Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
File:                     aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft (raw, json)
Hash identifier:          tL/Y5853COUUE2y8r2FkjAZCPtoCQRJcuaIJo5J1OGI=
Subject key identifier:   D9:D3:3B:1E:BA:02:12:A4:56:29:46:26:EC:01:42:2F:58:DD:4C:6E
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Certificate issuer:       /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial:       019238B885463150C6319FF6472AA928F6CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
Manifest number:          12DF
Signing time:             Sat 28 Sep 2024 13:01:09 +0000
Manifest this update:     Sat 28 Sep 2024 13:01:09 +0000
Manifest next update:     Sun 29 Sep 2024 13:01:09 +0000
Files and hashes:         1: 1fosVa-BMHRgVm5yl5gq5oGpkkQ.roa (hash: m5ULM2iE7cS35Ht0a0Y0h8WikIer9cm3u8pVj7ODGWg=)
                          2: PNmnEuJXyybIkddxYnIvLx1GKFY.roa (hash: G0/o7F0SlAASNWvHOfksGY+oOHc9aIkS3+JMsdalcsA=)
                          3: aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl (hash: Yv0AX5mjha3ESMoLpJhcbaG9uo/GUZFj4yc5UeHYIlc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:b8:85:46:31:50:c6:31:9f:f6:47:2a:a9:28:f6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
        Validity
            Not Before: Sep 28 13:01:09 2024 GMT
            Not After : Sep 29 13:01:09 2024 GMT
        Subject: CN=d9d33b1eba0212a456294626ec01422f58dd4c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:e2:fa:0d:cf:9d:7a:1a:44:6b:a8:4a:c4:
                    c9:c0:7c:0e:0d:99:48:e9:18:7c:50:a5:57:df:cf:
                    8f:bf:9d:b0:4c:cd:aa:d4:bc:45:d5:ba:80:e1:9b:
                    a4:f7:b6:ad:63:db:b4:96:10:fc:cc:fb:ae:5e:03:
                    24:0b:e1:c3:92:c0:90:3e:d4:fa:7b:66:06:ca:0b:
                    1e:11:ed:66:3f:01:8a:ec:b0:0b:52:52:a7:5d:e1:
                    a4:9b:93:14:4f:e6:ef:77:9a:83:39:ae:ea:d0:2f:
                    e1:cb:e0:95:da:0d:1a:57:fe:89:ba:f7:5c:e6:2a:
                    33:bd:1e:44:1a:65:a1:b6:19:f8:b9:3f:7f:5d:8b:
                    88:0f:7d:e5:2b:20:49:b7:7e:98:17:67:0b:66:66:
                    03:f1:da:78:e5:97:04:a0:23:23:06:50:eb:28:1f:
                    b9:74:c0:21:7f:9e:b3:00:96:71:8f:a6:a2:85:ef:
                    d9:77:4b:77:b9:73:5d:af:77:66:62:23:85:bc:1a:
                    82:19:49:4b:90:52:21:ce:1b:53:d2:82:7b:68:1f:
                    a3:10:53:72:54:a2:b0:9d:5a:57:a0:6a:64:99:38:
                    76:75:a3:44:a3:bd:05:8a:5e:10:f0:0b:de:37:a9:
                    f2:37:65:03:74:48:78:5a:18:3e:d2:6e:0f:10:6a:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D3:3B:1E:BA:02:12:A4:56:29:46:26:EC:01:42:2F:58:DD:4C:6E
