Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
File:                     9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft (raw, json)
Hash identifier:          D2Ojwpo5uYiRR8Uyac/LvbUQ7ZK8/BdB5OlskgKlfK0=
Subject key identifier:   17:AF:A9:D6:6E:FB:B4:FD:2A:71:5A:C0:21:F6:A0:E1:DA:53:5A:6E
Authority key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Certificate issuer:       /CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Certificate serial:       0191F9A2B7DEBBB9DC4310052E8CD7AA09E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
Manifest number:          AF
Signing time:             Mon 16 Sep 2024 07:01:16 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:16 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:16 +0000
Files and hashes:         1: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl (hash: FnIHuzZbuuRojG/n5fkSs0qMciJhB0qwE+Ik3vZ9FeY=)
                          2: RXRev0w2atWuFXVEtwA0ZWEeA9Q.roa (hash: 7Bs5Y39zdPO7/VAdN+CO08GETonNjGrKrkCg0bHyHTQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:b7:de:bb:b9:dc:43:10:05:2e:8c:d7:aa:09:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
        Validity
            Not Before: Sep 16 07:01:16 2024 GMT
            Not After : Sep 17 07:01:16 2024 GMT
        Subject: CN=17afa9d66efbb4fd2a715ac021f6a0e1da535a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:f1:10:9d:8a:c1:44:2d:72:94:e6:27:bb:
                    d3:ff:d7:4f:0b:50:1e:af:fd:84:77:90:fc:5a:f0:
                    04:cb:83:9c:5d:cb:b9:f1:d8:5c:55:65:e9:0a:66:
                    1c:e7:fd:96:ac:41:84:c1:7b:23:58:ae:cf:0c:56:
                    0a:c8:72:82:c2:23:e5:df:14:31:8f:e7:d0:c7:0c:
                    be:b6:72:11:66:35:6d:7f:4b:23:aa:01:d9:07:f4:
                    aa:51:1c:a1:14:1a:37:eb:5b:2f:42:ac:b2:17:10:
                    48:9d:ad:a1:60:fb:38:83:42:ee:4a:b9:16:42:ec:
                    f6:0a:f5:8a:af:05:66:5a:89:b6:df:55:a4:4d:b8:
                    53:26:9b:c8:c7:4d:2b:fe:33:e0:02:cb:1c:63:9c:
                    e1:f3:b3:22:a7:24:ed:04:c2:34:5b:fe:02:e5:32:
                    10:85:78:81:0d:ff:42:24:40:84:77:d1:8a:a2:8a:
                    a6:37:fd:de:ae:61:b2:ba:6d:fe:a4:48:2c:11:de:
                    05:c9:27:83:ad:1d:5d:e2:70:e2:3c:76:4e:00:c8:
                    8f:94:76:8f:01:20:89:02:8b:ca:7f:0f:2a:ee:4f:
                    71:7e:17:12:d5:a9:80:9f:ed:ba:58:6a:b8:7c:e9:
                    12:12:24:9e:1c:51:4d:ba:39:f4:f5:26:2e:95:3f:
                    6e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AF:A9:D6:6E:FB:B4:FD:2A:71:5A:C0:21:F6:A0:E1:DA:53:5A:6E
            X509v3 Authority Key Identifier:
                keyid:F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a8:20:75:b1:13:a3:1a:ca:72:80:85:57:54:9a:57:91:d7:
         e9:c9:71:33:97:ae:22:60:07:ea:27:da:c3:9c:86:6b:38:05:
         7c:61:95:88:a5:39:9d:3a:06:cb:85:36:dc:a7:c5:78:51:68:
         87:bb:db:2f:cc:ed:1c:79:62:19:5f:94:62:15:9f:7b:04:c0:
         63:5d:41:9e:dc:98:cb:87:7b:86:ee:59:b3:e7:05:09:ff:1b:
         f0:ca:4b:56:05:ce:1b:2e:46:23:8d:a8:d9:68:4c:65:56:4e:
         35:83:2c:49:9a:15:f6:4f:ee:98:dc:d6:db:69:5c:e9:d6:03:
         4a:c8:bb:57:50:20:c9:b7:88:a1:eb:0e:fe:18:bd:b8:e2:f3:
         e4:c5:16:1b:cf:fe:7d:e9:f0:37:43:d4:01:aa:b1:ef:9f:b5:
         ba:03:03:90:b6:9b:7f:fc:49:b8:33:fc:5d:88:25:07:08:20:
         c5:94:26:5d:5a:e8:e3:dc:9c:8d:fb:db:fb:3a:5c:d8:e3:b9:
         a4:e3:10:93:bc:11:a5:73:20:60:e9:d7:4b:9a:d9:cb:f8:b2:
         b3:96:fc:c6:8c:12:0b:7b:9b:7a:d0:4a:68:df:38:d1:50:11:
         2b:88:73:5c:d5:a7:62:33:26:41:06:5f:18:bb:d3:fc:9a:b4:
         a6:f0:34:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH5orfeu7ncQxAFLozXqgngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDZmNWM4MGMzY2E4MmNmNDhkZGFiYjYzYzYwNDZhNjgx
MmI3NDMwHhcNMjQwOTE2MDcwMTE2WhcNMjQwOTE3MDcwMTE2WjAzMTEwLwYDVQQD
EygxN2FmYTlkNjZlZmJiNGZkMmE3MTVhYzAyMWY2YTBlMWRhNTM1YTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhTxEJ2KwUQtcpTmJ7vT/9dPC1Ae
r/2Ed5D8WvAEy4OcXcu58dhcVWXpCmYc5/2WrEGEwXsjWK7PDFYKyHKCwiPl3xQx
j+fQxwy+tnIRZjVtf0sjqgHZB/SqURyhFBo361svQqyyFxBIna2hYPs4g0LuSrkW
Quz2CvWKrwVmWom231WkTbhTJpvIx00r/jPgAsscY5zh87MipyTtBMI0W/4C5TIQ
hXiBDf9CJECEd9GKooqmN/3ermGyum3+pEgsEd4FySeDrR1d4nDiPHZOAMiPlHaP
ASCJAovKfw8q7k9xfhcS1amAn+26WGq4fOkSEiSeHFFNujn09SYulT9ucwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBevqdZu+7T9KnFawCH2oOHaU1puMB8GA1UdIwQY
MBaAFPVG9cgMPKgs9I3au2PGBGpoErdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVViMXlBdzhxQ3owamRxN1k4WUVhbWdTdDBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mMTExZmYtYWNlYS00YmU5LWIzNTYt
NTQ2MjliOTJiNjgzLzEvOVViMXlBdzhxQ3owamRxN1k4WUVhbWdTdDBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mMTExZmYtYWNlYS00YmU5LWIzNTYtNTQ2MjliOTJiNjgz
LzEvOVViMXlBdzhxQ3owamRxN1k4WUVhbWdTdDBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaggdbET
oxrKcoCFV1SaV5HX6clxM5euImAH6ifaw5yGazgFfGGViKU5nToGy4U23KfFeFFo
h7vbL8ztHHliGV+UYhWfewTAY11BntyYy4d7hu5Zs+cFCf8b8MpLVgXOGy5GI42o
2WhMZVZONYMsSZoV9k/umNzW22lc6dYDSsi7V1AgybeIoesO/hi9uOLz5MUWG8/+
fenwN0PUAaqx75+1ugMDkLabf/xJuDP8XYglBwggxZQmXVro49ycjfvb+zpc2OO5
pOMQk7wRpXMgYOnXS5rZy/iys5b8xowSC3ubetBKaN840VARK4hzXNWnYjMmQQZf
GLvT/Jq0pvA01g==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:32:19 2024 by rpki-client on console-ams.rpki-client.org