Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File:                     kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier:          ZMwQHamKPyRXNFbaVE/6y75+aLaWy5lHOspMncfFmZk=
Subject key identifier:   4C:B6:EB:BA:4F:7E:22:3C:28:3D:1B:93:83:0C:A8:B7:B5:2E:2A:5E
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer:       /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial:       019359530A6559A2A2619B55EAB101D37E67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number:          1304
Signing time:             Sat 23 Nov 2024 14:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:34 +0000
Files and hashes:         1: N5G9BmN7ZOewET3Lxo3Z2xln48s.roa (hash: t/wioB6dyp/21IOD8JSxrTW1VZFFRj0EGs1R5hj+OTo=)
                          2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: 1Rq7mnPN4eZ087tpGJzkNSjqa9W2XWNxa+xJTXp05OU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:53:0a:65:59:a2:a2:61:9b:55:ea:b1:01:d3:7e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
        Validity
            Not Before: Nov 23 14:00:34 2024 GMT
            Not After : Nov 24 14:00:34 2024 GMT
        Subject: CN=4cb6ebba4f7e223c283d1b93830ca8b7b52e2a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:05:00:88:b8:01:52:54:81:1d:7b:dc:fa:97:
                    5c:d6:51:2f:07:7f:6f:10:c0:b6:5e:ab:33:a4:7f:
                    20:2b:b0:70:d4:7f:53:a4:af:db:35:bc:d5:83:2d:
                    d1:74:56:58:38:06:b1:94:72:c9:c4:79:1d:76:2e:
                    3a:d0:c9:85:4e:ba:66:90:18:c4:68:9f:e3:ab:df:
                    d7:ce:ea:94:63:bf:bd:40:74:63:95:47:a2:c0:c6:
                    e9:e3:78:37:d0:93:7d:c6:cc:91:f1:35:06:ad:a9:
                    3a:db:99:5e:82:a0:a0:34:64:d1:41:bb:6f:4b:9c:
                    29:5a:85:5a:b0:1b:d5:01:a5:7f:d3:52:6d:5a:97:
                    9f:a9:6d:b8:2c:97:c0:38:2b:4f:91:45:88:67:e7:
                    42:b1:8f:5f:23:21:30:ea:29:8b:95:a8:43:96:be:
                    ed:e6:ce:1a:86:a0:7e:a6:73:c6:a2:a9:64:7b:dc:
                    4e:ca:f9:3e:de:1b:d0:20:0a:17:28:43:c5:65:be:
                    40:bc:63:91:0c:88:8e:1b:8c:1a:98:bc:ff:bc:aa:
                    1a:66:9a:14:0b:b6:ff:0b:6b:63:8c:10:9c:64:33:
                    94:8e:ba:0f:4a:36:44:2a:5d:e4:72:ff:0b:7f:4a:
                    c7:4e:e9:00:dc:17:6b:4b:b5:56:4d:69:1a:10:01:
                    71:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B6:EB:BA:4F:7E:22:3C:28:3D:1B:93:83:0C:A8:B7:B5:2E:2A:5E
            X509v3 Authority Key Identifier:
                keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9c:ce:6e:be:9b:ab:dc:e8:4e:4d:37:0d:70:f7:ec:e9:50:
         8c:d4:c6:c1:d8:09:a6:a8:9f:f5:30:45:d1:18:b2:6c:08:11:
         d8:5c:6d:ca:bd:59:ff:84:12:d6:11:06:da:75:9b:a0:81:c7:
         3c:6c:78:da:a1:09:23:f6:1c:00:6e:48:b3:72:3c:84:32:4b:
         48:57:13:01:a5:f3:37:17:ee:b9:80:cd:69:78:d4:b4:c7:80:
         06:f2:cf:12:19:17:b9:9a:f3:06:d8:71:e4:4e:d4:3a:4c:2e:
         23:09:c2:8c:23:70:eb:44:ea:e4:1f:b9:29:3d:c1:07:14:12:
         e9:cd:d2:3b:e1:fa:46:58:ff:35:c7:5c:5e:e9:7e:11:5c:cd:
         55:b4:0f:19:5d:49:3c:cf:c0:06:8d:87:1f:b4:87:99:55:34:
         21:53:1d:a8:45:e2:db:92:8c:b9:38:11:b2:06:cf:6c:9a:18:
         8a:e9:28:7a:97:16:6b:dc:af:cc:74:b0:e2:0e:34:7c:5c:80:
         4e:2f:2f:67:0f:51:bc:d3:6d:f5:c9:2d:5e:cb:8c:6e:0f:02:
         2f:ce:f4:02:f5:85:05:58:e5:d5:18:76:2b:71:7e:fc:4e:3c:
         01:c7:5e:14:26:09:38:32:2d:b8:49:57:74:0f:00:78:cd:56:
         6a:65:dc:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZUwplWaKiYZtV6rEB035nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMjZiMTlmMGU5NTRkY2Y1ODE2ZmRmMzcxNjk0Yjc4NGRk
N2YzNjYwHhcNMjQxMTIzMTQwMDM0WhcNMjQxMTI0MTQwMDM0WjAzMTEwLwYDVQQD
Eyg0Y2I2ZWJiYTRmN2UyMjNjMjgzZDFiOTM4MzBjYThiN2I1MmUyYTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gUAiLgBUlSBHXvc+pdc1lEvB39v
EMC2XqszpH8gK7Bw1H9TpK/bNbzVgy3RdFZYOAaxlHLJxHkddi460MmFTrpmkBjE
aJ/jq9/XzuqUY7+9QHRjlUeiwMbp43g30JN9xsyR8TUGrak625legqCgNGTRQbtv
S5wpWoVasBvVAaV/01JtWpefqW24LJfAOCtPkUWIZ+dCsY9fIyEw6imLlahDlr7t
5s4ahqB+pnPGoqlke9xOyvk+3hvQIAoXKEPFZb5AvGORDIiOG4wamLz/vKoaZpoU
C7b/C2tjjBCcZDOUjroPSjZEKl3kcv8Lf0rHTukA3BdrS7VWTWkaEAFxGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEy267pPfiI8KD0bk4MMqLe1LipeMB8GA1UdIwQY
MBaAFJEmsZ8OlU3PWBb983FpS3hN1/NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUt
ZDJlY2I2NDczYjIzLzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUtZDJlY2I2NDczYjIz
LzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpzObr6b
q9zoTk03DXD37OlQjNTGwdgJpqif9TBF0RiybAgR2Fxtyr1Z/4QS1hEG2nWboIHH
PGx42qEJI/YcAG5Is3I8hDJLSFcTAaXzNxfuuYDNaXjUtMeABvLPEhkXuZrzBthx
5E7UOkwuIwnCjCNw60Tq5B+5KT3BBxQS6c3SO+H6Rlj/NcdcXul+EVzNVbQPGV1J
PM/ABo2HH7SHmVU0IVMdqEXi25KMuTgRsgbPbJoYiukoepcWa9yvzHSw4g40fFyA
Ti8vZw9RvNNt9cktXsuMbg8CL870AvWFBVjl1Rh2K3F+/E48AcdeFCYJODItuElX
dA8AeM1WamXcVQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:10:26 2024 by rpki-client on console-ams.rpki-client.org