Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
File:                     kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft (raw, json)
Hash identifier:          vj0GKgRJSGwR10LDA2o/sLnpJsyhlH93LAbmyFaut9U=
Subject key identifier:   D3:F7:16:49:7A:9D:20:C1:CB:B0:1B:92:EF:3A:79:47:66:0A:7C:E6
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Certificate issuer:       /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial:       0193568B5DB4DB49209904625682A4FF243C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
Manifest number:          10BB
Signing time:             Sat 23 Nov 2024 01:03:14 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:14 +0000
Manifest next update:     Sun 24 Nov 2024 01:03:14 +0000
Files and hashes:         1: 8sAyQdIJiWZM3B2IhXWQQlfwKvA.roa (hash: y+88ltXd6wd+54rnvjr4qLiFNhKsjw5iejeoCcZj6cQ=)
                          2: TYvFFAXhC5e-CwqbxAjbKqIuYg4.roa (hash: yPBgzx2m3VSPpqUXR8c4rFEK7riTwRQ7s+VbLg5K0Zg=)
                          3: kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl (hash: ciEDByAPZXm5xL4zQt91pJX4lbEjG5Vfyu1nfMAj1nE=)
                          4: ziuRpLzg6DCMdXAIvBzp4IyZaEk.roa (hash: /IqDzJOb/rElqK6hx5Uemq86VOyqp6MzcIS8KqE6WaY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:5d:b4:db:49:20:99:04:62:56:82:a4:ff:24:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
        Validity
            Not Before: Nov 23 01:03:14 2024 GMT
            Not After : Nov 24 01:03:14 2024 GMT
        Subject: CN=d3f716497a9d20c1cbb01b92ef3a7947660a7ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:f5:3d:b4:f9:52:9a:41:12:15:51:22:9b:
                    05:40:97:2b:4f:4d:5a:1c:d4:2a:0a:83:56:9f:06:
                    d3:e4:ba:cd:e3:f1:e7:49:d4:ed:b1:a4:8f:a2:98:
                    91:7c:a3:a2:29:59:58:60:e4:6c:1d:73:1a:24:56:
                    10:50:41:ca:eb:00:1b:9c:8f:91:dd:b5:5a:25:1a:
                    02:63:40:6e:e2:35:8f:b0:4e:52:74:c8:23:39:50:
                    e5:75:4e:36:42:67:bd:71:85:05:d0:6e:63:15:67:
                    a7:32:ce:8b:2b:b5:0f:6b:f7:72:1e:fa:53:3b:af:
                    ea:96:ee:0c:c6:ba:2e:4f:24:0c:1d:37:7a:e0:51:
                    8d:18:12:01:65:02:1e:d3:a3:1d:43:b6:73:ab:4e:
                    e3:a6:07:27:e8:e9:97:0b:62:d6:f6:7e:33:13:74:
                    14:b7:26:5e:60:35:08:64:44:6a:03:bb:fd:36:9d:
                    36:8f:cb:44:06:32:78:2d:01:ab:d4:4e:4e:96:08:
                    9c:66:65:f4:7c:3c:f7:74:a4:1a:99:20:1a:52:fd:
                    10:52:cd:b6:96:a7:6f:5f:bf:e8:18:14:02:b6:da:
                    67:17:e4:fe:89:c3:0e:79:6f:90:0e:aa:5f:2d:4c:
                    2a:5e:5b:99:39:b9:a2:75:0b:50:79:41:ea:c1:43:
                    2a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F7:16:49:7A:9D:20:C1:CB:B0:1B:92:EF:3A:79:47:66:0A:7C:E6
