Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
File:                     zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json)
Hash identifier:          RJqVTzvoo8HWIoKtS9JRGjH9do3Tl4pikIHTpJ76cc8=
Subject key identifier:   B9:32:CD:DA:06:A9:E5:A9:6F:89:57:22:16:3E:62:4A:22:7E:4E:9F
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Certificate issuer:       /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial:       01935878F51B885577DA142383E6F20B7159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
Manifest number:          05F9
Signing time:             Sat 23 Nov 2024 10:02:22 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:22 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:22 +0000
Files and hashes:         1: 9tU3y2geCUDLasrk6ieYzxld4qk.roa (hash: uZKss6VTDVQu/jjjUNwxO8BRwHWKBQP0+peOJpgHLEE=)
                          2: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: vMO75HMpjLy/9UbyASe+W7vGeN+wBxRBwg4PjPPLYkw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:f5:1b:88:55:77:da:14:23:83:e6:f2:0b:71:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
        Validity
            Not Before: Nov 23 10:02:22 2024 GMT
            Not After : Nov 24 10:02:22 2024 GMT
        Subject: CN=b932cdda06a9e5a96f895722163e624a227e4e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:18:ae:fd:65:f8:ec:02:cd:ab:8e:dc:2f:
                    6e:27:b0:28:ae:b8:79:61:44:04:81:32:cc:2a:04:
                    ff:cf:62:1d:8d:9d:ff:dd:24:5e:27:bb:ca:6c:d6:
                    27:a8:7c:bf:26:a3:15:07:40:bf:43:de:47:21:1d:
                    28:a4:0f:bb:52:96:db:23:dd:08:9b:f0:88:ce:d8:
                    9e:8c:63:d8:71:b0:31:c8:b6:d7:70:e9:d3:66:84:
                    09:20:c4:a6:0c:8b:b1:61:b2:5d:6d:3b:2c:cc:9f:
                    57:26:f1:ef:ad:31:ca:a5:74:5f:68:35:e5:bb:00:
                    cd:26:31:77:88:27:29:5b:b1:e9:08:96:ad:f1:4b:
                    c5:81:e8:b1:5d:66:00:23:f8:9a:d8:ff:f1:82:b1:
                    09:65:77:f0:de:e8:40:16:ac:f0:60:f5:76:0f:27:
                    41:e8:58:35:24:74:6e:0b:ce:54:02:93:df:46:61:
                    d2:8c:e5:06:30:b3:74:6e:d7:e9:e3:ee:4a:4e:21:
                    9c:49:37:a5:70:9d:83:1e:af:70:59:7f:27:36:bf:
                    f4:80:04:e6:c8:05:4e:c4:0a:db:65:30:b7:4d:87:
                    bb:60:6b:1a:af:a2:8a:3d:8c:05:df:0e:c5:5a:55:
                    bd:9d:bb:7f:a5:8e:3b:0d:73:b7:e5:c7:b5:0d:3b:
                    79:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:32:CD:DA:06:A9:E5:A9:6F:89:57:22:16:3E:62:4A:22:7E:4E:9F
            X509v3 Authority Key Identifier:
                keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:88:55:62:46:88:35:d0:f0:ed:11:13:50:cb:23:e2:20:91:
         6c:a1:a9:dd:54:0f:a3:75:7a:9e:2e:03:38:78:72:b9:c2:9f:
         16:be:17:0b:b6:65:09:64:ea:5d:33:34:17:56:75:90:e4:9b:
         02:89:01:c4:9f:4c:39:e1:00:79:f8:8b:af:dd:1b:52:67:7e:
         8a:c9:f6:0b:24:9d:4a:66:e2:3f:5c:3f:4c:e4:fa:55:56:ba:
         1a:4c:ea:24:a1:10:a5:e2:61:c2:59:d1:dc:b2:b8:7a:84:e8:
         d7:2a:83:37:72:08:b2:75:8e:41:9e:2d:16:20:9b:6f:66:8a:
         09:7b:2a:5c:2b:33:51:12:7f:34:93:45:d3:00:9d:89:b9:6a:
         75:24:ae:12:38:e1:64:f3:0d:b4:28:df:30:c6:97:c1:78:31:
         a6:e5:61:b2:ea:4a:d3:a7:da:47:bf:7b:a2:6f:09:7a:97:30:
         b9:78:57:ae:9a:78:86:b7:9b:84:75:57:b5:1f:4d:9e:dc:4c:
         98:ae:e1:2e:6e:fa:21:29:3b:08:90:66:14:b4:c1:4c:f2:c8:
         55:7e:0a:83:12:d7:b1:c7:b4:d6:99:3f:b9:b5:a9:51:23:ef:
         f8:57:13:1d:1c:e8:a3:e0:ea:1a:de:6e:e2:fe:af:81:35:c6:
         3a:30:09:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYePUbiFV32hQjg+byC3FZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjYyY2JkNmNmN2U4MDgyMjRmNmNmODcyNWUzNmUyYTk2
NTM1MmMwHhcNMjQxMTIzMTAwMjIyWhcNMjQxMTI0MTAwMjIyWjAzMTEwLwYDVQQD
EyhiOTMyY2RkYTA2YTllNWE5NmY4OTU3MjIxNjNlNjI0YTIyN2U0ZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV8Yrv1l+OwCzauO3C9uJ7Aorrh5
YUQEgTLMKgT/z2IdjZ3/3SReJ7vKbNYnqHy/JqMVB0C/Q95HIR0opA+7UpbbI90I
m/CIztiejGPYcbAxyLbXcOnTZoQJIMSmDIuxYbJdbTsszJ9XJvHvrTHKpXRfaDXl
uwDNJjF3iCcpW7HpCJat8UvFgeixXWYAI/ia2P/xgrEJZXfw3uhAFqzwYPV2DydB
6Fg1JHRuC85UApPfRmHSjOUGMLN0btfp4+5KTiGcSTelcJ2DHq9wWX8nNr/0gATm
yAVOxArbZTC3TYe7YGsar6KKPYwF3w7FWlW9nbt/pY47DXO35ce1DTt5lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkyzdoGqeWpb4lXIhY+Ykoifk6fMB8GA1UdIwQY
MBaAFM32LL1s9+gIIk9s+HJeNuKpZTUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lOTE2OWEtZWUwNi00ZTRhLWIyMWUt
ODQ5NDE3YWU2MzRkLzEvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9lOTE2OWEtZWUwNi00ZTRhLWIyMWUtODQ5NDE3YWU2MzRk
LzEvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFohVYkaI
NdDw7RETUMsj4iCRbKGp3VQPo3V6ni4DOHhyucKfFr4XC7ZlCWTqXTM0F1Z1kOSb
AokBxJ9MOeEAefiLr90bUmd+isn2CySdSmbiP1w/TOT6VVa6GkzqJKEQpeJhwlnR
3LK4eoTo1yqDN3IIsnWOQZ4tFiCbb2aKCXsqXCszURJ/NJNF0wCdiblqdSSuEjjh
ZPMNtCjfMMaXwXgxpuVhsupK06faR797om8JepcwuXhXrpp4hrebhHVXtR9NntxM
mK7hLm76ISk7CJBmFLTBTPLIVX4KgxLXsce01pk/ubWpUSPv+FcTHRzoo+DqGt5u
4v6vgTXGOjAJLg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:27 2024 by rpki-client on console-ams.rpki-client.org