Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
File:                     vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft (raw, json)
Hash identifier:          SKMNindRIDyoqpCRdmekTQgkIQxm/c74y28ZwHCz3ac=
Subject key identifier:   7B:D6:82:26:A6:AF:54:CC:54:6A:FE:D0:3A:07:AF:72:1F:9E:36:ED
Authority key identifier: BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E
Certificate issuer:       /CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
Certificate serial:       0193579B9D916E0B964A35B96DA45159E087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
Manifest number:          1303
Signing time:             Sat 23 Nov 2024 06:00:36 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:36 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:36 +0000
Files and hashes:         1: 5jVM-ITIBVTAx1quZ2Yy9bs_65k.roa (hash: geMPX6gtC3cBDABcUXby65S/C0HP76fPRoY1XgCW7K0=)
                          2: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl (hash: uaPDhzoT59OXPGc1JiBppFN/SKmaLJl1r2ZlhQQTJoM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:9d:91:6e:0b:96:4a:35:b9:6d:a4:51:59:e0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
        Validity
            Not Before: Nov 23 06:00:36 2024 GMT
            Not After : Nov 24 06:00:36 2024 GMT
        Subject: CN=7bd68226a6af54cc546afed03a07af721f9e36ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:45:d1:78:c4:63:8d:40:55:b9:96:3e:f6:53:
                    c2:ae:b1:09:6a:c0:90:af:f5:d4:5b:7c:c1:2c:d7:
                    27:1e:06:01:74:be:3f:8e:ba:61:db:42:40:8b:cb:
                    e7:31:ea:4e:14:84:5e:4e:27:c1:33:e6:88:6b:95:
                    e8:bf:27:3c:0d:c2:be:9b:bd:ec:4d:a5:b7:f6:02:
                    45:63:a9:cb:cc:e5:1d:e2:d5:7e:1b:24:5a:c2:19:
                    dd:60:fa:78:7a:97:61:38:df:65:24:b3:4e:9c:fd:
                    02:8a:89:cb:e6:99:04:1a:35:1f:2b:4b:15:da:73:
                    9c:78:a6:4b:d9:25:0b:4f:07:21:51:89:44:24:b0:
                    f3:f9:cc:79:98:1f:b2:3b:16:79:bb:b0:0b:7e:37:
                    d3:80:45:d6:76:75:ab:6c:ea:a1:9a:a1:dc:ba:53:
                    98:d0:1f:36:1d:05:98:f9:e6:7f:08:7a:57:b2:b3:
                    75:10:c7:32:8b:24:4e:86:f1:78:35:cf:3c:fa:1b:
                    70:c8:3d:70:76:30:18:a5:44:59:65:21:ee:e2:af:
                    4c:50:58:72:13:26:73:6d:31:fe:b0:1f:e3:48:6e:
                    8d:49:ba:ba:ad:3b:22:b7:24:e4:91:1b:64:28:fb:
                    33:50:45:a7:95:fb:fb:43:a2:53:da:05:98:15:21:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D6:82:26:A6:AF:54:CC:54:6A:FE:D0:3A:07:AF:72:1F:9E:36:ED
            X509v3 Authority Key Identifier:
                keyid:BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4f:2b:a9:2b:a9:07:b7:38:42:45:13:15:2b:ec:9c:12:74:
         af:13:2a:2c:1f:0b:50:3d:9d:2c:66:4c:57:25:a6:fa:10:00:
         ed:be:f7:da:3b:c9:01:f6:f5:fa:1e:be:16:3d:c5:9e:c9:75:
         63:dd:26:fd:5b:c4:f0:50:6c:0f:b1:bb:46:fe:e4:61:cf:bc:
         0f:1b:1e:9c:de:10:03:71:d1:ca:17:15:5d:dd:61:ce:e3:e0:
         bb:74:2b:7a:30:c2:69:4f:c2:60:58:d6:43:ad:46:11:29:a5:
         24:89:c1:86:3a:0a:fe:11:b1:78:1a:2e:05:f7:f0:db:24:a7:
         c2:f4:16:e4:75:34:b9:1d:f4:df:52:6b:e7:f4:4b:a0:3f:a5:
         45:31:88:36:a1:4d:87:16:5d:f0:51:71:0d:89:ed:42:c4:b6:
         65:16:62:b5:68:3a:6c:0d:d7:3f:43:dd:01:1f:d2:13:ac:83:
         2b:c0:64:12:f5:4e:42:63:81:7c:dd:76:51:fe:6d:fe:56:27:
         77:e7:1d:53:91:76:bf:82:6e:0c:bd:3e:c0:64:8c:45:8a:16:
         bc:8b:30:02:23:2a:0d:7a:42:f5:79:ca:17:cd:e6:c3:7f:44:
         b8:9b:7d:95:3c:6c:29:ec:60:25:aa:7f:ac:73:72:e9:39:56:
         68:d4:93:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm52RbguWSjW5baRRWeCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTg0ZDMwZDFmZDJmZGU1MGJlYTZmNzBmZTJkYmUyMDUx
OGEwM2UwHhcNMjQxMTIzMDYwMDM2WhcNMjQxMTI0MDYwMDM2WjAzMTEwLwYDVQQD
Eyg3YmQ2ODIyNmE2YWY1NGNjNTQ2YWZlZDAzYTA3YWY3MjFmOWUzNmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskXReMRjjUBVuZY+9lPCrrEJasCQ
r/XUW3zBLNcnHgYBdL4/jrph20JAi8vnMepOFIReTifBM+aIa5Xovyc8DcK+m73s
TaW39gJFY6nLzOUd4tV+GyRawhndYPp4epdhON9lJLNOnP0CionL5pkEGjUfK0sV
2nOceKZL2SULTwchUYlEJLDz+cx5mB+yOxZ5u7ALfjfTgEXWdnWrbOqhmqHculOY
0B82HQWY+eZ/CHpXsrN1EMcyiyROhvF4Nc88+htwyD1wdjAYpURZZSHu4q9MUFhy
EyZzbTH+sB/jSG6NSbq6rTsityTkkRtkKPszUEWnlfv7Q6JT2gWYFSErNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvWgiamr1TMVGr+0DoHr3IfnjbtMB8GA1UdIwQY
MBaAFLwYTTDR/S/eUL6m9w/i2+IFGKA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84Y2M0N2YtMDI2NS00MDdjLWJhNDUt
MDVkN2JkNGE3NDFkLzEvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84Y2M0N2YtMDI2NS00MDdjLWJhNDUtMDVkN2JkNGE3NDFk
LzEvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbk8rqSup
B7c4QkUTFSvsnBJ0rxMqLB8LUD2dLGZMVyWm+hAA7b732jvJAfb1+h6+Fj3Fnsl1
Y90m/VvE8FBsD7G7Rv7kYc+8DxsenN4QA3HRyhcVXd1hzuPgu3QrejDCaU/CYFjW
Q61GESmlJInBhjoK/hGxeBouBffw2ySnwvQW5HU0uR3031Jr5/RLoD+lRTGINqFN
hxZd8FFxDYntQsS2ZRZitWg6bA3XP0PdAR/SE6yDK8BkEvVOQmOBfN12Uf5t/lYn
d+cdU5F2v4JuDL0+wGSMRYoWvIswAiMqDXpC9XnKF83mw39EuJt9lTxsKexgJap/
rHNy6TlWaNSTlA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:48:50 2024 by rpki-client on console-ams.rpki-client.org