Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File:                     s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier:          n62uRWP/ZVScbwQCrBLV50IuyUqrMzvXN0jojWmjWZQ=
Subject key identifier:   7F:A2:0D:23:CF:92:84:9C:E6:88:57:FE:51:94:FB:E3:05:3B:A7:A5
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer:       /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial:       0193519982A692A042FC21B2F99810D6600C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 02:00:35 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:35 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:35 +0000
Files and hashes:         1: 60oYbcXkayZuaU8C0JD9JUPYztw.roa (hash: MpkTvLfYoUUXnDusH13raII1J8Nho2J1p/vE6Gk0HNY=)
                          2: D76WmVw5CmMUsHPLikHd5681Osw.roa (hash: cf+3/dFbYcgwY+cgaXGwBNk41hQDfFv1c//pj0apPCc=)
                          3: YtqpsCvL1pVNcapbZ_2c2qMRzg4.roa (hash: mbbyfRcEmZrXue4fM9CSRdeyAKXk4D3TWtFnzFiuexE=)
                          4: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: 26QgJxIRRHAmbg9/4JA5FVqvA1rznsq37ZkhP73Ryn8=)
                          5: wSRgjMIHElosvY2rl-Oa6hdRK4M.roa (hash: UxybQWfxIgSiBEmc63954uHTGgnwKW9t3BUgYZ/U5GU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:82:a6:92:a0:42:fc:21:b2:f9:98:10:d6:60:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
        Validity
            Not Before: Nov 22 02:00:35 2024 GMT
            Not After : Nov 23 02:00:35 2024 GMT
        Subject: CN=7fa20d23cf92849ce68857fe5194fbe3053ba7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:28:55:19:c1:e3:2d:4a:87:cc:5d:f7:73:
                    98:fc:9e:ad:84:ef:20:4f:64:f0:6d:bf:0c:39:cc:
                    4f:fb:c3:47:c5:9a:d8:5f:e9:4f:fd:a7:a7:1d:05:
                    1a:3a:36:4b:37:c3:54:63:a5:9e:2e:78:75:a3:b0:
                    e0:86:c3:ea:b2:e2:a5:5f:08:ba:27:a9:31:f7:74:
                    ed:09:50:ea:49:6c:27:c1:bb:90:ea:f9:d9:60:3d:
                    bc:a4:63:ca:3f:f9:12:81:eb:d0:ae:0b:28:d6:bd:
                    31:1a:7f:a5:d3:c3:26:fd:c7:fa:14:12:3d:7e:68:
                    e5:64:01:5b:94:7c:9b:8e:14:8f:be:47:09:f4:ca:
                    47:02:a4:33:a5:cd:f4:62:32:a1:05:b8:a9:0b:ec:
                    a2:37:53:9f:c6:4d:81:c4:e3:dd:93:1a:2f:d2:4c:
                    7c:b0:99:3f:7b:db:32:a9:52:4b:2e:f1:ed:72:17:
                    4c:f4:d9:20:da:f8:89:dc:fc:3b:42:a0:46:70:89:
                    05:c9:83:1c:14:67:ee:1b:e7:19:f1:ce:92:b3:d9:
                    c2:ce:59:84:f8:cd:49:04:3e:92:6c:7d:8e:21:47:
                    06:92:66:c0:fd:da:81:07:49:3e:58:f0:eb:99:7b:
                    38:4f:de:7d:66:f4:a6:15:77:10:8e:37:07:3a:05:
                    9c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A2:0D:23:CF:92:84:9C:E6:88:57:FE:51:94:FB:E3:05:3B:A7:A5
            X509v3 Authority Key Identifier:
                keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0d:d4:8f:f6:ea:4b:e2:47:38:9a:4f:97:ad:06:20:57:d0:
         e1:f7:ce:1b:71:bb:ba:fc:80:3b:95:ab:52:cf:63:d5:78:19:
         7b:38:0d:dc:5c:f8:36:12:cc:21:67:2e:30:47:0b:91:e3:27:
         3d:d8:4b:a6:81:93:40:8f:a9:c5:6a:a8:8e:eb:44:ea:59:f4:
         b4:3f:21:b0:71:de:3d:af:d7:c8:b5:13:1c:f9:bc:47:28:95:
         a0:36:99:53:16:45:1d:cb:3e:d9:3f:bf:32:ec:79:27:b1:e5:
         6a:1f:5c:9f:40:65:ee:94:32:7a:09:85:39:ba:1e:29:e5:68:
         8b:c2:80:ff:c1:25:eb:be:21:24:15:a5:5a:34:fd:6d:3b:50:
         1e:4e:77:8e:d3:4b:57:aa:1f:6e:75:8b:79:7e:2b:91:99:0d:
         d7:d6:2b:25:47:e5:1c:83:1c:56:c0:06:be:c9:4f:d3:6c:16:
         3a:8f:48:af:a8:ed:80:08:20:d6:cf:0a:b1:cf:bb:33:bb:3d:
         c9:d1:44:3f:bc:61:94:31:06:9d:92:28:b7:e9:36:61:78:2a:
         39:56:9f:45:48:cb:29:76:a9:18:9c:22:ec:e5:bd:41:12:b4:
         d7:fe:cf:5d:a6:79:cd:3d:22:f5:19:96:bc:d8:11:c4:a5:40:
         c0:76:61:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRmYKmkqBC/CGy+ZgQ1mAMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDY2Mjk3YzVjZGJkMzZkODY4NDlkZGVhZTc5ODU5Nzlm
NDUwY2EwHhcNMjQxMTIyMDIwMDM1WhcNMjQxMTIzMDIwMDM1WjAzMTEwLwYDVQQD
Eyg3ZmEyMGQyM2NmOTI4NDljZTY4ODU3ZmU1MTk0ZmJlMzA1M2JhN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrgoVRnB4y1Kh8xd93OY/J6thO8g
T2Twbb8MOcxP+8NHxZrYX+lP/aenHQUaOjZLN8NUY6WeLnh1o7DghsPqsuKlXwi6
J6kx93TtCVDqSWwnwbuQ6vnZYD28pGPKP/kSgevQrgso1r0xGn+l08Mm/cf6FBI9
fmjlZAFblHybjhSPvkcJ9MpHAqQzpc30YjKhBbipC+yiN1Ofxk2BxOPdkxov0kx8
sJk/e9syqVJLLvHtchdM9Nkg2viJ3Pw7QqBGcIkFyYMcFGfuG+cZ8c6Ss9nCzlmE
+M1JBD6SbH2OIUcGkmbA/dqBB0k+WPDrmXs4T959ZvSmFXcQjjcHOgWcgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+iDSPPkoSc5ohX/lGU++MFO6elMB8GA1UdIwQY
MBaAFLPWYpfFzb022GhJ3ernmFl59FDKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2Yt
ZWIxZjg3MTVlZWMwLzEvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2YtZWIxZjg3MTVlZWMw
LzEvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhA3Uj/bq
S+JHOJpPl60GIFfQ4ffOG3G7uvyAO5WrUs9j1XgZezgN3Fz4NhLMIWcuMEcLkeMn
PdhLpoGTQI+pxWqojutE6ln0tD8hsHHePa/XyLUTHPm8RyiVoDaZUxZFHcs+2T+/
Mux5J7Hlah9cn0Bl7pQyegmFOboeKeVoi8KA/8El674hJBWlWjT9bTtQHk53jtNL
V6ofbnWLeX4rkZkN19YrJUflHIMcVsAGvslP02wWOo9Ir6jtgAgg1s8Ksc+7M7s9
ydFEP7xhlDEGnZIot+k2YXgqOVafRUjLKXapGJwi7OW9QRK01/7PXaZ5zT0i9RmW
vNgRxKVAwHZhYw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:12 2024 by rpki-client on console-fra.rpki-client.org