Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File:                     ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier:          Q0iY7c5IZjshsoLfX4ZltZgTE8Vmm55H5ABssnTIWGw=
Subject key identifier:   A9:B4:1E:5A:F7:C0:68:3C:E0:A9:09:57:FE:6D:3D:01:45:EC:D2:30
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer:       /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial:       019355AD6B46991F138F3952AA27C6FB8A61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number:          0800
Signing time:             Fri 22 Nov 2024 21:00:48 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:48 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:48 +0000
Files and hashes:         1: H76q-9LnI75xKSGYrLpbsnp22lI.roa (hash: y1pt9AU+BvDP8cBPIFIcMEGQJMyInRLkenUWf/g1R7k=)
                          2: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: 2rKRCv4js2TeDCnzTqGLkFanzOY85zqwBFU+Gjoq94w=)
                          3: X53QUdfB23eIAzULrwBhcHJzYyY.roa (hash: 1P4Fp2hyt6Jm+gUmzHOhEIlCr4T0od/cn1BOoS1FBfk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:6b:46:99:1f:13:8f:39:52:aa:27:c6:fb:8a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
        Validity
            Not Before: Nov 22 21:00:48 2024 GMT
            Not After : Nov 23 21:00:48 2024 GMT
        Subject: CN=a9b41e5af7c0683ce0a90957fe6d3d0145ecd230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:46:af:4c:ca:f7:fc:32:08:53:d0:a1:56:21:
                    3c:2f:95:34:cc:6e:90:45:5f:7e:7a:1d:41:1d:95:
                    d7:4e:7a:8a:ac:3a:c3:b8:fd:ca:fe:95:d4:61:d4:
                    0a:5a:ec:2c:6c:5b:5c:b3:61:f3:5e:66:c8:ec:d5:
                    d7:c8:93:d2:1a:05:8e:e4:ce:cc:80:e9:28:ac:e0:
                    12:fb:c0:97:f9:19:8b:2e:dd:de:cf:70:5f:c9:63:
                    54:5f:9a:9a:11:7f:f4:cc:f6:73:cc:92:0c:4e:6a:
                    0c:b6:6a:9c:9f:be:15:0f:b5:66:ad:18:5c:7e:2e:
                    00:65:9c:69:4e:92:f6:3a:eb:03:2d:b3:07:8e:54:
                    ba:6f:f4:ec:bd:35:8f:33:bc:75:7b:69:64:c9:9f:
                    2f:6e:0b:d5:21:60:ca:c2:c4:f2:b3:c2:bf:06:4a:
                    96:02:86:e0:46:e5:1a:84:c9:88:48:74:5f:0c:13:
                    6e:8e:01:18:0a:5e:2c:4e:e1:05:4c:01:7c:43:a6:
                    b6:a0:45:8a:25:4c:3c:78:a2:71:1b:f7:34:7e:fd:
                    2e:f6:dd:c8:4a:71:8f:e4:33:2d:71:4e:25:ff:ce:
                    59:73:e2:19:b8:ec:40:e3:9f:2f:e4:41:be:45:d7:
                    4f:94:76:9d:73:0a:c6:c2:43:ac:f1:b7:77:e4:e1:
                    ec:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B4:1E:5A:F7:C0:68:3C:E0:A9:09:57:FE:6D:3D:01:45:EC:D2:30
