Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
File:                     XYqf18UZJuIuqKozs7iDjpPovt0.mft (raw, json)
Hash identifier:          HalVNTzxSlBCPIbK/3O1mZPwIvR1q3nJ/8ZDYVmckHU=
Subject key identifier:   BB:A3:B0:D2:6A:A4:D9:DA:94:96:BC:26:08:5F:61:D7:41:65:6B:14
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Certificate issuer:       /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial:       019235807AC926B9EA7CE897E31F442B4BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
Manifest number:          12DB
Signing time:             Fri 27 Sep 2024 22:01:05 +0000
Manifest this update:     Fri 27 Sep 2024 22:01:05 +0000
Manifest next update:     Sat 28 Sep 2024 22:01:05 +0000
Files and hashes:         1: 36-ql6caYOy0gDUzBNV0HCnCbKo.roa (hash: BokC7ZgBpHai3M8OLZtYQZel/oVwh91k+e8DbjMobmA=)
                          2: HXXkNQUEFf6UqtlGSLPF-XP31VI.roa (hash: 7DI7cGk1iowlW5Vr8UABPW2iPdAVeYhZauSmFM8dI+M=)
                          3: LYMjl60NxyQpdpXtRQLQWJ7qzwI.roa (hash: 7efYexN6SmKKrmEioKX+pvDQl9DN+HW2TyxMoNR5I50=)
                          4: XYqf18UZJuIuqKozs7iDjpPovt0.crl (hash: 1qhyzxDrTaMhaaEoKehpi6S5cS3jxJzJoQ87L30pLw4=)
                          5: bQ41vg0OGvF0QEr9oAJYWOzQNBM.roa (hash: oOOMDSxHwaq8BrEjICzLbb2I+HWpACy6UcNnoqQHFDw=)
                          6: kDMheQ-EFcQiA4rkOH75T6O9kPg.roa (hash: g81LuPCAleOHzjwBRmQhzeiR7q0r0bsw6ZUEdNFaZ10=)
                          7: pm0209an-ukKB6jpgVSDJiTRLJw.roa (hash: G3JPR74+CJz62Z45iSMSey4Uk6WS+n2IWK8Fc/cnIJI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:80:7a:c9:26:b9:ea:7c:e8:97:e3:1f:44:2b:4b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
        Validity
            Not Before: Sep 27 22:01:05 2024 GMT
            Not After : Sep 28 22:01:05 2024 GMT
        Subject: CN=bba3b0d26aa4d9da9496bc26085f61d741656b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:66:87:8e:93:1e:04:af:62:80:31:14:b6:84:
                    84:63:8b:aa:9e:1b:28:91:d3:2e:7d:1b:22:ad:d8:
                    f1:6d:54:e7:49:f8:88:84:cb:7e:5f:7a:ef:e6:25:
                    af:12:20:db:74:8c:1d:6d:af:4b:be:9f:74:a4:22:
                    30:fb:93:e1:dd:7f:92:ec:10:43:10:72:21:72:5c:
                    ed:25:38:d9:8d:26:4a:17:a7:d3:c2:b1:8d:1f:9c:
                    8f:3a:3a:1a:80:bc:97:28:b4:d0:ce:c7:3a:db:c0:
                    71:6c:c3:90:dd:f4:0a:a4:84:ac:3b:14:59:24:31:
                    33:a2:a5:37:66:b5:10:8e:57:eb:04:da:5f:a4:1d:
                    73:82:90:d2:2e:81:55:91:34:1e:6f:e0:d9:de:49:
                    6f:3a:f8:47:ba:4b:66:f4:31:79:35:50:d8:91:bc:
                    c5:b7:ae:e7:85:3f:ec:9e:fd:b7:fe:9d:4e:aa:82:
                    a4:c9:e2:e6:75:f9:4f:b9:f7:13:e8:f2:76:6a:20:
                    bd:79:92:4b:de:48:c5:9b:32:d7:40:98:50:71:2e:
                    7d:c4:59:01:f8:1b:04:01:c3:88:d5:90:e9:57:88:
                    c8:d9:5d:0e:9a:9d:c2:2d:e6:26:28:45:23:9b:cd:
