Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
File:                     v66jWK7ut9C54Pk9I_Z9KafsYsg.mft (raw, json)
Hash identifier:          YTvCu3MKNmjUnWu3zdRq+k6z9V1jZ8fgO5fV1S0CZvg=
Subject key identifier:   FC:00:BE:19:53:BE:B7:22:3B:FF:2A:01:19:18:E0:80:89:35:75:EB
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Certificate issuer:       /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial:       019366D7CB780696C87BA97D4BA6A50FE24F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
Manifest number:          0C4B
Signing time:             Tue 26 Nov 2024 05:00:38 +0000
Manifest this update:     Tue 26 Nov 2024 05:00:38 +0000
Manifest next update:     Wed 27 Nov 2024 05:00:38 +0000
Files and hashes:         1: FErJ4mJB59Ok-5JzHa2Qfrv4zXg.roa (hash: ISgzS+LHG+pUnvINmlGj0IEbd1SC8nNE7TIWynwSZ8Q=)
                          2: mfc-HV2ARVe8Ine9GZq1F1kvX4A.roa (hash: UpBvetxQG+sXCvCtmvXeU0rjXxUG9tzFKicH1RUzlXo=)
                          3: v66jWK7ut9C54Pk9I_Z9KafsYsg.crl (hash: 44nd8uM72FFVOjkeby0hALbL9sZ/jZjtikBuvwsIQAA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:d7:cb:78:06:96:c8:7b:a9:7d:4b:a6:a5:0f:e2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
        Validity
            Not Before: Nov 26 05:00:38 2024 GMT
            Not After : Nov 27 05:00:38 2024 GMT
        Subject: CN=fc00be1953beb7223bff2a011918e080893575eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:84:3a:84:fa:24:2b:7f:bc:b3:66:d1:2e:
                    e4:03:1c:97:98:3b:39:73:93:b4:de:0c:b4:0d:cf:
                    80:fe:d5:ab:f8:0f:51:1e:51:f4:12:4e:0b:fa:20:
                    af:dd:1d:61:e4:04:18:a4:0d:cd:be:8a:04:fd:b0:
                    2a:f3:b5:42:bb:a5:40:d4:58:f9:b9:7a:11:0d:30:
                    00:34:fe:5a:5a:b7:4c:16:90:71:79:e5:51:fc:f7:
                    e2:f9:a1:31:f6:e1:18:9d:ec:f9:aa:26:89:cd:36:
                    0c:55:8c:85:ff:8d:42:e9:bc:af:14:33:4a:f9:e8:
                    62:6e:7f:0c:6b:46:82:25:fb:50:2f:89:0d:79:35:
                    a9:16:ca:ea:43:73:01:1d:a6:58:cd:aa:5c:3e:5c:
                    d0:b0:72:b3:80:55:fd:0b:92:99:d7:06:ee:9b:48:
                    84:37:2c:20:41:52:2f:87:51:da:83:79:d7:c0:62:
                    55:a6:9f:d8:de:0b:13:db:4c:cc:bb:70:c1:08:c6:
                    eb:65:18:33:2e:9e:64:6d:99:07:e4:43:c6:06:ad:
                    e0:76:4e:8f:21:74:fb:ef:85:19:fc:ce:e9:05:f7:
                    37:eb:da:e9:a5:5b:cf:08:ee:51:05:3c:3c:15:37:
                    e4:eb:3b:77:10:f0:22:d9:46:70:e6:a2:14:f7:84:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:00:BE:19:53:BE:B7:22:3B:FF:2A:01:19:18:E0:80:89:35:75:EB
            X509v3 Authority Key Identifier:
                keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:dc:a8:58:78:c4:9b:c3:c0:5d:d5:84:cc:c8:d9:03:bb:b0:
         65:c9:13:af:1e:9f:6e:c5:06:c2:6b:3a:06:11:cd:ed:40:2c:
         b5:08:a6:b3:65:b8:d7:d7:6a:c3:3c:ee:cf:43:0b:7d:fd:89:
         22:5e:c2:d0:ac:48:be:7c:9d:89:b1:d1:24:2e:20:16:22:f9:
         fa:23:5b:30:50:45:e3:26:b8:85:df:db:64:6c:13:ac:8e:d2:
         bc:74:cc:7d:b1:dd:5a:23:de:99:5b:f0:5f:bb:d8:e0:69:c6:
         0b:53:e4:ee:bd:72:52:11:e8:6e:db:96:37:74:f8:da:a8:7b:
         8c:bc:20:ed:79:42:67:ed:19:50:11:85:e6:31:89:4b:8d:da:
         27:ae:e6:ef:8d:5b:9c:0b:18:68:2c:2b:3f:e5:79:ed:94:8c:
         6c:69:f5:a1:0a:e9:c1:cf:f4:db:03:13:32:2e:88:bd:86:e5:
         a9:e5:cd:b1:7f:e0:49:59:5a:a9:a9:48:a6:c8:48:a4:08:cc:
         a0:9e:df:11:a7:df:8a:7e:38:b1:bc:fc:13:09:b8:e9:ee:0f:
         35:c9:27:bd:6f:e7:5a:f2:84:4f:c2:4b:de:84:31:39:ef:3a:
         48:a1:84:61:12:b7:ca:a9:f0:52:2b:37:36:ca:c4:7e:5e:3d:
         9e:f0:48:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNm18t4BpbIe6l9S6alD+JPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYWVhMzU4YWVlZWI3ZDBiOWUwZjkzZDIzZjY3ZDI5YTdl
YzYyYzgwHhcNMjQxMTI2MDUwMDM4WhcNMjQxMTI3MDUwMDM4WjAzMTEwLwYDVQQD
EyhmYzAwYmUxOTUzYmViNzIyM2JmZjJhMDExOTE4ZTA4MDg5MzU3NWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQuEOoT6JCt/vLNm0S7kAxyXmDs5
c5O03gy0Dc+A/tWr+A9RHlH0Ek4L+iCv3R1h5AQYpA3NvooE/bAq87VCu6VA1Fj5
uXoRDTAANP5aWrdMFpBxeeVR/Pfi+aEx9uEYnez5qiaJzTYMVYyF/41C6byvFDNK
+ehibn8Ma0aCJftQL4kNeTWpFsrqQ3MBHaZYzapcPlzQsHKzgFX9C5KZ1wbum0iE
NywgQVIvh1Hag3nXwGJVpp/Y3gsT20zMu3DBCMbrZRgzLp5kbZkH5EPGBq3gdk6P
IXT774UZ/M7pBfc369rppVvPCO5RBTw8FTfk6zt3EPAi2UZw5qIU94R8FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwAvhlTvrciO/8qARkY4ICJNXXrMB8GA1UdIwQY
MBaAFL+uo1iu7rfQueD5PSP2fSmn7GLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjY2aldLN3V0OUM1NFBrOUlfWjlLYWZzWXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yODg0MTYtYTQ2ZS00OWMzLTkzMzct
MjQ5Y2UwYzMxMmIzLzEvdjY2aldLN3V0OUM1NFBrOUlfWjlLYWZzWXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8yODg0MTYtYTQ2ZS00OWMzLTkzMzctMjQ5Y2UwYzMxMmIz
LzEvdjY2aldLN3V0OUM1NFBrOUlfWjlLYWZzWXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdyoWHjE
m8PAXdWEzMjZA7uwZckTrx6fbsUGwms6BhHN7UAstQims2W419dqwzzuz0MLff2J
Il7C0KxIvnydibHRJC4gFiL5+iNbMFBF4ya4hd/bZGwTrI7SvHTMfbHdWiPemVvw
X7vY4GnGC1Pk7r1yUhHobtuWN3T42qh7jLwg7XlCZ+0ZUBGF5jGJS43aJ67m741b
nAsYaCwrP+V57ZSMbGn1oQrpwc/02wMTMi6IvYblqeXNsX/gSVlaqalIpshIpAjM
oJ7fEaffin44sbz8Ewm46e4PNcknvW/nWvKET8JL3oQxOe86SKGEYRK3yqnwUis3
NsrEfl49nvBIBA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:11:45 2024 by rpki-client on console-ams.rpki-client.org