Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
File:                     zEa__4uQ43SFVboUR_1O3sw0ChM.mft (raw, json)
Hash identifier:          qdrmgcDFAunbaCEWHfFkiTz8/z0xsP6XiYzexYM8+wU=
Subject key identifier:   C9:B0:79:85:8D:68:6B:09:85:1F:EF:8E:82:96:2B:38:43:30:7B:FF
Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
Certificate issuer:       /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Certificate serial:       019352AD21A44451F5F92FC7CE465E4FE82D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 07:01:38 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:38 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:38 +0000
Files and hashes:         1: AftMWWvfxukM65lpZf4Y-gIw_ME.roa (hash: 8OdOwVdwCwG6bgmzL/R3TDfChIsliPvNjgNMx8FSOuY=)
                          2: YMYvp25JMVMn5OpfjAZsK4kAl3E.roa (hash: ryzcUFqUTr/syS5SvXKVgHsr9tqa+E1jvCo20IDRrZY=)
                          3: zEa__4uQ43SFVboUR_1O3sw0ChM.crl (hash: 6ZYsv7yZi5uOQb4Tl/gVc2dQJeq71ReYlxoae5mD6Pg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:21:a4:44:51:f5:f9:2f:c7:ce:46:5e:4f:e8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
        Validity
            Not Before: Nov 22 07:01:38 2024 GMT
            Not After : Nov 23 07:01:38 2024 GMT
        Subject: CN=c9b079858d686b09851fef8e82962b3843307bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7a:cd:0e:48:b5:d5:2f:a1:1c:57:ab:2a:c7:
                    74:59:87:29:bd:a0:33:e7:ef:2b:ae:31:94:b1:c0:
                    e0:da:c9:c8:cc:62:5b:fd:ad:35:55:e2:4e:54:ee:
                    40:b7:a1:68:65:17:87:5e:0b:4f:66:2d:4c:a7:81:
                    11:67:c9:c5:ab:c5:2e:3b:dc:39:c0:bf:92:97:61:
                    8d:de:c9:5c:26:94:cc:78:86:90:47:50:c8:59:51:
                    70:2c:be:af:a4:ce:a7:f6:2d:e5:62:b6:da:db:56:
                    f4:8d:2f:1a:35:a6:f6:6a:e6:e2:89:ca:98:21:7a:
                    2a:c2:3c:e8:eb:c1:bc:ee:e4:ba:e0:e3:99:69:1f:
                    34:7b:20:42:a8:62:ba:18:a7:d2:8a:d5:a1:01:22:
                    15:f3:b1:7d:32:13:b7:da:34:47:4e:78:8d:31:d9:
                    ea:70:9b:62:86:3e:74:a7:d6:9c:68:d1:e2:ff:6d:
                    a5:d2:74:3a:5b:67:41:f0:a5:35:ee:82:d3:ee:e4:
                    e1:7c:f2:0b:ac:b9:c2:bb:06:7a:bc:8e:d5:a2:07:
                    75:d1:63:7d:11:85:b1:97:dc:86:6f:93:46:9a:e2:
                    ae:e6:89:58:25:a6:c4:bd:15:13:65:e8:56:e4:34:
                    d2:94:9f:b1:4b:08:83:8b:dd:b3:0c:42:3f:d3:87:
                    1e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B0:79:85:8D:68:6B:09:85:1F:EF:8E:82:96:2B:38:43:30:7B:FF
