Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
File:                     E9B-gFpSxTTMbTNFBXX_AjnoB84.mft (raw, json)
Hash identifier:          TKz/mt+7iEf2lYF8xDoiGsreyC1CLOdUDTkyCLUQfFM=
Subject key identifier:   B9:7F:09:A1:C2:D4:FE:A8:1C:D1:14:C7:1B:03:D3:D7:AF:46:AE:9A
Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
Certificate issuer:       /CN=13d07e805a52c534cc6d33450575ff0239e807ce
Certificate serial:       019406476F5A2F9B24DFB5971AA951003E80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
Manifest number:          0AB3
Signing time:             Fri 27 Dec 2024 04:02:12 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:12 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:12 +0000
Files and hashes:         1: E9B-gFpSxTTMbTNFBXX_AjnoB84.crl (hash: 9G7f+8VPyytpu2SFgUxJ5nr9fIIz+WcCMk7dxE1Hqvw=)
                          2: G3wP4SjwJWwrnbY7go4ffZbW98A.roa (hash: E1a0nysCLzCf7Bo6qp6D4oaJVcLM2/Ix+howbkCCA/8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:6f:5a:2f:9b:24:df:b5:97:1a:a9:51:00:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce
        Validity
            Not Before: Dec 27 04:02:12 2024 GMT
            Not After : Dec 28 04:02:12 2024 GMT
        Subject: CN=b97f09a1c2d4fea81cd114c71b03d3d7af46ae9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:87:91:f4:58:e6:a3:14:33:18:4f:1b:de:
                    c6:96:a6:b8:ef:b4:28:9e:fe:33:b9:79:63:81:d9:
                    3b:45:60:0d:72:6b:21:e8:a4:77:c5:44:05:e4:0b:
                    09:c8:21:b4:d4:60:28:e8:35:6b:1f:b8:14:25:8c:
                    0c:84:39:ca:9e:91:d8:6b:10:0b:8c:a9:46:1f:46:
                    f2:dd:02:1e:0b:26:81:db:e8:49:5c:37:a3:3f:f0:
                    d6:e9:c1:21:56:43:c7:21:8d:4a:db:e1:11:b9:ff:
                    b0:8d:e9:51:b5:0f:4f:8b:97:60:01:bc:0f:52:a8:
                    8d:2f:48:d2:88:4c:27:6f:02:c1:50:7a:9f:58:32:
                    2b:3a:45:a8:d3:67:aa:36:09:99:79:e0:9e:7a:91:
                    5e:84:30:f2:c5:0e:e9:ec:9b:18:6d:5f:56:4f:7d:
                    f4:7a:d6:29:d9:0b:e0:bf:9f:3b:1d:77:74:bb:0a:
                    11:94:3a:ef:a4:eb:f2:98:7a:f5:07:54:bb:18:74:
                    45:d7:5a:99:7a:ec:53:95:82:a0:a1:87:97:d8:16:
                    25:cc:2b:97:b2:04:f9:01:3f:90:14:74:b5:6e:a1:
                    9f:62:4d:0a:70:59:e5:0d:ed:d9:f6:4a:c6:8c:81:
                    de:36:b3:0a:a5:d0:6b:3b:d3:98:6d:8a:5c:f6:aa:
                    1e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7F:09:A1:C2:D4:FE:A8:1C:D1:14:C7:1B:03:D3:D7:AF:46:AE:9A
            X509v3 Authority Key Identifier:
                keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:81:b4:e2:7b:4a:ea:bb:8b:8e:5a:63:e3:3c:cd:8d:fe:6a:
         42:ea:0a:5e:85:78:63:02:99:5d:ef:d0:37:33:43:ee:75:f1:
         6e:32:18:0a:d9:de:4e:5f:01:74:e1:77:2a:16:aa:8c:8d:53:
         ee:04:7a:a6:e1:1d:55:3a:62:1b:ae:f0:38:24:4c:2a:0f:0c:
         ca:8e:18:5f:c0:06:8d:ae:97:6c:1f:5a:90:da:72:45:b6:30:
         f4:63:91:c7:3a:8d:c6:78:d1:46:31:fb:2b:1f:6a:b9:e5:55:
         3f:54:1a:b6:12:8f:c9:f3:83:60:98:c3:00:9d:b9:00:19:81:
         53:78:b0:b5:4e:5f:7b:ad:70:72:0a:d1:b4:04:2a:c7:b4:0f:
         f0:a4:68:21:1a:37:f7:27:cc:a0:fd:66:4b:6c:59:b6:4f:66:
         d6:f1:81:92:31:fe:c0:90:a2:73:60:64:80:7e:45:58:51:ab:
         0f:ce:3d:47:7d:70:b6:32:e1:02:74:11:e4:4b:82:e5:36:10:
         fe:29:60:2a:11:bc:0d:07:04:48:8a:c7:14:94:de:e1:78:24:
         9e:07:56:f8:ba:8c:55:dd:ee:32:cb:b7:6a:01:6d:53:2c:2e:
         af:e4:dc:96:5e:84:26:34:3c:22:82:4f:63:dd:c1:d1:97:b6:
         0f:88:c5:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQGR29aL5sk37WXGqlRAD6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZDA3ZTgwNWE1MmM1MzRjYzZkMzM0NTA1NzVmZjAyMzll
ODA3Y2UwHhcNMjQxMjI3MDQwMjEyWhcNMjQxMjI4MDQwMjEyWjAzMTEwLwYDVQQD
EyhiOTdmMDlhMWMyZDRmZWE4MWNkMTE0YzcxYjAzZDNkN2FmNDZhZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhyHkfRY5qMUMxhPG97Glqa477Qo
nv4zuXljgdk7RWANcmsh6KR3xUQF5AsJyCG01GAo6DVrH7gUJYwMhDnKnpHYaxAL
jKlGH0by3QIeCyaB2+hJXDejP/DW6cEhVkPHIY1K2+ERuf+wjelRtQ9Pi5dgAbwP
UqiNL0jSiEwnbwLBUHqfWDIrOkWo02eqNgmZeeCeepFehDDyxQ7p7JsYbV9WT330
etYp2Qvgv587HXd0uwoRlDrvpOvymHr1B1S7GHRF11qZeuxTlYKgoYeX2BYlzCuX
sgT5AT+QFHS1bqGfYk0KcFnlDe3Z9krGjIHeNrMKpdBrO9OYbYpc9qoexwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLl/CaHC1P6oHNEUxxsD09evRq6aMB8GA1UdIwQY
MBaAFBPQfoBaUsU0zG0zRQV1/wI56AfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlCLWdGcFN4VFRNYlRORkJYWF9Bam5vQjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNzQ1ZDgtYWJjNi00NzdhLWE0NTkt
YWQ3ZjkyNjJhN2MyLzEvRTlCLWdGcFN4VFRNYlRORkJYWF9Bam5vQjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9iNzQ1ZDgtYWJjNi00NzdhLWE0NTktYWQ3ZjkyNjJhN2My
LzEvRTlCLWdGcFN4VFRNYlRORkJYWF9Bam5vQjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYG04ntK
6ruLjlpj4zzNjf5qQuoKXoV4YwKZXe/QNzND7nXxbjIYCtneTl8BdOF3KhaqjI1T
7gR6puEdVTpiG67wOCRMKg8Myo4YX8AGja6XbB9akNpyRbYw9GORxzqNxnjRRjH7
Kx9queVVP1QathKPyfODYJjDAJ25ABmBU3iwtU5fe61wcgrRtAQqx7QP8KRoIRo3
9yfMoP1mS2xZtk9m1vGBkjH+wJCic2BkgH5FWFGrD849R31wtjLhAnQR5EuC5TYQ
/ilgKhG8DQcESIrHFJTe4XgkngdW+LqMVd3uMsu3agFtUywur+Tcll6EJjQ8IoJP
Y93B0Ze2D4jFbg==
-----END CERTIFICATE-----
Generated at Fri Dec 27 10:00:56 2024 by rpki-client on console-ams.rpki-client.org