            X509v3 Authority Key Identifier:
                keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:61:61:50:b2:93:93:bd:47:90:8a:52:b9:d1:95:23:43:d9:
         50:3a:a6:3a:08:79:fe:a7:01:19:66:a7:97:bf:93:25:fc:32:
         8c:62:bd:f3:11:c9:11:1f:b6:32:49:cb:78:5c:c8:f1:d5:3b:
         79:5b:7e:34:08:8f:88:75:8d:8d:92:49:00:e7:99:25:1c:d9:
         ce:6c:8b:03:3e:35:42:43:aa:a2:bc:8b:44:f6:b9:4a:d5:ba:
         28:89:a8:b3:68:93:3c:4e:e3:68:a3:ba:a8:03:5b:8b:7a:b8:
         39:6f:92:30:a3:6d:22:ca:d8:20:4f:91:74:0b:08:f6:63:d9:
         c3:2e:58:18:19:98:c8:d6:bb:5a:04:f9:ed:13:16:78:15:67:
         94:7d:10:64:37:cb:03:62:e4:a6:d1:83:69:df:d4:2d:11:9e:
         ec:3d:f3:50:f8:f6:82:f7:1e:f1:95:88:25:4c:c3:d9:01:c9:
         9a:9c:b2:49:1a:1e:c4:88:0c:10:1c:9b:52:98:d8:a0:cd:81:
         2f:3a:27:26:32:c5:9d:f1:4a:51:a6:db:a8:4f:e3:e7:8b:72:
         d0:ba:63:99:32:e4:1c:f3:83:39:79:56:5a:b7:86:c9:24:5c:
         35:60:fd:ea:8b:99:e3:96:ad:40:66:b8:30:3c:35:a1:9e:cd:
         8d:45:18:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI4uIVGMVDGMZ/2RyqpKPbLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTRlMWI4ZGE4MGNhYzJhZDFhMmYzZjA5YmY5ZGI1YTEy
NDg2YTQwHhcNMjQwOTI4MTMwMTA5WhcNMjQwOTI5MTMwMTA5WjAzMTEwLwYDVQQD
EyhkOWQzM2IxZWJhMDIxMmE0NTYyOTQ2MjZlYzAxNDIyZjU4ZGQ0YzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytHi+g3PnXoaRGuoSsTJwHwODZlI
6Rh8UKVX38+Pv52wTM2q1LxF1bqA4Zuk97atY9u0lhD8zPuuXgMkC+HDksCQPtT6
e2YGygseEe1mPwGK7LALUlKnXeGkm5MUT+bvd5qDOa7q0C/hy+CV2g0aV/6Juvdc
5iozvR5EGmWhthn4uT9/XYuID33lKyBJt36YF2cLZmYD8dp45ZcEoCMjBlDrKB+5
dMAhf56zAJZxj6aihe/Zd0t3uXNdr3dmYiOFvBqCGUlLkFIhzhtT0oJ7aB+jEFNy
VKKwnVpXoGpkmTh2daNEo70Fil4Q8AveN6nyN2UDdEh4Whg+0m4PEGqUywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnTOx66AhKkVilGJuwBQi9Y3UxuMB8GA1UdIwQY
MBaAFGiU4bjagMrCrRovPwm/nbWhJIakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yY2FiMWEtZGY2Ni00MTg3LWIxODIt
NzAzY2FiNGQwNTk4LzEvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yY2FiMWEtZGY2Ni00MTg3LWIxODItNzAzY2FiNGQwNTk4
LzEvYUpUaHVOcUF5c0t0R2k4X0NiLWR0YUVraHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWFhULKT
k71HkIpSudGVI0PZUDqmOgh5/qcBGWanl7+TJfwyjGK98xHJER+2MknLeFzI8dU7
eVt+NAiPiHWNjZJJAOeZJRzZzmyLAz41QkOqoryLRPa5StW6KImos2iTPE7jaKO6
qANbi3q4OW+SMKNtIsrYIE+RdAsI9mPZwy5YGBmYyNa7WgT57RMWeBVnlH0QZDfL
A2LkptGDad/ULRGe7D3zUPj2gvce8ZWIJUzD2QHJmpyySRoexIgMEBybUpjYoM2B
LzonJjLFnfFKUabbqE/j54ty0LpjmTLkHPODOXlWWreGySRcNWD96ouZ45atQGa4
MDw1oZ7NjUUYiw==
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:39:34 2024 by rpki-client on console-ams.rpki-client.org