            X509v3 Authority Key Identifier:
                keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2c:c2:5a:83:cb:40:b2:cd:28:ba:36:50:72:c4:63:f9:84:
         bf:14:f4:f4:97:6b:40:7b:a6:5a:4c:6e:68:71:e2:d1:ab:21:
         70:1f:cd:44:cf:a2:ef:c3:3e:02:e3:ae:65:9c:34:1b:e7:10:
         db:98:d3:51:e1:c2:21:8a:07:5e:43:fb:7e:b6:bd:5e:0f:f7:
         54:ef:8a:6e:89:18:92:55:c6:d6:ea:02:c3:5d:65:e0:c1:11:
         2b:4e:60:c3:6e:5e:3b:2e:8c:4b:2c:51:41:b9:24:0e:db:0b:
         c6:b7:60:89:10:e9:f4:4b:1c:8c:41:fa:95:5b:62:1e:98:28:
         e5:8e:3f:79:04:f6:3c:12:0c:d9:e8:87:6d:ae:e5:71:1e:db:
         2a:70:b9:9d:0f:f7:86:33:6e:72:65:c0:58:0d:13:8c:c1:35:
         38:4e:ab:83:bc:8c:74:ab:f1:f9:94:5d:bd:2b:a7:3c:5c:ed:
         31:88:6f:34:6c:fc:a5:a8:29:2c:04:3a:69:59:02:1a:3f:60:
         e4:61:4b:f2:84:13:92:52:b5:7c:f2:83:b5:d9:ad:b2:f3:16:
         5f:6c:d0:bb:f7:07:73:e0:53:93:b6:34:9d:0c:95:89:e7:ae:
         90:71:e9:c9:f4:59:66:12:54:3d:e4:d3:4f:4b:78:47:fc:16:
         23:19:3e:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrSGkRFH1+S/HzkZeT+gtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDZiZmZmOGI5MGUzNzQ4NTU1YmExNDQ3ZmQ0ZWRlY2Mz
NDBhMTMwHhcNMjQxMTIyMDcwMTM4WhcNMjQxMTIzMDcwMTM4WjAzMTEwLwYDVQQD
EyhjOWIwNzk4NThkNjg2YjA5ODUxZmVmOGU4Mjk2MmIzODQzMzA3YmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3rNDki11S+hHFerKsd0WYcpvaAz
5+8rrjGUscDg2snIzGJb/a01VeJOVO5At6FoZReHXgtPZi1Mp4ERZ8nFq8UuO9w5
wL+Sl2GN3slcJpTMeIaQR1DIWVFwLL6vpM6n9i3lYrba21b0jS8aNab2aubiicqY
IXoqwjzo68G87uS64OOZaR80eyBCqGK6GKfSitWhASIV87F9MhO32jRHTniNMdnq
cJtihj50p9acaNHi/22l0nQ6W2dB8KU17oLT7uThfPILrLnCuwZ6vI7Vogd10WN9
EYWxl9yGb5NGmuKu5olYJabEvRUTZehW5DTSlJ+xSwiDi92zDEI/04ce/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmweYWNaGsJhR/vjoKWKzhDMHv/MB8GA1UdIwQY
MBaAFMxGv/+LkON0hVW6FEf9Tt7MNAoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84NGQ0OWMtMGM4NC00NTZhLWI2NDAt
NGRjOWJmNjQyZGQyLzEvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS84NGQ0OWMtMGM4NC00NTZhLWI2NDAtNGRjOWJmNjQyZGQy
LzEvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSzCWoPL
QLLNKLo2UHLEY/mEvxT09JdrQHumWkxuaHHi0ashcB/NRM+i78M+AuOuZZw0G+cQ
25jTUeHCIYoHXkP7fra9Xg/3VO+KbokYklXG1uoCw11l4MERK05gw25eOy6MSyxR
QbkkDtsLxrdgiRDp9EscjEH6lVtiHpgo5Y4/eQT2PBIM2eiHba7lcR7bKnC5nQ/3
hjNucmXAWA0TjME1OE6rg7yMdKvx+ZRdvSunPFztMYhvNGz8pagpLAQ6aVkCGj9g
5GFL8oQTklK1fPKDtdmtsvMWX2zQu/cHc+BTk7Y0nQyVieeukHHpyfRZZhJUPeTT
T0t4R/wWIxk+3Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:45:07 2024 by rpki-client on console-ams.rpki-client.org