Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
File:                     lRTVqEAEnUQt83dEU5TfcZIBp3M.mft (raw, json)
Hash identifier:          ECSkAwy4rKe6RvjzXqaeq3VUWUypzEvrqr6VGV92KdQ=
Subject key identifier:   39:5C:16:16:AF:25:F2:95:98:4A:04:1B:C7:40:E5:19:3C:27:7E:1B
Authority key identifier: 95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73
Certificate issuer:       /CN=9514d5a840049d442df377445394df719201a773
Certificate serial:       0191FA479C108042FC8D423F53D0F68E93F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
Manifest number:          0102
Signing time:             Mon 16 Sep 2024 10:01:22 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:22 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:22 +0000
Files and hashes:         1: _oAzIxgkVqxpK9tujnwuia-mGG4.roa (hash: iiOkfjbpabKRKNUjgfTJVsacIPAyNFg64wlhWyAhisw=)
                          2: lRTVqEAEnUQt83dEU5TfcZIBp3M.crl (hash: EBo8KH564T9qAg1HstxMMnuFJlALemFnqJRpDn+rhHw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:9c:10:80:42:fc:8d:42:3f:53:d0:f6:8e:93:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9514d5a840049d442df377445394df719201a773
        Validity
            Not Before: Sep 16 10:01:22 2024 GMT
            Not After : Sep 17 10:01:22 2024 GMT
        Subject: CN=395c1616af25f295984a041bc740e5193c277e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:b2:d7:bf:d2:7b:83:88:42:a3:f3:9f:00:
                    e7:c3:a7:f3:f4:fb:ea:1d:01:46:15:7e:e8:f3:38:
                    88:ca:92:88:ca:58:4e:9c:69:04:93:dc:a6:a8:de:
                    bc:9b:45:94:68:2e:b4:9a:ff:58:9e:c1:09:5b:c8:
                    54:12:b9:c9:9f:56:e6:78:a1:cd:34:a2:d6:a3:99:
                    27:f7:54:68:3d:b6:1b:34:0b:63:7a:6b:3f:74:61:
                    43:63:a8:05:ac:ef:72:56:e6:1a:14:b1:8c:28:a9:
                    4d:15:3a:b9:71:e9:24:dd:47:20:23:44:4b:66:6f:
                    c9:80:80:21:67:0b:b4:67:e1:fd:7a:f7:cb:99:fd:
                    57:89:b1:69:5e:2b:eb:0b:0a:94:70:db:75:1b:6b:
                    34:f5:8b:17:87:ca:c3:e6:92:b6:7b:42:37:bf:20:
                    86:f0:ae:68:10:b7:0b:29:db:3d:b6:33:6e:77:c7:
                    a8:d7:b4:f7:b8:f9:68:72:f2:f0:15:0e:33:19:39:
                    14:74:c0:d7:b5:e3:97:48:a8:93:34:ef:eb:54:18:
                    7b:21:b2:e0:98:e7:64:77:86:46:37:71:51:81:78:
                    2d:79:1e:04:50:22:30:0c:36:02:8a:a1:ed:4c:c6:
                    2a:be:81:41:b8:b7:f8:1b:bd:1f:8e:b6:e1:a4:22:
                    2b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5C:16:16:AF:25:F2:95:98:4A:04:1B:C7:40:E5:19:3C:27:7E:1B
            X509v3 Authority Key Identifier:
