Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File:                     CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier:          9Y0bS2w6tHfTgp/5sq5gVDfJaueN6uzjBq/9mycR5xA=
Subject key identifier:   7F:FE:33:16:56:1A:73:E4:62:19:DF:B5:65:6E:5A:D3:68:9E:B4:CA
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer:       /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial:       018F41C3CE151835C00E1DBB5A086CCA3E20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number:          0B4E
Signing time:             Sat 04 May 2024 04:01:42 +0000
Manifest this update:     Sat 04 May 2024 04:01:42 +0000
Manifest next update:     Sun 05 May 2024 04:01:42 +0000
Files and hashes:         1: 1-vAep-SXwHSOBMCQzV8X2I8BFCE.roa (hash: /n00LWX8AanF05iJxbBwVN0Q0TxpNbmt1o/bj4EmgBM=)
                          2: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: yZXNd15HK8sOEKU3b8SsWqWEpHQvKpZ03iqA754B+iM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c3:ce:15:18:35:c0:0e:1d:bb:5a:08:6c:ca:3e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
        Validity
            Not Before: May  4 04:01:42 2024 GMT
            Not After : May  5 04:01:42 2024 GMT
        Subject: CN=7ffe3316561a73e46219dfb5656e5ad3689eb4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b9:fc:4d:ad:65:51:23:87:49:05:8c:84:5b:
                    1a:6e:57:cf:66:2c:29:86:40:38:23:f6:99:43:fb:
                    8f:73:18:89:73:85:34:82:c4:ff:bf:f3:cb:25:11:
                    ce:ab:ca:0f:a6:f5:4b:93:4f:3c:9d:42:2e:a6:67:
                    42:0c:1f:6b:68:be:d1:75:1c:8e:c4:b9:73:b5:de:
                    88:60:64:af:05:85:56:7f:f8:ee:07:d1:1a:0e:ae:
                    4f:a9:73:ba:86:b3:b0:60:c3:30:70:3f:0d:8d:89:
                    13:b7:be:96:22:95:a4:24:44:ad:c8:0c:0b:00:16:
                    8d:b8:3f:4b:9b:be:31:97:dd:5c:01:7c:5d:42:92:
                    ff:77:c3:a0:0c:0a:41:79:ab:24:cd:18:5a:2d:b3:
                    b1:27:3c:32:bb:f0:fd:b6:cc:f7:20:10:3a:44:a1:
                    b1:f9:0b:4a:b0:5c:1a:41:81:aa:b5:9c:2a:dc:7b:
                    6e:f5:7b:f8:08:13:ef:6c:ec:97:43:f2:c4:a7:e4:
                    ae:4b:3e:ec:0b:98:32:41:87:bd:77:34:a8:8d:79:
                    30:94:e3:92:2a:1d:13:47:a9:2c:aa:fb:d2:92:7d:
                    8d:04:11:de:f5:dc:89:29:da:6f:71:f3:6f:bc:97:
                    48:0c:85:50:41:88:36:28:6c:40:45:a1:a0:da:fb:
                    b4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FE:33:16:56:1A:73:E4:62:19:DF:B5:65:6E:5A:D3:68:9E:B4:CA
            X509v3 Authority Key Identifier:
                keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:bc:6f:0f:8e:fc:73:92:a5:7f:9b:79:8e:b8:c9:77:49:03:
         5c:00:53:10:79:6f:32:4b:7e:d5:47:e3:c3:95:fd:cb:56:8b:
         17:9f:58:7e:fa:aa:b1:2b:90:eb:bb:2e:c5:b2:f5:84:37:b1:
         ca:74:e9:dc:24:0a:10:80:f3:99:5f:2f:ce:c8:d6:4e:24:1b:
         37:3c:65:d3:5d:cb:4b:4b:0f:22:7a:e8:45:fc:0a:2d:36:f3:
         ec:46:ca:a7:93:9f:83:6f:f9:06:52:b5:bb:56:f6:e2:95:7c:
         c1:b6:7e:c5:46:70:c6:70:2d:70:fe:de:ba:15:35:5c:c0:83:
         f2:89:f6:00:48:22:d3:b2:c4:d0:eb:c6:9f:53:db:87:c4:fc:
         13:ab:d9:cb:2c:7a:e0:a8:f4:25:95:59:d5:bf:90:ec:f0:4a:
         dc:aa:cb:30:05:af:b8:6b:6d:bc:52:09:1c:f9:72:34:8f:d1:
         a6:eb:00:ed:94:e6:e9:b5:fb:92:3f:0d:44:ee:11:a3:ca:7f:
         7a:4c:78:8c:ff:07:56:ce:00:67:74:a7:8c:67:71:dd:e1:f3:
         d6:e6:5d:d8:ac:bd:06:4a:fa:a3:08:67:03:06:28:56:2d:1c:
         13:90:e2:cd:3d:90:a5:79:8b:d2:45:fd:0f:76:2d:f7:88:f4:
         31:3f:23:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Bw84VGDXADh27Wghsyj4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzI4MmZlM2YzZDdkNDZiZDFiMWNiNzdiMmZlYzM3ZGVl
MDA2NjMwHhcNMjQwNTA0MDQwMTQyWhcNMjQwNTA1MDQwMTQyWjAzMTEwLwYDVQQD
Eyg3ZmZlMzMxNjU2MWE3M2U0NjIxOWRmYjU2NTZlNWFkMzY4OWViNGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bn8Ta1lUSOHSQWMhFsablfPZiwp
hkA4I/aZQ/uPcxiJc4U0gsT/v/PLJRHOq8oPpvVLk088nUIupmdCDB9raL7RdRyO
xLlztd6IYGSvBYVWf/juB9EaDq5PqXO6hrOwYMMwcD8NjYkTt76WIpWkJEStyAwL
ABaNuD9Lm74xl91cAXxdQpL/d8OgDApBeaskzRhaLbOxJzwyu/D9tsz3IBA6RKGx
+QtKsFwaQYGqtZwq3Htu9Xv4CBPvbOyXQ/LEp+SuSz7sC5gyQYe9dzSojXkwlOOS
Kh0TR6ksqvvSkn2NBBHe9dyJKdpvcfNvvJdIDIVQQYg2KGxARaGg2vu08wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/+MxZWGnPkYhnftWVuWtNonrTKMB8GA1UdIwQY
MBaAFAkygv4/PX1GvRsct3sv7Dfe4AZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mYTcxOTUtYTBmZS00Zjg0LTgxM2Mt
MmE3NzZmNzg3YTFjLzEvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mYTcxOTUtYTBmZS00Zjg0LTgxM2MtMmE3NzZmNzg3YTFj
LzEvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLxvD478
c5Klf5t5jrjJd0kDXABTEHlvMkt+1Ufjw5X9y1aLF59YfvqqsSuQ67suxbL1hDex
ynTp3CQKEIDzmV8vzsjWTiQbNzxl013LS0sPInroRfwKLTbz7EbKp5Ofg2/5BlK1
u1b24pV8wbZ+xUZwxnAtcP7euhU1XMCD8on2AEgi07LE0OvGn1Pbh8T8E6vZyyx6
4Kj0JZVZ1b+Q7PBK3KrLMAWvuGttvFIJHPlyNI/RpusA7ZTm6bX7kj8NRO4Ro8p/
ekx4jP8HVs4AZ3SnjGdx3eHz1uZd2Ky9Bkr6owhnAwYoVi0cE5DizT2QpXmL0kX9
D3Yt94j0MT8jbg==
-----END CERTIFICATE-----
Generated at Sat May 4 09:16:24 2024 by rpki-client on console-ams.rpki-client.org