Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
File:                     CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft (raw, json)
Hash identifier:          E4jjFy2e2XeFuH6SI8Ro1ID2ZHJIcg1Sl0/3ORDpGjo=
Subject key identifier:   78:BF:0D:9B:B9:0D:E8:6B:BA:51:E2:8A:4F:AE:23:FE:C2:D5:21:58
Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
Certificate issuer:       /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Certificate serial:       01935764829C91BCD7D5F926F531B943A383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
Manifest number:          06D0
Signing time:             Sat 23 Nov 2024 05:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:24 +0000
Files and hashes:         1: CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl (hash: S0tVdaG3VfTS6wDSBSN8G/xOcjt55m4HVVaq1P5Ra0E=)
                          2: dThs0Y_gEV2FJQMxKlBWQyThSuo.roa (hash: 0hGFY4oC5PIsKVQtr7DEIpGbJ6P6Z+FxEOTxWqNM/aI=)
                          3: eBovQd7laMJDh7EXSoyMFy7n66Q.roa (hash: VTjxdL7XL4VnnXvmtNRxN4uUeKR3vTv9n/WpP39ttGU=)
                          4: kEzmBsQ_ujjkAaORkicXngGDk5k.roa (hash: ufUq5ylIwpjVf9t/GcjPGZobGjFZGJ55aHMogtJ6l1A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:82:9c:91:bc:d7:d5:f9:26:f5:31:b9:43:a3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
        Validity
            Not Before: Nov 23 05:00:24 2024 GMT
            Not After : Nov 24 05:00:24 2024 GMT
        Subject: CN=78bf0d9bb90de86bba51e28a4fae23fec2d52158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:27:90:4b:f4:01:59:f8:d9:9b:aa:c0:e8:c6:
                    20:ee:40:eb:df:1a:e0:1b:8d:fd:c2:6d:7f:a3:0a:
                    6b:88:9c:e6:a8:7c:b9:33:ae:e2:5f:3b:09:a1:61:
                    b9:12:5d:94:31:48:06:9e:a0:d2:07:ca:69:15:bb:
                    ce:34:1b:1d:6f:08:75:11:21:04:90:2a:74:33:d2:
                    50:86:fd:18:df:66:cd:eb:ea:e8:80:4c:ba:91:d0:
                    a1:e3:b6:4d:78:7f:24:e0:8a:0d:37:4a:bd:18:a8:
                    55:46:7d:48:c0:82:20:69:98:53:9b:a6:f6:f3:6f:
                    6f:e4:b3:b5:3b:f9:4a:c1:b5:c0:af:4a:5c:e7:17:
                    6f:7d:8a:d0:7f:32:46:b3:43:4b:d3:88:45:b6:34:
                    6a:fa:dd:19:1d:55:16:44:ba:1a:6a:a3:97:11:7d:
                    47:4b:80:70:ef:e5:54:32:5a:fa:64:42:86:04:4a:
                    99:93:e3:d3:9a:82:61:3f:f5:28:a5:ce:a6:af:78:
                    d6:d4:00:30:1f:85:bd:8b:10:40:6f:c4:4f:7a:5d:
                    82:7f:0f:d8:1e:47:e4:ee:c8:d7:6d:99:64:0d:7c:
                    b3:53:43:26:5b:2b:56:ba:64:07:6b:1f:03:51:9d:
                    28:b5:19:91:42:61:21:8e:05:22:00:a0:5c:d7:6f:
                    d6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BF:0D:9B:B9:0D:E8:6B:BA:51:E2:8A:4F:AE:23:FE:C2:D5:21:58
