Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
File:                     J5O96Uauk208rME2pfMjnt8kMfQ.mft (raw, json)
Hash identifier:          qARAnKTkS1MCDl6HIy8+zOEOHHGm1UWiauu6hsVTUc0=
Subject key identifier:   48:21:38:02:57:60:EB:B0:70:02:01:18:A5:D5:BF:10:59:C3:81:7C
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Certificate issuer:       /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial:       01947EDDC11EAD5D1A5EB7D2A4630CCFE2EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
Manifest number:          0EC0
Signing time:             Sun 19 Jan 2025 14:00:49 +0000
Manifest this update:     Sun 19 Jan 2025 14:00:49 +0000
Manifest next update:     Mon 20 Jan 2025 14:00:49 +0000
Files and hashes:         1: 7E5LSfCOnSbjv-AVC1nxJJ66F4U.roa (hash: /aIHlfM99fuCwlGxN5/ehUDLpA24+vyDEzZMgylijKg=)
                          2: 9UkCw4b12dxaFQuWu2BWrAq18cs.roa (hash: uCtVg42ZHDXRQtsH4hBM45QWmlQhdogsHZ3bdPv3hOo=)
                          3: J5O96Uauk208rME2pfMjnt8kMfQ.crl (hash: d9/V89drvetaBThPd7CkiqzItMhHad3rsKwSpFsdh1o=)
                          4: Lzxta0jd7ucvehlsvKMLCGGj4SU.roa (hash: r2f4C1ycLWis+wP1tatuwRPmqShhZKPPE1FJIgRZw1w=)
                          5: ONAb3aa9aLqBAH1nZ2X-0Z8C9Vk.roa (hash: toxq5hd68ktpiB99iFz4dER/H0vTabk/sYSInN7166g=)
                          6: P_96blpHfAQM3voIBaqDmBhs-8E.roa (hash: R9hyFEujTVmaNvCmjtuWK6MWoWwhFPOAcCmIzjoPwgM=)
                          7: ZtPUyk_TNktoLC4Kb0JqAQbyro0.roa (hash: AOW26RlAnZ0u9tHghS8csH7uDfnP5ryVT/Rp+gEYBlU=)
                          8: ulUXrUDPWH1jBF3XUvGFq6u9UBA.roa (hash: JO8Wuf/EekqDvWZVFwjNa4p80lEXLhg9dIYBQ3yRrjk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Jan 2025 07:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:7e:dd:c1:1e:ad:5d:1a:5e:b7:d2:a4:63:0c:cf:e2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
        Validity
            Not Before: Jan 19 14:00:49 2025 GMT
            Not After : Jan 20 14:00:49 2025 GMT
        Subject: CN=482138025760ebb070020118a5d5bf1059c3817c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c6:e1:8d:db:d7:27:13:c3:5a:ec:ed:75:c1:
                    53:56:01:8d:53:90:c3:7d:ad:6c:48:47:68:af:71:
                    8f:fb:33:49:ef:f8:af:07:b7:f2:f8:8a:d7:e6:ec:
                    d4:23:5e:bb:2d:2f:e4:74:cd:89:20:7f:ed:fe:de:
                    f8:d7:5e:c7:38:a0:1e:1a:e1:19:ab:02:40:bf:16:
                    9b:70:0e:87:ad:a8:f4:27:6e:12:c9:6e:31:7c:6c:
                    0b:19:7f:82:39:30:96:77:61:9b:ee:70:0e:ed:8b:
                    cf:d1:04:fa:b9:b8:67:9e:25:4e:2f:c7:e7:72:ba:
                    90:04:20:de:44:3d:f4:76:68:1f:92:b8:b4:4d:10:
                    9f:58:ad:b6:aa:5b:66:2e:ab:57:7b:fc:62:d2:0a:
                    11:cc:05:d4:02:b5:56:da:aa:9c:a4:70:84:f1:90:
                    fc:c4:ff:bb:55:32:8f:fc:0a:62:ef:82:b0:5d:eb:
                    b4:0d:f7:1d:bc:c2:dd:ec:fd:99:25:78:21:c1:7a:
                    0e:17:cb:21:cf:6d:7d:85:4e:0b:89:bc:a7:b3:15:
                    69:6d:e0:d7:b4:74:9a:f5:5d:e3:8a:18:9a:49:1e:
                    22:2c:11:4a:2a:a1:42:c3:25:4c:ed:02:92:e3:6d:
                    ff:cf:10:c9:31:ad:99:42:a7:02:4f:b0:26:7f:3e:
                    48:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:21:38:02:57:60:EB:B0:70:02:01:18:A5:D5:BF:10:59:C3:81:7C
            X509v3 Authority Key Identifier:
                keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e5:c5:af:f1:2a:72:7c:b5:c7:4b:bf:fe:f9:2d:42:cf:c0:
         14:cf:88:ce:22:57:72:b5:44:57:fa:8f:fe:4b:98:5c:0e:3e:
         10:06:bf:94:f5:8f:f5:a5:08:a6:f4:3b:b4:4c:54:16:b4:53:
         41:64:24:5f:ab:f1:a6:cd:f1:53:fe:6f:10:38:27:5b:cc:f3:
         c8:f4:9b:10:89:7e:cb:db:bf:bf:be:04:d4:33:98:00:d6:08:
         53:b4:2b:c4:16:d4:a7:bd:83:c1:c7:89:a7:7f:a7:78:35:68:
         00:39:f1:11:e3:52:8a:50:c6:cb:1a:43:72:dd:5a:7f:16:47:
         15:80:38:a2:90:cc:2c:37:7b:f7:f3:47:eb:b7:61:c9:84:c9:
         55:0b:e6:a8:1d:2e:29:a0:38:e3:47:6a:7d:08:05:33:20:f9:
         d4:ed:82:cc:d5:bc:c6:84:76:d3:42:d0:f0:87:6b:0b:26:a2:
         94:5f:cf:24:26:0e:63:f8:67:fb:ae:95:9d:01:81:8e:75:9b:
         29:ee:89:78:99:26:45:44:fd:50:b4:cb:ad:2d:7b:54:8f:0d:
         98:12:95:47:d1:28:f3:6e:3e:ea:a5:35:e3:db:b3:fd:1b:16:
         ba:0d:24:10:61:46:d0:d4:ef:81:1e:1e:f6:d5:26:77:57:f6:
         54:bc:d3:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZR+3cEerV0aXrfSpGMMz+LsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy
NDMxZjQwHhcNMjUwMTE5MTQwMDQ5WhcNMjUwMTIwMTQwMDQ5WjAzMTEwLwYDVQQD
Eyg0ODIxMzgwMjU3NjBlYmIwNzAwMjAxMThhNWQ1YmYxMDU5YzM4MTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcbhjdvXJxPDWuztdcFTVgGNU5DD
fa1sSEdor3GP+zNJ7/ivB7fy+IrX5uzUI167LS/kdM2JIH/t/t74117HOKAeGuEZ
qwJAvxabcA6Hraj0J24SyW4xfGwLGX+COTCWd2Gb7nAO7YvP0QT6ubhnniVOL8fn
crqQBCDeRD30dmgfkri0TRCfWK22qltmLqtXe/xi0goRzAXUArVW2qqcpHCE8ZD8
xP+7VTKP/Api74KwXeu0DfcdvMLd7P2ZJXghwXoOF8shz219hU4LibynsxVpbeDX
tHSa9V3jihiaSR4iLBFKKqFCwyVM7QKS423/zxDJMa2ZQqcCT7Amfz5I3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEghOAJXYOuwcAIBGKXVvxBZw4F8MB8GA1UdIwQY
MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et
OTJjM2JmNzRhOTdiLzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi
LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheXFr/Eq
cny1x0u//vktQs/AFM+IziJXcrVEV/qP/kuYXA4+EAa/lPWP9aUIpvQ7tExUFrRT
QWQkX6vxps3xU/5vEDgnW8zzyPSbEIl+y9u/v74E1DOYANYIU7QrxBbUp72DwceJ
p3+neDVoADnxEeNSilDGyxpDct1afxZHFYA4opDMLDd79/NH67dhyYTJVQvmqB0u
KaA440dqfQgFMyD51O2CzNW8xoR200LQ8IdrCyailF/PJCYOY/hn+66VnQGBjnWb
Ke6JeJkmRUT9ULTLrS17VI8NmBKVR9Eo824+6qU149uz/RsWug0kEGFG0NTvgR4e
9tUmd1f2VLzThA==
-----END CERTIFICATE-----
Generated at Sun Jan 19 17:02:45 2025 by rpki-client on console-ams.rpki-client.org