Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File:                     A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier:          iudnP4zbNSa3EI6DmWHopi1gy46UnqhJis+d3t2MnRU=
Subject key identifier:   CB:3A:E7:0E:04:23:27:94:E5:5E:D8:D7:7B:B9:7B:E6:FE:B3:30:12
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer:       /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial:       019353F5D4D5D926B2E92E7769A01912C7EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number:          0858
Signing time:             Fri 22 Nov 2024 13:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 13:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 13:00:39 +0000
Files and hashes:         1: 3Dwyf9R-2iqQezeeuz7mCcev6jU.roa (hash: qhu/o0Nw038vBf7CmuRlQq/RpGCM7dAo1Wj7VOxU0lc=)
                          2: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: 7QG6eitOStj3OONpFBjc7AJQ0nOsVhVbKTS3gdlVuYI=)
                          3: MSTk0rZzouSPYGI1gDaMA1y8I3w.roa (hash: Ugr9tV3AUOQ6HNsmvPcAgWZ9bWT2X0968T/RlXcaMaw=)
                          4: n_OEmPnn5E5MmCdF7k_h41Lvpnk.roa (hash: u+7YB0QnzB+LmXTGaFBlJCj7+x2FkeA0PtkBv9HX0Fw=)
                          5: qMN9ZGV6De2Xh52CAm3rMbrG0UI.roa (hash: Oq1eNEgKsyEzWS9bbTAf6SGM0cOWk3QsThnM2+T8u4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:f5:d4:d5:d9:26:b2:e9:2e:77:69:a0:19:12:c7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
        Validity
            Not Before: Nov 22 13:00:39 2024 GMT
            Not After : Nov 23 13:00:39 2024 GMT
        Subject: CN=cb3ae70e04232794e55ed8d77bb97be6feb33012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a4:e6:41:83:1f:39:95:85:16:d5:23:5b:cb:
                    58:d6:36:47:d9:e3:58:e8:00:da:8a:ee:b4:0d:b3:
                    ee:ae:9a:69:fd:4e:6a:08:4c:aa:99:4e:75:74:dc:
                    79:9d:b1:db:76:8e:7f:e6:2b:68:ea:86:4c:b5:b1:
                    72:fe:54:f3:eb:12:0e:ee:84:1d:8b:ce:d1:9d:42:
                    d0:0a:37:00:bc:a0:b0:46:37:75:d0:db:e6:95:fe:
                    61:69:9c:76:ce:2e:a0:db:a7:18:09:8d:e3:f3:70:
                    14:34:00:92:4b:41:60:71:b5:b2:87:89:0a:5f:dd:
                    91:3f:2d:3b:4e:c7:f4:45:8f:34:56:70:f4:00:23:
                    6e:61:cb:e1:80:68:54:7a:6d:25:04:19:2c:a8:61:
                    d7:fe:a5:ab:60:c9:90:68:67:95:da:88:9a:b9:e1:
                    32:01:36:a6:ef:92:ff:65:e4:fa:7f:ae:56:12:92:
                    92:cc:68:27:43:20:d7:df:d0:4a:07:6b:85:93:ae:
                    02:8c:8d:bb:f3:2a:9a:a5:f7:19:28:fe:6b:63:81:
                    61:47:e8:f6:2a:31:4f:6d:c1:0f:40:dc:11:a6:92:
                    24:18:15:12:8c:29:cb:4a:f0:d8:a1:7e:00:09:15:
