Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
File:                     v9dqdFixnRZfMvDsM9cVaeX0_vk.mft (raw, json)
Hash identifier:          b64yVWYP7L4mbXxvkLqAvASLm8FpIPr71wGyJFJLU5c=
Subject key identifier:   BA:74:01:63:8B:DC:27:A9:95:B8:B6:F9:B2:F4:E1:6A:B7:68:33:E4
Authority key identifier: BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
Certificate issuer:       /CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Certificate serial:       019355766DF86C3DEB415887A5D8F71A479C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
Manifest number:          02D3
Signing time:             Fri 22 Nov 2024 20:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:44 +0000
Files and hashes:         1: CTeb61Cc-IIq87PTHEqX6kmt4Q8.roa (hash: wwmXApzCJ9AuEURIEeEZeUV3kYTXoonBb0LpaLENL4E=)
                          2: v9dqdFixnRZfMvDsM9cVaeX0_vk.crl (hash: StSE65JrnVK3knJ6vZJ5Stuef2TL1V/DjfJDXNxMvDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:6d:f8:6c:3d:eb:41:58:87:a5:d8:f7:1a:47:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
        Validity
            Not Before: Nov 22 20:00:44 2024 GMT
            Not After : Nov 23 20:00:44 2024 GMT
        Subject: CN=ba7401638bdc27a995b8b6f9b2f4e16ab76833e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:2a:92:19:2d:ba:a1:bc:6f:4b:4e:3b:08:
                    c8:63:e3:0c:34:27:a2:9b:ab:e8:38:fa:2d:88:cc:
                    f0:f8:f3:f9:a0:2c:bc:4a:d4:8b:7e:de:2a:c0:1e:
                    05:af:cc:ca:36:da:05:9c:3f:d1:bd:7e:35:f7:63:
                    f2:c3:d4:b3:6f:05:6e:b5:2b:0e:86:b5:6e:b8:cc:
                    63:8e:2a:17:90:eb:40:d2:c7:02:41:5e:b9:df:ab:
                    3b:ab:e7:63:b3:78:39:b9:2c:df:44:cb:8e:85:8c:
                    d8:19:0d:84:0d:22:be:7a:e2:a5:0a:0c:93:b3:1c:
                    0e:cd:e1:0c:34:15:7d:53:94:85:89:6d:4e:a9:3b:
                    2c:d5:c5:88:03:e6:8b:eb:e2:39:88:ba:7e:66:28:
                    fb:1f:c7:a1:85:72:14:05:9b:c3:80:a9:e4:a6:1d:
                    12:ee:c6:4a:f2:fc:09:69:ba:cb:14:c5:c2:a3:c1:
                    1e:d8:07:7c:9a:18:83:18:5c:e9:54:4e:0e:54:41:
                    49:0f:a9:d0:9e:d6:e0:37:99:b1:bb:dc:5c:9a:c0:
                    e7:70:1f:2f:34:41:4e:ce:88:63:69:0e:20:66:ce:
                    f4:5b:ff:25:a1:a0:94:2d:8f:5b:a0:81:61:44:da:
                    b0:e9:eb:e6:3b:f4:94:21:60:a8:ea:04:c7:7c:9c:
                    74:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:74:01:63:8B:DC:27:A9:95:B8:B6:F9:B2:F4:E1:6A:B7:68:33:E4