                    c5:e6:cb:bb:47:8a:73:6a:9d:44:62:09:48:3b:aa:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A3:B0:D2:6A:A4:D9:DA:94:96:BC:26:08:5F:61:D7:41:65:6B:14
            X509v3 Authority Key Identifier:
                keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b2:51:c4:57:22:a2:35:1f:3c:bb:85:d0:b6:97:a8:51:49:
         28:42:cd:4f:fd:8a:41:9a:46:f3:97:95:0c:67:c9:fa:7b:6e:
         98:5b:41:4f:e3:46:97:d6:52:67:7a:b0:f0:3c:dd:87:b9:86:
         ad:9f:3e:f0:99:c3:99:3c:ac:7d:5c:aa:4e:24:58:bd:89:f3:
         7a:4e:41:57:f6:32:a2:8e:86:cc:72:52:2d:e5:a7:dc:b4:73:
         65:1c:fd:d7:d9:6e:d5:c5:72:63:73:10:d9:83:55:48:17:e5:
         3a:40:07:60:c9:ab:be:0b:b1:21:f4:89:53:f4:c1:ef:81:54:
         69:4d:e7:db:b3:71:db:b4:8c:fb:dd:eb:06:79:c9:70:c6:13:
         f7:21:49:b6:a6:60:42:58:99:7e:46:0c:63:07:a0:63:8b:7a:
         76:ad:bf:34:cf:6d:04:4a:57:ee:c5:dd:97:49:c2:3d:44:85:
         bc:9f:63:10:b1:42:9c:df:7f:f4:d0:de:be:00:26:c6:28:5c:
         7f:e2:55:88:9f:db:85:a4:b7:dd:ef:e1:2a:d1:8a:6b:ba:fe:
         b8:43:20:69:81:9b:4d:b3:a2:28:29:3e:f9:33:44:4e:c9:44:
         07:39:83:95:7b:da:0d:6a:c8:03:6c:9a:30:e6:87:5d:6b:b4:
         5e:89:44:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI1gHrJJrnqfOiX4x9EK0v/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOGE5ZmQ3YzUxOTI2ZTIyZWE4YWEzM2IzYjg4MzhlOTNl
OGJlZGQwHhcNMjQwOTI3MjIwMTA1WhcNMjQwOTI4MjIwMTA1WjAzMTEwLwYDVQQD
EyhiYmEzYjBkMjZhYTRkOWRhOTQ5NmJjMjYwODVmNjFkNzQxNjU2YjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2aHjpMeBK9igDEUtoSEY4uqnhso
kdMufRsirdjxbVTnSfiIhMt+X3rv5iWvEiDbdIwdba9Lvp90pCIw+5Ph3X+S7BBD
EHIhclztJTjZjSZKF6fTwrGNH5yPOjoagLyXKLTQzsc628BxbMOQ3fQKpISsOxRZ
JDEzoqU3ZrUQjlfrBNpfpB1zgpDSLoFVkTQeb+DZ3klvOvhHuktm9DF5NVDYkbzF
t67nhT/snv23/p1OqoKkyeLmdflPufcT6PJ2aiC9eZJL3kjFmzLXQJhQcS59xFkB
+BsEAcOI1ZDpV4jI2V0Omp3CLeYmKEUjm83F5su7R4pzap1EYglIO6p3YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLujsNJqpNnalJa8JghfYddBZWsUMB8GA1UdIwQY
MBaAFF2Kn9fFGSbiLqiqM7O4g46T6L7dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFlxZjE4VVpKdUl1cUtvenM3aURqcFBvdnQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iYjg2MWQtMzMwZi00YTk3LTlmOWMt
NjZjNTNmMmIxZjAyLzEvWFlxZjE4VVpKdUl1cUtvenM3aURqcFBvdnQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9iYjg2MWQtMzMwZi00YTk3LTlmOWMtNjZjNTNmMmIxZjAy
LzEvWFlxZjE4VVpKdUl1cUtvenM3aURqcFBvdnQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbJRxFci
ojUfPLuF0LaXqFFJKELNT/2KQZpG85eVDGfJ+ntumFtBT+NGl9ZSZ3qw8Dzdh7mG
rZ8+8JnDmTysfVyqTiRYvYnzek5BV/Yyoo6GzHJSLeWn3LRzZRz919lu1cVyY3MQ
2YNVSBflOkAHYMmrvguxIfSJU/TB74FUaU3n27Nx27SM+93rBnnJcMYT9yFJtqZg
QliZfkYMYwegY4t6dq2/NM9tBEpX7sXdl0nCPUSFvJ9jELFCnN9/9NDevgAmxihc
f+JViJ/bhaS33e/hKtGKa7r+uEMgaYGbTbOiKCk++TNETslEBzmDlXvaDWrIA2ya
MOaHXWu0XolEkg==
-----END CERTIFICATE-----
Generated at Fri Sep 27 23:50:01 2024 by rpki-client on console-ams.rpki-client.org