Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
File:                     sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft (raw, json)
Hash identifier:          L2Ic8TIiqd3iPYKamtIiqjUl8yeKPKWDP972AWiQa+M=
Subject key identifier:   96:7D:69:67:B6:38:65:82:DC:F0:DD:BF:05:39:E9:69:D9:9E:A7:B2
Authority key identifier: B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
Certificate issuer:       /CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Certificate serial:       019369D8D53FD8B397D16819DB3299429926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
Manifest number:          12FB
Signing time:             Tue 26 Nov 2024 19:00:38 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:38 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:38 +0000
Files and hashes:         1: q_zVIv3ZSx5Y50mZpDM4yd3uS1w.roa (hash: zvt3Da8THyJuHO5B7Ksy/vw1qXi643t1ahcbx4oJCBI=)
                          2: sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl (hash: 0fFPn4TZ3i1hc9LVm0hTM84wc7kdstAo18GW6LiAcOo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:d5:3f:d8:b3:97:d1:68:19:db:32:99:42:99:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
        Validity
            Not Before: Nov 26 19:00:38 2024 GMT
            Not After : Nov 27 19:00:38 2024 GMT
        Subject: CN=967d6967b6386582dcf0ddbf0539e969d99ea7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f3:10:13:81:b2:fa:33:d9:a5:b6:50:6b:ab:
                    c3:e9:48:9e:b9:b7:21:e6:8a:8c:ce:72:b7:48:bf:
                    f4:bc:c4:a1:f3:d0:30:3c:58:47:5e:cc:d2:59:33:
                    bf:75:40:81:64:32:c3:37:81:f3:6c:c5:6f:6c:bf:
                    b1:76:1a:fa:ff:70:9f:d5:2f:12:d8:de:52:c3:5b:
                    7e:04:d6:66:96:71:11:91:78:a1:75:e1:1e:d4:e3:
                    21:f3:45:a2:04:b6:67:24:6d:4d:d3:f1:30:66:ef:
                    35:86:3b:ce:d9:b2:f6:91:37:ce:4b:e1:b6:bc:c3:
                    82:db:c3:94:fb:c1:71:71:1d:01:b8:bc:82:d5:1c:
                    f8:c3:cc:68:dc:4a:53:0e:17:92:de:c5:68:f5:ed:
                    86:84:60:48:8e:69:e2:a2:18:4e:27:b1:aa:60:5e:
                    fe:98:74:06:30:86:ef:a6:1f:ce:4f:97:bc:19:c5:
                    74:e9:91:be:e0:a7:3b:45:4d:54:eb:00:1b:98:e8:
                    40:53:b6:9e:05:27:70:b6:18:53:5c:be:89:95:e8:
                    b5:e6:0b:e2:76:1e:ec:48:15:60:45:a2:18:b7:90:
                    e9:ed:6a:1d:d1:17:30:4d:05:0a:a0:f6:44:ab:95:
                    dd:e0:e0:a5:09:0d:a5:de:cb:aa:17:f9:e3:cc:68:
                    cb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7D:69:67:B6:38:65:82:DC:F0:DD:BF:05:39:E9:69:D9:9E:A7:B2
            X509v3 Authority Key Identifier:
                keyid:B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ba:c1:0c:8c:ae:2c:b7:ef:aa:68:a2:5d:86:6c:b1:6a:50:
         b8:a6:e4:cd:aa:04:c2:60:2a:8b:81:4a:67:a3:bd:f4:f1:0b:
         c9:25:b2:fa:58:7b:31:c0:6e:79:0f:de:e9:56:21:e9:6b:2c:
         d5:2f:1f:87:9c:c6:3f:90:70:d0:d8:35:31:0d:d9:95:61:75:
         2b:e6:0f:e5:a0:1a:d3:d5:62:fd:66:df:fc:43:07:8c:d3:96:
         91:99:9f:5f:0c:40:16:7e:2c:01:91:4f:b4:83:b0:00:ee:e0:
         da:dc:75:54:d7:16:b2:9a:38:c4:6d:3a:d9:84:31:b6:33:e6:
         93:3e:9a:47:6e:7d:e4:05:cf:7c:07:e0:1b:cb:24:54:ab:56:
         d1:a8:40:ab:25:95:a3:d2:a1:50:e9:59:9d:f8:3b:47:45:20:
         29:8a:6f:fe:73:b9:c1:bf:10:57:b3:35:aa:a4:91:51:9c:2b:
         3b:56:73:6c:61:5f:83:12:16:a9:78:4c:ed:8c:c7:f1:cd:14:
         83:42:39:85:7b:9b:c4:9d:a5:2a:96:25:ba:71:5e:60:4f:05:
         20:4d:e0:08:4e:85:da:05:83:5b:dc:42:93:95:5f:4b:f9:0a:
         bb:ff:cc:6f:dc:a6:63:81:ad:7a:1d:d0:60:d0:03:05:f6:a8:
         55:cd:a4:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2NU/2LOX0WgZ2zKZQpkmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDY1OGZjYWIzNzAzMmRmZWE5NmVmMGFlNjhkYzlkZWZm
NmQ3MDUwHhcNMjQxMTI2MTkwMDM4WhcNMjQxMTI3MTkwMDM4WjAzMTEwLwYDVQQD
Eyg5NjdkNjk2N2I2Mzg2NTgyZGNmMGRkYmYwNTM5ZTk2OWQ5OWVhN2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/MQE4Gy+jPZpbZQa6vD6Uieubch
5oqMznK3SL/0vMSh89AwPFhHXszSWTO/dUCBZDLDN4HzbMVvbL+xdhr6/3Cf1S8S
2N5Sw1t+BNZmlnERkXihdeEe1OMh80WiBLZnJG1N0/EwZu81hjvO2bL2kTfOS+G2
vMOC28OU+8FxcR0BuLyC1Rz4w8xo3EpTDheS3sVo9e2GhGBIjmniohhOJ7GqYF7+
mHQGMIbvph/OT5e8GcV06ZG+4Kc7RU1U6wAbmOhAU7aeBSdwthhTXL6Jlei15gvi
dh7sSBVgRaIYt5Dp7Wod0RcwTQUKoPZEq5Xd4OClCQ2l3suqF/njzGjLKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZ9aWe2OGWC3PDdvwU56WnZnqeyMB8GA1UdIwQY
MBaAFLFGWPyrNwMt/qlu8K5o3J3v9tcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ZjY1NjYtODE2MC00Mzk0LTg3NWYt
YTdlYWQ4YWIxMjczLzEvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81ZjY1NjYtODE2MC00Mzk0LTg3NWYtYTdlYWQ4YWIxMjcz
LzEvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7rBDIyu
LLfvqmiiXYZssWpQuKbkzaoEwmAqi4FKZ6O99PELySWy+lh7McBueQ/e6VYh6Wss
1S8fh5zGP5Bw0Ng1MQ3ZlWF1K+YP5aAa09Vi/Wbf/EMHjNOWkZmfXwxAFn4sAZFP
tIOwAO7g2tx1VNcWspo4xG062YQxtjPmkz6aR2595AXPfAfgG8skVKtW0ahAqyWV
o9KhUOlZnfg7R0UgKYpv/nO5wb8QV7M1qqSRUZwrO1ZzbGFfgxIWqXhM7YzH8c0U
g0I5hXubxJ2lKpYlunFeYE8FIE3gCE6F2gWDW9xCk5VfS/kKu//Mb9ymY4Gteh3Q
YNADBfaoVc2ksw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:54 2024 by rpki-client on console-ams.rpki-client.org