Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.mft
File:                     CEBZoMpgeKm3Xapm24Bv8iwOqtk.mft (raw, json)
Hash identifier:          Ahcxq1U+ebXlj3IbkVTJ+VFNwLQvy6YrtZQ1vzgD/q8=
Subject key identifier:   7B:9A:1C:31:62:D1:1E:8E:C4:85:63:4F:B0:E8:41:82:74:75:FB:FE
Authority key identifier: 08:40:59:A0:CA:60:78:A9:B7:5D:AA:66:DB:80:6F:F2:2C:0E:AA:D9
Certificate issuer:       /CN=084059a0ca6078a9b75daa66db806ff22c0eaad9
Certificate serial:       0193572DC4D44B99C13FA51A10947970AB38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.mft
Manifest number:          0B90
Signing time:             Sat 23 Nov 2024 04:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:37 +0000
Files and hashes:         1: CEBZoMpgeKm3Xapm24Bv8iwOqtk.crl (hash: t6DqUhz5qLJWWdmjNFa/07/OvoUOtyNvMFmF2M2+fO0=)
                          2: KmQLXSMs_5aM5clCGXYUAIZuDaU.roa (hash: e463FBGgJ6GdCX1aWMV0J724CoCighITo++ybgu3xC8=)
                          3: Tnv9tm27_aRw7gIu_4dLSm7uZTQ.roa (hash: ws+faqUn44taqtfl9OSJtYMKTJrksdnBu2trOoYcgVw=)
                          4: aU6VQGsUIKK43zEV9OBVpSYOHxo.roa (hash: qhiKoRYVSj7bpwccZvcm3wYiP3VCymqnt6CJF1KXABQ=)
                          5: l_ScJkwYKewxtYg8QlHHPgeYeOM.roa (hash: 8hyiyuVYFwIu+zr/PLLYY+h3cIS9CApRVhFEhVP2IkI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:c4:d4:4b:99:c1:3f:a5:1a:10:94:79:70:ab:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084059a0ca6078a9b75daa66db806ff22c0eaad9
        Validity
            Not Before: Nov 23 04:00:37 2024 GMT
            Not After : Nov 24 04:00:37 2024 GMT
        Subject: CN=7b9a1c3162d11e8ec485634fb0e841827475fbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:08:b5:a5:e7:83:5a:2b:5c:1b:d7:42:ce:
                    b5:7a:12:da:47:7f:0f:72:a8:ff:ce:11:1f:b6:12:
                    81:2e:53:5c:9c:99:cf:ed:b9:7c:6d:38:67:8c:e0:
                    1f:b1:b7:a6:c5:95:d2:79:96:d8:5e:e9:ff:78:90:
                    d1:83:62:5f:d7:65:4b:a0:29:bd:e0:2f:a9:53:62:
                    e9:02:2b:14:25:e2:1c:82:7a:0f:92:10:a6:98:6a:
                    3b:dd:5b:c7:66:63:17:39:aa:45:02:74:ac:30:71:
                    eb:9f:4c:d5:f4:22:f8:9b:ee:c3:a9:73:a5:d7:92:
                    8c:f8:58:2d:59:f5:f6:8d:fe:10:a1:87:b0:b7:ad:
                    84:53:dc:ed:9c:64:fb:21:b2:6c:f6:df:63:9e:0e:
                    96:d6:d0:f4:44:d8:d8:cd:af:2c:8b:8e:c9:32:1c:
                    38:6f:4f:be:c5:b5:ce:09:f1:f4:79:b1:80:56:39:
                    3d:09:b6:bf:b7:44:ae:62:e3:a3:80:d7:78:c5:b4:
                    51:43:be:7a:44:3e:37:33:32:49:50:e9:4c:77:6c:
                    9d:45:73:6c:6c:54:d5:c7:75:d5:18:4c:67:16:23:
                    2e:58:5f:cb:73:57:5a:99:f6:7b:a3:2c:ad:7c:d2:
                    83:7e:be:1d:e4:06:7f:37:72:22:07:30:1b:74:6d:
                    3e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9A:1C:31:62:D1:1E:8E:C4:85:63:4F:B0:E8:41:82:74:75:FB:FE
            X509v3 Authority Key Identifier:
                keyid:08:40:59:A0:CA:60:78:A9:B7:5D:AA:66:DB:80:6F:F2:2C:0E:AA:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a2:ed:76:4c:db:e7:a5:04:46:0b:5b:b0:b6:42:93:1d:24:
         db:75:d3:6b:81:7c:eb:f2:6f:ba:00:89:0b:65:80:c5:7b:8e:
         5a:81:bf:ff:42:2b:94:ab:8a:76:fd:e0:e2:34:be:90:8a:d3:
         df:60:e6:76:e8:c7:1e:ba:17:9a:22:4c:d3:fb:54:fa:c5:1b:
         27:e6:31:c3:af:15:c8:21:66:20:2c:c7:84:78:54:64:b1:45:
         e4:af:a6:d9:08:92:4a:cd:62:07:54:32:d9:4c:2a:61:e9:30:
         80:62:ef:03:08:57:b4:69:e5:13:70:a3:4b:d8:41:b4:a8:7a:
         d1:61:75:eb:f7:42:e6:ea:6d:28:18:2d:11:63:a0:e2:ad:c7:
         17:a3:8d:b0:c6:f3:e4:ff:b4:ae:7d:be:d9:2f:10:be:89:9d:
         db:6c:b3:e6:39:df:d8:2e:9d:c0:fc:59:f2:1f:a0:87:dd:56:
         4a:32:74:14:0a:f8:27:31:43:52:05:14:25:78:b8:52:d9:67:
         88:26:b4:74:f4:81:f2:98:9f:b4:a8:f3:d7:ec:63:9b:6b:a8:
         ee:19:30:e2:69:cf:ad:6d:f4:b3:37:4b:33:dc:a8:8a:29:b9:
         10:e9:e2:9e:80:00:67:2a:48:98:22:10:6a:3f:e5:63:7f:2d:
         a5:d5:2c:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLcTUS5nBP6UaEJR5cKs4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDA1OWEwY2E2MDc4YTliNzVkYWE2NmRiODA2ZmYyMmMw
ZWFhZDkwHhcNMjQxMTIzMDQwMDM3WhcNMjQxMTI0MDQwMDM3WjAzMTEwLwYDVQQD
Eyg3YjlhMWMzMTYyZDExZThlYzQ4NTYzNGZiMGU4NDE4Mjc0NzVmYmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAoItaXng1orXBvXQs61ehLaR38P
cqj/zhEfthKBLlNcnJnP7bl8bThnjOAfsbemxZXSeZbYXun/eJDRg2Jf12VLoCm9
4C+pU2LpAisUJeIcgnoPkhCmmGo73VvHZmMXOapFAnSsMHHrn0zV9CL4m+7DqXOl
15KM+FgtWfX2jf4QoYewt62EU9ztnGT7IbJs9t9jng6W1tD0RNjYza8si47JMhw4
b0++xbXOCfH0ebGAVjk9Cba/t0SuYuOjgNd4xbRRQ756RD43MzJJUOlMd2ydRXNs
bFTVx3XVGExnFiMuWF/Lc1damfZ7oyytfNKDfr4d5AZ/N3IiBzAbdG0+uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuaHDFi0R6OxIVjT7DoQYJ0dfv+MB8GA1UdIwQY
MBaAFAhAWaDKYHipt12qZtuAb/IsDqrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VCWm9NcGdlS20zWGFwbTI0QnY4aXdPcXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jNGM4NjEtYjMyNy00MWYyLTgyMGMt
NGMwYTFjMzNmYThhLzEvQ0VCWm9NcGdlS20zWGFwbTI0QnY4aXdPcXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jNGM4NjEtYjMyNy00MWYyLTgyMGMtNGMwYTFjMzNmYThh
LzEvQ0VCWm9NcGdlS20zWGFwbTI0QnY4aXdPcXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6Ltdkzb
56UERgtbsLZCkx0k23XTa4F86/JvugCJC2WAxXuOWoG//0IrlKuKdv3g4jS+kIrT
32DmdujHHroXmiJM0/tU+sUbJ+Yxw68VyCFmICzHhHhUZLFF5K+m2QiSSs1iB1Qy
2UwqYekwgGLvAwhXtGnlE3CjS9hBtKh60WF16/dC5uptKBgtEWOg4q3HF6ONsMbz
5P+0rn2+2S8Qvomd22yz5jnf2C6dwPxZ8h+gh91WSjJ0FAr4JzFDUgUUJXi4Utln
iCa0dPSB8piftKjz1+xjm2uo7hkw4mnPrW30szdLM9yoiim5EOninoAAZypImCIQ
aj/lY38tpdUsOQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:34 2024 by rpki-client on console-ams.rpki-client.org