Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
File:                     ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json)
Hash identifier:          qC84oLdE9l4rDQmjuqryae19Zq7Jw5r7qoEqrlKnST8=
Subject key identifier:   C5:CA:AF:67:CC:36:C4:04:43:DA:92:1E:34:69:03:E6:5A:87:00:FA
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Certificate issuer:       /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial:       0193553FB7DEEC4389FEDA147F996607CF8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
Manifest number:          12FC
Signing time:             Fri 22 Nov 2024 19:00:59 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:59 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:59 +0000
Files and hashes:         1: 6Xtotq83bhxmhIZewQ-NmFHGbbQ.roa (hash: afXBLJTwYVfxNLCvCea95Fce/8bf05pDglpD0/FLo7U=)
                          2: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: YuSjEYegol7yLRaJj70vVzUaoaZFpstjW89faQ9Vcms=)
                          3: zNk1AsMq0OpwJPuzJBmc38J88gg.roa (hash: FSPeeafwHLRH8ZNF+hfBuEcdDjN0kOK9Nk3pmEjDFWU=)
                          4: zjI3SwSi2E822HBMquFH8gUJDKA.roa (hash: 3HjeFdwQGazf6DXzo6ARvl8DrC1R+1vh9PRGzSEoYFg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:b7:de:ec:43:89:fe:da:14:7f:99:66:07:cf:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
        Validity
            Not Before: Nov 22 19:00:59 2024 GMT
            Not After : Nov 23 19:00:59 2024 GMT
        Subject: CN=c5caaf67cc36c40443da921e346903e65a8700fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:cb:4f:6b:cc:3c:4f:b0:0e:e3:ca:59:f2:
                    ee:2d:83:4e:f0:87:50:72:56:e7:e7:9d:37:92:2c:
                    35:ca:34:49:78:1b:40:04:c0:ea:f6:e8:fb:c1:00:
                    29:93:da:55:43:85:7f:0c:b8:7b:0c:3a:38:fa:84:
                    85:5f:9f:d8:d6:3a:cc:54:3c:3e:bd:c0:e2:18:9a:
                    c8:0b:68:d6:63:5c:a8:e5:17:45:f1:50:84:72:7d:
                    43:01:b0:39:db:60:b1:c7:75:9b:4a:06:4d:4f:63:
                    63:99:3a:76:e8:cd:9b:df:2c:da:31:0a:a2:d9:5a:
                    a9:ec:5e:37:38:a2:25:e5:21:be:2e:42:f7:f7:f0:
                    4f:59:88:63:17:3d:08:f9:4e:16:ee:1c:11:71:40:
                    bd:5b:04:04:6d:7b:1f:ab:26:fa:8d:88:a1:b1:b6:
                    f3:d1:73:ff:1b:20:40:7f:17:49:01:ad:58:e6:98:
                    b7:fe:06:10:26:82:78:77:c0:44:3f:af:79:9e:14:
                    4e:81:84:c5:9d:70:75:75:f3:f9:e9:c0:1a:d7:19:
                    5d:c8:33:10:82:db:b6:07:2b:0a:a5:b2:5e:29:01:
                    81:6a:df:1d:94:6d:a7:2f:29:a9:db:0a:7d:71:60:
                    0a:40:61:99:3a:58:13:a3:f6:f9:21:84:e6:68:0c:
                    b8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CA:AF:67:CC:36:C4:04:43:DA:92:1E:34:69:03:E6:5A:87:00:FA
            X509v3 Authority Key Identifier:
                keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:1b:08:c2:4a:14:41:a9:2a:42:65:e7:4b:02:ec:1f:62:53:
         22:e5:5a:d9:a3:48:15:20:c2:fe:98:7b:a1:31:e5:2d:3a:16:
         f6:83:03:0e:ea:b5:01:15:18:76:5c:f4:04:87:04:b0:ff:36:
         7a:de:8b:dc:58:54:ad:9b:d9:d5:93:5f:22:e1:1f:78:fc:28:
         bc:5d:e6:1a:49:ed:0c:1c:a5:eb:2a:bf:9e:b5:57:05:dd:6c:
         ea:4e:02:2d:86:20:7e:d6:9c:98:c2:88:d7:69:6f:6b:82:11:
         f8:5a:48:91:cd:05:4c:06:43:a1:b6:7e:aa:0e:c4:64:b8:02:
         8f:4c:f1:61:da:32:40:0b:ce:7b:72:8f:14:9c:05:bc:db:ef:
         4a:4b:4b:54:1a:23:b8:a3:33:07:20:37:26:08:ab:90:3f:24:
         bc:39:32:b8:07:3d:cb:fa:76:b5:a6:71:4a:18:b8:d3:37:00:
         79:b6:c3:85:e7:0f:05:9b:30:5a:23:8c:0d:ce:f9:a9:34:2e:
         db:30:17:14:8c:1d:d2:78:40:66:fb:f4:2b:5f:50:84:ef:32:
         d8:41:b3:aa:e9:47:4f:e1:24:2f:11:7a:1e:7e:90:2a:46:7f:
         1f:81:e8:c0:f5:0a:6b:27:fd:e3:12:c7:a8:30:fb:3d:5f:39:
         89:71:9a:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVP7fe7EOJ/toUf5lmB8+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MzUxYzQ3M2ExNmJhMzhmYWI0ZDUxNzA1OTIyNWUwZjEz
M2M4YmYwHhcNMjQxMTIyMTkwMDU5WhcNMjQxMTIzMTkwMDU5WjAzMTEwLwYDVQQD
EyhjNWNhYWY2N2NjMzZjNDA0NDNkYTkyMWUzNDY5MDNlNjVhODcwMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKnLT2vMPE+wDuPKWfLuLYNO8IdQ
clbn5503kiw1yjRJeBtABMDq9uj7wQApk9pVQ4V/DLh7DDo4+oSFX5/Y1jrMVDw+
vcDiGJrIC2jWY1yo5RdF8VCEcn1DAbA522Cxx3WbSgZNT2NjmTp26M2b3yzaMQqi
2Vqp7F43OKIl5SG+LkL39/BPWYhjFz0I+U4W7hwRcUC9WwQEbXsfqyb6jYihsbbz
0XP/GyBAfxdJAa1Y5pi3/gYQJoJ4d8BEP695nhROgYTFnXB1dfP56cAa1xldyDMQ
gtu2BysKpbJeKQGBat8dlG2nLymp2wp9cWAKQGGZOlgTo/b5IYTmaAy42wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXKr2fMNsQEQ9qSHjRpA+ZahwD6MB8GA1UdIwQY
MBaAFJY1HEc6Fro4+rTVFwWSJeDxM8i/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hNTM3YzAtZmQ0Yi00M2I2LTg4OTEt
ZDU3MzczYmY1MTYyLzEvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hNTM3YzAtZmQ0Yi00M2I2LTg4OTEtZDU3MzczYmY1MTYy
LzEvbGpVY1J6b1d1amo2dE5VWEJaSWw0UEV6eUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhsIwkoU
QakqQmXnSwLsH2JTIuVa2aNIFSDC/ph7oTHlLToW9oMDDuq1ARUYdlz0BIcEsP82
et6L3FhUrZvZ1ZNfIuEfePwovF3mGkntDByl6yq/nrVXBd1s6k4CLYYgftacmMKI
12lva4IR+FpIkc0FTAZDobZ+qg7EZLgCj0zxYdoyQAvOe3KPFJwFvNvvSktLVBoj
uKMzByA3JgirkD8kvDkyuAc9y/p2taZxShi40zcAebbDhecPBZswWiOMDc75qTQu
2zAXFIwd0nhAZvv0K19QhO8y2EGzqulHT+EkLxF6Hn6QKkZ/H4HowPUKayf94xLH
qDD7PV85iXGa6g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:33 2024 by rpki-client on console-ams.rpki-client.org