Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
File:                     sDwwLC9SJ349CraEL2iqX40Nd4c.mft (raw, json)
Hash identifier:          o/B+DA/lCQGPWhfuhqLDE4Yz+/cH7AxhEKLbz03s20Q=
Subject key identifier:   D6:65:A5:99:97:6B:8E:89:6B:DD:73:43:1E:4A:74:84:7F:F1:4D:E0
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Certificate issuer:       /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial:       019355E40CE37BDC727AB5B6852617A006F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
Manifest number:          09F8
Signing time:             Fri 22 Nov 2024 22:00:28 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:28 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:28 +0000
Files and hashes:         1: 4UiPWNujawkpa-mggPLUDntkXX0.roa (hash: RJlxNgr9E9K/9ant3oPvIelITMoNFS0PqNcjsHY5K7A=)
                          2: JDHw4dMSEYp7rFKitwg6wsA3eeQ.roa (hash: +sInuW+MUasz58xKp2AqkoOJ+Zn++k3jsQNHzC5Wt6g=)
                          3: dmhmhHpoC2rgtWleCsbrFsVzPcM.roa (hash: qD/qUeTaVJffu1v7WT4gBrTdEo9yz5VHRkJXqCKrvjE=)
                          4: sDwwLC9SJ349CraEL2iqX40Nd4c.crl (hash: Dai94/p1fmUtAFim8cxPAv+HEOaOQB0zwBmIllkuGhQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:0c:e3:7b:dc:72:7a:b5:b6:85:26:17:a0:06:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
        Validity
            Not Before: Nov 22 22:00:28 2024 GMT
            Not After : Nov 23 22:00:28 2024 GMT
        Subject: CN=d665a599976b8e896bdd73431e4a74847ff14de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:85:e6:a9:a6:5c:13:b7:60:b0:1e:38:19:
                    83:aa:79:79:96:52:9c:f6:c6:a4:d9:0b:de:ca:bd:
                    2b:30:e8:73:4e:c5:5d:82:5b:b4:e6:5b:ce:42:b7:
                    f4:46:bc:92:89:e8:d1:54:f7:f0:dd:87:27:1b:85:
                    81:35:e3:7b:b7:ec:34:f4:6d:9c:2d:eb:d9:c3:a3:
                    44:be:ca:27:7d:20:60:28:8c:8d:0d:1b:22:b1:f2:
                    3d:d0:33:37:59:08:77:d5:1b:67:94:9b:65:50:2a:
                    88:ab:32:0e:5d:46:06:a8:fc:d2:45:40:6f:a5:6e:
                    85:af:cf:65:9a:ce:4a:96:47:98:eb:52:aa:db:be:
                    9a:72:1d:9a:06:da:05:2a:d9:42:55:ae:ea:9e:a0:
                    cc:b6:52:76:6a:c9:29:eb:87:3a:39:74:e3:38:cc:
                    61:9c:25:38:d5:1e:b7:7d:04:9e:d4:da:50:d1:e2:
                    31:e9:8b:fa:f3:ee:3e:95:43:3b:11:c3:56:bc:ad:
                    58:a0:90:fb:32:ef:40:24:b8:ec:71:0f:e2:c1:57:
                    54:3f:ee:29:05:3c:e2:92:39:c9:c0:a2:ad:2c:be:
                    fc:7b:42:dd:d5:b9:10:97:80:b1:c2:5b:e9:29:d1:
                    86:02:e6:f5:dc:84:c6:c3:ac:cc:bf:1e:ad:8c:01:
                    d2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:65:A5:99:97:6B:8E:89:6B:DD:73:43:1E:4A:74:84:7F:F1:4D:E0
            X509v3 Authority Key Identifier:
                keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a5:07:3b:62:1c:4a:63:ae:ef:0c:a0:d9:6a:5b:69:e1:3e:
         f1:1d:fd:1d:85:45:22:2e:81:b9:f9:8e:a4:d8:2b:7e:7f:29:
         aa:ff:9a:cd:05:f5:db:58:cd:27:aa:0f:fd:69:1b:28:a8:fa:
         09:25:4f:8a:de:f5:d2:8c:7e:b9:ef:c7:48:99:64:b7:a1:47:
         1a:2f:9f:a8:90:0b:c6:ea:96:f8:73:ee:3c:e4:f0:c5:17:95:
         ba:2b:b6:6e:ba:06:1d:8d:30:8f:c6:0e:f3:41:11:c3:3c:a6:
         e2:2c:ef:27:a2:8b:6c:70:e3:17:cc:51:3a:bd:dc:e2:61:53:
         ce:e6:f7:f8:fd:9f:9e:64:c7:e8:d6:e8:cf:88:0e:aa:48:02:
         59:18:3d:b8:60:b6:dd:22:79:49:ae:78:81:59:92:e4:22:f9:
         36:b3:e7:43:69:e0:dd:32:02:4f:6b:d3:91:83:39:33:94:e7:
         a0:0f:b1:20:4c:65:f9:c4:59:87:d1:64:52:0f:b6:db:54:64:
         e6:69:be:45:0b:b9:b8:d3:fb:71:8e:65:36:bb:ab:48:08:a2:
         dd:9e:70:5b:03:8a:66:ff:5e:73:9a:f3:34:8e:7e:5f:cf:4e:
         4e:8b:2e:c6:77:d8:be:bd:64:ad:84:ac:80:22:82:79:33:9c:
         09:7d:23:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNV5Azje9xyerW2hSYXoAb2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwM2MzMDJjMmY1MjI3N2UzZDBhYjY4NDJmNjhhYTVmOGQw
ZDc3ODcwHhcNMjQxMTIyMjIwMDI4WhcNMjQxMTIzMjIwMDI4WjAzMTEwLwYDVQQD
EyhkNjY1YTU5OTk3NmI4ZTg5NmJkZDczNDMxZTRhNzQ4NDdmZjE0ZGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1qF5qmmXBO3YLAeOBmDqnl5llKc
9sak2Qveyr0rMOhzTsVdglu05lvOQrf0RrySiejRVPfw3YcnG4WBNeN7t+w09G2c
LevZw6NEvsonfSBgKIyNDRsisfI90DM3WQh31RtnlJtlUCqIqzIOXUYGqPzSRUBv
pW6Fr89lms5KlkeY61Kq276ach2aBtoFKtlCVa7qnqDMtlJ2askp64c6OXTjOMxh
nCU41R63fQSe1NpQ0eIx6Yv68+4+lUM7EcNWvK1YoJD7Mu9AJLjscQ/iwVdUP+4p
BTzikjnJwKKtLL78e0Ld1bkQl4CxwlvpKdGGAub13ITGw6zMvx6tjAHSvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZlpZmXa46Ja91zQx5KdIR/8U3gMB8GA1UdIwQY
MBaAFLA8MCwvUid+PQq2hC9oql+NDXeHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2Et
NmY3MDI0YzNhYWQ3LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hMmVjOWMtOWQ3Ni00ZTk0LTllM2EtNmY3MDI0YzNhYWQ3
LzEvc0R3d0xDOVNKMzQ5Q3JhRUwyaXFYNDBOZDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKUHO2Ic
SmOu7wyg2WpbaeE+8R39HYVFIi6BufmOpNgrfn8pqv+azQX121jNJ6oP/WkbKKj6
CSVPit710ox+ue/HSJlkt6FHGi+fqJALxuqW+HPuPOTwxReVuiu2broGHY0wj8YO
80ERwzym4izvJ6KLbHDjF8xROr3c4mFTzub3+P2fnmTH6Nboz4gOqkgCWRg9uGC2
3SJ5Sa54gVmS5CL5NrPnQ2ng3TICT2vTkYM5M5TnoA+xIExl+cRZh9FkUg+221Rk
5mm+RQu5uNP7cY5lNrurSAii3Z5wWwOKZv9ec5rzNI5+X89OTosuxnfYvr1krYSs
gCKCeTOcCX0jCg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:00 2024 by rpki-client on console-ams.rpki-client.org