Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
File:                     cNE-Khag7mY0IHqI_wqsTqvGaTw.mft (raw, json)
Hash identifier:          drXyxxbGAo5I+NJe20jjSRQPD7MhuKiZ+gDTJvHGrgI=
Subject key identifier:   A0:E4:2D:15:B9:8A:07:B0:96:DD:0E:B2:2D:60:70:77:26:A1:CF:04
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Certificate issuer:       /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial:       01923994A1BF21BAC151FA3F14CC9F8A5499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
Manifest number:          12E0
Signing time:             Sat 28 Sep 2024 17:01:34 +0000
Manifest this update:     Sat 28 Sep 2024 17:01:34 +0000
Manifest next update:     Sun 29 Sep 2024 17:01:34 +0000
Files and hashes:         1: cNE-Khag7mY0IHqI_wqsTqvGaTw.crl (hash: ishzsK5Myfgl1nirfTigE5mZnNMDj3wqrLZc1ccxO6c=)
                          2: hRa5ImbBqEuxjYLqU3W9bjM1EI4.roa (hash: susdi2MqdR/1ZnKufxs+EYQWIgkUc8GOG4ujauI2EI8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:94:a1:bf:21:ba:c1:51:fa:3f:14:cc:9f:8a:54:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
        Validity
            Not Before: Sep 28 17:01:34 2024 GMT
            Not After : Sep 29 17:01:34 2024 GMT
        Subject: CN=a0e42d15b98a07b096dd0eb22d60707726a1cf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ac:b9:f1:ea:35:fd:c0:59:df:ae:9b:4d:18:
                    0e:6e:2b:e4:b8:39:cb:87:8c:38:0d:79:7b:08:5f:
                    f5:15:69:6b:53:c0:69:b7:b8:fe:8b:52:cb:3b:f4:
                    21:e3:32:a6:cc:2b:6c:de:f8:2b:15:a1:47:b2:df:
                    dd:91:9e:10:2d:67:2e:c1:51:3f:ef:6a:64:a8:e5:
                    01:76:b9:14:01:16:ad:24:2e:40:da:c2:ce:1b:f3:
                    a9:a9:56:f1:70:a4:b6:d6:2b:a7:83:07:6b:bb:6b:
                    78:81:27:01:ed:17:64:21:0e:9c:15:10:45:93:db:
                    6b:c2:fd:bb:93:b0:55:99:c0:34:bc:b7:f4:4a:47:
                    77:4c:66:ae:79:78:83:68:38:f7:75:f3:15:9f:d8:
                    f9:9d:55:e5:c9:ef:ff:2d:1e:b2:26:45:b5:af:2a:
                    ee:32:a3:38:cf:a3:96:18:17:0e:4b:62:44:b3:8e:
                    11:61:89:b8:a2:63:2f:f2:ef:fd:56:d3:4b:fc:d8:
                    97:5a:95:fb:10:c8:69:07:b7:e9:6d:3c:fa:db:f4:
                    33:21:b0:c9:2d:3f:35:ed:94:a7:e7:32:b0:01:d6:
                    46:2c:83:71:e6:2c:0c:86:d7:41:a7:77:ec:ab:82:
                    fc:be:8b:fb:67:b9:14:91:db:01:f2:01:f6:d5:32:
                    99:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E4:2D:15:B9:8A:07:B0:96:DD:0E:B2:2D:60:70:77:26:A1:CF:04
            X509v3 Authority Key Identifier:
                keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:00:25:bf:84:5b:91:64:c7:a9:ff:80:0a:3e:66:f4:17:bb:
         9d:65:62:ef:46:c6:f4:29:b6:6a:5d:89:6c:fe:28:fd:ab:c5:
         7c:af:4a:b2:7a:01:05:e9:92:83:f3:da:2f:8e:f4:8f:5b:7c:
         5e:ec:e6:8f:29:ce:5f:5a:c8:1b:9b:77:64:16:60:62:7f:52:
         4d:8f:89:33:de:af:11:05:ee:b5:ad:c8:c8:55:40:a1:b7:01:
         61:4e:6c:6a:64:44:5e:b5:4d:20:bc:3b:58:98:92:67:db:f5:
         e9:74:57:48:ac:7f:16:9d:ec:f6:1b:fe:f4:42:2b:91:a8:41:
         ce:9f:9d:7b:6a:6a:3e:d6:0c:ca:dc:6e:5f:09:dd:3f:d0:be:
         67:e8:fa:48:18:81:d5:78:1d:1d:83:b2:87:31:d9:7a:ca:f6:
         e2:04:a7:0d:ed:b9:a0:72:da:16:cd:89:51:37:88:b9:9a:37:
         d2:f8:39:55:3f:f6:b9:db:af:f7:75:f0:38:f5:c1:61:48:c2:
         9c:00:66:21:b1:2d:41:7e:e1:27:31:bf:59:8b:76:3f:69:eb:
         43:79:bf:02:65:d3:ee:a6:28:d3:f1:ce:5c:97:18:6c:71:7b:
         35:9c:60:ce:a9:65:fe:23:41:01:4c:89:e7:83:06:0f:8f:8c:
         79:01:14:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI5lKG/IbrBUfo/FMyfilSZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZDEzZTJhMTZhMGVlNjYzNDIwN2E4OGZmMGFhYzRlYWJj
NjY5M2MwHhcNMjQwOTI4MTcwMTM0WhcNMjQwOTI5MTcwMTM0WjAzMTEwLwYDVQQD
EyhhMGU0MmQxNWI5OGEwN2IwOTZkZDBlYjIyZDYwNzA3NzI2YTFjZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqy58eo1/cBZ366bTRgObivkuDnL
h4w4DXl7CF/1FWlrU8Bpt7j+i1LLO/Qh4zKmzCts3vgrFaFHst/dkZ4QLWcuwVE/
72pkqOUBdrkUARatJC5A2sLOG/OpqVbxcKS21iungwdru2t4gScB7RdkIQ6cFRBF
k9trwv27k7BVmcA0vLf0Skd3TGaueXiDaDj3dfMVn9j5nVXlye//LR6yJkW1ryru
MqM4z6OWGBcOS2JEs44RYYm4omMv8u/9VtNL/NiXWpX7EMhpB7fpbTz62/QzIbDJ
LT817ZSn5zKwAdZGLINx5iwMhtdBp3fsq4L8vov7Z7kUkdsB8gH21TKZKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDkLRW5igewlt0Osi1gcHcmoc8EMB8GA1UdIwQY
MBaAFHDRPioWoO5mNCB6iP8KrE6rxmk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY05FLUtoYWc3bVkwSUhxSV93cXNUcXZHYVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jNzgzNDgtYWMyZS00NGU0LTg0Njct
MmJkZDIwYjQ4MjNiLzEvY05FLUtoYWc3bVkwSUhxSV93cXNUcXZHYVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9jNzgzNDgtYWMyZS00NGU0LTg0NjctMmJkZDIwYjQ4MjNi
LzEvY05FLUtoYWc3bVkwSUhxSV93cXNUcXZHYVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAAlv4Rb
kWTHqf+ACj5m9Be7nWVi70bG9Cm2al2JbP4o/avFfK9KsnoBBemSg/PaL470j1t8
XuzmjynOX1rIG5t3ZBZgYn9STY+JM96vEQXuta3IyFVAobcBYU5samREXrVNILw7
WJiSZ9v16XRXSKx/Fp3s9hv+9EIrkahBzp+de2pqPtYMytxuXwndP9C+Z+j6SBiB
1XgdHYOyhzHZesr24gSnDe25oHLaFs2JUTeIuZo30vg5VT/2uduv93XwOPXBYUjC
nABmIbEtQX7hJzG/WYt2P2nrQ3m/AmXT7qYo0/HOXJcYbHF7NZxgzqll/iNBAUyJ
54MGD4+MeQEUcw==
-----END CERTIFICATE-----
Generated at Sun Sep 29 01:42:18 2024 by rpki-client on console-ams.rpki-client.org