Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File:                     oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier:          y9JcQQz8zcR8vQ8R0KBfGHOPnBQJuen9Gv3KzO+VahA=
Subject key identifier:   F4:6F:82:16:23:0B:FB:AE:A8:44:02:91:29:2B:4F:60:4B:94:0A:08
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer:       /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial:       01936BC84214F2E4CCFD2AA77D81576C504B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number:          12D4
Signing time:             Wed 27 Nov 2024 04:01:46 +0000
Manifest this update:     Wed 27 Nov 2024 04:01:46 +0000
Manifest next update:     Thu 28 Nov 2024 04:01:46 +0000
Files and hashes:         1: eJRari3L5w1GuCVYubcXvpahaxQ.roa (hash: SUZk8/qJb+NOK8nJy2dKNvZ4ng2ypNiZT1Jny6yQ8xE=)
                          2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: 2AqSlYGjVzi9ST3hWF882J8yKHoBZx8CAUCr5tzSfHs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c8:42:14:f2:e4:cc:fd:2a:a7:7d:81:57:6c:50:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
        Validity
            Not Before: Nov 27 04:01:46 2024 GMT
            Not After : Nov 28 04:01:46 2024 GMT
        Subject: CN=f46f8216230bfbaea8440291292b4f604b940a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:f0:ec:2a:53:00:1d:d4:91:e7:8c:09:d4:
                    62:f4:1d:eb:a0:81:6e:d0:1f:33:ab:97:f0:62:de:
                    d8:a8:bd:20:b4:d9:f4:35:01:c5:7f:c8:f1:3d:db:
                    cb:5c:5b:f8:83:ad:19:d6:bd:c0:77:aa:72:2a:27:
                    5b:07:76:8d:b4:85:74:38:69:1c:ee:8d:cc:5f:33:
                    17:b8:dc:fc:3c:ca:ca:17:af:02:4b:42:ac:46:af:
                    19:03:a6:71:87:41:9f:4f:88:f9:59:b3:16:33:62:
                    8a:2e:92:61:a6:e5:f1:a7:7f:f4:43:4f:2b:1e:d8:
                    0c:cb:4e:b2:cd:72:f4:55:de:b5:e5:c9:f7:60:97:
                    a2:92:9d:b8:ee:70:f2:41:7f:80:30:54:ef:29:3b:
                    53:7c:7a:9a:49:ed:13:29:89:08:d0:29:6f:51:6b:
                    b3:67:a7:c5:df:a9:50:7b:74:0d:df:cb:1e:b6:47:
                    93:ba:76:0c:65:15:8e:9f:a8:34:52:f6:29:6b:71:
                    e4:af:9c:68:f5:42:69:95:1e:f4:2c:48:38:50:33:
                    ac:e2:f8:02:e3:24:f8:1a:23:87:2b:14:d7:44:5a:
                    60:04:df:87:2a:96:e2:9e:59:07:62:c3:92:ee:e8:
                    40:7a:67:5c:83:3c:7f:92:a7:00:9d:1c:cd:08:60:
                    cd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6F:82:16:23:0B:FB:AE:A8:44:02:91:29:2B:4F:60:4B:94:0A:08
            X509v3 Authority Key Identifier:
                keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:95:2c:50:b0:01:60:ee:f2:bd:37:76:ed:1d:69:d6:26:81:
         be:cf:12:7b:6d:a4:b6:0f:ec:82:69:1f:f2:09:42:97:b4:ce:
         3f:b4:ad:6f:9c:0a:41:97:7c:31:0d:e3:c6:ed:82:0e:a1:bf:
         0f:8c:23:26:9d:7e:29:a7:ec:9e:1a:d5:f6:4d:2d:98:d3:61:
         52:76:52:0a:5b:36:ce:6d:d7:30:ed:42:09:51:94:bc:20:72:
         58:c2:f8:77:7c:5c:55:aa:81:51:d3:98:b6:70:8d:8b:bd:48:
         4e:95:67:cc:fe:10:1b:59:5a:2d:7f:b8:79:42:6f:c0:df:77:
         4a:5c:5f:78:a2:f5:6b:2d:60:98:c8:21:a7:21:02:08:30:8e:
         54:e7:16:5f:ca:7a:99:a1:3f:b1:c7:a2:54:04:21:c5:fb:32:
         eb:b9:65:ba:ce:36:e8:20:39:12:b1:1c:9e:a0:ef:a8:2f:92:
         bc:dd:7d:be:ca:02:a9:dd:99:0a:ef:dc:2b:ca:22:cb:59:48:
         cc:b1:20:e6:8e:ae:3c:51:c5:5a:36:21:8d:88:ff:ec:36:e8:
         6b:bc:4e:98:36:ba:c6:3c:ee:d2:34:e2:5f:b9:26:fc:0c:7d:
         86:27:b2:42:66:57:22:53:60:51:31:83:3a:e4:53:bc:4f:c4:
         b8:59:9d:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNryEIU8uTM/SqnfYFXbFBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOGUwYWVmMWNkMWU5ZDMyYTYxNmFkZjU4MjQ1YTNhYjg4
YTU1NGIwHhcNMjQxMTI3MDQwMTQ2WhcNMjQxMTI4MDQwMTQ2WjAzMTEwLwYDVQQD
EyhmNDZmODIxNjIzMGJmYmFlYTg0NDAyOTEyOTJiNGY2MDRiOTQwYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPTw7CpTAB3UkeeMCdRi9B3roIFu
0B8zq5fwYt7YqL0gtNn0NQHFf8jxPdvLXFv4g60Z1r3Ad6pyKidbB3aNtIV0OGkc
7o3MXzMXuNz8PMrKF68CS0KsRq8ZA6Zxh0GfT4j5WbMWM2KKLpJhpuXxp3/0Q08r
HtgMy06yzXL0Vd615cn3YJeikp247nDyQX+AMFTvKTtTfHqaSe0TKYkI0ClvUWuz
Z6fF36lQe3QN38setkeTunYMZRWOn6g0UvYpa3Hkr5xo9UJplR70LEg4UDOs4vgC
4yT4GiOHKxTXRFpgBN+HKpbinlkHYsOS7uhAemdcgzx/kqcAnRzNCGDNjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRvghYjC/uuqEQCkSkrT2BLlAoIMB8GA1UdIwQY
MBaAFKCOCu8c0enTKmFq31gkWjq4ilVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWIt
MjQ3NjI5MWQ3MGVlLzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWItMjQ3NjI5MWQ3MGVl
LzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5UsULAB
YO7yvTd27R1p1iaBvs8Se22ktg/sgmkf8glCl7TOP7Stb5wKQZd8MQ3jxu2CDqG/
D4wjJp1+KafsnhrV9k0tmNNhUnZSCls2zm3XMO1CCVGUvCByWML4d3xcVaqBUdOY
tnCNi71ITpVnzP4QG1laLX+4eUJvwN93SlxfeKL1ay1gmMghpyECCDCOVOcWX8p6
maE/sceiVAQhxfsy67llus426CA5ErEcnqDvqC+SvN19vsoCqd2ZCu/cK8oiy1lI
zLEg5o6uPFHFWjYhjYj/7Dboa7xOmDa6xjzu0jTiX7km/Ax9hieyQmZXIlNgUTGD
OuRTvE/EuFmdUQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 06:21:22 2024 by rpki-client on console-ams.rpki-client.org