            X509v3 Authority Key Identifier:
                keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:29:ff:d4:72:0a:f9:70:2d:f0:1d:3f:95:49:d7:5e:53:b5:
         c8:1c:30:eb:b4:7b:de:ea:5a:0c:2b:37:02:da:cb:c2:55:d5:
         a5:41:2e:a6:55:97:0b:6b:27:83:12:32:c0:c6:5a:6b:d6:20:
         97:c7:0b:82:fc:88:33:67:d5:69:01:e1:3a:6a:6b:a5:b4:fd:
         9f:1f:56:bc:b5:15:ac:a7:4e:55:30:5a:10:72:59:a8:04:d4:
         b3:28:1c:9f:20:9b:88:a9:30:39:3a:76:2b:2c:f3:9a:5f:4b:
         a0:b4:89:ae:98:03:31:7b:02:02:22:4c:07:77:ae:ba:c5:2d:
         06:97:64:a1:47:bc:f5:0a:a4:27:66:37:dd:fa:de:a4:17:f1:
         a3:c1:da:93:07:63:c2:ae:ad:1b:d4:9d:4f:0b:1e:52:db:15:
         7d:09:1d:f5:52:c2:04:17:cf:53:20:ae:d7:13:be:80:c6:1a:
         96:fc:62:fd:03:a6:d7:d4:e3:62:bc:25:8b:53:20:88:c5:9d:
         d0:c1:e3:f8:67:67:41:76:46:9a:3d:63:d6:70:ca:c2:8e:8e:
         88:1e:2e:8a:6f:7d:82:02:cb:36:3d:b3:9d:d5:36:50:07:06:
         64:16:e9:87:21:77:6e:75:89:98:4b:0c:99:f5:e2:1b:7c:da:
         23:ab:91:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWi12020kgmQRiVoKk/yQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjYwYjIzZmUzYjg2NDJkNmJmNDc1ZjhlYjdmY2FkOWQx
M2M0MTMwHhcNMjQxMTIzMDEwMzE0WhcNMjQxMTI0MDEwMzE0WjAzMTEwLwYDVQQD
EyhkM2Y3MTY0OTdhOWQyMGMxY2JiMDFiOTJlZjNhNzk0NzY2MGE3Y2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLH1PbT5UppBEhVRIpsFQJcrT01a
HNQqCoNWnwbT5LrN4/HnSdTtsaSPopiRfKOiKVlYYORsHXMaJFYQUEHK6wAbnI+R
3bVaJRoCY0Bu4jWPsE5SdMgjOVDldU42Qme9cYUF0G5jFWenMs6LK7UPa/dyHvpT
O6/qlu4MxrouTyQMHTd64FGNGBIBZQIe06MdQ7Zzq07jpgcn6OmXC2LW9n4zE3QU
tyZeYDUIZERqA7v9Np02j8tEBjJ4LQGr1E5OlgicZmX0fDz3dKQamSAaUv0QUs22
lqdvX7/oGBQCttpnF+T+icMOeW+QDqpfLUwqXluZObmidQtQeUHqwUMq7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNP3Fkl6nSDBy7Abku86eUdmCnzmMB8GA1UdIwQY
MBaAFJJmCyP+O4ZC1r9HX463/K2dE8QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21ZTElfNDdoa0xXdjBkZmpyZjhyWjBUeEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZTNiYWMtM2RhMi00ZTQ5LWJkYWIt
MTNlZjFjNDU1Y2M0LzEva21ZTElfNDdoa0xXdjBkZmpyZjhyWjBUeEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZTNiYWMtM2RhMi00ZTQ5LWJkYWItMTNlZjFjNDU1Y2M0
LzEva21ZTElfNDdoa0xXdjBkZmpyZjhyWjBUeEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCn/1HIK
+XAt8B0/lUnXXlO1yBww67R73upaDCs3AtrLwlXVpUEuplWXC2sngxIywMZaa9Yg
l8cLgvyIM2fVaQHhOmprpbT9nx9WvLUVrKdOVTBaEHJZqATUsygcnyCbiKkwOTp2
Kyzzml9LoLSJrpgDMXsCAiJMB3euusUtBpdkoUe89QqkJ2Y33frepBfxo8Hakwdj
wq6tG9SdTwseUtsVfQkd9VLCBBfPUyCu1xO+gMYalvxi/QOm19TjYrwli1MgiMWd
0MHj+GdnQXZGmj1j1nDKwo6OiB4uim99ggLLNj2zndU2UAcGZBbphyF3bnWJmEsM
mfXiG3zaI6uRbw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:44 2024 by rpki-client on console-ams.rpki-client.org