Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
File:                     0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json)
Hash identifier:          D45JC2J3brt5t8aayTCWMTdGAKoZFs0+jEE3m5a5YCM=
Subject key identifier:   5B:B5:A0:54:40:09:C5:DF:54:C5:84:F4:7A:A4:F6:2D:1D:8C:80:B0
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Certificate issuer:       /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial:       019369DA97080E1D2F20D4FB44D480306805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
Manifest number:          0604
Signing time:             Tue 26 Nov 2024 19:02:33 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:33 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:33 +0000
Files and hashes:         1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: 7wUKbdq9Bgyd6bJ4gb0jNO/aChQ2CiqJZEQsh7QQ0xk=)
                          2: 7UlI42vnDzSkn0I0rZW8cgapAAo.roa (hash: EARlfphkOocNFrtvlg7wcZKV51qNRTK4zKhbqhPLny0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:97:08:0e:1d:2f:20:d4:fb:44:d4:80:30:68:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
        Validity
            Not Before: Nov 26 19:02:33 2024 GMT
            Not After : Nov 27 19:02:33 2024 GMT
        Subject: CN=5bb5a0544009c5df54c584f47aa4f62d1d8c80b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:4d:75:9a:30:24:97:fd:30:11:f1:8f:07:
                    ac:6e:88:2e:7a:85:a6:27:b8:ac:34:55:90:c8:1c:
                    92:b8:51:84:f0:80:a2:8b:3d:8f:c5:62:bd:26:28:
                    bf:6e:5c:e9:8d:be:1d:15:29:58:eb:14:0d:37:ac:
                    74:d7:a8:bd:da:96:d3:73:45:05:3a:1c:63:68:91:
                    0a:6f:06:0b:11:56:6e:b1:d5:29:e9:8d:84:6d:d5:
                    68:e0:94:e7:24:f5:d9:36:b9:47:32:c3:4d:36:fc:
                    db:02:7b:bd:49:1e:75:2c:b2:fd:e9:79:6d:0e:b8:
                    87:f8:c7:a2:d9:a5:05:65:a3:b0:73:45:82:4b:e5:
                    91:32:5b:8d:b3:2f:31:4a:7b:5d:85:e4:2f:59:b4:
                    d3:38:ab:5b:22:b2:21:6a:48:c5:8c:5a:09:70:63:
                    ff:e7:b5:ab:ae:0e:9f:4c:a3:d2:1d:ca:98:37:7d:
                    b9:83:bb:8c:6e:6f:35:c0:c5:2a:4f:15:7e:6e:a3:
                    16:37:9b:fb:dc:bd:9e:0f:d2:ad:b1:b4:33:e2:94:
                    fc:d2:10:8f:55:56:b2:3f:c2:c7:57:94:37:06:45:
                    aa:84:b5:d8:37:0a:d5:6b:ef:cc:02:8a:86:fd:b8:
                    90:1f:09:39:a8:d0:6b:4f:eb:f9:f2:5d:de:ff:7e:
                    d5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B5:A0:54:40:09:C5:DF:54:C5:84:F4:7A:A4:F6:2D:1D:8C:80:B0
            X509v3 Authority Key Identifier:
                keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:88:4d:b6:7c:35:4d:a5:2f:58:3b:13:b9:40:4e:c7:7e:57:
         9c:08:bf:3a:87:cf:24:92:26:01:d5:3f:31:c5:73:a1:85:75:
         83:6c:29:e7:9f:64:2c:4e:96:85:a0:c7:99:7a:48:bd:b2:53:
         dc:ca:8b:45:7c:c9:f3:4f:7c:f6:9a:31:de:a3:f8:5e:47:cb:
         a2:51:1d:9e:17:10:8c:5c:bb:da:6c:7e:a7:0e:23:bc:71:06:
         f7:f8:50:90:cb:a1:7d:ab:3e:8d:f2:12:c9:31:dc:a3:12:e3:
         43:05:86:7e:8a:70:1d:44:f9:a7:99:02:c6:e6:ba:9c:8c:80:
         e9:e1:d1:d0:f9:53:c2:bd:d2:71:19:07:a3:59:4c:67:5f:79:
         1d:f4:2b:ab:b9:b6:e9:d3:d6:0f:f8:ee:bf:92:9e:81:ae:1e:
         d0:ed:1e:b4:9e:66:56:5e:44:e3:a9:98:cd:7b:7e:11:4d:80:
         29:c4:96:e4:cd:f8:1c:0a:09:1d:54:f7:09:28:f0:bb:ae:2a:
         f6:1f:8e:6e:ec:17:07:e2:8c:12:36:a9:70:a1:a6:a4:ab:06:
         59:62:cc:42:83:06:c7:4b:24:50:36:c8:d4:29:bb:47:ad:92:
         98:9a:4d:b0:0a:17:ef:e5:42:db:92:b4:18:79:bf:12:53:57:
         62:c0:90:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2pcIDh0vINT7RNSAMGgFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOTM3ZWI2YTg5OTg0ZThjMDBiNTNiMTY4MWRlMDkwMDVh
ZGM5OWQwHhcNMjQxMTI2MTkwMjMzWhcNMjQxMTI3MTkwMjMzWjAzMTEwLwYDVQQD
Eyg1YmI1YTA1NDQwMDljNWRmNTRjNTg0ZjQ3YWE0ZjYyZDFkOGM4MGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBZNdZowJJf9MBHxjwesbogueoWm
J7isNFWQyBySuFGE8ICiiz2PxWK9Jii/blzpjb4dFSlY6xQNN6x016i92pbTc0UF
OhxjaJEKbwYLEVZusdUp6Y2EbdVo4JTnJPXZNrlHMsNNNvzbAnu9SR51LLL96Xlt
DriH+Mei2aUFZaOwc0WCS+WRMluNsy8xSntdheQvWbTTOKtbIrIhakjFjFoJcGP/
57Wrrg6fTKPSHcqYN325g7uMbm81wMUqTxV+bqMWN5v73L2eD9KtsbQz4pT80hCP
VVayP8LHV5Q3BkWqhLXYNwrVa+/MAoqG/biQHwk5qNBrT+v58l3e/37VewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFu1oFRACcXfVMWE9Hqk9i0djICwMB8GA1UdIwQY
MBaAFNCTfraomYTowAtTsWgd4JAFrcmdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yY2MwOTQtMjA4MS00ZmY2LWE5ZGUt
ZDYyMWE4OTFmYjgwLzEvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yY2MwOTQtMjA4MS00ZmY2LWE5ZGUtZDYyMWE4OTFmYjgw
LzEvMEpOLXRxaVpoT2pBQzFPeGFCM2drQVd0eVowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYhNtnw1
TaUvWDsTuUBOx35XnAi/OofPJJImAdU/McVzoYV1g2wp559kLE6WhaDHmXpIvbJT
3MqLRXzJ80989pox3qP4XkfLolEdnhcQjFy72mx+pw4jvHEG9/hQkMuhfas+jfIS
yTHcoxLjQwWGfopwHUT5p5kCxua6nIyA6eHR0PlTwr3ScRkHo1lMZ195HfQrq7m2
6dPWD/juv5Kega4e0O0etJ5mVl5E46mYzXt+EU2AKcSW5M34HAoJHVT3CSjwu64q
9h+ObuwXB+KMEjapcKGmpKsGWWLMQoMGx0skUDbI1Cm7R62SmJpNsAoX7+VC25K0
GHm/ElNXYsCQLA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:16:29 2024 by rpki-client on console-ams.rpki-client.org