Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File:                     v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier:          pw9KcFgqS9aoJLfPMsP0nA1UjfYLUTR7TxU0JxOPVeg=
Subject key identifier:   C7:EE:6B:1E:16:92:CB:B9:F7:E3:27:FA:C5:7F:C2:CE:25:B8:99:2C
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer:       /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial:       0192376F68A0882F81CCEE1805C49043B056
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number:          12E3
Signing time:             Sat 28 Sep 2024 07:01:41 +0000
Manifest this update:     Sat 28 Sep 2024 07:01:41 +0000
Manifest next update:     Sun 29 Sep 2024 07:01:41 +0000
Files and hashes:         1: Jm4aMjLfhBNT4s5TzDzNVMu3VDs.roa (hash: 459NI5gtBdNj/nQkMWu3Zi163iy7X76KvXhL8h55Cyo=)
                          2: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: wXN52ThM8+jduIMJ/WfsB6Q8c5SzRyaEZeR0KXUFI/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:37:6f:68:a0:88:2f:81:cc:ee:18:05:c4:90:43:b0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
        Validity
            Not Before: Sep 28 07:01:41 2024 GMT
            Not After : Sep 29 07:01:41 2024 GMT
        Subject: CN=c7ee6b1e1692cbb9f7e327fac57fc2ce25b8992c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:fb:f4:99:36:a2:a9:36:f6:fa:9f:f0:b5:
                    c5:e4:52:2a:ca:2c:71:78:9b:44:db:4a:da:92:e0:
                    64:99:67:b8:9a:07:e1:d2:e7:88:13:c6:95:68:cc:
                    5e:57:13:7d:4a:1b:66:ef:5b:18:ba:a4:c6:ae:ec:
                    78:18:27:17:33:ed:4f:8e:75:8f:97:95:90:29:be:
                    c8:ab:5d:6f:60:1d:c9:df:b5:30:38:db:07:91:1b:
                    7b:b1:d9:da:7f:7e:77:81:db:98:53:d0:a5:a2:3d:
                    88:e4:31:cb:10:89:37:7b:89:c8:42:25:ee:ea:74:
                    bf:e8:02:5d:25:f2:e3:ae:ef:3a:99:b9:24:70:36:
                    8b:ae:3c:0d:fc:ac:16:51:34:ac:d6:fd:91:0a:1b:
                    f9:fb:ba:90:ed:08:05:a2:8b:ae:f2:1b:36:10:20:
                    68:f8:ca:5b:d2:b0:6d:37:98:83:9a:1a:39:f8:08:
                    8b:83:8b:52:aa:ec:d3:df:42:18:c3:da:fb:d9:64:
                    f0:d9:8e:d0:b6:94:5f:8c:ba:2d:57:4d:6c:95:78:
                    eb:45:4e:4c:0e:d6:21:a6:53:77:c9:a9:6e:4c:e3:
                    eb:c9:82:05:ff:81:39:d6:03:3f:c7:7e:83:76:f0:
                    a2:5a:87:ce:a3:dd:07:6d:83:2f:67:8b:98:a2:82:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EE:6B:1E:16:92:CB:B9:F7:E3:27:FA:C5:7F:C2:CE:25:B8:99:2C
            X509v3 Authority Key Identifier:
                keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2e:27:a3:ea:6c:98:67:37:e2:a4:79:a5:82:f0:8d:1b:2c:
         fc:72:16:1e:22:e7:8a:06:d9:6c:93:38:b6:2b:69:8e:b3:84:
         8f:35:00:cf:dc:43:da:34:9d:ad:98:b2:9b:ff:36:a2:a7:e4:
         99:1c:97:c7:45:40:7d:05:ab:e4:21:d3:85:54:ee:ae:71:a6:
         79:e7:d7:56:6d:d0:7d:87:12:d0:78:1c:0b:79:dd:97:15:4e:
         d6:ae:65:aa:08:4f:5d:64:29:c4:d6:4c:25:26:a6:6c:95:64:
         52:25:d1:01:f9:3c:9f:e5:70:c6:36:03:7b:26:87:1e:16:19:
         09:f5:b3:d7:15:0a:8b:0c:80:65:07:f5:10:0e:fa:61:51:23:
         aa:1d:ac:fb:11:c0:8f:c5:f4:76:44:9e:61:ed:a1:b6:03:77:
         be:bb:d9:9b:33:d3:3b:79:b1:47:9e:f1:3b:21:d8:b0:b7:f5:
         12:5e:ee:2b:eb:0d:a2:bc:f4:69:4f:e4:2d:ea:a0:4a:81:ff:
         ff:43:d0:23:72:e6:91:b4:84:a4:46:83:a7:f2:05:39:6f:59:
         3d:60:67:9b:81:5c:21:2c:33:35:21:11:71:41:e0:5c:b6:2b:
         ca:42:f6:08:70:d6:22:1c:e2:b2:d1:e1:2d:28:87:80:36:dd:
         a4:57:d9:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI3b2igiC+BzO4YBcSQQ7BWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODA5YTdlNmNhMTRkMGExYTk3NjY3M2UwMzE5ZTM0ZTk1
NmVkM2QwHhcNMjQwOTI4MDcwMTQxWhcNMjQwOTI5MDcwMTQxWjAzMTEwLwYDVQQD
EyhjN2VlNmIxZTE2OTJjYmI5ZjdlMzI3ZmFjNTdmYzJjZTI1Yjg5OTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n/79Jk2oqk29vqf8LXF5FIqyixx
eJtE20rakuBkmWe4mgfh0ueIE8aVaMxeVxN9Shtm71sYuqTGrux4GCcXM+1PjnWP
l5WQKb7Iq11vYB3J37UwONsHkRt7sdnaf353gduYU9Cloj2I5DHLEIk3e4nIQiXu
6nS/6AJdJfLjru86mbkkcDaLrjwN/KwWUTSs1v2RChv5+7qQ7QgFoouu8hs2ECBo
+Mpb0rBtN5iDmho5+AiLg4tSquzT30IYw9r72WTw2Y7QtpRfjLotV01slXjrRU5M
DtYhplN3yaluTOPryYIF/4E51gM/x36DdvCiWofOo90HbYMvZ4uYooI8vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfuax4Wksu59+Mn+sV/ws4luJksMB8GA1UdIwQY
MBaAFL+Amn5soU0KGpdmc+AxnjTpVu09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYTM4MmEtM2RkYS00Nzk2LWIzMjAt
M2ZkZmI0MTQwZjI0LzEvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8zYTM4MmEtM2RkYS00Nzk2LWIzMjAtM2ZkZmI0MTQwZjI0
LzEvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoi4no+ps
mGc34qR5pYLwjRss/HIWHiLnigbZbJM4titpjrOEjzUAz9xD2jSdrZiym/82oqfk
mRyXx0VAfQWr5CHThVTurnGmeefXVm3QfYcS0HgcC3ndlxVO1q5lqghPXWQpxNZM
JSambJVkUiXRAfk8n+VwxjYDeyaHHhYZCfWz1xUKiwyAZQf1EA76YVEjqh2s+xHA
j8X0dkSeYe2htgN3vrvZmzPTO3mxR57xOyHYsLf1El7uK+sNorz0aU/kLeqgSoH/
/0PQI3LmkbSEpEaDp/IFOW9ZPWBnm4FcISwzNSERcUHgXLYrykL2CHDWIhzistHh
LSiHgDbdpFfZuA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:38:27 2024 by rpki-client on console-ams.rpki-client.org