Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
File:                     kRAQDzzHh9YxUwPLf8iNniXlbqg.mft (raw, json)
Hash identifier:          0/cCz55VTJUNyUKjyIZVmo06RGGAIMmNeFgjaCJL7+A=
Subject key identifier:   11:17:B9:9F:5F:93:D4:C3:1F:19:3C:40:0F:48:55:B4:B2:45:D1:CD
Authority key identifier: 91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
Certificate issuer:       /CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Certificate serial:       019364E91C54E86D116B5B40CC3E781E1390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
Manifest number:          078C
Signing time:             Mon 25 Nov 2024 20:00:18 +0000
Manifest this update:     Mon 25 Nov 2024 20:00:18 +0000
Manifest next update:     Tue 26 Nov 2024 20:00:18 +0000
Files and hashes:         1: AhQjIhLeSXFzV3EwOIuLmAYUWHI.roa (hash: wvFUf8hPHR9k2fIECL8xcnvY98iE7pv692suq549SYA=)
                          2: kRAQDzzHh9YxUwPLf8iNniXlbqg.crl (hash: 7KJPRl7Tg6JKtSzTqxK7ZmdM8eADY7+X3ZZWc1As74E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:e9:1c:54:e8:6d:11:6b:5b:40:cc:3e:78:1e:13:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
        Validity
            Not Before: Nov 25 20:00:18 2024 GMT
            Not After : Nov 26 20:00:18 2024 GMT
        Subject: CN=1117b99f5f93d4c31f193c400f4855b4b245d1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:e3:c4:80:8c:38:05:6b:49:59:da:27:59:
                    e5:38:4a:e8:65:da:ee:33:97:f9:4e:09:90:f7:24:
                    d7:f2:66:93:27:9d:4c:43:31:9d:f6:5d:ea:b3:11:
                    93:43:15:f6:5d:12:7f:10:55:59:7d:e8:45:be:8e:
                    2b:8b:fa:ff:ef:6a:a0:98:f6:f7:65:6f:f1:63:23:
                    76:40:23:21:2e:5a:17:e6:9c:d3:c7:e4:34:94:18:
                    4a:cc:ee:5f:09:07:20:d5:7c:2e:fd:82:03:41:2d:
                    d0:17:4a:69:28:a1:50:07:e7:b2:49:4e:7a:91:17:
                    41:66:58:cf:d2:01:cc:19:ce:c9:9d:e4:e3:42:62:
                    e6:f6:63:2e:80:92:da:fc:9e:61:2e:3a:08:35:d2:
                    5b:54:68:64:ba:38:ec:dc:c4:1f:14:f2:af:42:f0:
                    dd:d3:97:ae:7b:cf:c2:e2:41:68:c8:3e:0a:26:85:
                    25:7b:26:00:2d:41:d5:b7:d5:6d:3e:29:58:2f:fa:
                    9f:3a:97:5c:50:e0:62:8f:2b:d0:c2:6b:9e:86:42:
                    d0:69:a7:69:de:5e:66:02:2e:bc:5c:86:c2:06:13:
                    48:16:f5:49:66:c0:4a:fb:6b:50:8b:7d:3c:d7:c1:
                    70:ee:53:60:d5:01:0f:01:36:fb:48:90:3c:d7:38:
                    8b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:17:B9:9F:5F:93:D4:C3:1F:19:3C:40:0F:48:55:B4:B2:45:D1:CD
            X509v3 Authority Key Identifier:
                keyid:91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1a:1a:a1:e4:6b:99:bb:80:78:f5:9f:1e:7f:ed:7a:1b:42:
         51:98:41:b8:a0:50:a3:5f:3e:15:e9:68:08:af:d9:a7:4b:2a:
         42:00:5e:b7:17:c3:c4:f4:bd:e2:76:e6:b8:aa:27:3d:8f:a5:
         cb:81:01:dd:a3:a9:07:1a:98:8e:c9:3a:d8:92:eb:d8:58:cc:
         24:43:c6:59:ca:5e:84:92:54:c2:fa:7d:b4:15:3c:37:ee:d4:
         f8:d2:3a:b0:67:cc:3c:a9:67:24:5b:50:fa:35:39:6b:47:89:
         ce:63:7d:b5:17:f3:3b:0c:18:57:ff:f6:a6:44:e6:0c:45:f2:
         fc:dd:31:99:bd:1b:1a:00:d8:38:28:00:95:16:df:b2:6c:b4:
         55:a6:d2:77:ae:66:6c:6d:38:48:39:f3:32:e2:cd:38:e6:cc:
         0c:ee:8d:39:b6:20:a0:21:5c:5c:41:65:8c:84:ba:e6:6f:1c:
         7a:02:b9:ff:f6:5e:35:0b:9d:08:c4:ce:8b:f3:3f:be:7f:ba:
         07:84:6d:9e:a3:67:e5:73:b5:21:16:10:9e:ea:d2:b4:04:10:
         0e:d0:0a:fd:f8:19:29:3e:f9:cd:21:58:61:75:10:84:08:a3:
         96:f4:f7:28:89:5e:06:a6:ab:0a:b4:c1:fc:d0:dd:c1:78:6f:
         c9:a1:20:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNk6RxU6G0Ra1tAzD54HhOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMTAxMDBmM2NjNzg3ZDYzMTUzMDNjYjdmYzg4ZDllMjVl
NTZlYTgwHhcNMjQxMTI1MjAwMDE4WhcNMjQxMTI2MjAwMDE4WjAzMTEwLwYDVQQD
EygxMTE3Yjk5ZjVmOTNkNGMzMWYxOTNjNDAwZjQ4NTViNGIyNDVkMWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06zjxICMOAVrSVnaJ1nlOEroZdru
M5f5TgmQ9yTX8maTJ51MQzGd9l3qsxGTQxX2XRJ/EFVZfehFvo4ri/r/72qgmPb3
ZW/xYyN2QCMhLloX5pzTx+Q0lBhKzO5fCQcg1Xwu/YIDQS3QF0ppKKFQB+eySU56
kRdBZljP0gHMGc7JneTjQmLm9mMugJLa/J5hLjoINdJbVGhkujjs3MQfFPKvQvDd
05eue8/C4kFoyD4KJoUleyYALUHVt9VtPilYL/qfOpdcUOBijyvQwmuehkLQaadp
3l5mAi68XIbCBhNIFvVJZsBK+2tQi30818Fw7lNg1QEPATb7SJA81ziL6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEXuZ9fk9TDHxk8QA9IVbSyRdHNMB8GA1UdIwQY
MBaAFJEQEA88x4fWMVMDy3/IjZ4l5W6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1JBUUR6ekhoOVl4VXdQTGY4aU5uaVhsYnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kOTAwYjMtNTQ2Mi00ZWI0LTljOTAt
MGUwMzc3ZDRlNmQ2LzEva1JBUUR6ekhoOVl4VXdQTGY4aU5uaVhsYnFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kOTAwYjMtNTQ2Mi00ZWI0LTljOTAtMGUwMzc3ZDRlNmQ2
LzEva1JBUUR6ekhoOVl4VXdQTGY4aU5uaVhsYnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhoaoeRr
mbuAePWfHn/tehtCUZhBuKBQo18+FeloCK/Zp0sqQgBetxfDxPS94nbmuKonPY+l
y4EB3aOpBxqYjsk62JLr2FjMJEPGWcpehJJUwvp9tBU8N+7U+NI6sGfMPKlnJFtQ
+jU5a0eJzmN9tRfzOwwYV//2pkTmDEXy/N0xmb0bGgDYOCgAlRbfsmy0VabSd65m
bG04SDnzMuLNOObMDO6NObYgoCFcXEFljIS65m8cegK5//ZeNQudCMTOi/M/vn+6
B4RtnqNn5XO1IRYQnurStAQQDtAK/fgZKT75zSFYYXUQhAijlvT3KIleBqarCrTB
/NDdwXhvyaEgQg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:24:48 2024 by rpki-client on console-ams.rpki-client.org