Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
File:                     gMez3pa5HtxunIXZ1aZoQZIDtfU.mft (raw, json)
Hash identifier:          cQ0PiiRCMkH58rsA+lrl2nvAqq8VyQWyHxoWT5xrh/4=
Subject key identifier:   81:A8:96:74:D4:1D:05:39:F7:C5:B4:91:29:FD:1A:3A:7B:C2:EA:73
Authority key identifier: 80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
Certificate issuer:       /CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Certificate serial:       0191FAEC54CCCF65E9C00EE6AB14C931F24D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
Manifest number:          96
Signing time:             Mon 16 Sep 2024 13:01:17 +0000
Manifest this update:     Mon 16 Sep 2024 13:01:17 +0000
Manifest next update:     Tue 17 Sep 2024 13:01:17 +0000
Files and hashes:         1: LdzswJoW6namQGAongSJlEjxI2E.roa (hash: rdDeXmGGsRNw0Ag/6cENwrskVENKVJUwQN2RtqfOmpQ=)
                          2: gMez3pa5HtxunIXZ1aZoQZIDtfU.crl (hash: /1eefPXd36auJAgNgDeQsvAcfmbWBuW8ujAcewy/z7k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ec:54:cc:cf:65:e9:c0:0e:e6:ab:14:c9:31:f2:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
        Validity
            Not Before: Sep 16 13:01:17 2024 GMT
            Not After : Sep 17 13:01:17 2024 GMT
        Subject: CN=81a89674d41d0539f7c5b49129fd1a3a7bc2ea73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:6d:c4:35:56:87:75:a3:7b:85:a9:3d:78:
                    94:c4:aa:57:e7:bf:d0:01:93:8b:85:2a:5f:5b:a6:
                    ff:2b:02:b2:32:ae:76:47:48:aa:71:5d:c3:ee:8f:
                    3c:67:0e:1b:f7:94:61:ce:bd:40:b1:6b:9a:40:e9:
                    3a:fe:40:49:d8:93:16:10:c4:22:f0:96:59:d4:31:
                    d2:39:9e:fc:14:3e:4c:09:d3:8d:e6:a7:96:36:37:
                    a5:52:4d:27:e5:9d:a0:5a:16:d3:94:41:49:11:bd:
                    14:1b:53:32:01:89:12:b7:0b:61:ad:bc:c6:45:26:
                    6f:87:d1:51:26:33:8c:cf:3c:03:9d:01:fc:74:7c:
                    ab:51:79:20:45:bc:96:04:d7:66:16:84:65:bd:81:
                    ca:78:76:99:10:ab:17:47:5b:96:7e:23:71:7e:aa:
                    a2:a6:cb:82:ef:1f:fd:eb:00:a6:14:96:38:07:6e:
                    75:a6:8c:94:53:56:01:4d:11:71:a5:2f:56:2c:10:
                    2f:96:34:6e:1c:4f:28:70:cd:34:7f:05:f7:0c:f4:
                    85:a5:8c:0d:7d:82:60:43:97:6d:eb:dc:eb:39:37:
                    19:72:8f:2e:cb:aa:44:36:40:35:97:37:fa:e2:5d:
                    b2:00:78:1b:44:8b:a1:46:c5:e1:5a:ff:1a:3a:66:
                    83:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A8:96:74:D4:1D:05:39:F7:C5:B4:91:29:FD:1A:3A:7B:C2:EA:73
