Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File:                     Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier:          ZLRhaayKD1wONqTpV9d3/+663NDDXE66semfUxPBAH0=
Subject key identifier:   C5:20:BA:95:D0:4F:90:ED:45:AF:35:8C:C4:A7:42:37:E2:78:15:C0
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer:       /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial:       0193561AE1D52A4487935683B30EEA0AE190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 23:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:22 +0000
Files and hashes:         1: 26bchQcVWqJKm6q-PkuM33kRRt8.roa (hash: OtDb4yutcULPYJREydCMkRuk2lF4T5O9+79f/eUKIMM=)
                          2: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: di5TDkueq8E42n2yiYn0gVKfmj28p63xvkHJV3jr7m4=)
                          3: eyoLDYDc_nHqSsx1OZfEI7mDPcE.roa (hash: Mc/L6CEg6+9T2RECyLSidBA/++u+mFF3CjePvQbw0CQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:e1:d5:2a:44:87:93:56:83:b3:0e:ea:0a:e1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
        Validity
            Not Before: Nov 22 23:00:22 2024 GMT
            Not After : Nov 23 23:00:22 2024 GMT
        Subject: CN=c520ba95d04f90ed45af358cc4a74237e27815c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:01:82:1f:73:8e:95:1c:c6:63:00:28:17:
                    d4:41:40:6c:62:67:0c:1d:79:5b:42:66:68:69:4b:
                    e9:d6:c9:78:4d:5e:aa:76:b0:38:13:fe:f9:b8:62:
                    0d:e4:16:0a:6c:81:e8:06:18:e9:a8:e8:cb:97:6f:
                    c5:83:92:ed:24:47:ac:1c:03:52:d9:73:18:5d:24:
                    42:80:56:35:18:f3:70:5b:bc:85:f5:2f:ea:f7:d2:
                    e1:7c:e7:27:6f:7c:b7:94:59:ea:0b:2d:1c:cd:bf:
                    78:0d:20:fb:54:64:35:09:7d:d0:c6:e4:95:4d:a8:
                    9e:56:29:62:8d:ba:69:32:93:6a:c4:f6:2a:e6:d5:
                    ba:9f:1c:e0:3c:63:7e:43:a8:09:70:07:1e:47:83:
                    32:58:19:1e:42:21:e0:34:d6:2e:5f:f1:65:5c:48:
                    a7:74:a7:93:35:fb:f5:35:64:c7:03:b7:dd:0f:1b:
                    2f:af:5b:f7:35:27:9e:f8:6a:6c:64:5b:45:1d:05:
                    b5:58:e1:a5:00:71:dc:90:ca:7d:8c:fc:09:3a:82:
                    0e:c4:53:81:99:0a:6f:26:12:58:12:c3:a0:e1:25:
                    23:b3:8c:43:85:ff:9b:e4:11:90:27:cb:e2:ef:bf:
                    8c:ce:7f:fd:9a:23:b7:54:00:f2:95:fb:ac:2c:e5:
                    ee:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:20:BA:95:D0:4F:90:ED:45:AF:35:8C:C4:A7:42:37:E2:78:15:C0
            X509v3 Authority Key Identifier:
                keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:10:b8:aa:11:0c:65:62:ca:94:33:26:06:26:91:0b:88:aa:
         cf:66:68:c1:41:d4:ca:aa:f0:3b:b4:a6:a3:d7:bc:a4:1e:05:
         2a:cf:ee:6c:15:be:d4:4f:15:67:3c:79:5e:b9:88:4e:d5:81:
         9c:d7:c7:32:de:00:5a:36:12:00:4f:64:40:d5:f4:8a:c2:3e:
         27:ed:2f:cf:4e:1c:d7:b1:d0:75:ed:66:e4:64:82:2b:00:3a:
         2e:47:fd:36:2a:6b:dc:1a:5f:44:dd:68:29:e5:45:50:58:c0:
         16:73:ae:9d:48:81:77:6d:55:71:a0:ef:a5:f6:27:a9:fd:83:
         2f:0d:75:6b:94:0c:7f:47:98:e1:5f:eb:53:78:78:78:30:49:
         c6:83:da:45:8f:23:7d:65:d8:7a:0f:29:63:a3:e9:75:fe:27:
         5d:66:fa:ee:51:87:e7:e8:b6:69:c4:b3:f4:fe:a0:55:05:91:
         ea:7c:af:ff:a0:3d:dc:cd:48:e9:01:f6:36:57:69:b0:5d:e1:
         d1:e0:96:83:ff:80:31:51:d2:46:96:20:a9:cd:4e:0f:13:41:
         94:d6:3a:25:b4:26:cf:4c:f5:d8:8e:e6:f6:ea:13:0a:25:5e:
         d7:02:ce:6b:b5:b9:d4:27:47:67:43:ea:4e:42:04:ec:c2:db:
         eb:24:11:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWGuHVKkSHk1aDsw7qCuGQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMzZhYWQ3MzM1ZjM0ZTRjZDgyOTQyM2JlYjA4OWM0ZTBh
NGU4NzQwHhcNMjQxMTIyMjMwMDIyWhcNMjQxMTIzMjMwMDIyWjAzMTEwLwYDVQQD
EyhjNTIwYmE5NWQwNGY5MGVkNDVhZjM1OGNjNGE3NDIzN2UyNzgxNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1ABgh9zjpUcxmMAKBfUQUBsYmcM
HXlbQmZoaUvp1sl4TV6qdrA4E/75uGIN5BYKbIHoBhjpqOjLl2/Fg5LtJEesHANS
2XMYXSRCgFY1GPNwW7yF9S/q99LhfOcnb3y3lFnqCy0czb94DSD7VGQ1CX3QxuSV
TaieVilijbppMpNqxPYq5tW6nxzgPGN+Q6gJcAceR4MyWBkeQiHgNNYuX/FlXEin
dKeTNfv1NWTHA7fdDxsvr1v3NSee+GpsZFtFHQW1WOGlAHHckMp9jPwJOoIOxFOB
mQpvJhJYEsOg4SUjs4xDhf+b5BGQJ8vi77+Mzn/9miO3VADylfusLOXuyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUgupXQT5DtRa81jMSnQjfieBXAMB8GA1UdIwQY
MBaAFA42qtczXzTkzYKUI76wicTgpOh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGphcTF6TmZOT1ROZ3BRanZyQ0p4T0NrNkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85YmE1MDQtMDJhZi00OTcyLWIwYjkt
ODIyZGU5MzA4ZTAxLzEvRGphcTF6TmZOT1ROZ3BRanZyQ0p4T0NrNkhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC85YmE1MDQtMDJhZi00OTcyLWIwYjktODIyZGU5MzA4ZTAx
LzEvRGphcTF6TmZOT1ROZ3BRanZyQ0p4T0NrNkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChC4qhEM
ZWLKlDMmBiaRC4iqz2ZowUHUyqrwO7Smo9e8pB4FKs/ubBW+1E8VZzx5XrmITtWB
nNfHMt4AWjYSAE9kQNX0isI+J+0vz04c17HQde1m5GSCKwA6Lkf9Nipr3BpfRN1o
KeVFUFjAFnOunUiBd21VcaDvpfYnqf2DLw11a5QMf0eY4V/rU3h4eDBJxoPaRY8j
fWXYeg8pY6Ppdf4nXWb67lGH5+i2acSz9P6gVQWR6nyv/6A93M1I6QH2NldpsF3h
0eCWg/+AMVHSRpYgqc1ODxNBlNY6JbQmz0z12I7m9uoTCiVe1wLOa7W51CdHZ0Pq
TkIE7MLb6yQRlw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:06:34 2024 by rpki-client on console-ams.rpki-client.org