Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft
File:                     j2slsXxNBOCwSSNA56wkzITSo0c.mft (raw, json)
Hash identifier:          y9GYULBgFsku6NRro0fWA/TG9YQFVEd4gMXfghlXo6M=
Subject key identifier:   3C:07:8D:BA:56:A3:2F:50:A1:BE:37:63:F7:7B:08:DC:86:8B:FD:06
Authority key identifier: 8F:6B:25:B1:7C:4D:04:E0:B0:49:23:40:E7:AC:24:CC:84:D2:A3:47
Certificate issuer:       /CN=8f6b25b17c4d04e0b0492340e7ac24cc84d2a347
Certificate serial:       0193549C57D7FD740E29701AD929B27C5A54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft
Manifest number:          0A19
Signing time:             Fri 22 Nov 2024 16:02:32 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:32 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:32 +0000
Files and hashes:         1: j2slsXxNBOCwSSNA56wkzITSo0c.crl (hash: kCAU2AjIVMxRt2MWMmywsshtP+d/sj8xw6TS9ENrEto=)
                          2: wwaQ9e8fzqHozLJc_YG0aNJ30y8.roa (hash: yzyC4AJ2XcGUFp8+ppGndT5z/Hw6CdxIjyZyN3S7fnQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:57:d7:fd:74:0e:29:70:1a:d9:29:b2:7c:5a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6b25b17c4d04e0b0492340e7ac24cc84d2a347
        Validity
            Not Before: Nov 22 16:02:32 2024 GMT
            Not After : Nov 23 16:02:32 2024 GMT
        Subject: CN=3c078dba56a32f50a1be3763f77b08dc868bfd06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bf:b4:27:e0:ba:9d:15:a3:8c:6e:f9:db:fe:
                    d9:db:ec:cf:4f:5d:9d:07:a0:dc:99:65:31:d4:87:
                    5c:c5:1a:01:ef:a8:9a:bb:ec:66:7f:bf:e9:7d:ab:
                    3c:dc:b0:ca:de:ad:8e:73:bc:84:cd:46:1f:6a:a2:
                    3c:4c:3d:10:df:e9:85:17:5f:0b:33:8e:a4:d7:ac:
                    a6:91:63:7b:ef:fe:20:f0:60:d1:2c:e6:93:44:5c:
                    cd:4a:29:28:fa:b1:26:4e:b4:ee:e9:28:24:9e:4b:
                    23:f4:a4:fe:90:56:56:27:f9:dc:3c:4b:55:db:fd:
                    ea:a5:75:b0:6b:e7:0f:de:34:27:67:50:27:84:8b:
                    b5:10:b2:a3:b2:70:bb:37:8f:9a:d3:8c:3f:01:ee:
                    a2:e4:f8:13:00:ac:36:fc:d9:5a:e9:b2:4a:ff:fe:
                    75:24:e6:84:38:37:c4:22:6f:07:20:ed:9a:e2:4a:
                    a1:54:60:d0:ec:8c:37:92:d7:0c:04:c5:4e:29:38:
                    aa:d5:8a:17:5d:e6:66:fc:1e:21:48:5d:27:77:e6:
                    7d:6b:3d:c7:93:04:77:6b:37:2a:7e:9b:0e:3f:2d:
                    cd:8b:0a:80:89:24:b5:4d:13:c5:8a:66:c6:3c:70:
                    69:1a:7c:49:bc:2a:2b:97:0a:f9:50:b3:4f:89:b4:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:07:8D:BA:56:A3:2F:50:A1:BE:37:63:F7:7B:08:DC:86:8B:FD:06
            X509v3 Authority Key Identifier:
                keyid:8F:6B:25:B1:7C:4D:04:E0:B0:49:23:40:E7:AC:24:CC:84:D2:A3:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:7a:a7:82:5e:43:7e:37:7f:f8:02:fd:a9:ec:23:61:87:3b:
         3d:01:4b:3a:0a:5b:7e:72:3c:bb:37:ea:e4:cf:53:1c:65:54:
         8e:e9:93:d7:fe:4d:8f:75:d1:d1:44:79:51:d2:27:91:16:c1:
         3c:9e:cd:71:c9:bd:25:2d:2c:62:bc:34:ac:fc:c3:87:34:71:
         43:e7:26:f7:7a:49:76:94:98:10:8e:45:65:7d:77:3b:89:51:
         b0:8c:36:dd:00:35:50:82:ce:2a:25:df:7c:07:2a:16:ef:20:
         c0:ff:a4:84:d1:f0:b8:6c:65:ec:28:f0:ac:d9:17:76:77:84:
         5b:af:82:19:24:27:f0:d3:26:bb:a4:d0:a3:ab:73:3d:a1:27:
         79:d0:ea:b2:85:0a:80:bb:0c:c6:30:2c:23:86:ab:93:00:c3:
         7c:18:0d:18:df:3e:4b:80:d4:6d:53:58:f0:56:b1:31:79:e4:
         dd:9b:66:94:c5:25:38:c4:c7:fb:df:3d:1d:13:7b:7d:16:12:
         9d:f7:86:55:0a:5f:2e:89:4f:b4:a8:0a:81:a5:f0:ad:76:bf:
         c6:5a:44:b4:3e:b1:78:c2:19:b1:46:a6:9b:7e:5c:77:80:fd:
         a5:21:3d:04:5f:b2:52:ca:75:92:bb:65:9b:b7:c4:12:dd:7e:
         16:7d:5c:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUnFfX/XQOKXAa2SmyfFpUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNmIyNWIxN2M0ZDA0ZTBiMDQ5MjM0MGU3YWMyNGNjODRk
MmEzNDcwHhcNMjQxMTIyMTYwMjMyWhcNMjQxMTIzMTYwMjMyWjAzMTEwLwYDVQQD
EygzYzA3OGRiYTU2YTMyZjUwYTFiZTM3NjNmNzdiMDhkYzg2OGJmZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr+0J+C6nRWjjG752/7Z2+zPT12d
B6DcmWUx1IdcxRoB76iau+xmf7/pfas83LDK3q2Oc7yEzUYfaqI8TD0Q3+mFF18L
M46k16ymkWN77/4g8GDRLOaTRFzNSiko+rEmTrTu6Sgknksj9KT+kFZWJ/ncPEtV
2/3qpXWwa+cP3jQnZ1AnhIu1ELKjsnC7N4+a04w/Ae6i5PgTAKw2/Nla6bJK//51
JOaEODfEIm8HIO2a4kqhVGDQ7Iw3ktcMBMVOKTiq1YoXXeZm/B4hSF0nd+Z9az3H
kwR3azcqfpsOPy3NiwqAiSS1TRPFimbGPHBpGnxJvCorlwr5ULNPibRT4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwHjbpWoy9Qob43Y/d7CNyGi/0GMB8GA1UdIwQY
MBaAFI9rJbF8TQTgsEkjQOesJMyE0qNHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajJzbHNYeE5CT0N3U1NOQTU2d2t6SVRTbzBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85NTMwMGEtN2QxNi00ZDBhLTg2OGMt
MzgzODNmODJiY2Y5LzEvajJzbHNYeE5CT0N3U1NOQTU2d2t6SVRTbzBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS85NTMwMGEtN2QxNi00ZDBhLTg2OGMtMzgzODNmODJiY2Y5
LzEvajJzbHNYeE5CT0N3U1NOQTU2d2t6SVRTbzBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXqngl5D
fjd/+AL9qewjYYc7PQFLOgpbfnI8uzfq5M9THGVUjumT1/5Nj3XR0UR5UdInkRbB
PJ7Nccm9JS0sYrw0rPzDhzRxQ+cm93pJdpSYEI5FZX13O4lRsIw23QA1UILOKiXf
fAcqFu8gwP+khNHwuGxl7CjwrNkXdneEW6+CGSQn8NMmu6TQo6tzPaEnedDqsoUK
gLsMxjAsI4arkwDDfBgNGN8+S4DUbVNY8FaxMXnk3ZtmlMUlOMTH+989HRN7fRYS
nfeGVQpfLolPtKgKgaXwrXa/xlpEtD6xeMIZsUamm35cd4D9pSE9BF+yUsp1krtl
m7fEEt1+Fn1cKg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:04 2024 by rpki-client on console-fra.rpki-client.org