fe:46:df:dc:e1:da:c7:e2:88:df:b5:14:24:ee:36:
         97:84:cc:52:09:36:ea:1f:b4:0a:70:5e:fb:43:dc:f2:f0:5f:
         12:00:29:54:ea:96:8b:a8:27:c9:7f:f1:1a:e3:0e:00:73:02:
         c4:e4:77:5d:79:54:95:c3:66:e6:d0:7f:78:d4:c7:37:40:6b:
         07:b1:2c:69:6e:5f:07:6c:54:ac:04:d7:79:43:07:a6:94:3c:
         6d:ea:cf:b6:6f:2e:57:37:ca:1d:b7:85:77:48:37:f8:31:f9:
         f5:af:85:3e:60:cf:d4:67:48:e8:c6:94:cb:a6:9e:59:fe:e3:
         c7:0f:15:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI4uRAXSX8OdRsOvNskyM8zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDJiM2YzMWE2YjBhNWQ3YzA2OThhMzc3OTZhNTFkN2Iw
Y2I2YTQwHhcNMjQwOTI4MTMwMTQ1WhcNMjQwOTI5MTMwMTQ1WjAzMTEwLwYDVQQD
EyhiMDA0YzUwNGRlMGMwNGVmMjg2NGJiYzk4NmY0MDQ5OTE4M2FlZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyilihAWlc2+lOxW1asYJcyL9SW8q
xB1l5N8Z6/llud8NHa5DtVw9oHh3lKT2DjDbRakDhuk4lBDg+hY0O+UfCYffWyZO
rLS4n9D18TPoBkiiUFD/5GjiGvPdAtw0a3QSAhlDCVhPLWCstnZMwPlMv6upCwQP
gIVjd7TWbMwqzZlvivQioek4vRT/7Abpp4o9KPPRrjF3oFGKqEoOjCYCoMG4QOjv
QrMQY/s8Jjd+4k9sCQn731FPYn8d4ObB9nhQx6CPzGgyXUepJHrOqfmlfFhFMgQy
PoDtBBQMK3LbSAY5GrPuKYXopLZLoQzMWVeUCPmoPJp10uW7KNjXmTLt2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAExQTeDATvKGS7yYb0BJkYOu/VMB8GA1UdIwQY
MBaAFEvSs/MaawpdfAaYo3eWpR17DLakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zOTk3ZWEtMjA0YS00ZWZkLTg1ZDYt
MmQ3ZmQwZmIyMmNlLzEvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8zOTk3ZWEtMjA0YS00ZWZkLTg1ZDYtMmQ3ZmQwZmIyMmNl
LzEvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABa/ei1BZ
1YDeCbnjsBRyWqsvZeO8Zqtm7kXLDa4LNbt3AhU8TPJwZC1huqLM8pFFNlEBxi+e
DyOdOhLpB/xn0PEnmDXFhHuAb/5bghcRSIQQJF5P5lgCL3ogDy6AUWt7BG6fCMlo
PZL+jGVpNFMqJH6MoxpXc0/uGFVkUegfiyuk/kbf3OHax+KI37UUJO42l4TMUgk2
6h+0CnBe+0Pc8vBfEgApVOqWi6gnyX/xGuMOAHMCxOR3XXlUlcNm5tB/eNTHN0Br
B7EsaW5fB2xUrATXeUMHppQ8berPtm8uVzfKHbeFd0g3+DH59a+FPmDP1GdI6MaU
y6aeWf7jxw8VPA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:22:36 2024 by rpki-client on console-ams.rpki-client.org