                    9c:d6:45:2f:89:8f:6a:ab:1b:de:b8:7d:3a:15:2a:
                    d1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3A:E7:0E:04:23:27:94:E5:5E:D8:D7:7B:B9:7B:E6:FE:B3:30:12
            X509v3 Authority Key Identifier:
                keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:84:1f:54:53:5e:8a:e7:f2:c2:06:b6:c5:3d:23:30:93:75:
         e2:ac:0b:16:f5:58:82:35:21:27:86:2f:c6:e2:73:f8:35:19:
         c6:15:e4:52:56:c4:03:9b:66:f1:f9:67:2e:1e:f1:a2:d4:5e:
         ea:cc:b1:8b:2d:5d:52:60:98:5e:eb:be:0b:4b:86:c6:3d:1f:
         e3:ce:a6:e7:09:b0:20:6c:e6:89:cd:41:54:4d:21:06:f5:a8:
         62:41:06:9d:95:6f:ca:30:10:7e:cc:42:37:f7:65:ff:0e:71:
         ee:0e:ad:c8:90:32:16:9a:53:ab:48:b0:cd:64:fa:21:70:fc:
         73:84:2d:41:a0:c4:4f:e7:d4:0b:7c:fc:2c:38:28:ec:1e:6d:
         b7:6e:3f:46:0a:a7:b6:7b:10:22:20:b6:ed:36:42:53:dc:51:
         ae:95:55:c8:03:45:27:47:fe:4c:5e:ec:03:e7:19:0e:83:bd:
         df:e4:2c:99:30:6f:f3:ac:59:f2:0b:ec:9b:58:f5:b2:8c:54:
         9b:d9:9d:28:1c:98:1a:d4:3d:1f:97:93:c9:f9:95:dd:6c:91:
         a5:8a:5b:63:fd:9f:a8:a5:67:a0:e0:78:e9:2e:ca:7d:3d:58:
         02:af:0a:2d:ec:1d:b3:4a:a4:61:40:8d:bc:94:df:d2:9b:66:
         8c:59:57:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNT9dTV2Say6S53aaAZEsfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzY2JkYjA1OTVmYzQ4OTAyOTM4YTc4ZjQyYzFlYWYwYTE1
OWJmNDYwHhcNMjQxMTIyMTMwMDM5WhcNMjQxMTIzMTMwMDM5WjAzMTEwLwYDVQQD
EyhjYjNhZTcwZTA0MjMyNzk0ZTU1ZWQ4ZDc3YmI5N2JlNmZlYjMzMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KTmQYMfOZWFFtUjW8tY1jZH2eNY
6ADaiu60DbPurppp/U5qCEyqmU51dNx5nbHbdo5/5ito6oZMtbFy/lTz6xIO7oQd
i87RnULQCjcAvKCwRjd10Nvmlf5haZx2zi6g26cYCY3j83AUNACSS0FgcbWyh4kK
X92RPy07Tsf0RY80VnD0ACNuYcvhgGhUem0lBBksqGHX/qWrYMmQaGeV2oiaueEy
ATam75L/ZeT6f65WEpKSzGgnQyDX39BKB2uFk64CjI278yqapfcZKP5rY4FhR+j2
KjFPbcEPQNwRppIkGBUSjCnLSvDYoX4ACRWc1kUviY9qqxveuH06FSrRIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMs65w4EIyeU5V7Y13u5e+b+szASMB8GA1UdIwQY
MBaAFAPL2wWV/EiQKTinj0LB6vChWb9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt
ZjY2MTM4MDY2MzU4LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4
LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoQfVFNe
iufywga2xT0jMJN14qwLFvVYgjUhJ4YvxuJz+DUZxhXkUlbEA5tm8flnLh7xotRe
6syxiy1dUmCYXuu+C0uGxj0f486m5wmwIGzmic1BVE0hBvWoYkEGnZVvyjAQfsxC
N/dl/w5x7g6tyJAyFppTq0iwzWT6IXD8c4QtQaDET+fUC3z8LDgo7B5tt24/Rgqn
tnsQIiC27TZCU9xRrpVVyANFJ0f+TF7sA+cZDoO93+QsmTBv86xZ8gvsm1j1soxU
m9mdKByYGtQ9H5eTyfmV3WyRpYpbY/2fqKVnoOB46S7KfT1YAq8KLewds0qkYUCN
vJTf0ptmjFlXIQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:38:16 2024 by rpki-client on console-ams.rpki-client.org