Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
File:                     sG9AQEkaZW_3Um0vF2EbDWisvQw.mft (raw, json)
Hash identifier:          OIqZ3UEfxtytFY+ySsAbApd8PmK+/tD67hmc3JPOiek=
Subject key identifier:   C5:BA:F9:A6:BD:09:EE:D6:C2:A7:48:AA:1D:8C:CB:6E:D9:DC:4F:5B
Authority key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
Certificate issuer:       /CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Certificate serial:       019239940F40EB0697AED0A471D43E1F711E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
Manifest number:          12DD
Signing time:             Sat 28 Sep 2024 17:00:57 +0000
Manifest this update:     Sat 28 Sep 2024 17:00:57 +0000
Manifest next update:     Sun 29 Sep 2024 17:00:57 +0000
Files and hashes:         1: cCaLf_GxdOgv_OJ6rlMA9CsHYDg.roa (hash: uSDaK4rc8Iyy5njnF32XfjzST2e6Uh8B3xHFZqyjstc=)
                          2: sG9AQEkaZW_3Um0vF2EbDWisvQw.crl (hash: gITWiVPyRYdeSx3oClJon4K2L/Qa/USSr7i772q168E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:94:0f:40:eb:06:97:ae:d0:a4:71:d4:3e:1f:71:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
        Validity
            Not Before: Sep 28 17:00:57 2024 GMT
            Not After : Sep 29 17:00:57 2024 GMT
        Subject: CN=c5baf9a6bd09eed6c2a748aa1d8ccb6ed9dc4f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:26:8e:99:14:0f:1e:c7:06:3b:3e:65:61:
                    98:2a:90:f3:6e:6b:f1:b4:05:d5:76:d8:b4:14:44:
                    12:a8:3d:4e:5f:e4:5a:56:d5:ee:02:42:26:49:73:
                    70:fb:b6:ac:79:6f:d0:cf:dd:25:86:d2:aa:3b:64:
                    7c:6c:63:af:97:a0:a5:32:a3:c6:5c:de:95:71:65:
                    58:3c:56:5d:08:97:b0:df:d7:34:12:25:c1:42:f4:
                    06:b1:93:53:84:13:cf:27:01:49:b2:b9:55:e8:76:
                    f1:8a:75:13:b3:95:02:b1:ad:cf:96:1b:85:93:0d:
                    0d:45:13:70:ba:34:d9:45:b7:d8:6b:4d:4f:41:6c:
                    4b:09:50:46:28:7a:05:84:f6:a1:9b:c8:f0:35:a9:
                    82:5e:c3:4b:e2:b4:2c:ef:f7:2b:4e:fd:fa:7a:81:
                    fa:62:61:69:9b:c7:a8:76:83:e8:ab:27:bf:7a:04:
                    70:9b:95:2e:78:d5:24:c5:1c:ea:d3:e5:e1:91:5a:
                    3f:48:c7:a5:14:22:9f:85:9d:a7:92:76:9b:44:56:
                    eb:e9:ff:8a:07:6f:58:a0:7d:ec:25:a9:28:d0:aa:
                    11:e6:33:c5:a5:a8:e0:f6:91:91:d9:f3:a0:6d:db:
                    58:fe:8a:9e:c1:50:02:b8:1e:54:fd:74:b7:3a:b2:
                    84:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BA:F9:A6:BD:09:EE:D6:C2:A7:48:AA:1D:8C:CB:6E:D9:DC:4F:5B
            X509v3 Authority Key Identifier:
                keyid:B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b0:1e:91:e5:77:9b:0b:0a:3a:5c:1c:0a:9b:cb:cb:d0:fa:
         8e:e3:33:da:eb:6c:e8:d1:c0:d5:43:ef:f3:28:40:7f:75:80:
         f9:e5:6b:62:8e:38:67:6f:04:9a:0a:bc:ea:68:4d:0a:0a:aa:
         61:c4:8f:73:73:32:39:ac:f4:49:a5:98:7f:e8:d2:4b:f5:0a:
         ba:16:29:e2:5a:8b:b3:e7:aa:43:03:d5:ff:6d:48:42:ac:b1:
         9b:8b:5e:e4:58:a5:3f:61:e2:2f:40:dd:68:69:b7:02:ab:ea:
         7d:b6:50:69:1c:1e:a6:b6:7a:05:4c:8e:a0:ab:d8:88:e4:06:
         dc:e5:60:27:83:d3:43:05:b8:ab:97:67:7d:0c:ea:5b:09:7e:
         f0:1c:d5:78:3f:23:66:f0:fa:89:ad:45:2d:3e:05:0f:5d:f9:
         83:16:1b:ca:6c:e1:c9:a1:4e:d6:9e:2e:47:27:6c:73:5d:f2:
         2f:7d:91:47:51:a8:be:1e:70:77:8c:35:9e:b8:8c:c1:58:cd:
         0c:9c:0c:8b:46:89:a9:f7:f5:6d:78:51:49:ec:dd:2c:0a:e0:
         b2:4c:08:bc:cf:ff:be:b9:62:8b:3a:6b:d4:a7:0c:bd:88:a5:
         2b:99:e6:08:88:a5:c8:71:a3:92:2b:0f:9e:dd:e3:3b:d2:8b:
         46:38:f7:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI5lA9A6waXrtCkcdQ+H3EeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNmY0MDQwNDkxYTY1NmZmNzUyNmQyZjE3NjExYjBkNjhh
Y2JkMGMwHhcNMjQwOTI4MTcwMDU3WhcNMjQwOTI5MTcwMDU3WjAzMTEwLwYDVQQD
EyhjNWJhZjlhNmJkMDllZWQ2YzJhNzQ4YWExZDhjY2I2ZWQ5ZGM0ZjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseUmjpkUDx7HBjs+ZWGYKpDzbmvx
tAXVdti0FEQSqD1OX+RaVtXuAkImSXNw+7aseW/Qz90lhtKqO2R8bGOvl6ClMqPG
XN6VcWVYPFZdCJew39c0EiXBQvQGsZNThBPPJwFJsrlV6HbxinUTs5UCsa3PlhuF
kw0NRRNwujTZRbfYa01PQWxLCVBGKHoFhPahm8jwNamCXsNL4rQs7/crTv36eoH6
YmFpm8eodoPoqye/egRwm5UueNUkxRzq0+XhkVo/SMelFCKfhZ2nknabRFbr6f+K
B29YoH3sJako0KoR5jPFpajg9pGR2fOgbdtY/oqewVACuB5U/XS3OrKEcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMW6+aa9Ce7WwqdIqh2My27Z3E9bMB8GA1UdIwQY
MBaAFLBvQEBJGmVv91JtLxdhGw1orL0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0c5QVFFa2FaV18zVW0wdkYyRWJEV2lzdlF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jZTBiMjEtZDY1Yy00MmU2LTg3NGIt
ZjRjYjg2N2Y5MGQ4LzEvc0c5QVFFa2FaV18zVW0wdkYyRWJEV2lzdlF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9jZTBiMjEtZDY1Yy00MmU2LTg3NGItZjRjYjg2N2Y5MGQ4
LzEvc0c5QVFFa2FaV18zVW0wdkYyRWJEV2lzdlF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7AekeV3
mwsKOlwcCpvLy9D6juMz2uts6NHA1UPv8yhAf3WA+eVrYo44Z28Emgq86mhNCgqq
YcSPc3MyOaz0SaWYf+jSS/UKuhYp4lqLs+eqQwPV/21IQqyxm4te5FilP2HiL0Dd
aGm3AqvqfbZQaRweprZ6BUyOoKvYiOQG3OVgJ4PTQwW4q5dnfQzqWwl+8BzVeD8j
ZvD6ia1FLT4FD135gxYbymzhyaFO1p4uRydsc13yL32RR1Govh5wd4w1nriMwVjN
DJwMi0aJqff1bXhRSezdLArgskwIvM//vrliizpr1KcMvYilK5nmCIilyHGjkisP
nt3jO9KLRjj3Gg==
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:19:25 2024 by rpki-client on console-ams.rpki-client.org