Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File:                     8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier:          tp0YcDuOnYCfPcwHND/xsuN5+qB9A+drkWfZCtlbDlI=
Subject key identifier:   7D:D0:28:DE:0E:03:58:DB:BF:39:6B:3C:F6:8A:F0:63:6C:ED:94:53
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer:       /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial:       0193549AC3D09421F5220A2F4324A61BFC1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number:          1301
Signing time:             Fri 22 Nov 2024 16:00:48 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:48 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:48 +0000
Files and hashes:         1: 0EzAA4zN-dlLdRFglRKU0um_ZYE.roa (hash: j9YZicJRj7jMbV/PNTlBrMjavCQfC8Z3z5xnGg0ya3M=)
                          2: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: Hd+IbgmvPQ5M7IuQw8+QKaJz/MvYJVXeUPmdDZVsd+Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:c3:d0:94:21:f5:22:0a:2f:43:24:a6:1b:fc:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
        Validity
            Not Before: Nov 22 16:00:48 2024 GMT
            Not After : Nov 23 16:00:48 2024 GMT
        Subject: CN=7dd028de0e0358dbbf396b3cf68af0636ced9453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:b5:83:ec:fc:71:fa:8c:b4:48:ab:dd:cb:
                    5f:16:b0:2a:64:83:7e:af:77:45:8e:fa:3c:80:e0:
                    b9:b2:8e:2c:c8:cd:55:de:51:c4:65:ed:ee:48:fe:
                    94:c7:fb:08:f4:b0:b5:00:0c:17:e0:98:4b:8e:7d:
                    bb:8c:5b:4c:23:fe:2a:1a:4a:3a:1a:4f:05:0a:e8:
                    7a:ae:f0:44:45:c5:44:66:ba:99:9c:8d:14:b5:6e:
                    de:34:81:48:f7:88:29:8e:77:81:9a:11:3f:92:e1:
                    b9:e9:5c:30:eb:f0:f9:6e:9f:fc:25:d7:51:4a:e8:
                    65:03:aa:77:1a:e9:7b:ce:f8:cd:29:e8:c7:91:a2:
                    a6:bd:f0:03:e5:36:93:09:12:ea:27:c6:ed:02:ce:
                    e9:1f:51:ed:bb:2e:75:0b:93:9e:1c:5d:f0:2f:c5:
                    c5:7c:53:f5:2d:d7:8c:5d:ee:32:c9:7b:bf:c5:03:
                    ba:9c:5d:6b:99:6e:6b:02:4f:a7:ae:7e:fd:9c:9d:
                    16:4a:41:c4:be:1d:0b:af:27:37:17:15:30:40:87:
                    3b:52:6f:4a:b0:0d:df:75:8b:fe:94:86:26:97:f0:
                    3c:f4:c9:7b:33:bb:6c:3f:65:97:65:10:b1:97:37:
                    c5:e6:e8:c8:a9:47:d8:80:8a:e3:63:27:39:78:d4:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D0:28:DE:0E:03:58:DB:BF:39:6B:3C:F6:8A:F0:63:6C:ED:94:53
            X509v3 Authority Key Identifier:
                keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:02:49:bc:8b:e2:c1:6a:3d:8b:7e:d6:28:2c:c3:b8:ef:25:
         f3:36:69:f1:bd:bd:cf:d2:5f:b6:ee:26:5c:15:83:2c:ed:7e:
         ee:00:c1:8c:ac:6d:d9:62:b6:e4:52:96:65:29:7b:96:20:80:
         1d:bc:d7:26:1a:59:37:8c:0f:cf:be:aa:a7:9d:8c:ae:bd:c0:
         a5:b9:e2:2d:4a:a6:41:6b:4f:e4:d0:f8:9d:fc:55:69:80:ef:
         9f:94:8c:25:38:e0:e0:03:15:ea:d7:3f:ef:22:b4:73:5a:63:
         5c:15:ea:ee:ed:5c:c9:08:50:01:93:c0:bb:ac:5a:dd:85:08:
         15:0f:3d:42:06:5a:c1:4f:18:d3:1f:73:07:d3:48:2f:67:2c:
         12:39:24:09:9f:55:74:cb:21:3b:1f:22:3b:33:df:8e:bc:62:
         ce:08:37:40:e4:6c:68:b2:61:f6:e8:37:f6:a1:80:f8:18:c4:
         ff:a4:3e:7b:ef:3e:4c:7e:98:96:94:bf:c9:65:ca:e6:03:6c:
         f8:c9:33:6b:1a:61:02:30:bf:3d:e9:06:98:da:09:9b:f6:0e:
         e0:c7:ba:31:38:e4:31:90:63:5d:b4:00:10:c2:27:55:20:29:
         3a:f5:d9:32:80:ee:97:25:c8:76:15:60:d8:11:f8:a7:81:d6:
         b4:9c:76:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmsPQlCH1IgovQySmG/wcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMzI1OGFhNmI4M2VjOWZiN2JlOTY2YzYyNmE5MTY2Nzgx
YzdmM2IwHhcNMjQxMTIyMTYwMDQ4WhcNMjQxMTIzMTYwMDQ4WjAzMTEwLwYDVQQD
Eyg3ZGQwMjhkZTBlMDM1OGRiYmYzOTZiM2NmNjhhZjA2MzZjZWQ5NDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw121g+z8cfqMtEir3ctfFrAqZIN+
r3dFjvo8gOC5so4syM1V3lHEZe3uSP6Ux/sI9LC1AAwX4JhLjn27jFtMI/4qGko6
Gk8FCuh6rvBERcVEZrqZnI0UtW7eNIFI94gpjneBmhE/kuG56Vww6/D5bp/8JddR
SuhlA6p3Gul7zvjNKejHkaKmvfAD5TaTCRLqJ8btAs7pH1Htuy51C5OeHF3wL8XF
fFP1LdeMXe4yyXu/xQO6nF1rmW5rAk+nrn79nJ0WSkHEvh0Lryc3FxUwQIc7Um9K
sA3fdYv+lIYml/A89Ml7M7tsP2WXZRCxlzfF5ujIqUfYgIrjYyc5eNTXbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3QKN4OA1jbvzlrPPaK8GNs7ZRTMB8GA1UdIwQY
MBaAFPIyWKprg+yft76WbGJqkWZ4HH87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80OGMzYTgtYjk1NC00MWM5LWJkMjMt
NzEyZmNmYTQ0MWU0LzEvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80OGMzYTgtYjk1NC00MWM5LWJkMjMtNzEyZmNmYTQ0MWU0
LzEvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwJJvIvi
wWo9i37WKCzDuO8l8zZp8b29z9Jftu4mXBWDLO1+7gDBjKxt2WK25FKWZSl7liCA
HbzXJhpZN4wPz76qp52Mrr3ApbniLUqmQWtP5ND4nfxVaYDvn5SMJTjg4AMV6tc/
7yK0c1pjXBXq7u1cyQhQAZPAu6xa3YUIFQ89QgZawU8Y0x9zB9NIL2csEjkkCZ9V
dMshOx8iOzPfjrxizgg3QORsaLJh9ug39qGA+BjE/6Q+e+8+TH6YlpS/yWXK5gNs
+MkzaxphAjC/PekGmNoJm/YO4Me6MTjkMZBjXbQAEMInVSApOvXZMoDulyXIdhVg
2BH4p4HWtJx2kA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:08:17 2024 by rpki-client on console-fra.rpki-client.org