Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File:                     rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier:          CPRbUTu4mr19hi9pq5+Msv6uNbkL3AR3Jucnv6QE80U=
Subject key identifier:   E1:04:04:7B:32:BB:85:47:88:A2:BE:86:4E:26:06:95:7C:8A:77:66
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer:       /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial:       019369D9532CE74C0CA1F49569EF4C637594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number:          0898
Signing time:             Tue 26 Nov 2024 19:01:10 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:10 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:10 +0000
Files and hashes:         1: LKhnv9hiKADsxHu3D6dmKV3Uxjg.roa (hash: 0L9zVHVS309CjYdnW1dV9AT/2h16ixsLw5MG8iD7p+4=)
                          2: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: +uGB7bwqzrmjFKSmC3tqxW3cmTIeJUfojDfMGkeGWtk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:53:2c:e7:4c:0c:a1:f4:95:69:ef:4c:63:75:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
        Validity
            Not Before: Nov 26 19:01:10 2024 GMT
            Not After : Nov 27 19:01:10 2024 GMT
        Subject: CN=e104047b32bb854788a2be864e2606957c8a7766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cd:f2:92:7f:a7:ef:fe:06:e3:73:f3:be:32:
                    44:b6:b2:ed:01:f6:88:a3:d1:4e:d6:39:77:27:af:
                    53:1b:4a:3f:6d:e3:86:71:5e:51:8b:b3:a6:4c:46:
                    dd:3b:01:77:5a:a4:ca:ed:1c:7a:c7:a0:13:3f:2b:
                    48:cb:6e:df:b5:3e:a2:86:40:a3:f0:cb:94:2a:0a:
                    f6:80:3a:8e:03:6b:85:06:c0:70:30:bd:fe:63:93:
                    56:1e:63:5e:b6:3d:81:16:f8:f7:04:ec:b2:a1:bd:
                    ce:41:6c:bc:d0:98:20:23:87:66:91:fd:f2:d2:3f:
                    bc:1d:4f:af:12:c1:f8:58:97:94:b5:93:88:94:32:
                    dd:c5:38:f9:ea:f0:66:1c:dc:24:35:28:08:7d:39:
                    ab:7a:ff:35:c0:a9:40:b5:2d:fa:7c:c0:9d:22:56:
                    0a:76:99:25:56:7b:ce:04:ea:81:b1:47:f4:25:6f:
                    f3:de:1c:34:01:4a:81:bc:0e:41:95:91:9c:bd:4a:
                    0f:0c:d4:f4:38:14:4f:08:9c:67:2c:d6:6e:c5:ed:
                    0c:8c:e8:5b:43:a4:e1:63:0a:9d:41:b1:dd:61:14:
                    68:89:fd:1f:13:1c:5e:cd:ff:28:c8:0f:d7:0d:88:
                    0c:9f:48:06:3d:12:89:3e:fc:34:48:74:7f:cf:23:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:04:04:7B:32:BB:85:47:88:A2:BE:86:4E:26:06:95:7C:8A:77:66
            X509v3 Authority Key Identifier:
                keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3f:02:0b:ff:f4:62:61:a9:ac:1b:7f:00:d3:45:e8:c0:19:
         79:43:d5:d8:84:f3:97:67:e7:e2:a0:33:c3:32:8c:c8:32:11:
         ee:0b:30:89:7a:fb:5c:f5:ef:00:8d:0d:fa:2c:2c:94:41:d4:
         ce:76:93:c7:b2:e3:69:be:02:c3:68:1f:48:b0:93:f1:e1:90:
         76:ae:eb:2c:e7:7c:19:ad:fd:6a:cf:b1:55:13:cf:54:46:1a:
         38:aa:e4:e6:dc:ee:fc:68:3b:00:59:bf:6f:12:ad:7b:5c:22:
         af:9c:f4:9d:dc:09:00:fe:39:86:06:4c:b8:f4:67:36:be:19:
         96:50:5a:51:4c:d7:c3:cd:28:55:6a:8d:67:92:f3:48:6f:27:
         59:a1:87:42:c8:65:5f:ee:b1:80:c9:23:ef:0f:47:18:3e:3d:
         d7:d7:17:4b:45:97:5e:df:d8:ed:a2:db:02:89:93:e2:09:91:
         01:7c:d2:b2:f9:ce:4c:21:d8:56:bd:c4:45:71:1e:a0:e1:02:
         37:f4:79:27:9e:a7:00:4c:c8:4f:42:a3:ef:da:6b:83:93:f9:
         b5:ab:23:a4:f6:bc:2d:7e:d5:b5:9e:10:90:52:7f:1d:be:71:
         97:4f:55:a9:72:59:48:88:9d:9e:45:c6:84:43:14:a6:d7:14:
         71:13:7b:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2VMs50wMofSVae9MY3WUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjExOTE3OGJmZDkyM2E0YjVlYzQwNmQ5ZmUxNDUyYjI3
NzZlZmEwHhcNMjQxMTI2MTkwMTEwWhcNMjQxMTI3MTkwMTEwWjAzMTEwLwYDVQQD
EyhlMTA0MDQ3YjMyYmI4NTQ3ODhhMmJlODY0ZTI2MDY5NTdjOGE3NzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5c3ykn+n7/4G43PzvjJEtrLtAfaI
o9FO1jl3J69TG0o/beOGcV5Ri7OmTEbdOwF3WqTK7Rx6x6ATPytIy27ftT6ihkCj
8MuUKgr2gDqOA2uFBsBwML3+Y5NWHmNetj2BFvj3BOyyob3OQWy80JggI4dmkf3y
0j+8HU+vEsH4WJeUtZOIlDLdxTj56vBmHNwkNSgIfTmrev81wKlAtS36fMCdIlYK
dpklVnvOBOqBsUf0JW/z3hw0AUqBvA5BlZGcvUoPDNT0OBRPCJxnLNZuxe0MjOhb
Q6ThYwqdQbHdYRRoif0fExxezf8oyA/XDYgMn0gGPRKJPvw0SHR/zyO2UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEEBHsyu4VHiKK+hk4mBpV8indmMB8GA1UdIwQY
MBaAFKwhGReL/ZI6S17EBtn+FFKyd276MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yYThmN2UtZTYwNS00MTE0LTkwZTgt
ZjYwMGQwZmQwM2NlLzEvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yYThmN2UtZTYwNS00MTE0LTkwZTgtZjYwMGQwZmQwM2Nl
LzEvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATj8CC//0
YmGprBt/ANNF6MAZeUPV2ITzl2fn4qAzwzKMyDIR7gswiXr7XPXvAI0N+iwslEHU
znaTx7Ljab4Cw2gfSLCT8eGQdq7rLOd8Ga39as+xVRPPVEYaOKrk5tzu/Gg7AFm/
bxKte1wir5z0ndwJAP45hgZMuPRnNr4ZllBaUUzXw80oVWqNZ5LzSG8nWaGHQshl
X+6xgMkj7w9HGD4919cXS0WXXt/Y7aLbAomT4gmRAXzSsvnOTCHYVr3ERXEeoOEC
N/R5J56nAEzIT0Kj79prg5P5tasjpPa8LX7VtZ4QkFJ/Hb5xl09VqXJZSIidnkXG
hEMUptcUcRN79A==
-----END CERTIFICATE-----
Generated at Tue Nov 26 22:12:28 2024 by rpki-client on console-ams.rpki-client.org