Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
File:                     m4Nem003buarbK0nXiQ89ATBKvQ.mft (raw, json)
Hash identifier:          VjoqnG8gsUH5KLpPGEZ5Qrcwbji+n+yS5Ye0kfY6r8k=
Subject key identifier:   3A:01:89:D4:1D:5F:F2:4C:ED:C4:7A:01:34:A5:8B:D1:6C:4E:DD:77
Authority key identifier: 9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4
Certificate issuer:       /CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
Certificate serial:       01936A46C470581E2A3DDA27E20E6F9585E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 21:00:42 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:42 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:42 +0000
Files and hashes:         1: Ssh5hTJq7UJ5vaBldGVn2HVHkso.roa (hash: AuapuIU1SSVBqrK+ZwsLrVrZvuQDmgPZrAzn7qS2x04=)
                          2: m4Nem003buarbK0nXiQ89ATBKvQ.crl (hash: K/FqDhvEp7ovZ31AXGbT4Na3/Q/porIVZ+Xt/RiTYxI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:c4:70:58:1e:2a:3d:da:27:e2:0e:6f:95:85:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b835e9b4d376ee6ab6cad275e243cf404c12af4
        Validity
            Not Before: Nov 26 21:00:42 2024 GMT
            Not After : Nov 27 21:00:42 2024 GMT
        Subject: CN=3a0189d41d5ff24cedc47a0134a58bd16c4edd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e7:74:b4:22:cf:86:b3:a6:93:ea:50:aa:ee:
                    53:0c:8f:0b:04:aa:cd:ab:3b:82:4e:7f:d4:3b:16:
                    b0:b7:83:09:1f:7e:30:82:ea:2c:ee:7b:16:09:a3:
                    90:3b:bd:a6:71:2d:44:48:ca:6f:de:ca:1e:11:17:
                    b9:88:8f:87:c7:49:38:b4:d2:30:37:db:59:1a:ca:
                    08:f4:14:d8:fe:a0:40:53:24:e0:ca:77:b5:9f:4e:
                    e3:92:71:86:14:8e:b3:95:59:0b:ee:43:55:bc:64:
                    5d:a6:22:1c:ec:0c:2c:87:c8:c6:45:14:57:03:ca:
                    ae:86:57:5a:ea:73:a2:60:86:38:da:df:9c:3e:e1:
                    36:60:99:19:ab:7a:22:84:53:07:9d:39:d0:05:8e:
                    2f:91:a1:4d:14:c1:7e:63:84:d0:72:40:7a:cc:f3:
                    39:96:18:2b:92:86:c5:94:a9:5d:6c:0e:21:1c:0f:
                    22:d6:8f:f9:48:32:15:07:e1:62:70:e2:78:62:67:
                    6c:55:9c:f4:4d:07:8b:82:6d:fa:1c:36:7d:5a:a8:
                    03:d5:80:47:90:3b:1b:60:cf:35:20:f4:88:a9:05:
                    1c:60:eb:59:c9:6a:4f:a3:14:99:37:cd:77:18:92:
                    59:5c:f8:00:7d:4d:92:59:ba:d5:a1:d8:ba:f9:79:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:01:89:D4:1D:5F:F2:4C:ED:C4:7A:01:34:A5:8B:D1:6C:4E:DD:77
            X509v3 Authority Key Identifier:
                keyid:9B:83:5E:9B:4D:37:6E:E6:AB:6C:AD:27:5E:24:3C:F4:04:C1:2A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Nem003buarbK0nXiQ89ATBKvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0a3827-b6c5-4c3a-96e6-e8db018b36dd/1/m4Nem003buarbK0nXiQ89ATBKvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:06:12:23:5f:72:26:ca:19:4b:31:fc:08:39:08:20:ec:5a:
         c9:86:de:07:84:8f:77:ec:64:fe:2b:d4:fe:3a:1b:ec:f5:f2:
         c3:5b:74:fd:32:8c:ba:81:16:53:a9:09:6c:f0:31:86:4d:7a:
         78:4c:c3:12:a9:eb:0d:ee:49:3c:d9:43:71:4d:1b:51:7b:27:
         81:d4:e9:a8:91:1a:db:38:d8:c9:e9:ff:c8:3d:6b:97:44:64:
         1c:bb:10:be:49:6b:f2:50:9a:82:b7:43:0e:e9:37:e7:cc:b7:
         09:6b:3c:9d:f5:6a:18:f4:f1:92:32:a6:2d:5f:10:62:08:71:
         ea:1f:9b:42:2a:1d:20:b2:3e:b3:42:f5:2a:48:42:76:b8:d8:
         cd:91:52:0a:4e:ac:09:bc:5c:a2:90:8f:75:cd:4f:64:b6:ee:
         4f:02:19:44:8d:3e:56:c7:c8:31:3e:2d:5f:87:36:bc:22:22:
         ea:08:9e:8c:9a:5c:12:88:48:4e:93:0c:97:cf:0d:8c:77:b4:
         08:53:e4:4e:80:40:1f:35:cc:f6:ca:74:2c:d4:d1:a6:db:fd:
         d4:ad:70:df:6d:c7:9d:52:79:31:77:f7:75:a2:5e:4b:1f:b3:
         75:a3:98:91:5b:19:42:56:e4:50:c0:d7:1d:f1:de:19:9a:7b:
         8f:d4:42:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRsRwWB4qPdon4g5vlYXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODM1ZTliNGQzNzZlZTZhYjZjYWQyNzVlMjQzY2Y0MDRj
MTJhZjQwHhcNMjQxMTI2MjEwMDQyWhcNMjQxMTI3MjEwMDQyWjAzMTEwLwYDVQQD
EygzYTAxODlkNDFkNWZmMjRjZWRjNDdhMDEzNGE1OGJkMTZjNGVkZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ud0tCLPhrOmk+pQqu5TDI8LBKrN
qzuCTn/UOxawt4MJH34wguos7nsWCaOQO72mcS1ESMpv3soeERe5iI+Hx0k4tNIw
N9tZGsoI9BTY/qBAUyTgyne1n07jknGGFI6zlVkL7kNVvGRdpiIc7Awsh8jGRRRX
A8quhlda6nOiYIY42t+cPuE2YJkZq3oihFMHnTnQBY4vkaFNFMF+Y4TQckB6zPM5
lhgrkobFlKldbA4hHA8i1o/5SDIVB+FicOJ4YmdsVZz0TQeLgm36HDZ9WqgD1YBH
kDsbYM81IPSIqQUcYOtZyWpPoxSZN813GJJZXPgAfU2SWbrVodi6+XmtuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoBidQdX/JM7cR6ATSli9FsTt13MB8GA1UdIwQY
MBaAFJuDXptNN27mq2ytJ14kPPQEwSr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTROZW0wMDNidWFyYkswblhpUTg5QVRCS3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wYTM4MjctYjZjNS00YzNhLTk2ZTYt
ZThkYjAxOGIzNmRkLzEvbTROZW0wMDNidWFyYkswblhpUTg5QVRCS3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8wYTM4MjctYjZjNS00YzNhLTk2ZTYtZThkYjAxOGIzNmRk
LzEvbTROZW0wMDNidWFyYkswblhpUTg5QVRCS3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgYSI19y
JsoZSzH8CDkIIOxayYbeB4SPd+xk/ivU/job7PXyw1t0/TKMuoEWU6kJbPAxhk16
eEzDEqnrDe5JPNlDcU0bUXsngdTpqJEa2zjYyen/yD1rl0RkHLsQvklr8lCagrdD
Duk358y3CWs8nfVqGPTxkjKmLV8QYghx6h+bQiodILI+s0L1KkhCdrjYzZFSCk6s
CbxcopCPdc1PZLbuTwIZRI0+VsfIMT4tX4c2vCIi6giejJpcEohITpMMl88NjHe0
CFPkToBAHzXM9sp0LNTRptv91K1w323HnVJ5MXf3daJeSx+zdaOYkVsZQlbkUMDX
HfHeGZp7j9RCgA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:47 2024 by rpki-client on console-fra.rpki-client.org