Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
File:                     8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json)
Hash identifier:          Wu+K88wpU6xB/A9kij8RwABx/aoUnd7/qk23vL0eqVA=
Subject key identifier:   32:80:FB:9D:06:EA:92:C0:39:98:1B:E1:FC:85:55:49:D2:C5:8A:27
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Certificate issuer:       /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial:       019358405111223FA734C8639BC46B6FAF26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 09:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:30 +0000
Files and hashes:         1: 38abtJSj_1tVTHjnfbMFySnt0Ck.roa (hash: rihVHZASi4lYq50CCrCrvD+5Ev3qocMvbEx1ZzfHph4=)
                          2: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: HtUQIBfY4npKxUWtxqMxNaO4mn+6f/EgSC2n4H9qjFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:51:11:22:3f:a7:34:c8:63:9b:c4:6b:6f:af:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
        Validity
            Not Before: Nov 23 09:00:30 2024 GMT
            Not After : Nov 24 09:00:30 2024 GMT
        Subject: CN=3280fb9d06ea92c039981be1fc855549d2c58a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e9:27:a4:93:b7:1c:a5:11:38:72:54:df:a9:
                    da:70:fd:30:c7:d9:73:1b:57:0e:27:18:28:61:97:
                    d8:54:cb:c5:7a:61:54:ac:aa:5c:04:e8:a3:ee:c9:
                    93:0c:d2:48:44:ca:63:db:33:3a:21:dd:8c:e4:27:
                    2f:46:74:54:fe:8e:43:36:4f:2e:8c:9e:da:20:93:
                    2d:81:5c:36:8b:5f:93:0e:8e:54:2d:f4:4d:74:52:
                    a8:5f:9a:7e:ae:34:d1:df:d8:ce:71:64:d4:d8:fb:
                    6b:b6:c7:c3:bd:00:77:0e:4b:25:ef:48:6a:2b:a9:
                    8a:ac:38:3a:c9:5f:d7:dc:6c:34:27:21:50:7e:7b:
                    ab:f1:93:b7:5a:09:64:1f:1d:56:5c:2e:93:2e:64:
                    a4:8d:99:f5:25:38:ae:df:8f:4e:2f:4a:a6:29:6a:
                    1d:e2:ef:b0:66:b3:a6:75:ef:17:f0:aa:2a:4e:6d:
                    9e:6a:46:86:ac:34:ed:a7:96:b7:4b:c4:6f:45:25:
                    03:c4:55:70:a8:6c:4f:ac:20:60:dd:21:db:43:2c:
                    32:70:16:27:d0:9e:d0:59:92:16:0a:70:1c:a0:40:
                    1a:6e:be:81:bd:d2:56:a1:0e:48:20:e9:3b:07:5a:
                    9c:aa:4f:96:85:e4:9a:62:b6:e8:e7:f7:53:65:6a:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:80:FB:9D:06:EA:92:C0:39:98:1B:E1:FC:85:55:49:D2:C5:8A:27
            X509v3 Authority Key Identifier:
                keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:26:3a:a7:bc:6b:1d:5e:e7:1d:58:85:5c:92:33:37:c0:c2:
         95:8b:fa:cf:df:c7:8a:69:dc:6a:31:19:24:73:17:0f:0b:00:
         5d:da:58:33:c5:b0:50:73:15:85:6f:d1:c0:ef:38:8d:6d:dd:
         d8:6f:b7:68:dd:c9:0e:1b:f7:ab:7c:9f:1a:60:82:66:7a:d8:
         1b:83:14:7d:a0:31:7d:d1:79:8b:ef:1a:76:71:e5:6d:41:75:
         68:45:2b:4f:80:12:c9:63:f3:46:76:9b:76:41:ad:65:a2:df:
         b2:dc:4f:b7:5d:90:e1:ad:15:e9:9c:9f:96:99:8c:a6:21:2c:
         7f:c7:84:12:db:a2:9d:c7:b1:fc:db:bd:44:2e:97:a3:5f:5c:
         82:87:9f:17:51:dc:93:f5:c8:45:88:37:57:ff:0a:9c:7b:7f:
         99:e9:1b:be:ad:55:56:7f:f7:ea:54:19:ec:c6:f5:54:b1:1c:
         8d:b7:80:cf:bf:fc:51:e2:3e:2d:7d:a5:22:04:18:8c:e0:7c:
         c7:eb:d6:4c:71:dc:90:b7:c7:65:1d:19:dd:d1:34:2b:9f:d4:
         14:16:d0:48:7d:3e:4e:dd:0c:be:05:c0:02:52:d4:2f:8f:9d:
         f9:17:55:c2:c8:3b:fd:86:0f:58:4d:b1:30:28:27:f9:23:45:
         88:a6:1d:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYQFERIj+nNMhjm8Rrb68mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYWY4YmI5OGU0MDU1MzllYTk4MzM4NGZhZmE4MmIyYjRi
NzE3MjQwHhcNMjQxMTIzMDkwMDMwWhcNMjQxMTI0MDkwMDMwWjAzMTEwLwYDVQQD
EygzMjgwZmI5ZDA2ZWE5MmMwMzk5ODFiZTFmYzg1NTU0OWQyYzU4YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuknpJO3HKUROHJU36nacP0wx9lz
G1cOJxgoYZfYVMvFemFUrKpcBOij7smTDNJIRMpj2zM6Id2M5CcvRnRU/o5DNk8u
jJ7aIJMtgVw2i1+TDo5ULfRNdFKoX5p+rjTR39jOcWTU2PtrtsfDvQB3Dksl70hq
K6mKrDg6yV/X3Gw0JyFQfnur8ZO3WglkHx1WXC6TLmSkjZn1JTiu349OL0qmKWod
4u+wZrOmde8X8KoqTm2eakaGrDTtp5a3S8RvRSUDxFVwqGxPrCBg3SHbQywycBYn
0J7QWZIWCnAcoEAabr6BvdJWoQ5IIOk7B1qcqk+WheSaYrbo5/dTZWq5+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKA+50G6pLAOZgb4fyFVUnSxYonMB8GA1UdIwQY
MBaAFPGvi7mOQFU56pgzhPr6grK0txckMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGEtTHVZNUFWVG5xbURPRS12cUNzclMzRnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yZWM0YjMtZTY1ZC00NjEyLTkzMDQt
YTM5MzAzZDg1MDY2LzEvOGEtTHVZNUFWVG5xbURPRS12cUNzclMzRnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8yZWM0YjMtZTY1ZC00NjEyLTkzMDQtYTM5MzAzZDg1MDY2
LzEvOGEtTHVZNUFWVG5xbURPRS12cUNzclMzRnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSY6p7xr
HV7nHViFXJIzN8DClYv6z9/HimncajEZJHMXDwsAXdpYM8WwUHMVhW/RwO84jW3d
2G+3aN3JDhv3q3yfGmCCZnrYG4MUfaAxfdF5i+8adnHlbUF1aEUrT4ASyWPzRnab
dkGtZaLfstxPt12Q4a0V6ZyflpmMpiEsf8eEEtuincex/Nu9RC6Xo19cgoefF1Hc
k/XIRYg3V/8KnHt/mekbvq1VVn/36lQZ7Mb1VLEcjbeAz7/8UeI+LX2lIgQYjOB8
x+vWTHHckLfHZR0Z3dE0K5/UFBbQSH0+Tt0MvgXAAlLUL4+d+RdVwsg7/YYPWE2x
MCgn+SNFiKYd6Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:05 2024 by rpki-client on console-ams.rpki-client.org