Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
File:                     BozI9XorPCKZsfSCtn4V2d5DrTw.mft (raw, json)
Hash identifier:          rZJKapL3oHhIw33ZW+qmt38Cso6+lUzP2kBJRM+A7cA=
Subject key identifier:   D1:04:36:68:59:22:76:D0:91:C8:3B:0D:77:02:38:35:D3:A0:F4:9B
Authority key identifier: 06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C
Certificate issuer:       /CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
Certificate serial:       019234A487C11CE6CE0B4F96906C558B132D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
Manifest number:          1050
Signing time:             Fri 27 Sep 2024 18:00:50 +0000
Manifest this update:     Fri 27 Sep 2024 18:00:50 +0000
Manifest next update:     Sat 28 Sep 2024 18:00:50 +0000
Files and hashes:         1: BozI9XorPCKZsfSCtn4V2d5DrTw.crl (hash: rapbqDAWIc7CJK5eWUCqiT8RBHRjUzMQqhMAlu33R3w=)
                          2: LH4cJZ5S3NvpdiebArzyxtRiJU0.roa (hash: ytFwvzK4RhE2+j8BmSgLkWY7Grr9ScUdtauRKk1htr0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:a4:87:c1:1c:e6:ce:0b:4f:96:90:6c:55:8b:13:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
        Validity
            Not Before: Sep 27 18:00:50 2024 GMT
            Not After : Sep 28 18:00:50 2024 GMT
        Subject: CN=d1043668592276d091c83b0d77023835d3a0f49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d0:02:cf:fd:41:3b:14:45:f8:d8:2e:53:0e:
                    38:39:87:54:22:44:15:16:7e:56:bb:93:37:47:f9:
                    1e:e9:e7:ea:5f:ac:85:3b:f5:56:df:ed:55:57:f1:
                    32:96:c7:82:ec:13:83:df:05:92:78:1e:a4:eb:80:
                    02:d3:e1:f3:3f:cc:2a:8e:a6:11:a1:3e:6e:32:ae:
                    cc:c0:ed:b6:5a:71:4c:d2:f0:f1:17:c2:75:8e:a3:
                    66:c3:84:0b:a2:ae:aa:22:d4:ce:51:ce:2a:f2:b7:
                    87:ba:57:af:ef:c3:64:4d:de:a9:6c:3e:f9:f6:5e:
                    83:d3:02:23:ac:07:a0:07:da:1d:b4:aa:4a:a8:83:
                    63:f0:da:5c:50:a4:d1:ec:61:cf:48:62:d2:ff:0f:
                    58:94:f8:8e:e1:fe:55:c1:dc:0c:3a:9a:e9:19:75:
                    e4:4c:83:c1:31:93:0b:3d:9a:77:66:e3:98:70:40:
                    6c:d0:49:7b:18:ae:7d:10:96:aa:d6:e2:d3:13:fe:
                    8f:d1:df:7e:01:9f:78:4f:e0:d3:7d:c4:0c:31:b6:
                    ae:f1:c5:a0:d4:e8:bb:75:9d:2e:65:28:f3:ce:eb:
                    93:8e:db:6d:fc:65:89:b3:75:da:73:aa:60:72:60:
                    3a:45:80:33:67:1e:aa:22:6d:2c:a8:49:db:db:2e:
                    c4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:04:36:68:59:22:76:D0:91:C8:3B:0D:77:02:38:35:D3:A0:F4:9B
            X509v3 Authority Key Identifier:
