Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
File:                     jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json)
Hash identifier:          BVqiWo+fKcdlUPnPAr+3QNiM5+xtPMU2Gz3gJ7XkWXA=
Subject key identifier:   AA:08:00:80:FD:46:E0:8D:9B:5D:90:C0:04:89:5E:DD:50:39:07:7F
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Certificate issuer:       /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial:       01935651BDD4BF682234CE8FA53D73DB8D70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
Manifest number:          13A4
Signing time:             Sat 23 Nov 2024 00:00:17 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:17 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:17 +0000
Files and hashes:         1: 0oRCZzlNIZV896yY3LghsghJfmI.roa (hash: zDbkjL/iXnyj8icji8uyJ0BGr/1vOUhWzdrTP0zFdhY=)
                          2: 2CA5-PHK6jnOrtDHSwaMrNi0Uwc.roa (hash: DdZ/XdOse5A2HHwE7cFr/Iia2GWI8P/y0efESY9qsQI=)
                          3: 2uE0i0gsYkcUjpe1IWcrvSb05rQ.roa (hash: ow/ZRhEErojxT8m4riywZNyxpObTHUo0iSJ1t79E3c0=)
                          4: 61lYLNnGNyoFlnfPR3hz6pO-4p4.roa (hash: 2RxyoDz8luZfe++e2AW4fcpx8wV+rpCQiI8pO6anhII=)
                          5: 7m7qCgf9rfdEFYKPforN10dL2y0.roa (hash: sSl9uppmnjtSj3USYmkuEHpwlJa04JWciXzcpqjpe1g=)
                          6: 7y6h15TQCVxlEH4JV1IOzUbhvb0.roa (hash: 4vvm8JztqyzEz9c+pSRbcBTELxC78B+kH/Hb5jrYMjM=)
                          7: DcJ7YTFaCkfyk5IVHXQmbZ6g8Ck.roa (hash: MUqohQHc4SDXsbTIz2Ao9A6SAhrPCR/WOw8FmgoOVe8=)
                          8: IybHU6Pl_9YNg5jp9zbwWTg2qDw.roa (hash: XHsVhsr67U8Z+ikZKmise7OfFx0DUwhYTzhjSrJD9S0=)
                          9: RbidflpIM5MKtdOdC6r2WvBYK7I.roa (hash: Ty9WluS4pd1/kO3u3vGVkcpARCYhAmoI22SY+r6yKnY=)
                          10: RsV9Lmn9X03tMTdOJayM7n8GOIU.roa (hash: f0BBAwxYMbpGjfOAZX61Ihc95Lu3ra5BRRNFjyDWnC0=)
                          11: YrQ8FPtm2EVg0VJlCLOYkJt53Bo.roa (hash: /q3OIUfb/DtpaEWsmAw4dc7g05s7hPIrxPQFlPnk2EU=)
                          12: dalkQoR5yWN0bj6Rv4PS5E6TTuU.roa (hash: lc3j/nGT+80agSUi8VPGfdjqrhxAZtHrC8wAloMiTmI=)
                          13: dhpfG3tA98lCF5vEmj64bKoUTSU.roa (hash: +NhBobu0ceFugYQ2bE0Byc477p/h4p3GaIOKiRoPH10=)
                          14: i01v-VgslTnP-y8pWNKMhjduJl0.roa (hash: FxWRb4BAjljlyuif+m7BxMqMWGHErHUr+rKos6+w6jQ=)
                          15: isJ9LJgTXZd5VCmtD47Digm_nKA.roa (hash: L/r1tI8a8mXESOX2LvLVNUTDrA2V6mJ3oP0NLLUwrW8=)
                          16: jVPWl31BH0Qbvk8GZCmJu1S-SCg.roa (hash: GjR7bKQdVfdJfimgP8NB+w5wS+aOcaTF1LTIm0aW9x4=)
                          17: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: 7UbfZxxbw5bj34ASjq7LopNolJJPnqGAYI6KcR9m5ZU=)
                          18: sRjYoziAYc0BikPSpm8h9jBGuAo.roa (hash: WzpXcMPsDEKDqcOh18X8WDKLcZwejFe1kyNYalb3BIY=)
