Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
File:                     R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json)
Hash identifier:          ngmm9U3c6gYo0+ZxeuCOxgBuTfwRVl6Mm6p+/Lu3Wuw=
Subject key identifier:   CE:7A:19:A5:A2:DD:8F:C3:1E:CF:F0:9C:AE:8D:10:39:DA:F8:92:A8
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Certificate issuer:       /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial:       0193572D95190709C010B75C57AA5C932A23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
Manifest number:          0E15
Signing time:             Sat 23 Nov 2024 04:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:25 +0000
Files and hashes:         1: 3WoNDtF74VJJtXNW8utPjAW31OY.roa (hash: /eVJxZQlkXO+Epn8EsWE6u7WTgDm/8wCtJ9tYTDOydU=)
                          2: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: oyYrQWcl1+jWR3bUmcw//p4yN7bSy4PUsQfHTe/LrqA=)
                          3: mbY4Z0nWGqC8Ha8OAMCahhOEZ8E.roa (hash: 9uvLoMAWdK9RUFMOGqTW5L2cS3HeBvgth6tO4rVuQhU=)
                          4: nXdgSXUgZDCPCgyJHlSIyqenf5c.roa (hash: EQL858DDukSLJWgDEDN6D3sXERmKOKgoKtQGEejXVc4=)
                          5: sURfUMkw8FDTmRE8J898y06UUp0.roa (hash: EY37OvDyezKBeH0HWH0nWkPMHlQGu8l5ODW/Wu24fd0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:95:19:07:09:c0:10:b7:5c:57:aa:5c:93:2a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
        Validity
            Not Before: Nov 23 04:00:25 2024 GMT
            Not After : Nov 24 04:00:25 2024 GMT
        Subject: CN=ce7a19a5a2dd8fc31ecff09cae8d1039daf892a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:48:c3:e8:af:08:8c:aa:ea:2c:2f:05:a0:
                    0a:5e:89:a5:78:94:72:a1:a4:a7:c3:d5:06:45:55:
                    77:cf:32:a7:a1:d9:30:93:a5:2d:0e:0d:c5:07:fa:
                    54:e2:c7:3a:ca:09:20:ad:a7:42:6d:09:e5:70:fd:
                    a9:d1:25:12:7f:99:09:1e:16:76:25:a3:61:0e:dd:
                    51:a6:3c:f0:76:4b:41:ff:17:ac:06:80:fd:53:e9:
                    06:4e:69:fc:04:6b:04:94:8b:fb:14:b3:ae:88:df:
                    de:c4:04:38:4d:4f:cd:d3:f0:81:72:76:4b:2f:4f:
                    5b:fd:05:d8:e5:23:d6:7f:a3:a2:f3:01:8c:21:3f:
                    3a:09:e5:f5:6c:80:a4:9a:d1:c2:ff:db:6b:47:f9:
                    ad:6b:f8:f4:32:13:94:47:b1:c8:8d:c5:62:2a:8f:
                    51:73:cd:ca:1f:97:e5:00:45:61:b3:a6:0f:77:78:
                    fb:fd:6f:86:bc:c1:d6:cc:3d:46:38:28:8f:1a:08:
                    ce:88:cf:1f:b8:36:72:4b:7f:fd:da:50:b0:e6:f4:
                    80:91:5f:a0:b9:ed:7d:0f:71:99:b3:81:9c:7d:c4:
                    b0:8d:a2:c4:6d:ea:32:d6:ee:cb:3e:0a:68:94:77:
                    c9:90:12:d7:aa:60:0d:40:aa:e8:2b:59:cc:ec:27:
                    fe:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7A:19:A5:A2:DD:8F:C3:1E:CF:F0:9C:AE:8D:10:39:DA:F8:92:A8
            X509v3 Authority Key Identifier:
                keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:0d:b0:aa:80:6d:99:23:12:9a:35:00:5b:4e:b2:13:ad:85:
         71:1a:a8:d5:89:8b:e4:37:f7:30:8d:00:a7:cf:ab:e0:7e:59:
         7c:bb:96:04:55:0f:02:c8:be:46:2c:2f:72:79:b5:fc:0e:fc:
         80:19:27:5c:0b:93:6e:6a:e3:62:27:f8:47:13:6d:e5:70:10:
         65:a7:38:6c:b9:a7:dd:62:90:7a:dc:13:15:81:50:0a:2f:d4:
         75:65:6b:d3:2e:bd:79:16:e2:3f:d6:9f:a5:26:f6:62:31:0e:
         ba:5a:dc:62:0a:49:ae:3f:ef:f1:c5:17:35:47:0f:52:b4:1f:
         92:7f:a4:da:df:7b:88:c0:5b:06:bb:a9:27:6c:0e:5e:63:0a:
         3f:8a:20:10:b9:45:8f:f7:87:f9:b0:0b:84:d2:57:c2:af:94:
         9c:b1:ba:3c:8e:ec:59:b7:75:60:f8:b3:8e:98:2e:8e:b1:ee:
         b7:fe:2c:c5:98:4a:87:74:12:fb:02:25:0c:ac:dd:16:28:c6:
         2c:db:fa:a8:19:dd:c5:84:68:2e:3c:39:fc:56:77:de:53:bc:
         a3:74:8f:b0:48:f2:1a:2d:6d:b0:ef:84:41:0b:55:1e:72:f8:
         d1:ef:4b:28:d7:ab:b7:94:76:6b:ba:e4:cb:44:1f:72:2a:7b:
         8c:13:ce:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLZUZBwnAELdcV6pckyojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZDA2NGZiM2U1NDFmMjM1NjMwNjVlNDhmMzAwZjJjZmRm
ZTAwOWEwHhcNMjQxMTIzMDQwMDI1WhcNMjQxMTI0MDQwMDI1WjAzMTEwLwYDVQQD
EyhjZTdhMTlhNWEyZGQ4ZmMzMWVjZmYwOWNhZThkMTAzOWRhZjg5MmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhNIw+ivCIyq6iwvBaAKXomleJRy
oaSnw9UGRVV3zzKnodkwk6UtDg3FB/pU4sc6ygkgradCbQnlcP2p0SUSf5kJHhZ2
JaNhDt1RpjzwdktB/xesBoD9U+kGTmn8BGsElIv7FLOuiN/exAQ4TU/N0/CBcnZL
L09b/QXY5SPWf6Oi8wGMIT86CeX1bICkmtHC/9trR/mta/j0MhOUR7HIjcViKo9R
c83KH5flAEVhs6YPd3j7/W+GvMHWzD1GOCiPGgjOiM8fuDZyS3/92lCw5vSAkV+g
ue19D3GZs4GcfcSwjaLEbeoy1u7LPgpolHfJkBLXqmANQKroK1nM7Cf+twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM56GaWi3Y/DHs/wnK6NEDna+JKoMB8GA1UdIwQY
MBaAFEfQZPs+VB8jVjBl5I8wDyz9/gCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmIt
ZWZhYWZmMGE5ODJmLzEvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmItZWZhYWZmMGE5ODJm
LzEvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjA2wqoBt
mSMSmjUAW06yE62FcRqo1YmL5Df3MI0Ap8+r4H5ZfLuWBFUPAsi+Riwvcnm1/A78
gBknXAuTbmrjYif4RxNt5XAQZac4bLmn3WKQetwTFYFQCi/UdWVr0y69eRbiP9af
pSb2YjEOulrcYgpJrj/v8cUXNUcPUrQfkn+k2t97iMBbBrupJ2wOXmMKP4ogELlF
j/eH+bALhNJXwq+UnLG6PI7sWbd1YPizjpgujrHut/4sxZhKh3QS+wIlDKzdFijG
LNv6qBndxYRoLjw5/FZ33lO8o3SPsEjyGi1tsO+EQQtVHnL40e9LKNert5R2a7rk
y0Qfcip7jBPO4g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:16:10 2024 by rpki-client on console-ams.rpki-client.org