Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File:                     14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier:          0vPVZugO33+IkhJ3wtbQ7ykRgIQVailzWab6dWq/xCI=
Subject key identifier:   B8:5B:B2:77:41:14:46:2E:F5:CB:A8:E0:DD:8F:0A:C2:63:31:FB:16
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer:       /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial:       0193579BA80E37FCBFDA6486EA832E9AA696
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 06:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:39 +0000
Files and hashes:         1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: XKHCR1vKxo1D+P9YKAzeTt6dMkhvnGnRuOS5AZZbVig=)
                          2: 1eAGu-ABlEPU4KJiTuXsMZAbFvU.roa (hash: i21aTnx+e9HS61Jw+liOBppQXdu89MRUq8Vn/TP1eAA=)
                          3: 8Qu62nIJ6nAm6s-a2LmqX1L2lZQ.roa (hash: j5kkv1pJCYTRAbSuy9COE6ZdMN7LSnwUi5WlLG8hhpo=)
                          4: upEbKQeA1_EZc7JzWkI9MaX8VII.roa (hash: 7l3fiEjdPd4gCKpSXRnqAaRVByTpKMqYNRNG/fJvRsE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:a8:0e:37:fc:bf:da:64:86:ea:83:2e:9a:a6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
        Validity
            Not Before: Nov 23 06:00:39 2024 GMT
            Not After : Nov 24 06:00:39 2024 GMT
        Subject: CN=b85bb2774114462ef5cba8e0dd8f0ac26331fb16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ee:75:92:eb:af:75:b3:75:00:9e:4d:33:95:
                    06:cb:9b:05:14:2c:a2:0a:81:63:e9:cc:bd:c7:1e:
                    7f:6d:1f:a4:c9:97:80:53:0d:55:48:40:76:60:93:
                    2a:00:dd:18:18:13:fb:03:b8:f7:9c:ee:4d:4a:fc:
                    6d:3e:bb:9b:de:85:6d:9e:81:a8:30:7d:89:9b:15:
                    10:70:ce:02:85:e3:36:9e:26:6e:bd:08:cf:54:f1:
                    95:62:07:bf:ab:11:1a:7e:ec:62:c0:d9:dc:df:09:
                    92:39:f4:1a:28:1e:e4:b8:d3:35:ca:34:96:73:b6:
                    65:e7:30:41:f4:84:09:d3:15:ed:1d:b1:8d:91:fc:
                    88:31:f0:e4:49:01:49:89:68:05:aa:cb:d7:0f:3d:
                    d6:89:09:6b:a5:8e:07:ad:e9:e4:c5:71:d9:e6:6d:
                    13:97:76:73:53:38:b7:54:53:d4:20:e7:c9:47:fd:
                    a8:8d:55:7f:62:97:c2:9e:e4:d6:df:c6:6e:f5:80:
                    29:1b:c1:79:db:85:1c:78:f6:ec:2c:d3:66:30:56:
                    ae:0c:04:c8:07:37:97:7d:16:05:af:ba:00:f3:c8:
                    6a:9c:a6:f2:72:6f:b6:ae:d6:90:68:0c:a2:41:46:
                    c0:55:23:fd:a2:1a:e3:cd:b1:38:42:00:f6:45:3e:
                    9c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5B:B2:77:41:14:46:2E:F5:CB:A8:E0:DD:8F:0A:C2:63:31:FB:16
            X509v3 Authority Key Identifier:
                keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:3b:07:af:21:8d:ae:3d:93:e1:20:d3:a9:90:b1:02:03:9d:
         36:76:e3:d5:f5:71:0a:52:25:ca:b5:69:4d:11:87:44:03:79:
         5d:bc:09:29:de:53:d8:94:98:8d:12:e1:06:ab:af:b1:29:1e:
         cc:59:a6:69:00:fb:e9:5e:36:8b:9e:66:7d:61:24:04:d6:03:
         1f:b1:63:62:54:b5:00:30:90:79:0a:24:96:f7:ae:ea:f7:b1:
         1f:b0:b4:fb:6e:ac:3c:45:39:03:9e:4e:a5:ed:9a:3e:86:d6:
         e0:40:45:94:19:26:c6:7c:db:6a:93:7e:4e:be:3b:de:04:aa:
         78:60:94:f7:41:60:40:2e:cf:86:c2:c9:47:f4:c4:1c:f0:5b:
         ce:46:01:b8:6d:f7:d8:c5:80:0c:de:a7:ea:8c:ab:57:63:b7:
         fe:b2:ad:10:8f:fc:98:74:10:33:49:da:06:48:0e:6e:2d:e9:
         1b:ae:78:eb:69:f9:e5:2a:56:39:01:9d:b0:93:30:89:69:2b:
         8a:a1:a7:9b:d5:ea:26:e5:a0:d8:b2:ce:a5:94:1f:27:c4:5f:
         86:38:a4:5e:23:c6:da:5f:c6:91:24:02:a6:c9:78:d4:e7:d3:
         ff:f5:54:bc:4e:48:37:f8:2e:6e:f9:dc:6c:08:41:26:cd:ab:
         67:db:9b:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm6gON/y/2mSG6oMumqaWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz
YTQxZjgwHhcNMjQxMTIzMDYwMDM5WhcNMjQxMTI0MDYwMDM5WjAzMTEwLwYDVQQD
EyhiODViYjI3NzQxMTQ0NjJlZjVjYmE4ZTBkZDhmMGFjMjYzMzFmYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu51kuuvdbN1AJ5NM5UGy5sFFCyi
CoFj6cy9xx5/bR+kyZeAUw1VSEB2YJMqAN0YGBP7A7j3nO5NSvxtPrub3oVtnoGo
MH2JmxUQcM4CheM2niZuvQjPVPGVYge/qxEafuxiwNnc3wmSOfQaKB7kuNM1yjSW
c7Zl5zBB9IQJ0xXtHbGNkfyIMfDkSQFJiWgFqsvXDz3WiQlrpY4HrenkxXHZ5m0T
l3ZzUzi3VFPUIOfJR/2ojVV/YpfCnuTW38Zu9YApG8F524UcePbsLNNmMFauDATI
BzeXfRYFr7oA88hqnKbycm+2rtaQaAyiQUbAVSP9ohrjzbE4QgD2RT6cTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhbsndBFEYu9cuo4N2PCsJjMfsWMB8GA1UdIwQY
MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt
MjMwZmRhNjZhYmNiLzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi
LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDsHryGN
rj2T4SDTqZCxAgOdNnbj1fVxClIlyrVpTRGHRAN5XbwJKd5T2JSYjRLhBquvsSke
zFmmaQD76V42i55mfWEkBNYDH7FjYlS1ADCQeQoklveu6vexH7C0+26sPEU5A55O
pe2aPobW4EBFlBkmxnzbapN+Tr473gSqeGCU90FgQC7PhsLJR/TEHPBbzkYBuG33
2MWADN6n6oyrV2O3/rKtEI/8mHQQM0naBkgObi3pG65462n55SpWOQGdsJMwiWkr
iqGnm9XqJuWg2LLOpZQfJ8RfhjikXiPG2l/GkSQCpsl41OfT//VUvE5IN/gubvnc
bAhBJs2rZ9ubSg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:50:07 2024 by rpki-client on console-ams.rpki-client.org