Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
File:                     MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json)
Hash identifier:          Dg8tSaH1Pat+mGm+J+m0Ombu4t0yau1AaKREP6sWjo8=
Subject key identifier:   26:1F:0B:F0:5C:A2:E3:59:98:6B:3C:94:BA:4C:6F:E4:99:3B:0E:CB
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Certificate issuer:       /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial:       019367EB19A6B41DDB4F92AAED2FA1523CDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
Manifest number:          0A5F
Signing time:             Tue 26 Nov 2024 10:01:20 +0000
Manifest this update:     Tue 26 Nov 2024 10:01:20 +0000
Manifest next update:     Wed 27 Nov 2024 10:01:20 +0000
Files and hashes:         1: BbVdaZY9Ua5c7bBOA9Zi9d00Uiw.roa (hash: eGCle76A24PEdjOm/kZZL0Zhv+gRZpduSwg1yHz81C8=)
                          2: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: 4OGCQ7hO5YRnzr1F0fb9N7JT93EDjiuqCjC0o48AUT8=)
                          3: W9uo4lxJu3XhOmx4C6aIUXcp_xU.roa (hash: ZT+ymqTJQIXlftz5qTL4/0R8/cTG2LwdNy0SKPVTDBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:eb:19:a6:b4:1d:db:4f:92:aa:ed:2f:a1:52:3c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
        Validity
            Not Before: Nov 26 10:01:20 2024 GMT
            Not After : Nov 27 10:01:20 2024 GMT
        Subject: CN=261f0bf05ca2e359986b3c94ba4c6fe4993b0ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1c:65:ce:02:d8:b5:c4:d1:36:e3:0d:e4:1a:
                    b5:e4:2c:01:17:cc:15:c3:4f:59:7f:5e:65:c0:6a:
                    d4:1a:41:ca:11:49:0f:d6:ef:25:33:2b:d8:cf:80:
                    6a:6d:a9:a7:f7:74:60:ce:4c:9b:d3:de:c8:57:82:
                    6a:57:3c:b3:0e:c0:63:f8:dc:57:ac:3b:04:6c:cb:
                    a1:35:a6:00:a2:01:25:36:51:8a:f2:b6:10:03:6d:
                    ed:38:67:54:8c:b4:41:57:b6:78:bc:b3:10:c0:2b:
                    bf:ee:fb:83:3d:6e:40:0b:56:ae:60:fa:c6:81:a5:
                    38:f9:f9:6f:73:27:83:14:a7:5e:5e:75:9e:fb:a6:
                    15:d8:d5:7c:ff:6b:d1:c0:e3:1f:24:e9:2d:2b:08:
                    5a:da:7c:9f:78:ad:24:65:37:5c:9c:59:cc:ed:2f:
                    10:16:e1:61:65:07:fe:73:ab:61:c4:48:bd:56:a7:
                    c8:b5:48:a5:9a:e4:2d:a4:eb:d4:18:bf:62:98:6a:
                    43:32:08:4d:46:ec:81:ab:c7:33:e5:37:c3:f7:45:
                    7b:5f:56:f6:4c:2a:e3:53:6b:aa:43:7c:93:3e:a5:
                    4e:1c:85:1e:77:88:09:d5:38:04:40:a5:9a:15:bc:
                    27:26:5e:62:bb:6a:73:6f:45:60:36:d5:3a:6b:39:
                    90:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1F:0B:F0:5C:A2:E3:59:98:6B:3C:94:BA:4C:6F:E4:99:3B:0E:CB
            X509v3 Authority Key Identifier:
                keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:62:ed:c6:a0:37:4d:b2:a2:17:34:bc:9f:5d:22:38:eb:75:
         47:a2:b7:aa:6b:f2:0b:81:f5:85:34:5c:9c:cc:8f:4f:8d:1d:
         14:09:d1:3f:fa:5c:4a:3d:2a:8e:5b:9c:dd:2f:a7:41:98:29:
         6a:97:a5:a8:60:6a:82:84:e9:8b:a6:84:34:dc:93:3d:f0:99:
         21:65:3a:98:4c:ef:20:d2:53:bf:27:2c:fc:3c:97:5f:65:bd:
         28:a8:dc:b6:54:a2:1a:25:d2:26:1c:99:da:38:c3:08:9d:c6:
         7b:29:f1:bf:d5:87:ed:3c:21:61:20:27:a7:c1:f8:d1:8a:2e:
         98:b0:8b:a3:e7:be:5f:07:c3:f4:f0:a9:9a:e5:5e:b6:f1:bb:
         39:2d:9c:83:03:37:70:bf:3b:78:cd:09:19:12:94:e2:b3:ce:
         b2:03:ce:67:46:1a:48:44:ff:3d:72:e6:e3:99:22:b7:f6:0c:
         f2:bd:ec:68:39:a1:21:1f:b9:96:60:ae:cb:a1:fd:57:9b:e1:
         75:e0:c1:5c:8c:88:08:b3:63:3d:3d:94:90:d5:4a:fc:bd:85:
         d4:7a:40:0a:35:73:06:28:48:c4:40:39:ea:2f:76:bd:a8:a7:
         a8:10:e3:14:bf:c1:2f:66:6f:0d:17:71:dc:3c:21:f9:0f:46:
         3c:75:5b:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNn6xmmtB3bT5Kq7S+hUjzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYTI3NTgwNjQ5YTk5MmU0MWUzMmNmOGMxMjI0NWUwN2Zm
OWY5YzUwHhcNMjQxMTI2MTAwMTIwWhcNMjQxMTI3MTAwMTIwWjAzMTEwLwYDVQQD
EygyNjFmMGJmMDVjYTJlMzU5OTg2YjNjOTRiYTRjNmZlNDk5M2IwZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hxlzgLYtcTRNuMN5Bq15CwBF8wV
w09Zf15lwGrUGkHKEUkP1u8lMyvYz4Bqbamn93Rgzkyb097IV4JqVzyzDsBj+NxX
rDsEbMuhNaYAogElNlGK8rYQA23tOGdUjLRBV7Z4vLMQwCu/7vuDPW5AC1auYPrG
gaU4+flvcyeDFKdeXnWe+6YV2NV8/2vRwOMfJOktKwha2nyfeK0kZTdcnFnM7S8Q
FuFhZQf+c6thxEi9VqfItUilmuQtpOvUGL9imGpDMghNRuyBq8cz5TfD90V7X1b2
TCrjU2uqQ3yTPqVOHIUed4gJ1TgEQKWaFbwnJl5iu2pzb0VgNtU6azmQWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYfC/BcouNZmGs8lLpMb+SZOw7LMB8GA1UdIwQY
MBaAFDCidYBkmpkuQeMs+MEiReB/+fnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMt
ZjU0ODY5OWY5NDdhLzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMtZjU0ODY5OWY5NDdh
LzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2LtxqA3
TbKiFzS8n10iOOt1R6K3qmvyC4H1hTRcnMyPT40dFAnRP/pcSj0qjluc3S+nQZgp
apelqGBqgoTpi6aENNyTPfCZIWU6mEzvINJTvycs/DyXX2W9KKjctlSiGiXSJhyZ
2jjDCJ3Geynxv9WH7TwhYSAnp8H40YoumLCLo+e+XwfD9PCpmuVetvG7OS2cgwM3
cL87eM0JGRKU4rPOsgPOZ0YaSET/PXLm45kit/YM8r3saDmhIR+5lmCuy6H9V5vh
deDBXIyICLNjPT2UkNVK/L2F1HpACjVzBihIxEA56i92vainqBDjFL/BL2ZvDRdx
3Dwh+Q9GPHVb+Q==
-----END CERTIFICATE-----
Generated at Tue Nov 26 12:24:46 2024 by rpki-client on console-ams.rpki-client.org