Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
File:                     8-NiIsy8bHIhNgVAurOp26nyN6A.mft (raw, json)
Hash identifier:          wxXK6/8bG/Sv91oxTAaj1S+oXfW9bR6ojGSOw5hVNVM=
Subject key identifier:   47:B7:50:2D:8D:4A:44:C8:B1:18:19:C8:A8:C9:74:0C:20:DF:76:9C
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Certificate issuer:       /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial:       019352ABD878C10DC341FA2D6A6097DBFFDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
Manifest number:          112C
Signing time:             Fri 22 Nov 2024 07:00:13 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:13 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:13 +0000
Files and hashes:         1: 8-NiIsy8bHIhNgVAurOp26nyN6A.crl (hash: hE+4LWrTAyyqVIdwYPbq0ByTwjaazhoNom2q8FBf4V4=)
                          2: NGcVS4wwYiql5Tkr_RQCBRnsYrE.roa (hash: 9CiAA4oV9rLro+3fsM2LZTjUZuP3P8Ns9V390RTRc6w=)
                          3: lRwzCSD1qgu_Tru5fn1OsLBe84w.roa (hash: UxqDjViCgy7hhNJaiso+OCuDhvkHWUCbLIXXyGfTdDs=)
                          4: yLN33KaFznPKT5tEedfEsv8EEGk.roa (hash: 2XJxwOaEzZBfu3qJ+MWMTUO3S1vk3s3G87TnXiX0ENU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ab:d8:78:c1:0d:c3:41:fa:2d:6a:60:97:db:ff:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
        Validity
            Not Before: Nov 22 07:00:13 2024 GMT
            Not After : Nov 23 07:00:13 2024 GMT
        Subject: CN=47b7502d8d4a44c8b11819c8a8c9740c20df769c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:74:12:09:8a:f0:5f:d2:10:92:bc:02:c1:cb:
                    8d:fb:cf:92:ca:da:42:ad:70:a2:b7:0d:75:00:b1:
                    ec:56:6e:cd:b3:01:a1:04:05:03:3a:d9:ba:4a:54:
                    30:bf:93:82:fe:d9:02:ed:e4:93:9f:88:1d:d2:ef:
                    50:52:b3:3f:13:f1:34:a3:a9:11:53:59:24:db:7e:
                    70:33:62:b6:b7:12:20:09:86:44:b6:1a:80:ac:ec:
                    72:f1:8c:df:91:d8:86:48:dc:96:5d:3a:2c:5e:66:
                    37:fc:63:ce:8e:00:23:0f:c6:35:f0:31:16:74:4c:
                    be:fd:d3:26:ee:6b:4d:e6:cb:28:2e:c6:89:ef:90:
                    04:1c:17:95:1a:71:27:55:8f:c5:f4:ee:78:09:00:
                    a0:67:07:b2:53:a1:c5:a9:78:a9:55:48:ea:7d:aa:
                    34:4a:07:d9:f7:92:ae:2f:1e:54:4e:0d:dd:18:74:
                    19:46:bf:c5:5a:72:77:e5:57:da:6b:fe:37:01:06:
                    f7:b5:e9:0a:5b:cd:d4:ee:76:73:2c:f0:cb:51:ef:
                    df:02:1f:6c:39:09:9f:01:c4:09:43:5c:16:7b:79:
                    bb:63:c7:96:da:ac:20:e2:14:38:ba:12:f5:d5:cd:
                    86:1c:8f:91:5d:23:0d:74:5f:db:da:5f:3b:d9:30:
                    84:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B7:50:2D:8D:4A:44:C8:B1:18:19:C8:A8:C9:74:0C:20:DF:76:9C
            X509v3 Authority Key Identifier:
                keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:32:08:55:af:d9:05:4b:31:3a:b7:02:c1:36:cf:4d:cc:46:
         b3:c9:52:13:ef:56:21:c0:57:58:8b:32:1c:01:a5:15:8f:95:
         9b:93:02:b2:68:b5:bd:32:ed:79:d1:f2:b8:83:f1:2b:cb:2a:
         fe:e7:42:a4:98:71:ae:2d:f9:f1:13:4d:90:62:21:54:60:83:
         87:1f:ab:1b:c0:e7:b9:f3:97:be:d3:6b:b8:e3:58:22:60:21:
         4e:a3:d5:de:5f:77:f3:31:dc:89:27:61:23:a8:3e:72:ad:0f:
         13:fa:52:a3:69:fb:10:ff:6f:2a:7f:ce:9d:dc:95:c1:21:ae:
         f6:58:27:a9:c5:33:27:e7:94:fd:eb:0f:f7:97:1a:d4:a6:0e:
         43:32:92:ab:c9:66:e2:a4:66:e1:dc:54:98:72:a7:b4:07:5f:
         31:ac:08:2e:b6:65:66:0f:19:b6:33:45:34:6a:de:4d:b1:d2:
         65:b3:b1:0a:de:9d:74:49:93:55:02:d0:a4:22:2c:5f:e1:1d:
         e9:c1:06:e1:ce:c8:1d:d4:a7:c5:e7:d7:2a:29:0a:9a:73:51:
         ae:1d:14:4a:0d:47:39:3e:a1:db:89:8d:66:cb:de:72:35:6c:
         3c:2e:ea:ea:cf:83:1c:9e:19:46:51:6b:65:c4:af:a0:b2:1b:
         b3:79:e2:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSq9h4wQ3DQfotamCX2//dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZTM2MjIyY2NiYzZjNzIyMTM2MDU0MGJhYjNhOWRiYTlm
MjM3YTAwHhcNMjQxMTIyMDcwMDEzWhcNMjQxMTIzMDcwMDEzWjAzMTEwLwYDVQQD
Eyg0N2I3NTAyZDhkNGE0NGM4YjExODE5YzhhOGM5NzQwYzIwZGY3NjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XQSCYrwX9IQkrwCwcuN+8+SytpC
rXCitw11ALHsVm7NswGhBAUDOtm6SlQwv5OC/tkC7eSTn4gd0u9QUrM/E/E0o6kR
U1kk235wM2K2txIgCYZEthqArOxy8YzfkdiGSNyWXTosXmY3/GPOjgAjD8Y18DEW
dEy+/dMm7mtN5ssoLsaJ75AEHBeVGnEnVY/F9O54CQCgZweyU6HFqXipVUjqfao0
SgfZ95KuLx5UTg3dGHQZRr/FWnJ35Vfaa/43AQb3tekKW83U7nZzLPDLUe/fAh9s
OQmfAcQJQ1wWe3m7Y8eW2qwg4hQ4uhL11c2GHI+RXSMNdF/b2l872TCEyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe3UC2NSkTIsRgZyKjJdAwg33acMB8GA1UdIwQY
MBaAFPPjYiLMvGxyITYFQLqzqdup8jegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jYzQ4ZjQtMGQ5My00YjY5LThhNGYt
ODcyNGVkNWU5MDNhLzEvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jYzQ4ZjQtMGQ5My00YjY5LThhNGYtODcyNGVkNWU5MDNh
LzEvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzIIVa/Z
BUsxOrcCwTbPTcxGs8lSE+9WIcBXWIsyHAGlFY+Vm5MCsmi1vTLtedHyuIPxK8sq
/udCpJhxri358RNNkGIhVGCDhx+rG8DnufOXvtNruONYImAhTqPV3l938zHciSdh
I6g+cq0PE/pSo2n7EP9vKn/OndyVwSGu9lgnqcUzJ+eU/esP95ca1KYOQzKSq8lm
4qRm4dxUmHKntAdfMawILrZlZg8ZtjNFNGreTbHSZbOxCt6ddEmTVQLQpCIsX+Ed
6cEG4c7IHdSnxefXKikKmnNRrh0USg1HOT6h24mNZsvecjVsPC7q6s+DHJ4ZRlFr
ZcSvoLIbs3niRA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:36 2024 by rpki-client on console-ams.rpki-client.org