                keyid:06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:49:0e:81:85:03:f5:cb:39:80:df:cf:8d:3e:3d:72:a7:12:
         b0:f9:a5:f9:ce:c2:c6:c8:cd:8c:06:7a:bc:98:a2:84:eb:91:
         9d:4f:15:81:23:52:ff:b3:97:c7:e4:06:08:41:b1:32:58:3c:
         b1:c8:e2:fc:51:5b:0f:a8:0f:58:1c:79:89:d9:6d:b7:76:03:
         f3:90:0b:cc:d7:4c:84:07:bb:9f:44:1a:8d:be:5d:57:ce:bf:
         d8:50:c9:d5:1f:c8:cc:a4:35:06:af:ff:eb:29:1a:ff:30:32:
         0a:4b:5d:9a:0b:9e:3f:e0:cf:5e:a9:f0:a1:4a:82:42:65:d2:
         ba:76:c0:f6:d9:52:c6:aa:55:7b:64:c3:b7:52:90:b2:74:3a:
         a4:da:f3:90:3d:77:15:48:96:ce:28:e1:c9:bf:ac:f5:32:76:
         52:e5:8e:aa:89:c2:9f:e8:55:b4:57:1d:9c:2d:a7:b3:07:6c:
         01:db:1c:f3:23:8b:8d:f5:94:72:b1:39:8d:d8:19:91:94:30:
         22:b8:40:4a:21:5f:58:d4:c5:4c:ab:67:33:ca:33:e9:a7:5f:
         9c:1c:ca:88:83:79:d7:4c:8a:7b:4f:51:13:a8:e6:c6:0d:6d:
         c1:de:56:59:d6:11:fc:5f:fd:65:e6:3a:6c:d0:b4:6c:db:7d:
         99:67:79:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI0pIfBHObOC0+WkGxVixMtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OGNjOGY1N2EyYjNjMjI5OWIxZjQ4MmI2N2UxNWQ5ZGU0
M2FkM2MwHhcNMjQwOTI3MTgwMDUwWhcNMjQwOTI4MTgwMDUwWjAzMTEwLwYDVQQD
EyhkMTA0MzY2ODU5MjI3NmQwOTFjODNiMGQ3NzAyMzgzNWQzYTBmNDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtACz/1BOxRF+NguUw44OYdUIkQV
Fn5Wu5M3R/ke6efqX6yFO/VW3+1VV/EylseC7BOD3wWSeB6k64AC0+HzP8wqjqYR
oT5uMq7MwO22WnFM0vDxF8J1jqNmw4QLoq6qItTOUc4q8reHulev78NkTd6pbD75
9l6D0wIjrAegB9odtKpKqINj8NpcUKTR7GHPSGLS/w9YlPiO4f5VwdwMOprpGXXk
TIPBMZMLPZp3ZuOYcEBs0El7GK59EJaq1uLTE/6P0d9+AZ94T+DTfcQMMbau8cWg
1Oi7dZ0uZSjzzuuTjttt/GWJs3Xac6pgcmA6RYAzZx6qIm0sqEnb2y7EdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEENmhZInbQkcg7DXcCODXToPSbMB8GA1UdIwQY
MBaAFAaMyPV6KzwimbH0grZ+FdneQ608MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm96STlYb3JQQ0tac2ZTQ3RuNFYyZDVEclR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kYmRlOGMtYTBmYy00NGQ3LTk5M2It
MmEyODQxNmQ0NWIyLzEvQm96STlYb3JQQ0tac2ZTQ3RuNFYyZDVEclR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9kYmRlOGMtYTBmYy00NGQ3LTk5M2ItMmEyODQxNmQ0NWIy
LzEvQm96STlYb3JQQ0tac2ZTQ3RuNFYyZDVEclR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEkOgYUD
9cs5gN/PjT49cqcSsPml+c7CxsjNjAZ6vJiihOuRnU8VgSNS/7OXx+QGCEGxMlg8
scji/FFbD6gPWBx5idltt3YD85ALzNdMhAe7n0Qajb5dV86/2FDJ1R/IzKQ1Bq//
6yka/zAyCktdmgueP+DPXqnwoUqCQmXSunbA9tlSxqpVe2TDt1KQsnQ6pNrzkD13
FUiWzijhyb+s9TJ2UuWOqonCn+hVtFcdnC2nswdsAdsc8yOLjfWUcrE5jdgZkZQw
IrhASiFfWNTFTKtnM8oz6adfnBzKiIN510yKe09RE6jmxg1twd5WWdYR/F/9ZeY6
bNC0bNt9mWd5UA==
-----END CERTIFICATE-----
Generated at Fri Sep 27 21:55:32 2024 by rpki-client on console-ams.rpki-client.org