Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File:                     RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier:          w9VRd4j5ZFClgc+l82X5lS3CaZ+bXDPSkzr10G4qG+M=
Subject key identifier:   7A:BE:A4:F1:17:EB:B6:91:DD:CD:89:77:B3:4F:67:EA:CD:7C:51:01
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer:       /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial:       019234DB9D47BAC2E63F9402A82879E5CB50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number:          0AC5
Signing time:             Fri 27 Sep 2024 19:01:00 +0000
Manifest this update:     Fri 27 Sep 2024 19:01:00 +0000
Manifest next update:     Sat 28 Sep 2024 19:01:00 +0000
Files and hashes:         1: FtNIaDzNfy85KBMwPYe2aC9WIUg.roa (hash: Hg0GIWH3uUyZz/M9EJ03RwGtbRc/krc3FmSP5HzjKu4=)
                          2: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: eMGcJM0knh9EYKrrhdN6mqivoOqezwc8lbxx67FFguE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:db:9d:47:ba:c2:e6:3f:94:02:a8:28:79:e5:cb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
        Validity
            Not Before: Sep 27 19:01:00 2024 GMT
            Not After : Sep 28 19:01:00 2024 GMT
        Subject: CN=7abea4f117ebb691ddcd8977b34f67eacd7c5101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:01:25:35:b3:83:f1:f3:9d:9f:a8:eb:a9:
                    5b:89:37:f1:52:a4:b0:06:5d:c4:3d:9e:91:7a:d1:
                    fb:5c:0b:b1:40:42:77:ee:5e:04:90:dd:31:73:46:
                    e4:0a:bb:b2:a6:3d:36:26:a9:5e:e6:7c:f6:25:60:
                    af:7f:b8:25:bb:c9:38:e8:f8:be:36:5c:5a:d9:68:
                    76:ee:b7:10:86:30:da:8d:60:d0:ad:b8:e3:cf:84:
                    39:89:ee:21:8d:ef:66:93:1e:17:d0:d2:c6:c2:be:
                    ff:ad:99:1d:34:b7:fb:c0:30:bd:62:56:89:b1:93:
                    bf:34:10:60:5e:6a:b3:93:46:ca:cd:37:26:ef:bf:
                    c2:0e:c9:b3:f7:76:cb:b4:e0:42:93:ad:1b:48:f8:
                    82:fb:a6:e9:19:fe:d0:d2:fb:86:ba:f8:cd:18:2c:
                    74:3d:82:92:9a:5c:fe:a0:9b:99:39:03:20:73:97:
                    af:5f:bc:78:6d:5d:cc:e3:f4:b9:dd:eb:22:ad:47:
                    77:c8:23:86:c4:5c:01:db:c8:64:be:af:9a:4a:61:
                    32:7a:33:bd:dc:ca:50:60:f9:54:ac:2a:1f:5b:a7:
                    90:ad:43:b5:8c:e4:90:09:28:ed:86:28:ca:09:b2:
                    a7:ba:28:eb:e0:b9:4a:32:7b:48:74:d5:38:e4:b3:
                    8b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BE:A4:F1:17:EB:B6:91:DD:CD:89:77:B3:4F:67:EA:CD:7C:51:01
            X509v3 Authority Key Identifier:
                keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:af:17:09:29:2c:b0:1b:21:2b:52:67:76:35:09:2a:b8:2b:
         b7:22:ca:e8:61:57:8f:a4:80:8d:d2:18:2f:cc:7f:f4:69:ce:
         6d:65:f4:e6:88:3e:32:f2:85:eb:78:f5:6a:70:f0:9d:41:7c:
         6f:e3:3a:c7:69:e3:e4:c1:22:54:4e:7e:72:44:1a:7f:cc:74:
         db:56:de:ee:40:e7:29:98:08:38:f6:d3:a6:ef:d2:4e:13:99:
         0e:64:ac:dc:87:fb:6f:bd:01:76:fe:55:f1:04:b1:76:39:94:
         fc:3c:b2:80:70:15:c2:0f:7c:1f:e4:70:4e:e0:ef:cd:31:13:
         1f:12:5a:78:5f:d1:3c:50:ab:40:82:a2:38:ed:6a:99:cf:b3:
         99:1a:9c:8d:75:c8:cc:b6:1b:7c:1d:02:19:1d:2b:a2:ab:df:
         ec:51:cf:bf:44:01:6f:cf:79:1e:ed:63:fd:cc:01:13:56:74:
         7a:03:29:1d:b0:30:ca:c6:b1:e9:a8:aa:ec:22:1d:fd:e2:fa:
         b3:19:4d:73:a5:c5:4d:4b:58:eb:be:ae:60:d5:c6:a5:70:ee:
         9c:56:6c:52:90:75:d4:ef:4e:6e:2e:ea:3a:8d:be:96:6d:0f:
         75:37:20:09:b0:e0:68:94:66:57:2b:e5:65:3b:9f:bc:ff:c0:
         c9:f8:8c:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI0251HusLmP5QCqCh55ctQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YTRiMzVjOGUwMjU2ZWFhMmZiZjc1MWU2YzAxZTVlOTA5
YzBhMWYwHhcNMjQwOTI3MTkwMTAwWhcNMjQwOTI4MTkwMTAwWjAzMTEwLwYDVQQD
Eyg3YWJlYTRmMTE3ZWJiNjkxZGRjZDg5NzdiMzRmNjdlYWNkN2M1MTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpoBJTWzg/HznZ+o66lbiTfxUqSw
Bl3EPZ6RetH7XAuxQEJ37l4EkN0xc0bkCruypj02Jqle5nz2JWCvf7glu8k46Pi+
Nlxa2Wh27rcQhjDajWDQrbjjz4Q5ie4hje9mkx4X0NLGwr7/rZkdNLf7wDC9YlaJ
sZO/NBBgXmqzk0bKzTcm77/CDsmz93bLtOBCk60bSPiC+6bpGf7Q0vuGuvjNGCx0
PYKSmlz+oJuZOQMgc5evX7x4bV3M4/S53esirUd3yCOGxFwB28hkvq+aSmEyejO9
3MpQYPlUrCofW6eQrUO1jOSQCSjthijKCbKnuijr4LlKMntIdNU45LOL6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq+pPEX67aR3c2Jd7NPZ+rNfFEBMB8GA1UdIwQY
MBaAFEaks1yOAlbqovv3UebAHl6QnAofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMTkxZDYtNTQyMy00MmNmLThmNmIt
MTE3ODg2ZWI3ZDY3LzEvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xMTkxZDYtNTQyMy00MmNmLThmNmItMTE3ODg2ZWI3ZDY3
LzEvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfK8XCSks
sBshK1JndjUJKrgrtyLK6GFXj6SAjdIYL8x/9GnObWX05og+MvKF63j1anDwnUF8
b+M6x2nj5MEiVE5+ckQaf8x021be7kDnKZgIOPbTpu/SThOZDmSs3If7b70Bdv5V
8QSxdjmU/DyygHAVwg98H+RwTuDvzTETHxJaeF/RPFCrQIKiOO1qmc+zmRqcjXXI
zLYbfB0CGR0roqvf7FHPv0QBb895Hu1j/cwBE1Z0egMpHbAwysax6aiq7CId/eL6
sxlNc6XFTUtY676uYNXGpXDunFZsUpB11O9Obi7qOo2+lm0PdTcgCbDgaJRmVyvl
ZTufvP/AyfiMzw==
-----END CERTIFICATE-----
Generated at Fri Sep 27 21:52:07 2024 by rpki-client on console-ams.rpki-client.org