Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
File:                     j9V6dd1-lSvuKDk11t8pJdKCoHA.mft (raw, json)
Hash identifier:          +qH455tCo9ydQ/A5sohKR4paucFxzgXHQk79EoGoqb4=
Subject key identifier:   5B:8F:BB:56:D1:0F:58:91:C8:6E:B6:27:6C:E8:3A:2A:FD:9F:E5:0B
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Certificate issuer:       /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial:       019351993A93CE8EA270960D559022E7E5E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
Manifest number:          12F5
Signing time:             Fri 22 Nov 2024 02:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:16 +0000
Files and hashes:         1: 6pRPFx7gbyETIPzUOZT6Q9WPoj8.roa (hash: +f5y8EgSKnkAZbm6PH8fI5WtVIrSkRG7hM9+Wgxbe3s=)
                          2: 7_thGNn6CdK4yEA_2xTY0KzR4Lw.roa (hash: QCMttiKgQbLoQpYEEaQraNLXUoG+6rf3sRtrYQrYKBU=)
                          3: MLl9h7IeIzF1Vk_jtCGBWZxLMhQ.roa (hash: rcm3G/BXOiIE5uAObAVtUHWMVtNE4p2z9IQED95mpWg=)
                          4: j9V6dd1-lSvuKDk11t8pJdKCoHA.crl (hash: EvB7pb0dRn6QKhXY9iquqk2cBwNX9uQhSrn6qd5f2fc=)
                          5: lpX6eymr1HFDmuE8guFPzZjyCi4.roa (hash: b+pMlD+qSbIDgpEd/B6eWvG/1+va27Ncly3r596dahM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:3a:93:ce:8e:a2:70:96:0d:55:90:22:e7:e5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
        Validity
            Not Before: Nov 22 02:00:16 2024 GMT
            Not After : Nov 23 02:00:16 2024 GMT
        Subject: CN=5b8fbb56d10f5891c86eb6276ce83a2afd9fe50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ab:97:6a:f8:a5:8e:09:28:86:96:e4:79:8a:
                    30:48:43:c7:91:f9:ed:7b:9e:2e:0c:fd:40:21:7e:
                    ea:d9:ca:de:c0:0a:5c:4a:2c:1a:50:15:35:b2:28:
                    78:13:aa:f6:b9:44:b1:aa:16:4b:44:f4:71:10:e9:
                    fb:79:b4:78:79:3c:9e:6d:9f:08:73:e1:b3:d8:29:
                    0d:6d:a2:81:7f:c0:d5:a4:1f:be:0b:08:21:a4:b1:
                    e7:f2:47:fc:58:55:e1:cc:df:a2:cc:73:66:9d:92:
                    47:28:80:21:a1:31:17:b0:dd:29:ca:93:b3:06:33:
                    b8:a1:e1:ed:c0:a6:60:0a:4f:cc:82:ed:7e:58:44:
                    75:21:4d:96:ae:d0:35:b8:3a:d2:a3:c4:56:7e:73:
                    dc:59:93:a7:9c:ca:34:a0:c0:16:70:ae:a6:25:6b:
                    1a:8a:3c:81:23:3a:7e:28:84:4f:93:d3:e4:29:87:
                    8d:db:0c:a4:d4:a0:27:5d:d2:32:d9:c2:bc:03:23:
                    04:79:28:4c:86:77:c7:7d:6b:df:0b:16:96:46:6f:
                    3c:d4:28:6d:eb:2f:44:f5:0e:a1:7f:f8:22:c6:e6:
                    bf:d1:5f:1f:e6:01:ce:d4:c1:53:ef:54:cb:d1:e0:
                    dd:1f:2a:cb:84:83:06:49:df:30:fa:ef:05:27:8b:
                    00:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8F:BB:56:D1:0F:58:91:C8:6E:B6:27:6C:E8:3A:2A:FD:9F:E5:0B
            X509v3 Authority Key Identifier:
                keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c6:1a:20:41:cf:44:6d:e3:ba:38:7e:de:7e:fb:23:dd:a9:
         e4:5e:1d:a0:2e:cc:fe:59:ce:cc:03:4b:9f:a6:76:01:ee:99:
         ee:cf:4c:b5:54:f3:b8:d4:f8:38:db:f4:16:88:74:7f:bd:2d:
         16:91:af:fe:25:7a:1e:7f:dc:04:06:ed:89:9e:4a:33:93:7e:
         59:a7:45:02:aa:b3:d8:b2:ce:00:15:0e:d1:58:dc:43:2b:67:
         66:c2:4c:23:93:ac:ae:6a:e5:46:92:ed:34:d0:25:a5:ae:93:
         f3:d1:fd:c9:3c:d8:bb:9a:fc:d1:19:b6:bf:5c:8f:1c:76:b3:
         b0:f6:63:03:f7:5d:15:97:4c:20:dc:ae:f6:b2:fa:f4:ed:d9:
         32:e9:12:dd:da:e5:3a:60:c8:8e:73:be:aa:9d:c3:2a:d8:14:
         16:79:29:64:3f:55:41:ae:c3:9d:de:3f:37:4f:cc:4a:dc:c7:
         73:bc:a6:d2:28:27:02:5b:82:46:dd:fa:d9:f2:f8:d4:f4:b8:
         6a:f7:49:94:0e:2f:d1:05:0c:52:ca:bd:f2:bc:3c:f3:3b:97:
         38:77:75:74:d8:ab:f1:91:b0:54:51:2d:36:82:c2:10:67:0b:
         7c:84:af:46:25:56:d8:ee:a0:a0:21:9b:a9:37:29:07:d6:9c:
         17:97:f6:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRmTqTzo6icJYNVZAi5+XnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZDU3YTc1ZGQ3ZTk1MmJlZTI4MzkzNWQ2ZGYyOTI1ZDI4
MmEwNzAwHhcNMjQxMTIyMDIwMDE2WhcNMjQxMTIzMDIwMDE2WjAzMTEwLwYDVQQD
Eyg1YjhmYmI1NmQxMGY1ODkxYzg2ZWI2Mjc2Y2U4M2EyYWZkOWZlNTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7quXaviljgkohpbkeYowSEPHkfnt
e54uDP1AIX7q2crewApcSiwaUBU1sih4E6r2uUSxqhZLRPRxEOn7ebR4eTyebZ8I
c+Gz2CkNbaKBf8DVpB++CwghpLHn8kf8WFXhzN+izHNmnZJHKIAhoTEXsN0pypOz
BjO4oeHtwKZgCk/Mgu1+WER1IU2WrtA1uDrSo8RWfnPcWZOnnMo0oMAWcK6mJWsa
ijyBIzp+KIRPk9PkKYeN2wyk1KAnXdIy2cK8AyMEeShMhnfHfWvfCxaWRm881Cht
6y9E9Q6hf/gixua/0V8f5gHO1MFT71TL0eDdHyrLhIMGSd8w+u8FJ4sATwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuPu1bRD1iRyG62J2zoOir9n+ULMB8GA1UdIwQY
MBaAFI/VenXdfpUr7ig5NdbfKSXSgqBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUt
ZDlhNTM5YjhiN2FkLzEvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUtZDlhNTM5YjhiN2Fk
LzEvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8YaIEHP
RG3jujh+3n77I92p5F4doC7M/lnOzANLn6Z2Ae6Z7s9MtVTzuNT4ONv0Foh0f70t
FpGv/iV6Hn/cBAbtiZ5KM5N+WadFAqqz2LLOABUO0VjcQytnZsJMI5OsrmrlRpLt
NNAlpa6T89H9yTzYu5r80Rm2v1yPHHazsPZjA/ddFZdMINyu9rL69O3ZMukS3drl
OmDIjnO+qp3DKtgUFnkpZD9VQa7Dnd4/N0/MStzHc7ym0ignAluCRt362fL41PS4
avdJlA4v0QUMUsq98rw88zuXOHd1dNir8ZGwVFEtNoLCEGcLfISvRiVW2O6goCGb
qTcpB9acF5f2MA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:04 2024 by rpki-client on console-ams.rpki-client.org