Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File:                     jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier:          kWvcw38ymvo06BleJt3Ve7Gla7bEZiH34WJtRm//+u0=
Subject key identifier:   AD:C0:18:C4:43:51:C6:93:DE:9E:37:3A:3F:90:89:09:FD:E3:13:6F
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer:       /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial:       01935764BC1253BB68E618548A02B7634BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number:          0819
Signing time:             Sat 23 Nov 2024 05:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:39 +0000
Files and hashes:         1: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: 9m6FOQI2cm3PKY0dPPNCT3igv63i/8rkYpOgraXCSI4=)
                          2: tdh9ilB_ZIQpVoiJw_uO_J1m_Mc.roa (hash: I9BTK6afzCFGDST+1m8BjwCj8+6gfujAsCTQaBgf9jw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:bc:12:53:bb:68:e6:18:54:8a:02:b7:63:4b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
        Validity
            Not Before: Nov 23 05:00:39 2024 GMT
            Not After : Nov 24 05:00:39 2024 GMT
        Subject: CN=adc018c44351c693de9e373a3f908909fde3136f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1c:7b:d5:49:bc:c1:d7:dd:95:8d:15:c4:55:
                    17:40:85:61:ec:db:47:70:3e:99:53:08:36:b4:fd:
                    11:d4:8a:52:39:7e:50:20:9b:ef:01:ce:e5:8d:f0:
                    50:99:46:0a:12:a6:84:48:60:07:11:cd:e2:f5:ad:
                    e2:75:b5:bc:cf:98:dd:51:4f:62:8f:49:9f:78:ba:
                    9d:4e:96:a8:b0:d8:70:13:69:0e:73:1b:c5:d7:47:
                    a0:65:3b:6c:d2:79:58:21:88:30:86:56:fb:cc:15:
                    1e:03:c6:b5:42:4d:48:be:05:c2:d9:39:3c:c4:dc:
                    9b:26:eb:fa:f5:ad:66:22:a7:78:ff:60:6e:c2:ed:
                    a6:12:ed:72:e2:ac:52:c8:68:4d:cb:2f:18:ab:85:
                    6f:72:09:64:08:c5:ae:dd:80:81:e9:a2:80:e6:5e:
                    e8:c5:e3:f8:5f:9a:6f:fc:5d:ed:6b:62:34:d5:91:
                    4f:af:b0:cf:a8:94:70:10:2e:fc:46:1b:d2:56:ac:
                    22:d7:10:fe:87:ca:69:96:aa:79:3d:e2:98:ed:3c:
                    10:8e:de:f2:f6:a2:37:6a:c2:67:16:44:ba:10:dd:
                    61:97:7c:a9:de:74:7c:83:0b:61:4f:0c:ce:47:d8:
                    ff:4d:7a:10:f0:eb:6c:58:90:2c:1f:f1:0b:95:79:
                    48:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C0:18:C4:43:51:C6:93:DE:9E:37:3A:3F:90:89:09:FD:E3:13:6F
            X509v3 Authority Key Identifier:
                keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:6c:cc:4e:04:0b:14:cd:eb:72:ec:3a:b7:7b:6b:28:8d:d3:
         b1:72:5e:dc:ff:2f:20:72:2d:fa:53:d9:7b:5e:2a:6a:21:e7:
         88:3b:8d:d3:49:ca:41:1e:35:95:79:f3:2a:32:87:3b:84:07:
         ba:0b:f7:ab:c1:02:60:b4:8f:59:99:47:b0:f3:38:26:52:12:
         5a:d9:8e:ed:af:ba:8c:03:36:4f:8d:2a:1a:da:c4:ee:89:94:
         e7:92:62:30:dc:36:e5:98:b0:41:c7:9e:c0:d2:84:f9:78:41:
         82:e6:34:f6:ee:8a:eb:19:5f:7d:fc:f2:6a:06:af:6a:21:c0:
         57:9e:c2:21:59:3f:c5:20:28:67:9b:16:5a:8b:0d:ad:41:0f:
         d0:f4:a5:0b:f9:3e:e5:7c:de:cd:cc:13:e5:57:14:09:a3:e7:
         fd:9d:06:3d:3f:f6:a5:b7:74:41:a2:bc:b1:cb:14:86:c7:66:
         f6:1c:9a:74:3d:03:a3:70:d6:da:c8:1f:c2:71:9d:75:b9:1b:
         cb:8d:31:fc:80:89:27:a6:f3:8e:d3:c8:22:9c:fd:9a:6f:b3:
         c5:5c:db:67:72:98:00:17:44:23:3f:64:26:ef:19:f6:4b:90:
         d3:c6:03:ae:d5:29:7b:37:4f:c2:96:f1:dc:c7:a6:31:50:7e:
         13:35:d2:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZLwSU7to5hhUigK3Y0u7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMjA3NTNkZDUxNjMzYWEyZTE3YTkyYzU5ZjRjNDg0NWQ4
NzZjZDMwHhcNMjQxMTIzMDUwMDM5WhcNMjQxMTI0MDUwMDM5WjAzMTEwLwYDVQQD
EyhhZGMwMThjNDQzNTFjNjkzZGU5ZTM3M2EzZjkwODkwOWZkZTMxMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRx71Um8wdfdlY0VxFUXQIVh7NtH
cD6ZUwg2tP0R1IpSOX5QIJvvAc7ljfBQmUYKEqaESGAHEc3i9a3idbW8z5jdUU9i
j0mfeLqdTpaosNhwE2kOcxvF10egZTts0nlYIYgwhlb7zBUeA8a1Qk1IvgXC2Tk8
xNybJuv69a1mIqd4/2Buwu2mEu1y4qxSyGhNyy8Yq4VvcglkCMWu3YCB6aKA5l7o
xeP4X5pv/F3ta2I01ZFPr7DPqJRwEC78RhvSVqwi1xD+h8pplqp5PeKY7TwQjt7y
9qI3asJnFkS6EN1hl3yp3nR8gwthTwzOR9j/TXoQ8OtsWJAsH/ELlXlIDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3AGMRDUcaT3p43Oj+QiQn94xNvMB8GA1UdIwQY
MBaAFIwgdT3VFjOqLhepLFn0xIRdh2zTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81YzNjZmEtYTM2My00MGE0LWJmYTYt
YzI5YmViMWE0NzM0LzEvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS81YzNjZmEtYTM2My00MGE0LWJmYTYtYzI5YmViMWE0NzM0
LzEvakNCMVBkVVdNNm91RjZrc1dmVEVoRjJIYk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmzMTgQL
FM3rcuw6t3trKI3TsXJe3P8vIHIt+lPZe14qaiHniDuN00nKQR41lXnzKjKHO4QH
ugv3q8ECYLSPWZlHsPM4JlISWtmO7a+6jAM2T40qGtrE7omU55JiMNw25ZiwQcee
wNKE+XhBguY09u6K6xlfffzyagavaiHAV57CIVk/xSAoZ5sWWosNrUEP0PSlC/k+
5XzezcwT5VcUCaPn/Z0GPT/2pbd0QaK8scsUhsdm9hyadD0Do3DW2sgfwnGddbkb
y40x/ICJJ6bzjtPIIpz9mm+zxVzbZ3KYABdEIz9kJu8Z9kuQ08YDrtUpezdPwpbx
3MemMVB+EzXSIw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:01 2024 by rpki-client on console-fra.rpki-client.org