            X509v3 Authority Key Identifier:
                keyid:BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b6:5b:7a:d5:85:40:4d:2f:c8:7d:d7:54:54:e5:f7:05:3d:
         c5:7a:31:d5:14:dd:62:5e:43:7e:e3:fc:a3:95:a4:b8:b8:7c:
         21:15:69:be:ae:35:36:d1:fc:0c:48:4f:3b:93:0b:48:3e:a1:
         95:4d:79:eb:d8:89:d7:cd:fb:f6:c1:7c:99:2a:6f:50:00:0b:
         6f:73:3b:28:23:c4:5a:b3:b2:65:19:0a:60:54:46:5b:8f:a2:
         2a:a5:e2:06:da:a2:cb:a1:99:63:61:c5:ef:45:da:3c:c2:5a:
         f4:0f:e6:93:f2:1c:1b:8b:86:12:e4:02:1e:b4:b1:1f:98:b8:
         3b:77:e4:14:bd:1d:0d:e5:0e:72:6b:e0:84:c7:4c:4f:c5:08:
         22:1c:2d:8e:b1:16:f6:a0:ad:6c:f2:bb:0b:3c:71:1f:5e:5c:
         fd:a2:a8:36:e6:34:ee:12:54:11:a1:f7:bc:0c:4b:23:f3:57:
         c6:6c:d6:9f:69:f4:a0:26:1f:b9:e4:8e:54:94:59:00:aa:32:
         6f:9e:23:b8:be:a3:fa:e0:46:1a:39:66:63:10:e0:5c:1a:67:
         77:24:43:a5:dd:b5:f2:e9:67:c1:14:49:55:49:84:fa:df:9c:
         2d:55:3e:ec:4f:2e:c8:1e:dd:28:09:dc:ae:46:47:5e:9f:f2:
         f7:92:b6:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVdm34bD3rQViHpdj3GkecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDc2YTc0NThiMTlkMTY1ZjMyZjBlYzMzZDcxNTY5ZTVm
NGZlZjkwHhcNMjQxMTIyMjAwMDQ0WhcNMjQxMTIzMjAwMDQ0WjAzMTEwLwYDVQQD
EyhiYTc0MDE2MzhiZGMyN2E5OTViOGI2ZjliMmY0ZTE2YWI3NjgzM2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPkqkhktuqG8b0tOOwjIY+MMNCei
m6voOPotiMzw+PP5oCy8StSLft4qwB4Fr8zKNtoFnD/RvX4192Pyw9SzbwVutSsO
hrVuuMxjjioXkOtA0scCQV6536s7q+djs3g5uSzfRMuOhYzYGQ2EDSK+euKlCgyT
sxwOzeEMNBV9U5SFiW1OqTss1cWIA+aL6+I5iLp+Zij7H8ehhXIUBZvDgKnkph0S
7sZK8vwJabrLFMXCo8Ee2Ad8mhiDGFzpVE4OVEFJD6nQntbgN5mxu9xcmsDncB8v
NEFOzohjaQ4gZs70W/8loaCULY9boIFhRNqw6evmO/SUIWCo6gTHfJx0ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLp0AWOL3Ceplbi2+bL04Wq3aDPkMB8GA1UdIwQY
MBaAFL/XanRYsZ0WXzLw7DPXFWnl9P75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNWM4MTAtOTEwOS00NzI5LWI0MWQt
YjQ5MWY1YjM5ZWYyLzEvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iNWM4MTAtOTEwOS00NzI5LWI0MWQtYjQ5MWY1YjM5ZWYy
LzEvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbZbetWF
QE0vyH3XVFTl9wU9xXox1RTdYl5DfuP8o5WkuLh8IRVpvq41NtH8DEhPO5MLSD6h
lU1569iJ18379sF8mSpvUAALb3M7KCPEWrOyZRkKYFRGW4+iKqXiBtqiy6GZY2HF
70XaPMJa9A/mk/IcG4uGEuQCHrSxH5i4O3fkFL0dDeUOcmvghMdMT8UIIhwtjrEW
9qCtbPK7CzxxH15c/aKoNuY07hJUEaH3vAxLI/NXxmzWn2n0oCYfueSOVJRZAKoy
b54juL6j+uBGGjlmYxDgXBpndyRDpd218ulnwRRJVUmE+t+cLVU+7E8uyB7dKAnc
rkZHXp/y95K2Pw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:26:38 2024 by rpki-client on console-fra.rpki-client.org