Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
File:                     iAsPesuH0TTDhZ1y0NGmHkdRusA.mft (raw, json)
Hash identifier:          eNnZcGQMZkbnVTuAX/32HHTT0LUZWg2leaCwfSoL3+s=
Subject key identifier:   6A:01:23:B8:68:2A:C7:DF:A1:15:59:50:6C:A0:F0:FF:50:36:B8:11
Authority key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
Certificate issuer:       /CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Certificate serial:       01935508AF27F7B9BEAF11E843EEE8419290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
Manifest number:          0A1A
Signing time:             Fri 22 Nov 2024 18:00:52 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:52 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:52 +0000
Files and hashes:         1: dv2KRNewtlMaGFlsZ78NX4zicy0.roa (hash: UUKFwtkkCqiUeLybFNWfX36h5zpkB9MEzu8rzJiJcqs=)
                          2: iAsPesuH0TTDhZ1y0NGmHkdRusA.crl (hash: 9FJVwWyI+iqVyRdPTTdxRwuBicYTuPM6THOCCOZEls4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:af:27:f7:b9:be:af:11:e8:43:ee:e8:41:92:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
        Validity
            Not Before: Nov 22 18:00:52 2024 GMT
            Not After : Nov 23 18:00:52 2024 GMT
        Subject: CN=6a0123b8682ac7dfa11559506ca0f0ff5036b811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9c:81:2a:cf:08:5b:66:73:ae:c0:35:da:1e:
                    36:3e:63:c4:22:4d:af:39:f5:9c:25:7c:1d:a4:4b:
                    85:74:b0:df:2e:b4:b3:4b:51:cf:73:df:07:cc:cf:
                    cb:60:63:c0:37:be:bc:0c:17:53:13:da:cd:f4:e1:
                    f6:67:17:81:22:7d:5a:25:3b:01:7f:ad:77:a5:39:
                    f3:50:7e:d7:75:f9:f4:ad:28:07:a2:f6:98:ad:fb:
                    2f:d1:eb:1f:59:d6:ec:d3:df:bf:8d:96:e0:a2:98:
                    8a:b1:1a:9d:66:3f:ba:83:4a:2b:a2:fb:23:68:59:
                    54:50:55:ae:d0:f2:b0:be:4d:07:73:3d:0f:b2:b5:
                    7b:ce:64:55:ba:12:e6:7a:76:c1:28:62:78:d5:c2:
                    d9:51:82:0e:d4:fe:2a:4e:49:1c:98:91:db:6e:0d:
                    33:ea:a1:34:a0:ce:74:93:21:2c:ed:9e:f5:ff:c5:
                    4a:02:bf:66:89:c5:1d:12:e1:5e:b0:52:ba:1f:e8:
                    a4:13:3e:a7:09:b1:6a:0b:c7:8a:d2:81:65:67:58:
                    15:ba:d9:78:f7:3d:a1:b9:f8:5f:54:22:27:0d:0f:
                    30:32:0c:ee:35:21:15:10:2d:fb:7b:5c:e0:84:08:
                    96:55:0f:21:ad:09:8a:c2:f7:56:35:ed:a3:4a:23:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:01:23:B8:68:2A:C7:DF:A1:15:59:50:6C:A0:F0:FF:50:36:B8:11
            X509v3 Authority Key Identifier:
                keyid:88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1a:fc:85:02:46:6b:f8:b9:21:ca:c8:d0:c2:5e:b0:6a:4a:
         52:2c:59:6a:90:b8:0c:2e:cd:f8:ed:da:40:28:5d:3a:7d:1d:
         24:34:0c:2a:08:f6:64:82:02:6c:48:2e:03:bd:93:fe:d1:25:
         db:d2:24:91:33:0f:ff:c7:4e:53:d2:c6:07:f2:11:6e:2d:b2:
         d2:6f:d7:d2:02:ef:6c:75:20:76:46:94:80:a3:27:c8:8f:91:
         08:a5:cf:25:3b:b9:1c:d0:e8:02:fa:e8:11:1f:47:69:2d:de:
         42:46:7e:72:d0:c9:66:45:b1:62:77:f5:32:99:77:ba:a7:78:
         80:28:de:4b:eb:a0:f6:a9:ae:af:e0:3c:e8:ed:85:50:fe:6f:
         a3:e7:cc:c7:d4:bc:15:8f:c5:08:17:6b:f1:e7:c7:00:cf:c9:
         7c:81:6d:dc:d8:b5:c8:d9:95:26:f0:f4:90:63:1e:cf:66:e4:
         a6:d1:de:08:9a:bf:44:38:2f:78:7a:fa:ae:34:bf:8a:a9:b7:
         6b:ef:63:db:a7:59:42:8a:59:e7:f1:3b:0d:91:a1:66:be:8d:
         0c:b7:51:5c:d0:8c:91:8b:ba:c1:8b:ff:45:8c:44:44:fb:66:
         91:da:2f:69:80:cc:7e:45:ca:fe:7b:7f:9d:74:81:bc:2b:66:
         a7:dc:a8:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCK8n97m+rxHoQ+7oQZKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MGIwZjdhY2I4N2QxMzRjMzg1OWQ3MmQwZDFhNjFlNDc1
MWJhYzAwHhcNMjQxMTIyMTgwMDUyWhcNMjQxMTIzMTgwMDUyWjAzMTEwLwYDVQQD
Eyg2YTAxMjNiODY4MmFjN2RmYTExNTU5NTA2Y2EwZjBmZjUwMzZiODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpyBKs8IW2ZzrsA12h42PmPEIk2v
OfWcJXwdpEuFdLDfLrSzS1HPc98HzM/LYGPAN768DBdTE9rN9OH2ZxeBIn1aJTsB
f613pTnzUH7Xdfn0rSgHovaYrfsv0esfWdbs09+/jZbgopiKsRqdZj+6g0orovsj
aFlUUFWu0PKwvk0Hcz0PsrV7zmRVuhLmenbBKGJ41cLZUYIO1P4qTkkcmJHbbg0z
6qE0oM50kyEs7Z71/8VKAr9micUdEuFesFK6H+ikEz6nCbFqC8eK0oFlZ1gVutl4
9z2hufhfVCInDQ8wMgzuNSEVEC37e1zghAiWVQ8hrQmKwvdWNe2jSiNTewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoBI7hoKsffoRVZUGyg8P9QNrgRMB8GA1UdIwQY
MBaAFIgLD3rLh9E0w4WdctDRph5HUbrAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUFzUGVzdUgwVFREaFoxeTBOR21Ia2RSdXNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80NDVhNjYtYjc2Yi00YjQ4LWEwMmQt
YmMyODlhOTMxYjRiLzEvaUFzUGVzdUgwVFREaFoxeTBOR21Ia2RSdXNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi80NDVhNjYtYjc2Yi00YjQ4LWEwMmQtYmMyODlhOTMxYjRi
LzEvaUFzUGVzdUgwVFREaFoxeTBOR21Ia2RSdXNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBr8hQJG
a/i5IcrI0MJesGpKUixZapC4DC7N+O3aQChdOn0dJDQMKgj2ZIICbEguA72T/tEl
29IkkTMP/8dOU9LGB/IRbi2y0m/X0gLvbHUgdkaUgKMnyI+RCKXPJTu5HNDoAvro
ER9HaS3eQkZ+ctDJZkWxYnf1Mpl3uqd4gCjeS+ug9qmur+A86O2FUP5vo+fMx9S8
FY/FCBdr8efHAM/JfIFt3Ni1yNmVJvD0kGMez2bkptHeCJq/RDgveHr6rjS/iqm3
a+9j26dZQopZ5/E7DZGhZr6NDLdRXNCMkYu6wYv/RYxERPtmkdovaYDMfkXK/nt/
nXSBvCtmp9yoxw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:00:56 2024 by rpki-client on console-ams.rpki-client.org