Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
File:                     g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft (raw, json)
Hash identifier:          zzjZCUOr2L8T76c5kCrRtHBXg9gCfXyACbx6+iXMeb0=
Subject key identifier:   AE:50:E5:95:4E:65:85:E5:27:99:AC:F6:E4:08:1A:BF:E9:85:13:40
Authority key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Certificate issuer:       /CN=83c966da5eead50905091c3b599c9a44074739d0
Certificate serial:       01935162A3D5928C39308A755E775C9B149C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
Manifest number:          0939
Signing time:             Fri 22 Nov 2024 01:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:39 +0000
Files and hashes:         1: EcF8Qs5P0UwlhY2rDG9DuG432A4.roa (hash: sMWLiM0rqOnqBoiICQ00NwMYFRL4XsmE8FVjgEJT85w=)
                          2: g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl (hash: YKBDeLxNWNlptNEZ4xZWI92ma1Ei8nHyePYHRiiV3bw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:a3:d5:92:8c:39:30:8a:75:5e:77:5c:9b:14:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c966da5eead50905091c3b599c9a44074739d0
        Validity
            Not Before: Nov 22 01:00:39 2024 GMT
            Not After : Nov 23 01:00:39 2024 GMT
        Subject: CN=ae50e5954e6585e52799acf6e4081abfe9851340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:23:03:0b:f7:f5:12:0e:5b:5e:66:c2:14:e0:
                    3c:c6:80:b7:4d:93:9d:30:19:d5:f3:71:6d:39:04:
                    a7:c5:8e:35:7c:e1:fa:3c:69:12:53:0c:20:78:f1:
                    56:64:28:82:f8:87:6a:d2:c0:a2:02:ae:db:4f:e8:
                    98:a2:64:1f:63:cb:49:4d:4b:ed:fc:01:1c:13:60:
                    6e:20:a3:5c:f8:56:c5:4e:5a:8c:21:8c:8c:5d:51:
                    3d:73:31:d5:0e:d2:ef:04:f9:03:30:06:7c:64:f3:
                    bd:a8:04:2c:07:51:44:b4:83:73:62:54:3d:72:1e:
                    ac:61:cd:02:cc:f3:e3:50:bb:03:ea:2c:50:17:30:
                    cb:2c:98:e1:90:dd:94:84:25:cf:28:57:ca:3f:6b:
                    3a:a7:b3:d9:57:8d:22:5c:1d:29:85:c0:dc:ff:cf:
                    1c:b2:c9:7a:ad:cb:10:ab:2e:a7:9a:76:cc:20:ae:
                    18:d8:f7:27:1a:1a:cb:e6:0a:d1:31:26:f5:2d:01:
                    ee:18:2a:a0:0d:48:5c:57:7f:90:91:26:38:30:a7:
                    b4:6d:07:0c:a1:45:0e:9d:f9:90:1d:a7:14:8a:20:
                    ce:29:47:c4:ba:e6:f0:04:d5:d1:5b:b8:8d:15:94:
                    97:e4:48:4f:01:79:be:7c:1a:be:bf:db:f7:fb:75:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:50:E5:95:4E:65:85:E5:27:99:AC:F6:E4:08:1A:BF:E9:85:13:40
            X509v3 Authority Key Identifier:
                keyid:83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a7:09:5f:87:d9:f5:d2:0d:a4:cf:8f:2a:4c:91:15:fd:10:
         8e:6e:43:6b:45:1d:bf:32:d1:07:a7:cd:6b:cc:d9:7a:39:75:
         f2:8a:6b:3b:03:f2:30:96:34:92:29:3c:f7:c3:e6:65:5d:b4:
         51:d6:be:7f:b7:e8:79:e1:59:bf:0c:42:e0:77:28:eb:79:26:
         5b:49:ff:e8:93:48:c4:02:f9:44:41:6a:47:e3:29:d7:88:18:
         c7:42:e5:d8:a8:06:65:13:6e:3c:eb:80:f1:98:9d:21:0f:d3:
         67:41:16:d7:d4:db:26:32:51:90:65:2a:a4:86:6e:3a:6c:a1:
         cf:59:0f:c3:bc:a1:19:7b:af:2e:37:9f:53:06:ce:b7:03:ec:
         32:94:77:d4:b9:0a:cf:22:07:ec:bd:47:df:88:6e:87:c6:3c:
         69:d5:2d:ab:00:1f:2b:f1:86:2f:17:73:28:63:94:77:41:59:
         65:38:59:64:4f:98:5c:a0:61:14:ee:b1:7f:a5:bf:f5:81:bb:
         ea:37:2c:ba:9b:fe:04:bf:e1:3a:b8:84:24:46:ea:6a:8d:9b:
         da:dd:cc:3b:b1:0a:57:32:b8:62:47:99:74:5b:11:8b:6c:3c:
         53:12:94:eb:be:3a:bd:d4:86:a1:72:02:a0:b9:04:1b:83:d8:
         88:83:63:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRYqPVkow5MIp1XndcmxScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzk2NmRhNWVlYWQ1MDkwNTA5MWMzYjU5OWM5YTQ0MDc0
NzM5ZDAwHhcNMjQxMTIyMDEwMDM5WhcNMjQxMTIzMDEwMDM5WjAzMTEwLwYDVQQD
EyhhZTUwZTU5NTRlNjU4NWU1Mjc5OWFjZjZlNDA4MWFiZmU5ODUxMzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyMDC/f1Eg5bXmbCFOA8xoC3TZOd
MBnV83FtOQSnxY41fOH6PGkSUwwgePFWZCiC+Idq0sCiAq7bT+iYomQfY8tJTUvt
/AEcE2BuIKNc+FbFTlqMIYyMXVE9czHVDtLvBPkDMAZ8ZPO9qAQsB1FEtINzYlQ9
ch6sYc0CzPPjULsD6ixQFzDLLJjhkN2UhCXPKFfKP2s6p7PZV40iXB0phcDc/88c
ssl6rcsQqy6nmnbMIK4Y2PcnGhrL5grRMSb1LQHuGCqgDUhcV3+QkSY4MKe0bQcM
oUUOnfmQHacUiiDOKUfEuubwBNXRW7iNFZSX5EhPAXm+fBq+v9v3+3XF3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5Q5ZVOZYXlJ5ms9uQIGr/phRNAMB8GA1UdIwQY
MBaAFIPJZtpe6tUJBQkcO1mcmkQHRznQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhsbTJsN3ExUWtGQ1J3N1daeWFSQWRIT2RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80Yjk5YjgtMDY1Ny00MTYyLWFiMDQt
ZjU3MmEwZmNlMGVlLzEvZzhsbTJsN3ExUWtGQ1J3N1daeWFSQWRIT2RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80Yjk5YjgtMDY1Ny00MTYyLWFiMDQtZjU3MmEwZmNlMGVl
LzEvZzhsbTJsN3ExUWtGQ1J3N1daeWFSQWRIT2RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXacJX4fZ
9dINpM+PKkyRFf0Qjm5Da0UdvzLRB6fNa8zZejl18oprOwPyMJY0kik898PmZV20
Uda+f7foeeFZvwxC4Hco63kmW0n/6JNIxAL5REFqR+Mp14gYx0Ll2KgGZRNuPOuA
8ZidIQ/TZ0EW19TbJjJRkGUqpIZuOmyhz1kPw7yhGXuvLjefUwbOtwPsMpR31LkK
zyIH7L1H34huh8Y8adUtqwAfK/GGLxdzKGOUd0FZZThZZE+YXKBhFO6xf6W/9YG7
6jcsupv+BL/hOriEJEbqao2b2t3MO7EKVzK4YkeZdFsRi2w8UxKU6746vdSGoXIC
oLkEG4PYiINjBA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:08 2024 by rpki-client on console-fra.rpki-client.org