Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
File:                     AUa0KfjElhH8_qHvoaUbnA7dtuc.mft (raw, json)
Hash identifier:          61Tg1xwFjG5HxRGuvYCnrDSd54kmbHqd0MwsD6L9+1k=
Subject key identifier:   0B:12:F0:2B:93:27:80:C2:44:57:49:1B:D6:38:CA:AD:77:6F:80:AD
Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
Certificate issuer:       /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Certificate serial:       019352075239BD44BC6E4807A173976454C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
Manifest number:          1201
Signing time:             Fri 22 Nov 2024 04:00:31 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:31 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:31 +0000
Files and hashes:         1: 1-nBCVdTynpFtBXhHHuJZz-oDZa0.roa (hash: VFMS0PETIOvz1Eh23jZS7n7xwjh2hsKANuE7RG66Bnk=)
                          2: AUa0KfjElhH8_qHvoaUbnA7dtuc.crl (hash: 4bKA5roEUdzoaXXNHG/zgMl7ooezINVfWkPS6GGZJ/s=)
                          3: GRS7dY6iR9fYeaQWcSHp_YWcluw.roa (hash: vW9AyHVgtHHqYF/6t3qPwLT+tt+lvM2wv8kHHn1BZyE=)
                          4: MIloPFRdAfZQ8Tk4Gn9Ro7frzTI.roa (hash: +WhpKzrq8LmO7rJGs1yEm0jMg9HHSaQ2XDZTLocRabg=)
                          5: al9Ouw2tf6gmEuNGkx0BGrX0-bc.roa (hash: OFbBnfHCUJOuBonXqI1c2uikU4G+plM81GVQbZs6+Yg=)
                          6: rH_5_xiM84I5lZHVGi4-6XaN7lI.roa (hash: dqI60RfXEI0Uwj9tmxbcfRal0wwr3sAAMYOwElG9/Vo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:52:39:bd:44:bc:6e:48:07:a1:73:97:64:54:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
        Validity
            Not Before: Nov 22 04:00:31 2024 GMT
            Not After : Nov 23 04:00:31 2024 GMT
        Subject: CN=0b12f02b932780c24457491bd638caad776f80ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:37:34:9d:d6:2a:a6:2f:82:39:93:1e:9a:e3:
                    2c:7a:f6:00:b7:9b:cb:8e:ae:46:bf:a6:15:da:a9:
                    63:c0:56:6f:55:1a:95:c4:7a:db:97:54:a4:bb:18:
                    42:96:66:23:f8:1f:3f:e5:3c:8d:cc:fe:be:ae:12:
                    72:fc:be:42:ea:91:bb:e6:33:2c:60:1a:b1:90:7e:
                    82:1c:49:14:36:c9:83:f2:ab:d6:63:95:6c:49:86:
                    b0:67:ea:e3:68:a2:0f:01:dc:fe:40:39:f4:64:f6:
                    8f:14:b7:30:a6:e2:d6:2a:03:bf:a7:99:ff:69:f6:
                    58:d1:ef:7c:68:ab:0b:98:70:c3:02:48:90:d5:4a:
                    68:22:b6:e5:0f:87:db:da:41:65:73:0d:9b:ed:93:
                    08:d3:fa:cc:48:62:79:56:e0:26:9c:6f:ad:5c:32:
                    f9:70:18:93:be:ba:26:74:af:cf:47:f7:c1:e8:f2:
                    02:3a:7c:d4:5d:d5:8c:d6:80:e4:d6:86:0d:d5:5f:
                    5a:75:95:1e:fe:42:9f:a9:85:ad:76:21:69:5c:fc:
                    67:9d:25:2b:6c:3a:d0:25:a1:64:8b:e8:2c:9c:a5:
                    b6:3a:e0:dc:9d:15:b7:f7:24:55:14:1b:7c:6d:1d:
                    1b:53:80:b2:29:66:9e:c6:79:69:09:44:4a:42:2d:
                    5d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:12:F0:2B:93:27:80:C2:44:57:49:1B:D6:38:CA:AD:77:6F:80:AD
            X509v3 Authority Key Identifier:
                keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:42:eb:be:60:25:b3:da:0e:7c:3b:7f:ab:42:c9:81:69:88:
         9a:9e:46:a8:f5:de:a2:5e:40:6b:33:06:14:f2:dd:13:35:be:
         17:a6:48:63:68:1d:88:e5:b7:91:ad:cf:69:83:8f:d2:fc:90:
         ec:6f:e3:bb:6c:e9:6c:fb:66:4f:48:0d:bf:39:8d:3a:f5:91:
         17:15:7b:fd:a1:65:b0:40:90:ea:12:bc:73:d9:31:b7:77:b3:
         7f:d5:ee:0a:58:50:78:5b:9b:31:c5:c5:9d:d6:c0:aa:cd:c1:
         d3:8e:8d:9d:8d:b6:19:95:0b:13:c1:08:68:dd:c7:d4:3b:cf:
         5a:26:01:e2:c3:35:9a:85:61:3c:3b:57:e4:6c:4e:5c:2d:25:
         2f:a7:71:14:8a:52:e0:55:ac:3f:d1:72:c0:25:4a:d2:42:e3:
         1d:88:f4:cd:90:16:af:98:8a:4e:fe:8b:b8:93:1a:49:50:a9:
         a3:e4:11:0f:fa:8e:27:72:0e:f6:ad:6d:47:3a:ed:e3:47:7f:
         ac:91:6e:2c:b9:15:28:ef:8c:2b:47:d5:ed:b8:02:95:6d:2c:
         9d:f6:05:36:20:56:a4:97:fd:0e:fd:2d:ab:68:87:98:65:3a:
         9a:af:c7:d3:08:0a:56:0c:eb:d1:92:2d:ff:33:34:86:99:c6:
         d3:a2:02:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSB1I5vUS8bkgHoXOXZFTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNDZiNDI5ZjhjNDk2MTFmY2ZlYTFlZmExYTUxYjljMGVk
ZGI2ZTcwHhcNMjQxMTIyMDQwMDMxWhcNMjQxMTIzMDQwMDMxWjAzMTEwLwYDVQQD
EygwYjEyZjAyYjkzMjc4MGMyNDQ1NzQ5MWJkNjM4Y2FhZDc3NmY4MGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozc0ndYqpi+COZMemuMsevYAt5vL
jq5Gv6YV2qljwFZvVRqVxHrbl1SkuxhClmYj+B8/5TyNzP6+rhJy/L5C6pG75jMs
YBqxkH6CHEkUNsmD8qvWY5VsSYawZ+rjaKIPAdz+QDn0ZPaPFLcwpuLWKgO/p5n/
afZY0e98aKsLmHDDAkiQ1UpoIrblD4fb2kFlcw2b7ZMI0/rMSGJ5VuAmnG+tXDL5
cBiTvromdK/PR/fB6PICOnzUXdWM1oDk1oYN1V9adZUe/kKfqYWtdiFpXPxnnSUr
bDrQJaFki+gsnKW2OuDcnRW39yRVFBt8bR0bU4CyKWaexnlpCURKQi1dlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsS8CuTJ4DCRFdJG9Y4yq13b4CtMB8GA1UdIwQY
MBaAFAFGtCn4xJYR/P6h76GlG5wO3bbnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVhMEtmakVsaEg4X3FIdm9hVWJuQTdkdHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9lNWUzNzktNjU2ZC00NjIyLWE3YmMt
ZWEyNmU3NDZhMGFkLzEvQVVhMEtmakVsaEg4X3FIdm9hVWJuQTdkdHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9lNWUzNzktNjU2ZC00NjIyLWE3YmMtZWEyNmU3NDZhMGFk
LzEvQVVhMEtmakVsaEg4X3FIdm9hVWJuQTdkdHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkLrvmAl
s9oOfDt/q0LJgWmImp5GqPXeol5AazMGFPLdEzW+F6ZIY2gdiOW3ka3PaYOP0vyQ
7G/ju2zpbPtmT0gNvzmNOvWRFxV7/aFlsECQ6hK8c9kxt3ezf9XuClhQeFubMcXF
ndbAqs3B046NnY22GZULE8EIaN3H1DvPWiYB4sM1moVhPDtX5GxOXC0lL6dxFIpS
4FWsP9FywCVK0kLjHYj0zZAWr5iKTv6LuJMaSVCpo+QRD/qOJ3IO9q1tRzrt40d/
rJFuLLkVKO+MK0fV7bgClW0snfYFNiBWpJf9Dv0tq2iHmGU6mq/H0wgKVgzr0ZIt
/zM0hpnG06ICWQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:36 2024 by rpki-client on console-ams.rpki-client.org