Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File:                     ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier:          pbNO/3ENGj09DGXWMncG6fXTwDdB0vCmRXyr6DtvVwU=
Subject key identifier:   08:6E:92:90:68:5F:2A:9C:D7:DC:75:52:EA:F0:4A:0B:DF:B9:2F:9A
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer:       /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial:       0193542C86894E1B71171A1547574E234838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number:          0CDB
Signing time:             Fri 22 Nov 2024 14:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 14:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 14:00:24 +0000
Files and hashes:         1: 8rlaDiP_it2N0vLEvdVXTQMb4b0.roa (hash: lCrip8Nc6vSGAGnSdCD8I+v+Gy/M2qu2ACQDWy8nQS4=)
                          2: KbARNEHl6aQRzXOaG7OJ-SxMlu0.roa (hash: qhMPz8ji1C+6VTnhUPDSymGuxMVSRvCJddq5NW1zpC8=)
                          3: S2O6zz9r2Xf5aU4zmRFzqZUyi94.roa (hash: OZRB4F2kndINNwc46gg7iaGjzkxbW7tDaRSV7+x8kBY=)
                          4: g45rfARe6OiCmKFrFMd4oMPhddo.roa (hash: XQdP4/TnwPrPToTMCkFw0n9FXK5cgymP/Xk9/sD7G+U=)
                          5: o3vU9mR-5ZVT3UJTw_odD4nSGD8.roa (hash: /rnltCM4Daqd7aWSdIcD36X+DpNxfEoBA5hbDYshIH0=)
                          6: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: 8tHShg8fMLVn+aquItz3QTs4A2ZqqkfPZh8Ksz6sdq8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:2c:86:89:4e:1b:71:17:1a:15:47:57:4e:23:48:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
        Validity
            Not Before: Nov 22 14:00:24 2024 GMT
            Not After : Nov 23 14:00:24 2024 GMT
        Subject: CN=086e9290685f2a9cd7dc7552eaf04a0bdfb92f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ac:7e:7b:5f:65:ed:59:cc:b2:36:32:55:64:
                    e3:ad:38:17:b1:80:6c:54:ef:0a:8f:40:d0:7e:ff:
                    1d:14:c4:60:3b:dd:c0:ad:06:f2:75:a0:66:ab:43:
                    fa:ef:8a:8f:72:31:f7:62:a2:7a:b5:32:0d:f8:30:
                    51:8f:4c:2f:93:26:63:01:2f:38:d3:19:a6:17:18:
                    7d:cd:0a:f8:33:ff:82:04:e5:26:f3:f8:27:be:e5:
                    3d:a5:9a:af:29:c2:c7:b5:40:c9:04:6a:ec:29:d3:
                    e6:59:33:d3:07:92:ca:54:4c:ea:40:97:6c:11:1a:
                    a1:db:bb:c0:c1:ee:73:ba:06:b9:3f:79:f7:47:9f:
                    f4:ee:7f:c3:56:c8:09:0b:05:81:a2:64:77:c8:32:
                    ca:fc:6c:84:e4:06:96:f1:34:98:91:42:e6:7a:8e:
                    5a:d3:5d:69:0c:a9:9a:9a:c2:78:ec:67:43:08:ad:
                    ff:7a:07:00:2b:39:dc:13:1b:0c:09:7d:80:e2:7f:
                    9d:1a:3a:ef:b3:05:f5:50:82:22:47:c0:b3:52:73:
                    60:f6:02:4c:68:a4:5d:a1:0f:51:55:2c:88:e0:e1:
