Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
File:                     Ja5VGvC7XXl36nP2iW8l8eyij50.mft (raw, json)
Hash identifier:          MvOKXPbr5H0uSh5VXBd/OJyFfxZZmfU2rj1jH6WocZE=
Subject key identifier:   90:05:C9:68:AE:82:E6:09:9B:01:BE:DB:2B:36:CB:47:EA:57:DA:37
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Certificate issuer:       /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial:       0193557696DF69691450A2FDF0F7D428D53B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
Manifest number:          0E9C
Signing time:             Fri 22 Nov 2024 20:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:55 +0000
Files and hashes:         1: 6nDoX--b1eehBIELRqQ4k-XGgv0.roa (hash: 6qXgE9EjJTQ3Ov7GNE0fDFCA+4bzMSIQclsZCwLxId8=)
                          2: Ja5VGvC7XXl36nP2iW8l8eyij50.crl (hash: kvnVADH+CcYe7hIDUet7JlaUjALKBTfLaYJb+O3yewE=)
                          3: U15tXAz6Vs0R8tWyaMC95tjW9G4.roa (hash: En//yBbdNN54l9TodQVCND8sN9f0K0chG+/gYYJxtfI=)
                          4: WbLiAleVROtGtnK93iJZArtrZkQ.roa (hash: kL7e8a/dJ6L6/Z6+e31j7iP67mYQZDdpOrXkxPh5YaQ=)
                          5: dHh9c7wAw3kOopq1dLDvayUx0hM.roa (hash: MvBDVaEMs2SOlN33loawadaCSsNQtUnmNVWhUWcys00=)
                          6: kUqVwIQaI4i20IqQ5q3Y5pgQbP4.roa (hash: q6un4SO/J8o5wXrudHUKwHbOh2WXofqHsYPo5AuG7aU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:96:df:69:69:14:50:a2:fd:f0:f7:d4:28:d5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
        Validity
            Not Before: Nov 22 20:00:55 2024 GMT
            Not After : Nov 23 20:00:55 2024 GMT
        Subject: CN=9005c968ae82e6099b01bedb2b36cb47ea57da37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:b4:3c:a6:e2:18:9d:1d:9c:8d:e3:5d:13:
                    94:82:67:72:9c:8d:46:b2:53:1e:18:44:d1:8c:1b:
                    0b:3e:30:67:a4:a1:08:f3:01:d1:0f:86:af:ef:0e:
                    fa:da:00:9d:93:b7:62:e8:e5:a5:d7:db:a5:83:cc:
                    cc:04:6c:ad:bd:d8:37:d8:3d:6f:44:bd:50:e1:cb:
                    d6:18:cb:ec:93:be:a5:5e:10:04:34:5c:b9:a5:7a:
                    e3:68:50:13:dd:55:27:ec:30:af:d7:70:5a:66:0c:
                    72:e5:c0:5a:70:08:25:13:53:df:19:bb:33:a2:1f:
                    e4:6e:09:8f:e3:42:ce:c1:1f:df:a2:59:45:70:a3:
                    e9:18:59:7b:c5:ce:db:d4:e3:52:a2:5c:4c:97:b4:
                    2a:8c:e8:e5:5d:e2:b2:9a:07:f5:ab:34:df:f0:8f:
                    96:44:a8:0e:91:8b:ba:75:6d:1e:54:b0:30:e2:11:
                    20:c5:ba:d0:4e:fc:47:07:c7:36:fe:58:b5:04:74:
                    92:fe:1d:08:cf:d4:01:6c:68:a5:76:c5:e7:fb:da:
                    30:c1:d5:f1:ea:e8:6c:e9:5b:20:f7:79:e1:c2:d7:
                    8f:40:fe:71:7c:fd:96:7e:43:db:67:f8:a0:3f:c1:
                    5b:b9:1e:3e:a7:1c:4a:e4:5e:9b:b7:c6:79:85:9b:
                    ad:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:05:C9:68:AE:82:E6:09:9B:01:BE:DB:2B:36:CB:47:EA:57:DA:37
            X509v3 Authority Key Identifier:
                keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a2:c7:b9:1b:04:fa:64:bc:96:f3:ce:5d:90:5b:bb:ea:5a:
         f1:32:8a:d6:9b:55:b0:f2:6d:23:30:12:32:c2:bd:a9:ad:c8:
         67:6a:bb:3a:9d:69:99:2c:02:77:90:f0:9b:9f:43:a0:c0:1d:
         93:8e:a1:5f:a4:80:2f:95:33:78:2f:0d:71:89:7c:f7:9b:53:
         d5:bf:0c:eb:94:35:64:05:3e:d7:46:18:62:4e:4b:d4:50:09:
         7e:45:b4:39:53:29:87:ac:c0:a2:9b:54:6e:1a:4d:25:bb:9c:
         a0:f7:7f:a3:58:1e:39:5e:83:38:ac:1e:80:f0:f4:0d:c0:3f:
         94:20:0b:c0:3c:76:c7:64:29:a7:a6:ef:4d:33:18:cc:52:e3:
         e4:59:83:3d:da:04:1d:3f:8f:45:7b:84:45:b5:89:74:74:e3:
         1b:e4:a9:9d:b4:bf:c9:7e:ef:12:df:39:1b:0e:e6:2d:d3:56:
         17:8a:f2:79:42:9c:a9:41:a6:65:ba:de:38:d1:80:5e:86:76:
         4a:6e:bb:e6:4f:f6:01:c8:8d:d1:53:1e:8d:f8:25:f7:cc:fc:
         13:5b:8f:f2:00:06:eb:ad:3a:e9:0b:74:ed:76:12:3c:82:5b:
         97:94:26:ba:3d:f1:d0:5a:cd:ee:df:40:07:5b:91:d9:f7:9d:
         9c:bd:d9:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVdpbfaWkUUKL98PfUKNU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YWU1NTFhZjBiYjVkNzk3N2VhNzNmNjg5NmYyNWYxZWNh
MjhmOWQwHhcNMjQxMTIyMjAwMDU1WhcNMjQxMTIzMjAwMDU1WjAzMTEwLwYDVQQD
Eyg5MDA1Yzk2OGFlODJlNjA5OWIwMWJlZGIyYjM2Y2I0N2VhNTdkYTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXW0PKbiGJ0dnI3jXROUgmdynI1G
slMeGETRjBsLPjBnpKEI8wHRD4av7w762gCdk7di6OWl19ulg8zMBGytvdg32D1v
RL1Q4cvWGMvsk76lXhAENFy5pXrjaFAT3VUn7DCv13BaZgxy5cBacAglE1PfGbsz
oh/kbgmP40LOwR/follFcKPpGFl7xc7b1ONSolxMl7QqjOjlXeKymgf1qzTf8I+W
RKgOkYu6dW0eVLAw4hEgxbrQTvxHB8c2/li1BHSS/h0Iz9QBbGildsXn+9owwdXx
6uhs6Vsg93nhwtePQP5xfP2WfkPbZ/igP8FbuR4+pxxK5F6bt8Z5hZutsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAFyWiuguYJmwG+2ys2y0fqV9o3MB8GA1UdIwQY
MBaAFCWuVRrwu115d+pz9olvJfHsoo+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80MmY4MWItYzQyYy00MjU0LWFiYjkt
MjE0MmY4ZmI2NzZlLzEvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80MmY4MWItYzQyYy00MjU0LWFiYjktMjE0MmY4ZmI2NzZl
LzEvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqLHuRsE
+mS8lvPOXZBbu+pa8TKK1ptVsPJtIzASMsK9qa3IZ2q7Op1pmSwCd5Dwm59DoMAd
k46hX6SAL5UzeC8NcYl895tT1b8M65Q1ZAU+10YYYk5L1FAJfkW0OVMph6zAoptU
bhpNJbucoPd/o1geOV6DOKwegPD0DcA/lCALwDx2x2Qpp6bvTTMYzFLj5FmDPdoE
HT+PRXuERbWJdHTjG+SpnbS/yX7vEt85Gw7mLdNWF4ryeUKcqUGmZbreONGAXoZ2
Sm675k/2AciN0VMejfgl98z8E1uP8gAG66066Qt07XYSPIJbl5Qmuj3x0FrN7t9A
B1uR2fednL3ZPw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:01 2024 by rpki-client on console-fra.rpki-client.org