Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File:                     CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier:          qNTnuseAc6tX1R7h8hz+K5cAjXPoOPV36Yb2ctV93Es=
Subject key identifier:   B9:EA:63:15:A8:B8:6D:B7:EC:08:BE:20:76:33:C5:D7:B6:4B:CE:E1
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer:       /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial:       01936B2205661D722FFFEC2C450CE05A9582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number:          5E
Signing time:             Wed 27 Nov 2024 01:00:11 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:11 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:11 +0000
Files and hashes:         1: 8D1QvMjC0LkC7zqiT1_955AS_8w.roa (hash: e3cIGp1osQhLzVQWjCpqAbTDS71lcbPIpMEP/QLu4EA=)
                          2: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: UJF1XfgIXpM3ThqvLZwHPsDSa+lR/Ps8rXGj9ViK9FI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:05:66:1d:72:2f:ff:ec:2c:45:0c:e0:5a:95:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
        Validity
            Not Before: Nov 27 01:00:11 2024 GMT
            Not After : Nov 28 01:00:11 2024 GMT
        Subject: CN=b9ea6315a8b86db7ec08be207633c5d7b64bcee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3d:6e:b1:23:7d:28:20:2c:74:93:11:78:80:
                    cb:26:ba:42:4d:15:fd:7d:45:80:b0:10:22:1a:4d:
                    8a:57:fe:37:8c:95:04:00:14:68:ea:e7:87:f1:20:
                    39:bf:55:85:26:30:f3:dd:33:69:a6:19:89:76:7d:
                    5e:e9:30:c7:af:68:76:67:e0:0a:37:d1:5f:70:65:
                    ca:e9:e3:a1:02:25:34:13:09:47:ef:a9:1a:e6:ea:
                    dd:d6:08:3f:10:b1:af:43:e3:9e:bb:a1:15:e3:89:
                    0d:f0:1c:89:9a:2e:53:37:d0:1c:4f:0f:73:7a:e2:
                    9a:52:f9:d1:9b:78:77:b1:e0:fc:9b:5a:95:26:5d:
                    7c:2b:81:d9:35:31:6c:c0:e3:db:33:a4:ce:7c:b1:
                    6d:ff:a3:19:4b:b1:88:3b:00:bc:50:15:36:54:6e:
                    e0:5e:31:72:ae:bf:b6:e3:9e:a9:4e:ea:ff:a3:35:
                    b8:1b:e7:5f:db:03:d2:ad:23:3e:cd:f9:f8:1f:67:
                    ad:d9:61:88:ef:f4:87:e2:7b:36:40:19:ac:6f:5c:
                    bc:b1:52:72:8b:63:24:37:60:c4:24:fd:58:93:75:
                    92:65:a7:8e:d3:94:52:52:a6:cb:11:c2:78:01:f3:
                    f1:60:8e:77:78:3d:18:a0:45:61:fe:fa:5d:91:32:
                    86:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EA:63:15:A8:B8:6D:B7:EC:08:BE:20:76:33:C5:D7:B6:4B:CE:E1
            X509v3 Authority Key Identifier:
                keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:da:2b:d1:aa:e8:02:74:5d:df:0e:ee:09:7f:93:80:81:e0:
         44:c5:55:36:a0:b9:9e:f7:3c:b8:14:22:5e:60:ea:8a:a0:85:
         7b:59:06:b9:84:9e:46:17:ab:b2:da:3a:aa:61:95:61:2c:92:
         88:0b:2f:bc:ed:b4:32:25:45:a3:7b:c1:7d:f4:89:2f:06:a0:
         d7:85:5f:1e:34:d0:75:be:9e:70:19:e8:a6:37:f1:aa:84:bc:
         a8:d6:36:65:f3:b6:8e:49:32:2d:35:8a:eb:20:bd:f8:a2:8f:
         e2:f0:36:13:f5:9d:74:ee:dd:49:ab:9a:93:95:c0:0e:8c:19:
         4b:35:7a:4f:23:8d:6f:ab:3c:3b:9b:85:21:1b:95:73:90:c5:
         d3:2f:bb:cc:e4:72:96:40:74:ab:d1:18:23:fc:b2:fb:74:bd:
         dc:76:90:63:e8:9e:c6:09:e3:99:9a:a1:eb:e9:d1:97:fb:9e:
         24:1c:dd:60:1b:58:ad:3c:c7:b4:3e:9a:59:26:e4:54:91:90:
         2b:7b:1f:71:47:c4:31:ab:e5:d2:1a:f8:97:1b:e9:75:ad:29:
         9b:ae:b4:de:ac:9f:4e:12:97:7b:dc:f8:93:71:2f:f2:1f:64:
         53:6f:a7:a7:00:5f:a5:f6:4e:81:1e:50:28:bd:8f:fe:1d:b6:
         0a:c9:45:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIgVmHXIv/+wsRQzgWpWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDhjMDQ4MTZhYTYxZjkzNWUxNGE2NGMzZWJiYTkxMGJh
NjUxZjQwHhcNMjQxMTI3MDEwMDExWhcNMjQxMTI4MDEwMDExWjAzMTEwLwYDVQQD
EyhiOWVhNjMxNWE4Yjg2ZGI3ZWMwOGJlMjA3NjMzYzVkN2I2NGJjZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j1usSN9KCAsdJMReIDLJrpCTRX9
fUWAsBAiGk2KV/43jJUEABRo6ueH8SA5v1WFJjDz3TNpphmJdn1e6TDHr2h2Z+AK
N9FfcGXK6eOhAiU0EwlH76ka5urd1gg/ELGvQ+Oeu6EV44kN8ByJmi5TN9AcTw9z
euKaUvnRm3h3seD8m1qVJl18K4HZNTFswOPbM6TOfLFt/6MZS7GIOwC8UBU2VG7g
XjFyrr+2456pTur/ozW4G+df2wPSrSM+zfn4H2et2WGI7/SH4ns2QBmsb1y8sVJy
i2MkN2DEJP1Yk3WSZaeO05RSUqbLEcJ4AfPxYI53eD0YoEVh/vpdkTKGgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnqYxWouG237Ai+IHYzxde2S87hMB8GA1UdIwQY
MBaAFApIwEgWqmH5NeFKZMPrupELplH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEt
MzFhZWMwN2U5NDVhLzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEtMzFhZWMwN2U5NDVh
LzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdor0aro
AnRd3w7uCX+TgIHgRMVVNqC5nvc8uBQiXmDqiqCFe1kGuYSeRhersto6qmGVYSyS
iAsvvO20MiVFo3vBffSJLwag14VfHjTQdb6ecBnopjfxqoS8qNY2ZfO2jkkyLTWK
6yC9+KKP4vA2E/WddO7dSauak5XADowZSzV6TyONb6s8O5uFIRuVc5DF0y+7zORy
lkB0q9EYI/yy+3S93HaQY+iexgnjmZqh6+nRl/ueJBzdYBtYrTzHtD6aWSbkVJGQ
K3sfcUfEMavl0hr4lxvpda0pm6603qyfThKXe9z4k3Ev8h9kU2+npwBfpfZOgR5Q
KL2P/h22CslFtw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:36:12 2024 by rpki-client on console-ams.rpki-client.org