                          19: w8V-PUXayXn4_kI4QHAr91FE0xk.roa (hash: eGOoJbk7JEHHJyJTyq5Yr1uWNbk7xlMkIMVScgDY3Fg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:bd:d4:bf:68:22:34:ce:8f:a5:3d:73:db:8d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
        Validity
            Not Before: Nov 23 00:00:17 2024 GMT
            Not After : Nov 24 00:00:17 2024 GMT
        Subject: CN=aa080080fd46e08d9b5d90c004895edd5039077f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:02:7d:7d:ba:46:26:e9:3b:95:45:b5:d2:c6:
                    f9:f6:6b:9d:54:af:cb:54:ac:1a:f6:bc:e8:c2:96:
                    e0:4a:bc:8c:02:3c:c4:e5:cb:1d:f2:9f:26:fd:3b:
                    cc:69:68:19:d1:51:d9:20:ed:bb:11:d5:1d:72:bc:
                    0a:fd:8b:54:b8:f8:bf:79:02:82:cc:d7:2f:03:a6:
                    c3:d5:16:3c:51:85:15:ad:5e:cc:a1:7f:04:e1:aa:
                    b2:90:d3:df:2b:80:e1:89:49:7b:d3:65:77:0b:4f:
                    4d:ac:63:5d:03:17:51:2f:85:b2:3a:35:e8:4c:5f:
                    9d:5b:22:16:ee:06:15:ce:fe:41:88:e6:bf:de:bd:
                    b1:49:cc:92:0a:3a:6b:2e:80:16:bb:37:2d:3b:42:
                    ad:5e:60:ef:a3:16:1c:a8:3f:67:a7:8f:8f:81:16:
                    ac:8c:5b:f0:a9:d0:8d:04:93:0c:10:61:16:06:40:
                    70:f4:47:12:0a:ca:b3:fb:e6:6c:b7:c5:dc:5a:37:
                    ae:5b:54:16:be:df:2a:d4:67:ed:28:c2:36:8d:0b:
                    ae:87:6f:2b:48:a3:85:70:76:5d:78:91:1b:f1:8b:
                    b2:5a:29:96:41:42:0a:b2:d7:5a:dd:41:30:79:4b:
                    49:75:fa:66:6c:f9:db:41:4f:bf:d9:df:68:db:4e:
                    6d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:08:00:80:FD:46:E0:8D:9B:5D:90:C0:04:89:5E:DD:50:39:07:7F
            X509v3 Authority Key Identifier:
                keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c3:b1:84:e4:bb:b7:35:6d:be:db:fa:1c:fd:6a:15:42:a4:
         53:6d:64:95:6d:18:78:9a:25:2b:5e:1f:de:b1:28:c9:d4:b2:
         f7:b2:42:6b:8a:2b:fc:47:f2:e4:26:53:f8:f6:a8:0e:42:ac:
         47:14:60:14:17:94:f4:40:3b:d8:5d:d0:61:7c:0b:88:bf:72:
         79:08:d4:61:d9:a5:44:e4:73:cf:15:d7:d8:aa:25:ec:fc:1d:
         d4:b3:38:87:2d:6f:4d:88:69:2c:4b:a1:49:44:cd:8b:23:39:
         78:28:74:c4:a0:8b:43:80:23:74:71:f5:c8:b9:82:6b:64:08:
         8c:0c:cd:1f:59:b8:26:e8:ae:7f:a9:bf:32:67:dd:16:5c:bb:
         1b:42:8b:bb:39:e1:72:1c:90:0f:93:2a:75:8c:6d:d1:23:4e:
         3c:19:27:01:2d:b8:cd:f1:55:69:91:ad:04:85:0f:48:80:8a:
         ca:3b:2b:cb:28:3a:00:fb:00:50:7a:76:28:90:f1:04:c1:84:
         16:17:f7:a9:c0:4c:7f:0d:b2:56:ef:a5:17:ae:14:38:8a:e9:
         39:5b:cc:bc:ca:24:87:41:86:21:f8:5e:a0:a9:00:6b:63:2f:
         0d:95:8c:08:3f:c0:9c:ff:af:60:d5:22:c6:84:fa:e2:46:c3:
         4f:3e:d3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:58 2024 by rpki-client on console-fra.rpki-client.org