            X509v3 Authority Key Identifier:
                keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:15:85:71:85:c2:a7:16:2b:ea:28:2e:b9:0e:eb:0e:29:78:
         3c:5b:55:4e:68:65:c3:13:c8:34:b1:bc:20:76:f1:8b:a2:fb:
         42:54:86:1b:a4:0d:65:cb:b7:9b:7d:11:c5:12:00:5f:de:5b:
         25:b5:11:04:db:7f:13:9d:5a:f8:ae:9c:9f:43:65:56:0e:59:
         32:b3:98:31:eb:37:3e:e0:b0:c6:4d:a1:5c:72:09:8f:21:15:
         a4:de:cc:b2:57:e0:42:b8:c7:c3:9a:d7:4f:c2:86:2a:fb:9e:
         31:7b:b2:10:f9:05:40:d3:a7:86:4b:d8:96:28:61:0a:63:a7:
         74:c7:b3:65:92:d6:8c:c1:f4:06:2c:1a:c5:88:c3:b3:98:3e:
         05:a7:03:f5:d9:3f:22:10:c4:c6:37:ab:b8:20:bf:64:49:bd:
         2f:dd:76:07:9f:6e:1a:76:ea:fd:46:92:2a:d3:30:38:fc:6d:
         ba:b0:98:08:a9:95:20:a2:0a:4b:fc:67:54:93:4c:3d:c9:0a:
         4d:d0:59:24:bb:5f:0e:ea:91:c3:80:2b:0d:fd:1b:38:bc:a2:
         3f:4d:5e:89:47:cd:2e:ba:fb:cd:d0:5c:08:fa:0e:98:0b:db:
         81:30:6a:5e:32:18:fc:f4:6a:46:38:2e:59:6e:53:3b:07:d8:
         03:fc:b1:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVrWtGmR8TjzlSqifG+4phMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYjUxMDBlNzk4ZmFiNzU3N2JmNzI1YWM5NTY5ZWE4MGU2
YzJhMDQwHhcNMjQxMTIyMjEwMDQ4WhcNMjQxMTIzMjEwMDQ4WjAzMTEwLwYDVQQD
EyhhOWI0MWU1YWY3YzA2ODNjZTBhOTA5NTdmZTZkM2QwMTQ1ZWNkMjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UavTMr3/DIIU9ChViE8L5U0zG6Q
RV9+eh1BHZXXTnqKrDrDuP3K/pXUYdQKWuwsbFtcs2HzXmbI7NXXyJPSGgWO5M7M
gOkorOAS+8CX+RmLLt3ez3BfyWNUX5qaEX/0zPZzzJIMTmoMtmqcn74VD7VmrRhc
fi4AZZxpTpL2OusDLbMHjlS6b/TsvTWPM7x1e2lkyZ8vbgvVIWDKwsTys8K/BkqW
AobgRuUahMmISHRfDBNujgEYCl4sTuEFTAF8Q6a2oEWKJUw8eKJxG/c0fv0u9t3I
SnGP5DMtcU4l/85Zc+IZuOxA458v5EG+RddPlHadcwrGwkOs8bd35OHsfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKm0Hlr3wGg84KkJV/5tPQFF7NIwMB8GA1UdIwQY
MBaAFCC1EA55j6t1d79yWslWnqgObCoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQt
ODAzNzk2NTY5M2EyLzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85ZTQ5ZmYtNDI2NC00NjQ3LTk1YTQtODAzNzk2NTY5M2Ey
LzEvSUxVUURubVBxM1YzdjNKYXlWYWVxQTVzS2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBWFcYXC
pxYr6iguuQ7rDil4PFtVTmhlwxPINLG8IHbxi6L7QlSGG6QNZcu3m30RxRIAX95b
JbURBNt/E51a+K6cn0NlVg5ZMrOYMes3PuCwxk2hXHIJjyEVpN7MslfgQrjHw5rX
T8KGKvueMXuyEPkFQNOnhkvYlihhCmOndMezZZLWjMH0BiwaxYjDs5g+BacD9dk/
IhDExjeruCC/ZEm9L912B59uGnbq/UaSKtMwOPxturCYCKmVIKIKS/xnVJNMPckK
TdBZJLtfDuqRw4ArDf0bOLyiP01eiUfNLrr7zdBcCPoOmAvbgTBqXjIY/PRqRjgu
WW5TOwfYA/yxUA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:34:41 2024 by rpki-client on console-ams.rpki-client.org