Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File:                     CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier:          MAXsNOtPUmERDNvjMRVIBOts4ijBjZy9WhdSU1rAVCE=
Subject key identifier:   2E:5C:CA:3A:DA:F6:50:E2:17:26:F7:3A:AC:87:D8:0F:17:82:6C:C7
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer:       /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial:       019358E523A04ABB22AE5E9E327C75918CA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number:          0EB4
Signing time:             Sat 23 Nov 2024 12:00:31 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:31 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:31 +0000
Files and hashes:         1: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: w9uxtliS1REZiikPJg93/KOYq6UvNNMX9yd5YXomVjQ=)
                          2: b0P5CX4bGy7eskWLB0Wy0wp7yZU.roa (hash: JJCStBdPAOZM9cRkK3ShwxPKN9CUxJTbQTAHmBvAH/c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e5:23:a0:4a:bb:22:ae:5e:9e:32:7c:75:91:8c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
        Validity
            Not Before: Nov 23 12:00:31 2024 GMT
            Not After : Nov 24 12:00:31 2024 GMT
        Subject: CN=2e5cca3adaf650e21726f73aac87d80f17826cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:33:1a:0d:fc:a7:de:bf:f7:73:91:07:74:a8:
                    24:6f:bc:cd:cd:62:27:03:35:6e:12:51:05:bd:ea:
                    7c:cd:44:7f:18:34:56:fc:43:24:a9:ad:02:63:79:
                    75:d3:46:09:7c:d1:33:cb:aa:98:7e:83:bf:8a:6e:
                    52:2e:91:e4:c1:7a:23:27:9a:69:6b:ba:57:76:2f:
                    59:ae:31:20:4e:30:62:f5:4c:bb:51:a4:c6:86:f5:
                    52:54:5a:a8:80:1b:da:14:f3:3b:62:1b:c7:8b:e8:
                    00:47:89:af:02:55:df:47:f6:db:ef:a2:19:8f:8b:
                    b8:32:bb:fb:35:01:34:07:1b:19:77:43:34:36:72:
                    e9:ac:74:69:59:9f:11:40:81:05:eb:d9:12:0c:92:
                    7c:9e:f8:92:b9:ed:a8:a5:99:69:5c:a2:b7:74:41:
                    43:4b:99:62:00:86:60:fd:28:b3:a6:58:51:9a:83:
                    75:1f:1b:2d:e5:30:8f:69:c1:3a:d2:81:83:3c:2e:
                    66:95:a1:f0:62:5b:b3:7d:e0:f1:ec:07:57:12:e3:
                    be:b7:07:27:4f:c8:1a:69:bf:39:c3:f1:e4:a9:c3:
                    8d:b5:dd:6b:21:65:94:89:b0:98:08:0a:30:bf:8d:
                    ae:80:9c:fb:ab:1a:36:fb:ad:84:78:81:42:e6:e3:
                    81:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5C:CA:3A:DA:F6:50:E2:17:26:F7:3A:AC:87:D8:0F:17:82:6C:C7
            X509v3 Authority Key Identifier:
                keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:45:b1:8d:18:d7:3b:41:2d:82:af:a0:08:0f:be:f3:4a:87:
         3d:a2:65:f0:0e:75:fe:a1:25:51:4a:75:e6:fa:6f:0d:42:59:
         c2:cd:7f:38:6c:42:ff:52:e6:a1:47:97:61:2c:ec:0a:3f:c1:
         62:0b:8a:b6:a5:ef:ed:26:3c:b8:ec:e1:f1:89:ff:ee:f6:33:
         81:f8:5f:e9:39:9d:9b:22:05:02:a0:9c:7e:21:67:70:d2:6d:
         2c:a7:3c:0b:0a:61:62:b7:23:59:b8:2a:02:9f:e4:8b:6c:63:
         c8:5e:e7:7a:6e:3a:bd:be:46:37:b4:92:d3:d4:1f:ab:72:b7:
         10:75:2d:90:af:58:75:3d:ae:60:37:d8:21:be:77:f8:f1:d1:
         0b:a3:56:51:90:1f:fc:21:45:28:f1:a5:49:e6:7c:58:87:6f:
         20:b1:56:f9:6d:0c:ab:7c:7e:cf:10:57:7d:fd:94:9e:e9:78:
         02:59:f1:eb:15:2f:49:c1:90:87:03:ef:9c:86:96:61:22:c5:
         cd:9b:2a:81:d9:2e:43:3e:52:d1:43:15:bb:ad:c8:61:27:2f:
         9e:1d:30:76:c9:90:02:7c:e0:4b:9a:55:1c:d7:81:73:5a:8e:
         35:91:c3:6b:f6:eb:ae:bc:8f:49:c3:82:5f:6b:70:85:fc:40:
         89:3a:10:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNY5SOgSrsirl6eMnx1kYyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDI0NWVlOGI1YmE0YzY2ZmUyY2VjYTY0YmU0NjZmYzk2
ZjcxZWQwHhcNMjQxMTIzMTIwMDMxWhcNMjQxMTI0MTIwMDMxWjAzMTEwLwYDVQQD
EygyZTVjY2EzYWRhZjY1MGUyMTcyNmY3M2FhYzg3ZDgwZjE3ODI2Y2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jMaDfyn3r/3c5EHdKgkb7zNzWIn
AzVuElEFvep8zUR/GDRW/EMkqa0CY3l100YJfNEzy6qYfoO/im5SLpHkwXojJ5pp
a7pXdi9ZrjEgTjBi9Uy7UaTGhvVSVFqogBvaFPM7YhvHi+gAR4mvAlXfR/bb76IZ
j4u4Mrv7NQE0BxsZd0M0NnLprHRpWZ8RQIEF69kSDJJ8nviSue2opZlpXKK3dEFD
S5liAIZg/SizplhRmoN1Hxst5TCPacE60oGDPC5mlaHwYluzfeDx7AdXEuO+twcn
T8gaab85w/HkqcONtd1rIWWUibCYCAowv42ugJz7qxo2+62EeIFC5uOBGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5cyjra9lDiFyb3OqyH2A8XgmzHMB8GA1UdIwQY
MBaAFAlCRe6LW6TGb+LOymS+Rm/Jb3HtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEt
NTZlN2Y5M2RjZGJmLzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEtNTZlN2Y5M2RjZGJm
LzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0WxjRjX
O0Etgq+gCA++80qHPaJl8A51/qElUUp15vpvDUJZws1/OGxC/1LmoUeXYSzsCj/B
YguKtqXv7SY8uOzh8Yn/7vYzgfhf6TmdmyIFAqCcfiFncNJtLKc8CwphYrcjWbgq
Ap/ki2xjyF7nem46vb5GN7SS09Qfq3K3EHUtkK9YdT2uYDfYIb53+PHRC6NWUZAf
/CFFKPGlSeZ8WIdvILFW+W0Mq3x+zxBXff2Unul4Alnx6xUvScGQhwPvnIaWYSLF
zZsqgdkuQz5S0UMVu63IYScvnh0wdsmQAnzgS5pVHNeBc1qONZHDa/brrryPScOC
X2twhfxAiToQ1A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:50:48 2024 by rpki-client on console-ams.rpki-client.org