Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
File:                     jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft (raw, json)
Hash identifier:          pUSLI7crPlbaTZTP+n7iaYVVe9YWrSjylycynqQgKhs=
Subject key identifier:   06:85:0C:6E:AC:4A:F7:70:26:AE:4D:9A:CF:3E:EC:F8:F4:29:1E:9F
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Certificate issuer:       /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial:       019353F5A6137F3F55C9D76DCD868813521F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
Manifest number:          0F59
Signing time:             Fri 22 Nov 2024 13:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 13:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 13:00:27 +0000
Files and hashes:         1: 8HLfUsLI90ljq0WvpqCzeCO3h28.roa (hash: 6O1RIz0CTCFXEBgh+mA0w9HvRV6bKr6vCB88BtL2OpE=)
                          2: SRlruqAxEZyIVZjVfzPAfE49OhE.roa (hash: 7MjXPOeEELriJgC0OWzuxNfLkiGeaP+W/BeTtGDvFDg=)
                          3: _elz_pgFoWpO_TbPj909CdYNnIs.roa (hash: aE95tYFH5jbd9dqMqWzGNPjt5kTLG+okwfy9yPEJK/s=)
                          4: jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl (hash: y3TlF5wghZNFRpe6wVhr+YkrjnfNalrhiKDpJcgDiEw=)
                          5: o9hz7NzlKPft6W3ki-Qb3oTHxAo.roa (hash: IvoBbga6R/Vbx7gV/ouKio4leDG8f0ROesoLZbEQaHY=)
                          6: z10qvFIgKxQXc_1VRXzQlfDT9ww.roa (hash: IyaXBTDv1UjH/98CWxLvyFgQRnuTF59ljVa0zgBZeDI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:f5:a6:13:7f:3f:55:c9:d7:6d:cd:86:88:13:52:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
        Validity
            Not Before: Nov 22 13:00:27 2024 GMT
            Not After : Nov 23 13:00:27 2024 GMT
        Subject: CN=06850c6eac4af77026ae4d9acf3eecf8f4291e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:dc:35:e8:4d:58:ee:bd:23:4a:3c:4b:08:f6:
                    22:0f:63:9f:5d:0d:ee:a2:ff:7a:9a:1b:a9:a9:ac:
                    b5:01:02:4b:1c:a8:20:b2:41:1c:67:3b:b5:14:e0:
                    77:0d:e9:d9:2f:17:9c:ae:9f:c6:6f:18:68:00:f9:
                    16:8c:b5:d4:a5:a6:59:f9:57:1b:c0:77:06:0d:be:
                    d1:3e:41:eb:23:bc:4b:28:e0:93:68:f6:f6:99:05:
                    2e:df:f5:43:73:62:80:bc:ba:d0:57:17:27:6a:fd:
                    57:4d:bc:04:bd:78:85:1d:88:b8:ca:e3:65:2b:4f:
                    88:48:fb:3e:32:c4:37:18:31:42:d9:23:fe:ae:7f:
                    c0:fb:bd:4d:24:dd:f5:72:ab:8b:03:67:be:3f:7e:
                    46:77:d6:68:0d:ae:59:9d:14:5e:52:c9:c8:0e:72:
                    76:dd:56:17:3c:53:3b:ae:ad:63:a4:8e:6b:98:43:
                    53:ba:77:cf:0c:cb:29:6e:a2:50:9d:31:16:0a:e4:
                    2b:b3:34:96:df:4b:5b:51:80:52:af:ff:e0:cd:66:
                    db:32:1d:89:21:d9:81:ef:50:7d:07:78:7b:98:76:
                    69:3f:6b:e4:28:99:49:57:00:a4:54:70:81:37:4b:
                    2f:49:84:62:45:80:4e:d0:11:fb:54:04:fd:80:4b:
                    44:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:85:0C:6E:AC:4A:F7:70:26:AE:4D:9A:CF:3E:EC:F8:F4:29:1E:9F
            X509v3 Authority Key Identifier:
                keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1e:71:28:ee:51:e0:fa:fb:6a:98:09:e1:4a:d1:94:fa:d7:
         9c:60:14:60:b0:54:ed:58:97:08:fd:b3:60:0d:9e:17:af:dc:
         89:67:ba:f1:39:98:71:59:89:e9:a7:48:b4:f0:00:3c:84:8f:
         73:20:bf:e7:1c:c4:f2:40:4b:ae:77:1b:8b:71:3a:29:32:55:
         ca:97:ee:de:f8:fc:2c:37:b1:4c:d9:aa:9c:9f:c6:ac:28:20:
         91:98:67:0c:d5:40:5f:30:c6:51:20:ed:a7:c8:63:bd:93:c2:
         1a:ee:31:63:80:da:5f:c1:ea:d2:6f:97:a0:cb:4b:e2:0a:ff:
         93:86:cf:9d:7b:ea:8c:0d:71:c8:bf:2d:7b:20:f1:04:5b:3a:
         2a:af:58:f1:09:af:bd:27:dc:03:2f:30:aa:c4:7f:c4:99:7c:
         80:26:0f:b1:f6:95:9b:b9:39:06:fa:30:20:4f:df:c4:da:50:
         24:a6:11:a6:43:c5:c7:53:12:7c:bd:be:5d:c0:42:32:73:3d:
         f5:c0:c6:1c:32:fd:e7:d1:61:a4:37:c7:fa:aa:bd:52:cf:ba:
         ea:5c:16:3e:87:1f:bf:b5:fe:53:d1:bf:c2:bc:7c:f5:44:9b:
         8d:55:5f:3e:54:ab:5c:7f:ec:09:27:81:5c:a0:54:ec:de:07:
         58:68:cb:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNT9aYTfz9VyddtzYaIE1IfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlM2YxNjYzOTk2YmUxNzA3NjExZmRjZTFkZGVhODkyMGRk
Mzk4YTMwHhcNMjQxMTIyMTMwMDI3WhcNMjQxMTIzMTMwMDI3WjAzMTEwLwYDVQQD
EygwNjg1MGM2ZWFjNGFmNzcwMjZhZTRkOWFjZjNlZWNmOGY0MjkxZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89w16E1Y7r0jSjxLCPYiD2OfXQ3u
ov96mhupqay1AQJLHKggskEcZzu1FOB3DenZLxecrp/GbxhoAPkWjLXUpaZZ+Vcb
wHcGDb7RPkHrI7xLKOCTaPb2mQUu3/VDc2KAvLrQVxcnav1XTbwEvXiFHYi4yuNl
K0+ISPs+MsQ3GDFC2SP+rn/A+71NJN31cquLA2e+P35Gd9ZoDa5ZnRReUsnIDnJ2
3VYXPFM7rq1jpI5rmENTunfPDMspbqJQnTEWCuQrszSW30tbUYBSr//gzWbbMh2J
IdmB71B9B3h7mHZpP2vkKJlJVwCkVHCBN0svSYRiRYBO0BH7VAT9gEtEjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaFDG6sSvdwJq5Nms8+7Pj0KR6fMB8GA1UdIwQY
MBaAFI4/FmOZa+FwdhH9zh3eqJIN05ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzkt
YzhmOWJlN2QxOWRmLzEvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzktYzhmOWJlN2QxOWRm
LzEvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATx5xKO5R
4Pr7apgJ4UrRlPrXnGAUYLBU7ViXCP2zYA2eF6/ciWe68TmYcVmJ6adItPAAPISP
cyC/5xzE8kBLrncbi3E6KTJVypfu3vj8LDexTNmqnJ/GrCggkZhnDNVAXzDGUSDt
p8hjvZPCGu4xY4DaX8Hq0m+XoMtL4gr/k4bPnXvqjA1xyL8teyDxBFs6Kq9Y8Qmv
vSfcAy8wqsR/xJl8gCYPsfaVm7k5BvowIE/fxNpQJKYRpkPFx1MSfL2+XcBCMnM9
9cDGHDL959FhpDfH+qq9Us+66lwWPocfv7X+U9G/wrx89USbjVVfPlSrXH/sCSeB
XKBU7N4HWGjLag==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:11:32 2024 by rpki-client on console-fra.rpki-client.org