                keyid:95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:70:c4:43:14:e4:18:5e:85:af:5b:78:89:6c:b7:17:50:ac:
         bc:ab:a8:d9:61:2f:8e:db:17:01:04:4d:34:6a:7a:09:33:da:
         0d:35:91:0f:0a:4b:fa:86:79:aa:b0:73:ab:d9:41:14:c4:1c:
         51:57:56:74:4f:5c:0c:33:64:1c:02:43:b6:fd:39:9e:c7:b2:
         67:c3:0b:50:46:5b:97:05:ac:0f:21:88:dd:fb:ff:94:cb:4a:
         d1:77:4f:29:bc:0a:f7:d0:ba:7d:65:e3:15:96:48:fe:98:88:
         1e:42:4a:e8:4f:b7:e7:7b:b3:f5:97:d6:59:d0:32:e6:2e:3d:
         80:44:6c:51:72:37:fe:b3:60:4f:ca:0d:c9:b6:0a:a6:a0:b4:
         12:0a:62:00:9b:a2:2e:20:5d:01:ca:8b:8e:e4:f0:d9:d2:08:
         bb:20:c7:39:b3:9b:cb:dc:bf:4c:ce:9c:6a:b4:af:5d:44:33:
         5c:d6:25:87:78:50:10:de:6a:06:88:56:6e:63:2f:a3:04:7d:
         46:24:88:b3:01:08:64:52:1e:82:a3:df:b8:18:a5:61:1d:16:
         fd:4b:53:56:9e:7d:a4:37:6f:e0:02:6f:58:34:c2:00:60:93:
         b1:ab:25:80:bb:46:5a:49:5f:cf:58:71:7d:40:bd:d6:6c:ec:
         32:de:8b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6R5wQgEL8jUI/U9D2jpPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MTRkNWE4NDAwNDlkNDQyZGYzNzc0NDUzOTRkZjcxOTIw
MWE3NzMwHhcNMjQwOTE2MTAwMTIyWhcNMjQwOTE3MTAwMTIyWjAzMTEwLwYDVQQD
EygzOTVjMTYxNmFmMjVmMjk1OTg0YTA0MWJjNzQwZTUxOTNjMjc3ZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4Ky17/Se4OIQqPznwDnw6fz9Pvq
HQFGFX7o8ziIypKIylhOnGkEk9ymqN68m0WUaC60mv9YnsEJW8hUErnJn1bmeKHN
NKLWo5kn91RoPbYbNAtjems/dGFDY6gFrO9yVuYaFLGMKKlNFTq5cekk3UcgI0RL
Zm/JgIAhZwu0Z+H9evfLmf1XibFpXivrCwqUcNt1G2s09YsXh8rD5pK2e0I3vyCG
8K5oELcLKds9tjNud8eo17T3uPlocvLwFQ4zGTkUdMDXteOXSKiTNO/rVBh7IbLg
mOdkd4ZGN3FRgXgteR4EUCIwDDYCiqHtTMYqvoFBuLf4G70fjrbhpCIreQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlcFhavJfKVmEoEG8dA5Rk8J34bMB8GA1UdIwQY
MBaAFJUU1ahABJ1ELfN3RFOU33GSAadzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFJUVnFFQUVuVVF0ODNkRVU1VGZjWklCcDNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84MWUyNDItZTdkMy00OTFmLWJhNjUt
NTdkMTU4NDNmN2YwLzEvbFJUVnFFQUVuVVF0ODNkRVU1VGZjWklCcDNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84MWUyNDItZTdkMy00OTFmLWJhNjUtNTdkMTU4NDNmN2Yw
LzEvbFJUVnFFQUVuVVF0ODNkRVU1VGZjWklCcDNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnDEQxTk
GF6Fr1t4iWy3F1CsvKuo2WEvjtsXAQRNNGp6CTPaDTWRDwpL+oZ5qrBzq9lBFMQc
UVdWdE9cDDNkHAJDtv05nseyZ8MLUEZblwWsDyGI3fv/lMtK0XdPKbwK99C6fWXj
FZZI/piIHkJK6E+353uz9ZfWWdAy5i49gERsUXI3/rNgT8oNybYKpqC0EgpiAJui
LiBdAcqLjuTw2dIIuyDHObOby9y/TM6carSvXUQzXNYlh3hQEN5qBohWbmMvowR9
RiSIswEIZFIegqPfuBilYR0W/UtTVp59pDdv4AJvWDTCAGCTsaslgLtGWklfz1hx
fUC91mzsMt6LMA==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:35:32 2024 by rpki-client on console-ams.rpki-client.org