Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
File:                     jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json)
Hash identifier:          44+uLpOZ2LiykfEc92jentw5RNLpcqtbNOCuT/bUILU=
Subject key identifier:   83:7F:AA:6B:A2:CF:F4:C0:0C:77:5B:70:68:4F:E2:A6:5A:EF:6A:86
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Certificate issuer:       /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial:       01935274E4C7CAC0F367045919974FA37A73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
Manifest number:          1301
Signing time:             Fri 22 Nov 2024 06:00:12 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:12 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:12 +0000
Files and hashes:         1: 3dCC3WPgWS4ld6NjnOnmCV7K-hU.roa (hash: ioGwa2ydyd1/TDeSqhJ8S99lo9gST+ls0PYaCQLZG0A=)
                          2: T6iSQkyKBjakEEodlVPbDDqCQHc.roa (hash: xe/Iqva+F5d8lnFNTRhafLBEZp88BNnyQunwAOJXxL0=)
                          3: TTIx1EFo6szOBLESCShWETp5fAs.roa (hash: GNbm7535o++l5SXuoNXkKLMNVAExwrWjVOFeomQru40=)
                          4: iUk2E-Mtc-0VdrvmOYeQgYhgaOE.roa (hash: f9r1MzE52bwC7QyNJV64/jZh4q0iv9KFTqWtiHssNjc=)
                          5: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: rmXpf9O43DogBciI+m+hmOGkTwPctYsZahWwOJuHUBc=)
                          6: q2odES00ZaywK_lyL-iBl5gTFdE.roa (hash: KpmPlX19/0R2vKoSsb6NO3RUYZu0I5YabHEN8hdgPnQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:74:e4:c7:ca:c0:f3:67:04:59:19:97:4f:a3:7a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
        Validity
            Not Before: Nov 22 06:00:12 2024 GMT
            Not After : Nov 23 06:00:12 2024 GMT
        Subject: CN=837faa6ba2cff4c00c775b70684fe2a65aef6a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:05:98:79:65:21:9f:ee:41:6a:dd:b7:2f:
                    6a:31:20:c9:81:02:55:79:0a:36:ca:fe:fb:42:50:
                    80:0c:af:c2:3d:b4:d2:fa:a7:1a:4c:97:27:d5:ef:
                    11:53:45:01:a3:c8:0b:95:4e:a0:23:68:11:d8:2e:
                    5c:c4:29:6e:1b:20:4e:fb:47:3b:58:57:bb:ec:23:
                    1c:a3:51:9d:42:08:40:f7:e8:5f:fd:94:3b:57:f0:
                    fb:77:0a:97:74:02:44:c0:17:2b:7a:17:ad:ca:71:
                    00:2d:7b:ca:d3:c5:4c:e3:75:de:c2:7f:c9:f0:1e:
                    2d:24:7e:43:c3:cb:5f:6d:84:a4:81:d0:45:ab:9b:
                    74:bb:69:2d:cc:76:f6:33:29:9a:fc:35:e3:2d:ca:
                    92:3f:a2:30:bb:7a:42:2d:8e:e1:cc:38:5c:f4:a1:
                    8f:ac:f1:93:d9:fd:13:5b:82:7d:d3:2b:31:8e:df:
                    31:20:a2:34:65:18:0e:18:03:40:5f:36:da:13:3f:
                    2d:7b:c1:dc:82:df:c9:16:92:47:7a:e2:33:9b:22:
                    fd:10:26:7a:ad:2f:26:03:7b:78:dd:ef:fe:3d:eb:
                    b6:71:60:b7:d1:5b:0a:6a:57:98:00:da:16:a6:27:
                    7e:67:b7:b3:fb:93:7b:7f:56:f8:89:0d:37:33:34:
                    b1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7F:AA:6B:A2:CF:F4:C0:0C:77:5B:70:68:4F:E2:A6:5A:EF:6A:86
            X509v3 Authority Key Identifier:
                keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:8e:ed:66:2c:63:c3:d3:ff:34:dc:c8:c1:a7:83:da:86:0e:
         21:03:7c:75:ee:87:ec:62:59:87:df:a2:ed:98:ec:b8:90:ef:
         23:be:4c:50:9b:12:97:d1:62:71:32:9e:8d:a9:a1:56:44:ea:
         8b:d5:c6:a6:3e:82:27:20:cc:f2:18:84:9e:bb:df:21:8f:66:
         73:18:29:a8:7f:b0:13:0a:3b:2e:88:23:ca:f5:5d:0e:cb:9d:
         5b:45:ec:cc:f5:0f:a4:74:46:44:13:6e:82:ac:08:20:e3:a1:
         11:90:97:db:79:4f:00:64:cb:4c:20:fd:19:78:d1:0e:68:7d:
         87:9d:54:4b:e7:5f:2e:17:f5:09:95:e9:0c:5d:9c:42:66:1d:
         dc:ca:b0:c5:b6:99:89:b7:57:37:9b:ee:4b:f6:68:80:7e:8e:
         be:3b:aa:d6:74:19:81:73:a0:24:15:c7:9d:05:82:f2:bb:82:
         31:a2:1a:b7:de:b5:0c:69:6a:81:9c:6f:df:f0:4d:4f:a5:3e:
         b3:14:c6:84:fd:57:31:ad:48:be:c4:89:89:12:86:27:71:4c:
         d3:3d:2e:1a:cd:71:73:64:55:68:d2:1c:0b:ce:61:b7:a3:4e:
         aa:f6:3d:54:ea:39:34:bf:64:29:21:25:16:73:62:af:53:92:
         b5:38:f1:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSdOTHysDzZwRZGZdPo3pzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYTgyNGJjNjMxY2NlZTFhZTk5ZDcxMDNhZmQyZGM3NGYx
ZTI5YzQwHhcNMjQxMTIyMDYwMDEyWhcNMjQxMTIzMDYwMDEyWjAzMTEwLwYDVQQD
Eyg4MzdmYWE2YmEyY2ZmNGMwMGM3NzViNzA2ODRmZTJhNjVhZWY2YTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVsFmHllIZ/uQWrdty9qMSDJgQJV
eQo2yv77QlCADK/CPbTS+qcaTJcn1e8RU0UBo8gLlU6gI2gR2C5cxCluGyBO+0c7
WFe77CMco1GdQghA9+hf/ZQ7V/D7dwqXdAJEwBcrehetynEALXvK08VM43Xewn/J
8B4tJH5Dw8tfbYSkgdBFq5t0u2ktzHb2Myma/DXjLcqSP6Iwu3pCLY7hzDhc9KGP
rPGT2f0TW4J90ysxjt8xIKI0ZRgOGANAXzbaEz8te8Hcgt/JFpJHeuIzmyL9ECZ6
rS8mA3t43e/+Peu2cWC30VsKaleYANoWpid+Z7ez+5N7f1b4iQ03MzSxdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIN/qmuiz/TADHdbcGhP4qZa72qGMB8GA1UdIwQY
MBaAFI2oJLxjHM7hrpnXEDr9LcdPHinEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUt
Mzg2YzFmOGIwNjQwLzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUtMzg2YzFmOGIwNjQw
LzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABY7tZixj
w9P/NNzIwaeD2oYOIQN8de6H7GJZh9+i7ZjsuJDvI75MUJsSl9FicTKejamhVkTq
i9XGpj6CJyDM8hiEnrvfIY9mcxgpqH+wEwo7LogjyvVdDsudW0XszPUPpHRGRBNu
gqwIIOOhEZCX23lPAGTLTCD9GXjRDmh9h51US+dfLhf1CZXpDF2cQmYd3MqwxbaZ
ibdXN5vuS/ZogH6Ovjuq1nQZgXOgJBXHnQWC8ruCMaIat961DGlqgZxv3/BNT6U+
sxTGhP1XMa1IvsSJiRKGJ3FM0z0uGs1xc2RVaNIcC85ht6NOqvY9VOo5NL9kKSEl
FnNir1OStTjxGw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:07 2024 by rpki-client on console-fra.rpki-client.org