Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File:                     jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier:          eXtQVzH+r8ckazIAyuJ02AS+r1xYgNrDeAJMrCQw52E=
Subject key identifier:   6D:F5:07:2D:30:2D:DC:5F:3B:DB:DD:7D:25:FB:AB:B1:41:A2:AF:DA
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer:       /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial:       0193572D97CC6DC3C1B3D9A6AC76FDD98218
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number:          0A2F
Signing time:             Sat 23 Nov 2024 04:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:25 +0000
Files and hashes:         1: OXG45KhURevq-eZCK0P7yslrvj4.roa (hash: Sx8MOuA9VR5EyojaeHonHZstvCFAqEs4aAu6D86jYtA=)
                          2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: RmNjpHmKPbHZoFp+qJkBTk/CbLj4ij8qUjfhr7aWOo0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:97:cc:6d:c3:c1:b3:d9:a6:ac:76:fd:d9:82:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
        Validity
            Not Before: Nov 23 04:00:25 2024 GMT
            Not After : Nov 24 04:00:25 2024 GMT
        Subject: CN=6df5072d302ddc5f3bdbdd7d25fbabb141a2afda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:8e:c3:f4:cc:e8:01:9e:e9:d0:13:5c:4f:
                    51:29:89:38:86:35:7c:b0:3f:d5:a0:49:ce:38:d8:
                    b1:11:f9:fa:cf:cc:ea:32:6a:a3:d7:e8:ab:f4:94:
                    01:2e:88:f9:ab:3e:32:55:e4:2a:2f:39:f9:54:97:
                    a1:d2:50:e7:c3:41:63:60:37:05:38:48:d3:16:4a:
                    1c:91:64:80:c6:4e:0d:32:d9:19:87:ef:0c:9f:84:
                    ba:8b:5f:50:c4:aa:a7:40:4d:d0:e5:93:c7:8a:c6:
                    e5:07:7d:db:e7:1b:0b:f3:ab:39:fb:c1:50:f9:8a:
                    b0:bd:1b:db:23:5b:5d:bd:c1:98:56:28:c1:9f:6f:
                    08:1c:f2:0e:48:07:a4:da:7c:b9:21:f7:5c:5f:c8:
                    2c:68:73:b5:7c:33:64:e0:58:bb:5f:50:c8:19:1b:
                    0d:10:ad:3a:a4:db:fa:52:82:a6:a4:77:e9:0c:ea:
                    e1:9e:94:45:0e:7f:66:5c:22:d6:f2:e7:8a:5d:5c:
                    87:d7:56:fa:99:ce:83:4d:3e:6c:64:b2:63:08:54:
                    b1:fa:c2:70:57:d6:47:40:5b:6c:fd:6c:37:a9:f2:
                    ea:8c:fd:fb:4f:56:cb:12:87:5e:88:3a:ce:9f:27:
                    f8:93:6a:aa:df:80:94:ca:c8:e2:a6:df:09:0d:54:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F5:07:2D:30:2D:DC:5F:3B:DB:DD:7D:25:FB:AB:B1:41:A2:AF:DA
            X509v3 Authority Key Identifier:
                keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:40:b1:a3:9e:20:2a:5b:0f:a5:0c:c5:df:4c:7d:be:0b:0a:
         23:e8:e5:d3:88:41:6e:e9:a3:f5:41:0a:e2:9b:d3:90:fd:bc:
         41:51:8d:cc:68:41:8c:01:48:58:b4:bb:02:93:c2:f3:62:c5:
         50:68:7d:1b:1e:78:a1:57:b4:60:cf:38:5f:e2:b9:31:e9:d4:
         f8:1f:8b:ca:44:55:9c:80:9a:10:f1:2c:14:b1:62:e9:1e:c3:
         11:81:40:b7:8b:5a:18:fd:04:1d:20:a3:8b:ea:25:51:50:44:
         b6:19:5f:2b:66:76:c9:f5:b9:2b:03:0b:65:1a:52:c3:a7:6c:
         30:0a:c2:9d:c5:c8:9b:0d:d2:4f:f7:02:53:03:50:4d:4e:f3:
         c2:ec:e0:d4:77:6d:0b:83:27:31:68:8a:e9:be:f3:f8:87:f7:
         72:3d:ad:c2:94:2f:3b:92:01:6e:32:39:a5:5e:f8:5d:53:09:
         e3:8d:9f:29:6d:89:b5:41:65:d0:d8:3d:80:60:78:a1:47:48:
         ba:e5:2b:67:a4:30:3d:38:b9:46:18:c9:a3:07:b6:84:03:1d:
         62:b2:8c:52:3f:73:f8:cb:70:2c:ac:07:d9:a2:e7:72:c2:ec:
         62:de:af:39:75:cd:bf:84:f6:dc:a4:68:34:7c:a4:d0:9a:50:
         26:1c:b2:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLZfMbcPBs9mmrHb92YIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjODE2NDhhZmMzNGNlMTkxNDM3NTE2Y2RkYzRiZjBkY2Rm
NDdlM2IwHhcNMjQxMTIzMDQwMDI1WhcNMjQxMTI0MDQwMDI1WjAzMTEwLwYDVQQD
Eyg2ZGY1MDcyZDMwMmRkYzVmM2JkYmRkN2QyNWZiYWJiMTQxYTJhZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5aOw/TM6AGe6dATXE9RKYk4hjV8
sD/VoEnOONixEfn6z8zqMmqj1+ir9JQBLoj5qz4yVeQqLzn5VJeh0lDnw0FjYDcF
OEjTFkockWSAxk4NMtkZh+8Mn4S6i19QxKqnQE3Q5ZPHisblB33b5xsL86s5+8FQ
+YqwvRvbI1tdvcGYVijBn28IHPIOSAek2ny5IfdcX8gsaHO1fDNk4Fi7X1DIGRsN
EK06pNv6UoKmpHfpDOrhnpRFDn9mXCLW8ueKXVyH11b6mc6DTT5sZLJjCFSx+sJw
V9ZHQFts/Ww3qfLqjP37T1bLEodeiDrOnyf4k2qq34CUysjipt8JDVSSJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG31By0wLdxfO9vdfSX7q7FBoq/aMB8GA1UdIwQY
MBaAFIyBZIr8NM4ZFDdRbN3Evw3N9H47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lODVhZDItZDJmMS00ODFkLWJmZGYt
YmRhNTM0ZTZmNjQzLzEvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lODVhZDItZDJmMS00ODFkLWJmZGYtYmRhNTM0ZTZmNjQz
LzEvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtECxo54g
KlsPpQzF30x9vgsKI+jl04hBbumj9UEK4pvTkP28QVGNzGhBjAFIWLS7ApPC82LF
UGh9Gx54oVe0YM84X+K5MenU+B+LykRVnICaEPEsFLFi6R7DEYFAt4taGP0EHSCj
i+olUVBEthlfK2Z2yfW5KwMLZRpSw6dsMArCncXImw3ST/cCUwNQTU7zwuzg1Hdt
C4MnMWiK6b7z+If3cj2twpQvO5IBbjI5pV74XVMJ442fKW2JtUFl0Ng9gGB4oUdI
uuUrZ6QwPTi5RhjJowe2hAMdYrKMUj9z+MtwLKwH2aLncsLsYt6vOXXNv4T23KRo
NHyk0JpQJhyy+Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:16 2024 by rpki-client on console-ams.rpki-client.org