            X509v3 Authority Key Identifier:
                keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:94:7b:18:e4:f4:bb:5f:72:ca:48:6f:e0:05:4f:b1:c8:69:
         98:12:40:df:74:64:22:18:1f:26:a4:c0:5f:57:90:5c:97:44:
         86:ff:6b:55:23:5c:4f:3d:c3:13:31:a3:c9:2a:59:57:0f:41:
         be:80:72:98:16:ab:2d:7e:c2:a0:49:d0:b9:42:ed:48:c9:c9:
         c5:3b:5f:7a:71:2b:bd:e9:cd:11:e7:f4:fa:19:31:50:03:5c:
         da:25:57:39:5a:27:61:07:dc:91:b6:25:c6:54:1f:4d:bd:75:
         d0:0d:c5:21:20:ca:8c:7e:7f:1e:55:3f:59:ee:fb:5d:b4:98:
         86:a3:d7:38:72:e7:31:cb:87:bb:20:43:2d:00:0c:da:a6:b7:
         2c:b6:f6:d2:ad:67:2c:5a:4b:11:b7:65:e8:5a:c4:55:94:98:
         c1:ca:72:1c:e8:83:5c:d6:e0:b0:13:23:a3:bc:97:e4:b5:3b:
         5c:7e:e4:d3:0f:5b:1a:39:9b:fb:d3:84:31:b8:fc:67:fa:3b:
         c7:be:3c:0f:49:3b:a4:09:95:ed:a7:0c:7d:e6:0e:1e:2a:2d:
         34:ec:d6:c2:7d:dc:9c:ea:48:f1:31:ed:f6:a2:26:e0:e8:8e:
         42:0a:3c:bf:b8:67:ca:69:ec:67:51:7c:7c:cc:e1:46:5b:6b:
         8a:12:7b:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZIKckbzX1fkm9TG5Q6ODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OWM4YzdmMzM0MDUzYzhhOTBhMzQwODAwOWVmM2QzYjdh
ODJlM2QwHhcNMjQxMTIzMDUwMDI0WhcNMjQxMTI0MDUwMDI0WjAzMTEwLwYDVQQD
Eyg3OGJmMGQ5YmI5MGRlODZiYmE1MWUyOGE0ZmFlMjNmZWMyZDUyMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CeQS/QBWfjZm6rA6MYg7kDr3xrg
G439wm1/owpriJzmqHy5M67iXzsJoWG5El2UMUgGnqDSB8ppFbvONBsdbwh1ESEE
kCp0M9JQhv0Y32bN6+rogEy6kdCh47ZNeH8k4IoNN0q9GKhVRn1IwIIgaZhTm6b2
829v5LO1O/lKwbXAr0pc5xdvfYrQfzJGs0NL04hFtjRq+t0ZHVUWRLoaaqOXEX1H
S4Bw7+VUMlr6ZEKGBEqZk+PTmoJhP/Uopc6mr3jW1AAwH4W9ixBAb8RPel2Cfw/Y
Hkfk7sjXbZlkDXyzU0MmWytWumQHax8DUZ0otRmRQmEhjgUiAKBc12/WhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHi/DZu5DehrulHiik+uI/7C1SFYMB8GA1UdIwQY
MBaAFAicjH8zQFPIqQo0CACe89O3qC49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0p5TWZ6TkFVOGlwQ2pRSUFKN3owN2VvTGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNGUwM2UtMjdiMi00OTRiLThjMGYt
NmY3MDA5YmVlOTE1LzEvQ0p5TWZ6TkFVOGlwQ2pRSUFKN3owN2VvTGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mNGUwM2UtMjdiMi00OTRiLThjMGYtNmY3MDA5YmVlOTE1
LzEvQ0p5TWZ6TkFVOGlwQ2pRSUFKN3owN2VvTGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJR7GOT0
u19yykhv4AVPschpmBJA33RkIhgfJqTAX1eQXJdEhv9rVSNcTz3DEzGjySpZVw9B
voBymBarLX7CoEnQuULtSMnJxTtfenErvenNEef0+hkxUANc2iVXOVonYQfckbYl
xlQfTb110A3FISDKjH5/HlU/We77XbSYhqPXOHLnMcuHuyBDLQAM2qa3LLb20q1n
LFpLEbdl6FrEVZSYwcpyHOiDXNbgsBMjo7yX5LU7XH7k0w9bGjmb+9OEMbj8Z/o7
x748D0k7pAmV7acMfeYOHiotNOzWwn3cnOpI8THt9qIm4OiOQgo8v7hnymnsZ1F8
fMzhRltrihJ7rA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:46 2024 by rpki-client on console-fra.rpki-client.org