                    ad:9b:ae:b1:7a:48:e7:a5:5b:60:d4:5d:65:74:a9:
                    ca:cb:34:88:33:47:21:f5:3d:78:83:33:0f:fa:fa:
                    6d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6E:92:90:68:5F:2A:9C:D7:DC:75:52:EA:F0:4A:0B:DF:B9:2F:9A
            X509v3 Authority Key Identifier:
                keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:f3:d1:5b:06:27:ea:65:ff:a6:2d:3c:16:17:f8:81:ac:93:
         55:80:72:5d:25:26:99:13:4e:72:c2:78:d1:d4:a6:e5:74:93:
         06:98:2b:31:b9:8f:8d:ee:7f:e2:8c:d3:80:0b:14:5e:e6:9d:
         df:f7:c8:7e:6d:33:4b:69:08:ab:fa:f0:41:73:4d:bb:da:a2:
         20:5e:11:30:0a:48:c0:7b:fa:d8:b2:9f:26:41:ac:9d:51:bc:
         57:5b:35:72:66:aa:82:4c:33:9f:cd:e7:d8:71:fe:84:20:56:
         a9:7a:40:ad:0f:4b:5a:69:1a:98:52:ad:c9:d1:5a:37:35:bd:
         26:fa:28:72:cb:d7:4f:f3:2a:9e:6f:1f:75:99:a0:f6:f5:b9:
         48:f2:ac:e5:e3:b9:06:4c:e0:68:23:13:40:08:c7:82:de:e5:
         52:14:52:b1:e0:ff:e1:79:65:56:bb:dd:8b:af:c1:f6:58:8b:
         8f:ef:ee:15:6a:3f:38:9a:75:42:a0:ae:a9:28:85:90:9b:91:
         3e:16:21:72:92:01:b8:3e:17:62:1f:2e:11:22:53:10:0d:22:
         90:6f:4a:06:6a:31:a6:f1:45:e7:2c:a3:d2:a1:3f:59:09:a5:
         8b:d1:3e:f0:ca:2a:da:41:99:57:39:75:f9:83:fa:b7:b6:ca:
         44:31:09:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNULIaJThtxFxoVR1dOI0g4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj
NGY2NDUwHhcNMjQxMTIyMTQwMDI0WhcNMjQxMTIzMTQwMDI0WjAzMTEwLwYDVQQD
EygwODZlOTI5MDY4NWYyYTljZDdkYzc1NTJlYWYwNGEwYmRmYjkyZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Kx+e19l7VnMsjYyVWTjrTgXsYBs
VO8Kj0DQfv8dFMRgO93ArQbydaBmq0P674qPcjH3YqJ6tTIN+DBRj0wvkyZjAS84
0xmmFxh9zQr4M/+CBOUm8/gnvuU9pZqvKcLHtUDJBGrsKdPmWTPTB5LKVEzqQJds
ERqh27vAwe5zuga5P3n3R5/07n/DVsgJCwWBomR3yDLK/GyE5AaW8TSYkULmeo5a
011pDKmamsJ47GdDCK3/egcAKzncExsMCX2A4n+dGjrvswX1UIIiR8CzUnNg9gJM
aKRdoQ9RVSyI4OGtm66xekjnpVtg1F1ldKnKyzSIM0ch9T14gzMP+vptUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhukpBoXyqc19x1UurwSgvfuS+aMB8GA1UdIwQY
MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt
ZmNjMzM2ZWVkOGQ3LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMtZmNjMzM2ZWVkOGQ3
LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwvPRWwYn
6mX/pi08Fhf4gayTVYByXSUmmRNOcsJ40dSm5XSTBpgrMbmPje5/4ozTgAsUXuad
3/fIfm0zS2kIq/rwQXNNu9qiIF4RMApIwHv62LKfJkGsnVG8V1s1cmaqgkwzn83n
2HH+hCBWqXpArQ9LWmkamFKtydFaNzW9JvoocsvXT/Mqnm8fdZmg9vW5SPKs5eO5
BkzgaCMTQAjHgt7lUhRSseD/4XllVrvdi6/B9liLj+/uFWo/OJp1QqCuqSiFkJuR
PhYhcpIBuD4XYh8uESJTEA0ikG9KBmoxpvFF5yyj0qE/WQmli9E+8Moq2kGZVzl1
+YP6t7bKRDEJew==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:02:26 2024 by rpki-client on console-fra.rpki-client.org