Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
File:                     W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft (raw, json)
Hash identifier:          Jqx/bCdb3WKoczziNsLD6/d84DT9Voe1wVo1YvfNBVA=
Subject key identifier:   1B:C1:3A:16:00:A3:F3:E9:14:B6:A6:BB:9B:DF:2D:0D:A5:E1:8B:D3
Authority key identifier: 5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
Certificate issuer:       /CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Certificate serial:       0193568A316C0A1DC5CC190E0828DD4222BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
Manifest number:          0912
Signing time:             Sat 23 Nov 2024 01:01:57 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:57 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:57 +0000
Files and hashes:         1: TvTgrYmQ_olGqObbQ_ETPGb2iH0.roa (hash: myooe34znyufBQhi45X2XrbvqcbL47uAowfq/uGvp7Q=)
                          2: W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl (hash: mAEKqchym7w9bi6GWpO1Tz43oWQRnYW8ryw+qGjMW3k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:31:6c:0a:1d:c5:cc:19:0e:08:28:dd:42:22:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
        Validity
            Not Before: Nov 23 01:01:57 2024 GMT
            Not After : Nov 24 01:01:57 2024 GMT
        Subject: CN=1bc13a1600a3f3e914b6a6bb9bdf2d0da5e18bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:91:df:53:a8:bf:f0:19:51:e5:35:af:f2:e3:
                    64:71:b8:7d:2e:a6:cc:1a:48:cd:8c:e0:01:a3:1b:
                    77:62:22:53:de:39:ee:8e:58:fb:6b:e0:62:cd:e4:
                    94:e7:f6:49:fd:1e:67:6d:1d:da:21:87:75:d0:70:
                    06:ac:6d:19:11:59:cd:1b:a8:01:09:b8:ca:98:d0:
                    ed:97:80:e7:ad:2d:c7:b6:0a:9e:48:2c:1b:1e:f1:
                    d6:45:2a:2e:42:e1:be:39:72:50:4e:30:6f:bc:a8:
                    36:11:45:8e:1d:e0:ce:5b:d8:f6:6e:0a:65:b0:cd:
                    0c:46:e1:3b:a7:c9:a2:42:39:63:3c:ca:ce:6b:67:
                    c7:e3:55:37:4d:ac:49:01:ea:34:fc:d9:21:18:5c:
                    b5:e1:be:f4:09:6e:ef:a9:f0:4d:98:57:fb:63:ba:
                    0b:f1:b2:f3:d6:f5:8b:45:65:b7:76:6a:cf:fb:b5:
                    40:5d:8c:15:fe:55:26:73:d7:a2:ab:bd:1a:c3:0e:
                    03:29:9a:ef:a3:b0:05:0f:53:a0:b7:0d:25:7f:69:
                    66:cb:f2:81:ea:a0:ba:eb:1a:f2:fc:cf:81:ea:84:
                    39:9a:c1:71:b9:0a:e0:97:20:22:54:ab:be:d6:ad:
                    3c:73:3e:7e:4e:37:84:22:66:82:45:1a:81:0e:49:
                    53:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C1:3A:16:00:A3:F3:E9:14:B6:A6:BB:9B:DF:2D:0D:A5:E1:8B:D3
            X509v3 Authority Key Identifier:
                keyid:5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:cb:f1:7b:3f:8d:8a:52:01:c1:5b:5e:fc:66:65:52:e3:27:
         09:28:ce:cc:fd:d5:25:f0:0b:48:5a:48:ab:ab:86:ed:86:a1:
         8d:fc:11:a4:6f:7c:51:be:b8:03:09:97:2b:25:07:6e:66:dd:
         50:f1:e5:af:95:b9:65:54:85:1e:b9:3c:81:9a:a8:98:8a:a8:
         ff:29:e5:ab:60:43:25:0f:d6:07:1d:0d:07:10:c8:dd:1a:23:
         f2:ab:fe:19:b1:bd:ad:8c:ac:3d:97:ff:3d:a7:5c:75:d7:dc:
         f7:a2:53:a2:38:39:23:8c:b9:a4:fd:91:71:c3:49:bf:fe:4c:
         8e:fb:cb:c5:15:b5:1b:71:c1:ba:12:5f:a6:25:96:8c:bc:99:
         7d:55:6c:cd:fd:3c:cc:1e:88:b6:18:3c:5c:cf:38:c2:b8:b6:
         6d:ee:32:ee:61:df:82:b2:a4:5c:97:83:ea:17:db:92:df:59:
         27:c9:87:16:f2:c9:9f:5e:d2:7c:82:62:7b:16:6e:86:1c:cd:
         58:8b:12:10:ba:d2:78:36:9f:60:9d:8f:f5:e4:c3:15:a1:97:
         e2:4c:32:5d:f4:e9:5a:a2:06:42:eb:6f:4c:bb:fa:b3:22:fc:
         6e:b4:ab:16:dd:c0:47:3c:2b:81:8d:06:3b:d2:95:5a:13:22:
         08:05:e0:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWijFsCh3FzBkOCCjdQiK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNGI0NTJkYmZkNGM3MDRiZGE5Y2MyYTRlOTE1ZjQ3MTky
YTdmNzEwHhcNMjQxMTIzMDEwMTU3WhcNMjQxMTI0MDEwMTU3WjAzMTEwLwYDVQQD
EygxYmMxM2ExNjAwYTNmM2U5MTRiNmE2YmI5YmRmMmQwZGE1ZTE4YmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5HfU6i/8BlR5TWv8uNkcbh9LqbM
GkjNjOABoxt3YiJT3jnujlj7a+BizeSU5/ZJ/R5nbR3aIYd10HAGrG0ZEVnNG6gB
CbjKmNDtl4DnrS3HtgqeSCwbHvHWRSouQuG+OXJQTjBvvKg2EUWOHeDOW9j2bgpl
sM0MRuE7p8miQjljPMrOa2fH41U3TaxJAeo0/NkhGFy14b70CW7vqfBNmFf7Y7oL
8bLz1vWLRWW3dmrP+7VAXYwV/lUmc9eiq70aww4DKZrvo7AFD1Ogtw0lf2lmy/KB
6qC66xry/M+B6oQ5msFxuQrglyAiVKu+1q08cz5+TjeEImaCRRqBDklTfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvBOhYAo/PpFLamu5vfLQ2l4YvTMB8GA1UdIwQY
MBaAFFtLRS2/1McEvanMKk6RX0cZKn9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84N2FjNGItYWEyNS00MjhmLWEzNjgt
ZTU4ZWRjNDJmMDRjLzEvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84N2FjNGItYWEyNS00MjhmLWEzNjgtZTU4ZWRjNDJmMDRj
LzEvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsvxez+N
ilIBwVte/GZlUuMnCSjOzP3VJfALSFpIq6uG7YahjfwRpG98Ub64AwmXKyUHbmbd
UPHlr5W5ZVSFHrk8gZqomIqo/ynlq2BDJQ/WBx0NBxDI3Roj8qv+GbG9rYysPZf/
Padcddfc96JTojg5I4y5pP2RccNJv/5MjvvLxRW1G3HBuhJfpiWWjLyZfVVszf08
zB6Ithg8XM84wri2be4y7mHfgrKkXJeD6hfbkt9ZJ8mHFvLJn17SfIJiexZuhhzN
WIsSELrSeDafYJ2P9eTDFaGX4kwyXfTpWqIGQutvTLv6syL8brSrFt3ARzwrgY0G
O9KVWhMiCAXgtA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:15 2024 by rpki-client on console-ams.rpki-client.org