Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
File:                     mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json)
Hash identifier:          dAbyiVJG8FPCcU2BYZClYK3NgyavwyQz6DkX+2ODmt0=
Subject key identifier:   93:89:68:23:04:42:A7:59:35:77:A0:A2:69:9E:18:9F:70:F2:D8:97
Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
Certificate issuer:       /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Certificate serial:       019353BEEAD93F75547B5C5B2CAE8D6DC3E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
Manifest number:          0293
Signing time:             Fri 22 Nov 2024 12:00:41 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:41 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:41 +0000
Files and hashes:         1: XeniVCb1jyaCDYp5QsoVDwBQBOw.roa (hash: pCTT+sHw4XUHhcgJRO5sn4V/jDzElMGOeOwwOIBBxEc=)
                          2: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: erYZ8MEcShXiZAzLz4bjdu3JAfp2xrRQtmi3Rc8CXlw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:be:ea:d9:3f:75:54:7b:5c:5b:2c:ae:8d:6d:c3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
        Validity
            Not Before: Nov 22 12:00:41 2024 GMT
            Not After : Nov 23 12:00:41 2024 GMT
        Subject: CN=938968230442a7593577a0a2699e189f70f2d897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ad:ca:47:be:86:dc:17:ae:0d:6e:91:04:68:
                    9a:c3:10:a1:8f:d3:f3:e9:57:b4:75:cf:2b:12:11:
                    b8:05:d4:2e:40:fb:d7:2e:a1:38:46:7f:8e:f5:55:
                    48:c8:1c:52:9d:a6:af:5b:5e:c8:7d:92:26:f4:16:
                    b6:a2:43:2a:68:d2:f3:6b:5c:7c:41:19:50:3f:c2:
                    90:20:f3:f4:3a:9a:41:95:7d:ab:56:be:6d:0b:f0:
                    ba:92:ab:72:19:65:45:0a:1a:00:6d:23:4b:de:13:
                    92:f4:41:4a:4b:e9:17:f0:a1:74:69:0b:4e:c5:d7:
                    dd:65:73:69:c5:11:71:d6:3d:98:02:6a:53:30:cf:
                    3f:ee:25:e8:29:b2:f1:74:cb:85:27:1e:04:6b:75:
                    ae:c5:56:c2:9e:60:cc:c2:ff:82:aa:5c:95:8e:38:
                    04:8d:b0:61:c4:9e:61:0d:26:89:e8:c3:72:74:31:
                    db:5a:96:8a:d1:92:6b:81:9a:95:e3:39:2b:7a:d8:
                    63:18:ea:80:ce:5a:09:32:d3:31:61:d3:b4:82:6d:
                    2d:04:cb:5f:e1:7f:2a:4c:80:50:36:b2:0c:03:c0:
                    b7:39:20:b3:30:50:35:eb:50:5b:aa:5d:e4:31:d4:
                    4c:7f:41:0a:d6:95:c9:5b:47:41:14:2b:78:d1:26:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:89:68:23:04:42:A7:59:35:77:A0:A2:69:9E:18:9F:70:F2:D8:97
            X509v3 Authority Key Identifier:
                keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f8:4c:ac:bf:ff:03:58:46:a4:34:f6:a2:19:be:ed:c6:85:
         3c:82:ec:f9:61:14:19:e4:e3:21:d9:c1:33:36:bf:8a:21:76:
         86:f5:6d:85:6e:b9:f2:13:02:77:3a:db:64:46:89:2b:9b:6c:
         5b:bd:ac:b7:f8:a0:ba:8e:df:c8:89:af:5d:78:78:cf:29:c2:
         69:2d:67:cc:a6:49:ff:2f:5b:b2:8b:58:c3:84:24:2b:7d:e4:
         c9:12:c0:94:e0:7c:8c:ce:97:e1:25:56:c6:bc:54:44:1e:c2:
         72:71:07:d0:d4:64:c7:a4:d4:6c:dd:d9:65:e5:14:91:19:0d:
         bb:52:1d:9a:e9:50:31:01:84:86:31:05:b6:07:64:90:64:79:
         d2:8f:ef:b3:62:8f:82:90:dc:f6:2c:12:b8:b8:7c:ad:b3:df:
         3b:f3:c4:f4:4b:b9:1d:9f:87:2a:cf:17:13:05:73:e9:2c:6e:
         29:9e:5f:26:67:12:f3:f9:b9:d8:a1:95:51:42:ff:dd:28:3b:
         45:de:a2:c9:1b:ca:78:77:d8:77:13:69:9d:82:1a:af:e4:83:
         cf:42:30:33:f4:9a:ae:a8:4e:0b:44:98:5f:f1:67:f4:ae:e1:
         08:46:c7:d9:25:0d:57:a5:ad:e0:d8:72:8a:4a:b8:88:28:e8:
         a5:5d:2f:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTvurZP3VUe1xbLK6NbcPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMzgwYzU1YzQ2MTE3ZjlkMGY5Zjg5Zjg4NWZkOGFjNTg0
YzcyZTcwHhcNMjQxMTIyMTIwMDQxWhcNMjQxMTIzMTIwMDQxWjAzMTEwLwYDVQQD
Eyg5Mzg5NjgyMzA0NDJhNzU5MzU3N2EwYTI2OTllMTg5ZjcwZjJkODk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA063KR76G3BeuDW6RBGiawxChj9Pz
6Ve0dc8rEhG4BdQuQPvXLqE4Rn+O9VVIyBxSnaavW17IfZIm9Ba2okMqaNLza1x8
QRlQP8KQIPP0OppBlX2rVr5tC/C6kqtyGWVFChoAbSNL3hOS9EFKS+kX8KF0aQtO
xdfdZXNpxRFx1j2YAmpTMM8/7iXoKbLxdMuFJx4Ea3WuxVbCnmDMwv+CqlyVjjgE
jbBhxJ5hDSaJ6MNydDHbWpaK0ZJrgZqV4zkrethjGOqAzloJMtMxYdO0gm0tBMtf
4X8qTIBQNrIMA8C3OSCzMFA161Bbql3kMdRMf0EK1pXJW0dBFCt40SZbUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOJaCMEQqdZNXegommeGJ9w8tiXMB8GA1UdIwQY
MBaAFJo4DFXEYRf50Pn4n4hf2KxYTHLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMt
NDBhYWM2Mzk2Nzc3LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMtNDBhYWM2Mzk2Nzc3
LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvhMrL//
A1hGpDT2ohm+7caFPILs+WEUGeTjIdnBMza/iiF2hvVthW658hMCdzrbZEaJK5ts
W72st/iguo7fyImvXXh4zynCaS1nzKZJ/y9bsotYw4QkK33kyRLAlOB8jM6X4SVW
xrxURB7CcnEH0NRkx6TUbN3ZZeUUkRkNu1IdmulQMQGEhjEFtgdkkGR50o/vs2KP
gpDc9iwSuLh8rbPfO/PE9Eu5HZ+HKs8XEwVz6SxuKZ5fJmcS8/m52KGVUUL/3Sg7
Rd6iyRvKeHfYdxNpnYIar+SDz0IwM/SarqhOC0SYX/Fn9K7hCEbH2SUNV6Wt4Nhy
ikq4iCjopV0v0w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:03:50 2024 by rpki-client on console-ams.rpki-client.org