            X509v3 Authority Key Identifier:
                keyid:80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d1:a4:4e:6a:49:6c:be:68:4f:45:b6:3c:3d:a7:41:d1:0b:
         6a:5b:e7:f3:3d:8a:5a:d6:45:3c:30:aa:64:91:7e:37:17:90:
         17:19:65:11:ae:9a:e0:4f:bf:1f:54:33:ba:96:a3:01:3c:aa:
         09:b4:55:82:55:28:fb:85:ac:9e:7f:28:3a:66:3a:79:b0:09:
         f6:cd:98:7b:25:06:24:ae:06:23:a9:2f:da:ef:7a:be:44:e2:
         49:c7:e0:8a:8e:28:2b:f6:09:6e:42:3b:29:6f:ab:0c:d0:6d:
         61:2c:19:b5:75:6c:a6:c6:47:7e:c1:dc:18:db:58:83:b3:83:
         8b:3a:13:52:e8:e9:d5:a9:8f:11:4b:6a:7e:ef:67:ac:42:5a:
         80:33:53:1e:27:e6:f1:a9:85:3d:6d:7c:15:86:38:da:66:aa:
         e7:d3:1b:d3:1c:46:d8:bd:7f:05:00:88:3a:2b:38:a9:62:1b:
         a4:72:53:f7:a2:20:c2:e6:58:91:c8:ca:a1:3b:4f:4e:00:7d:
         76:9e:1e:83:58:cc:09:0a:78:f5:cf:11:bf:f1:3c:3b:a3:f7:
         0c:c9:30:b6:c8:b3:f6:6f:83:41:a3:9b:fe:c8:19:51:b3:09:
         fd:e5:62:3d:06:56:8f:2a:81:16:a5:f6:25:84:a6:c9:14:16:
         e6:44:77:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH67FTMz2XpwA7mqxTJMfJNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYzdiM2RlOTZiOTFlZGM2ZTljODVkOWQ1YTY2ODQxOTIw
M2I1ZjUwHhcNMjQwOTE2MTMwMTE3WhcNMjQwOTE3MTMwMTE3WjAzMTEwLwYDVQQD
Eyg4MWE4OTY3NGQ0MWQwNTM5ZjdjNWI0OTEyOWZkMWEzYTdiYzJlYTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJptxDVWh3Wje4WpPXiUxKpX57/Q
AZOLhSpfW6b/KwKyMq52R0iqcV3D7o88Zw4b95Rhzr1AsWuaQOk6/kBJ2JMWEMQi
8JZZ1DHSOZ78FD5MCdON5qeWNjelUk0n5Z2gWhbTlEFJEb0UG1MyAYkStwthrbzG
RSZvh9FRJjOMzzwDnQH8dHyrUXkgRbyWBNdmFoRlvYHKeHaZEKsXR1uWfiNxfqqi
psuC7x/96wCmFJY4B251poyUU1YBTRFxpS9WLBAvljRuHE8ocM00fwX3DPSFpYwN
fYJgQ5dt69zrOTcZco8uy6pENkA1lzf64l2yAHgbRIuhRsXhWv8aOmaD3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGolnTUHQU598W0kSn9Gjp7wupzMB8GA1UdIwQY
MBaAFIDHs96WuR7cbpyF2dWmaEGSA7X1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jMzAxZmItMzE3NC00NWMzLWE0NDct
YTdmY2ZiNTI5ZGM3LzEvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jMzAxZmItMzE3NC00NWMzLWE0NDctYTdmY2ZiNTI5ZGM3
LzEvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedGkTmpJ
bL5oT0W2PD2nQdELalvn8z2KWtZFPDCqZJF+NxeQFxllEa6a4E+/H1QzupajATyq
CbRVglUo+4Wsnn8oOmY6ebAJ9s2YeyUGJK4GI6kv2u96vkTiScfgio4oK/YJbkI7
KW+rDNBtYSwZtXVspsZHfsHcGNtYg7ODizoTUujp1amPEUtqfu9nrEJagDNTHifm
8amFPW18FYY42maq59Mb0xxG2L1/BQCIOis4qWIbpHJT96IgwuZYkcjKoTtPTgB9
dp4eg1jMCQp49c8Rv/E8O6P3DMkwtsiz9m+DQaOb/sgZUbMJ/eViPQZWjyqBFqX2
JYSmyRQW5kR3EA==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:35:28 2024 by rpki-client on console-ams.rpki-client.org