Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File:                     BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier:          oPolkGzv0XsXy32gyg56nzS6qy/Yx0tdWH+nneWH3zc=
Subject key identifier:   D7:5A:C5:AA:8E:A6:BF:D6:3C:FB:9C:0F:3A:C9:D0:D2:0C:8B:6B:35
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer:       /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial:       019357D2572320AE5053B5CAFAE796BA5C60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 07:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:22 +0000
Files and hashes:         1: 7q93Qtz0Joas6oXWoUqHs9WLTls.roa (hash: o3JPzwHLaYCS4V+PZ0mbQvY7XZBXYEA1GJltgBWA8l0=)
                          2: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: KjB+39EjiNbqgw+4aZV62TTnzOxfjlbbm+IuW6pOTjc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:57:23:20:ae:50:53:b5:ca:fa:e7:96:ba:5c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
        Validity
            Not Before: Nov 23 07:00:22 2024 GMT
            Not After : Nov 24 07:00:22 2024 GMT
        Subject: CN=d75ac5aa8ea6bfd63cfb9c0f3ac9d0d20c8b6b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4b:e2:cc:32:c6:9c:65:fe:3f:27:7d:40:69:
                    7b:d6:ef:43:52:c0:44:7d:cb:2d:25:58:9e:fc:3d:
                    09:b7:48:ee:58:10:36:b7:3f:15:80:a1:e0:27:04:
                    b5:59:61:19:fd:58:a1:50:a5:c1:5b:53:6f:c0:01:
                    bb:fc:99:3c:8b:88:41:73:43:fd:d4:3f:5b:98:da:
                    3d:2f:53:86:95:9e:e6:9a:64:8c:e3:0d:ea:fc:e8:
                    62:94:b7:48:be:8d:29:c9:91:fc:b1:8f:3c:00:6d:
                    dd:13:e2:91:2e:8e:7d:50:9a:9f:86:fb:a2:c3:b7:
                    86:56:26:7c:70:bf:b1:97:23:39:53:fa:42:b2:d9:
                    59:2c:c6:40:00:41:a3:72:27:63:0b:2d:12:8f:40:
                    2b:d7:d5:b1:db:ca:1b:f9:c3:2c:3d:33:87:d7:29:
                    23:a2:bf:88:c8:34:ac:3b:30:08:40:24:a7:83:97:
                    d8:7f:7b:dd:f6:6e:2d:61:97:6d:8f:12:1f:9f:83:
                    85:d9:57:96:94:50:a1:40:58:09:17:8c:63:9e:03:
                    b8:05:fc:90:84:4b:57:d4:49:a1:6a:b9:a7:c9:d4:
                    08:47:1b:8c:76:aa:5d:23:a5:36:07:84:2e:65:85:
                    02:fd:0e:4e:49:a2:2e:c1:84:5d:8e:07:65:a6:0d:
                    3c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5A:C5:AA:8E:A6:BF:D6:3C:FB:9C:0F:3A:C9:D0:D2:0C:8B:6B:35
            X509v3 Authority Key Identifier:
                keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:80:e2:89:b7:21:5d:e8:78:a0:f7:fa:2f:50:b0:c9:e5:a3:
         a5:05:62:42:2f:b2:85:db:c0:c0:fe:5b:ca:a3:76:49:f0:9f:
         e9:dc:1a:d8:da:d5:97:54:39:59:10:c7:4c:af:7b:6f:6d:93:
         06:38:53:1f:20:5d:47:96:e6:5f:fd:79:cb:0e:95:2f:e6:9f:
         5d:d1:4f:7d:e0:2a:ae:e4:57:13:35:23:b2:12:b6:89:1d:d9:
         21:55:cd:cd:63:54:91:f3:c9:4e:31:5b:ae:c8:55:b9:a3:b3:
         d2:71:7f:47:af:f5:98:10:69:26:7b:31:fb:84:97:92:a7:47:
         05:98:a4:a9:e6:d1:1a:ed:8c:b5:e8:3a:8a:bf:4b:56:50:9c:
         1b:59:f7:45:5b:d1:42:ca:bd:79:d2:f7:c7:87:31:1d:ed:be:
         6f:d4:b2:5d:90:1a:0e:43:6f:3d:e9:71:cd:7a:bb:ff:81:ef:
         81:a9:d7:c1:94:07:ac:91:f1:74:02:09:17:46:2d:17:8d:c5:
         34:91:99:c7:fb:43:87:8e:d2:27:76:f5:30:36:f8:80:d9:f6:
         1c:9e:e1:8e:52:b8:54:74:af:0d:50:9c:9d:7f:a0:e8:25:58:
         7b:c5:15:d2:e7:7b:00:d2:2b:b2:60:e6:6b:0e:4f:97:d7:82:
         ab:7c:77:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0lcjIK5QU7XK+ueWulxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YzA5YzQxZDIzODk2YjJkNTQyODE4MjYyM2Y4OGZhNjc2
ZTZjOTAwHhcNMjQxMTIzMDcwMDIyWhcNMjQxMTI0MDcwMDIyWjAzMTEwLwYDVQQD
EyhkNzVhYzVhYThlYTZiZmQ2M2NmYjljMGYzYWM5ZDBkMjBjOGI2YjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80vizDLGnGX+Pyd9QGl71u9DUsBE
fcstJVie/D0Jt0juWBA2tz8VgKHgJwS1WWEZ/VihUKXBW1NvwAG7/Jk8i4hBc0P9
1D9bmNo9L1OGlZ7mmmSM4w3q/OhilLdIvo0pyZH8sY88AG3dE+KRLo59UJqfhvui
w7eGViZ8cL+xlyM5U/pCstlZLMZAAEGjcidjCy0Sj0Ar19Wx28ob+cMsPTOH1ykj
or+IyDSsOzAIQCSng5fYf3vd9m4tYZdtjxIfn4OF2VeWlFChQFgJF4xjngO4BfyQ
hEtX1EmharmnydQIRxuMdqpdI6U2B4QuZYUC/Q5OSaIuwYRdjgdlpg08zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdaxaqOpr/WPPucDzrJ0NIMi2s1MB8GA1UdIwQY
MBaAFAXAnEHSOJay1UKBgmI/iPpnbmyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMt
YjMzNDQwYWFhYjcyLzEvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85NGU1ZmQtZTAzMy00YTVlLWFlZmMtYjMzNDQwYWFhYjcy
LzEvQmNDY1FkSTRsckxWUW9HQ1lqLUktbWR1YkpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIDiibch
Xeh4oPf6L1CwyeWjpQViQi+yhdvAwP5byqN2SfCf6dwa2NrVl1Q5WRDHTK97b22T
BjhTHyBdR5bmX/15yw6VL+afXdFPfeAqruRXEzUjshK2iR3ZIVXNzWNUkfPJTjFb
rshVuaOz0nF/R6/1mBBpJnsx+4SXkqdHBZikqebRGu2Mteg6ir9LVlCcG1n3RVvR
Qsq9edL3x4cxHe2+b9SyXZAaDkNvPelxzXq7/4HvganXwZQHrJHxdAIJF0YtF43F
NJGZx/tDh47SJ3b1MDb4gNn2HJ7hjlK4VHSvDVCcnX+g6CVYe8UV0ud7ANIrsmDm
aw5Pl9eCq3x30A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:44 2024 by rpki-client on console-ams.rpki-client.org