Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File:                     jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier:          QqCyuk1FJYUMaAwELoK2afgnzRwwK09rPeJnnHXHLbA=
Subject key identifier:   46:DF:CD:C2:33:79:A8:64:8E:D9:F0:96:A0:18:BA:AC:BE:B0:17:86
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer:       /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial:       019359F77635465403DF180AC6405F1DBD96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number:          045C
Signing time:             Sat 23 Nov 2024 17:00:09 +0000
Manifest this update:     Sat 23 Nov 2024 17:00:09 +0000
Manifest next update:     Sun 24 Nov 2024 17:00:09 +0000
Files and hashes:         1: 9yaDrumRHAsVJk1Pjvb04f3IXS4.roa (hash: yGlfZb1uwToZMXnBp/CeqZUBr5VEN/Mfep0L0bIS+OM=)
                          2: cc_gigPeu50sv85VxRSiAVow7FA.roa (hash: JLxGZ3SqTBYH1J2PUMFkDQJa10pXZr8zJFqN6KGsxz8=)
                          3: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: +NUgFeFgo5odgNrcH3oseeBByoI5y8uh6lIRxGykAfU=)
                          4: smEg4fAndHFFltU8sCVhLyw7mjI.roa (hash: AFxddHlqsB3qgD7wBSg3tHRm2p6yswMjuHW5pS8/yI8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:f7:76:35:46:54:03:df:18:0a:c6:40:5f:1d:bd:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
        Validity
            Not Before: Nov 23 17:00:09 2024 GMT
            Not After : Nov 24 17:00:09 2024 GMT
        Subject: CN=46dfcdc23379a8648ed9f096a018baacbeb01786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:84:ec:52:9c:7c:92:b7:85:c5:51:49:33:
                    e5:8c:ab:00:8b:77:d8:68:ec:65:54:dd:59:7b:e6:
                    72:75:df:d7:3b:94:26:e3:78:e7:80:6a:5e:c1:e4:
                    53:9a:66:6d:55:5a:ae:22:03:73:a9:14:42:57:43:
                    4c:90:07:cb:84:26:55:9f:6f:6d:44:c2:1c:81:60:
                    49:1f:da:df:93:a5:44:0d:48:1b:5c:cc:43:e6:0d:
                    c4:d6:b0:10:0b:29:8e:61:34:d5:a5:3f:ab:6c:96:
                    c2:a5:63:1f:ad:85:9e:8c:c9:42:a3:5a:c0:ad:2b:
                    6a:41:e5:29:bf:0d:86:74:6b:e1:dd:2b:7f:e4:44:
                    80:00:18:d3:3a:80:79:2b:42:35:0f:a8:34:40:63:
                    16:3d:47:ba:e6:7c:ca:13:1e:65:ba:cb:91:88:39:
                    74:65:14:b0:6b:3d:3e:1d:bb:29:5b:44:78:18:65:
                    3c:8e:22:14:1e:76:ea:13:2a:7d:c4:3d:d1:d4:aa:
                    c3:90:9a:2e:d8:47:03:13:c7:53:3b:48:e7:88:d9:
                    cb:3a:93:44:cd:b6:84:14:fa:66:f4:d8:1b:54:99:
                    f9:79:bb:88:36:8b:12:59:e0:60:eb:62:db:d4:46:
                    aa:45:a5:4a:88:29:03:9d:45:1d:7b:8b:06:9e:0e:
                    c5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DF:CD:C2:33:79:A8:64:8E:D9:F0:96:A0:18:BA:AC:BE:B0:17:86
            X509v3 Authority Key Identifier:
                keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e6:95:c3:57:c1:03:41:e2:41:6f:3d:1b:c4:93:66:3d:f3:
         91:a4:96:9c:05:3a:f9:c5:f8:86:f0:12:4c:28:b1:c8:90:a4:
         98:e6:f0:bc:99:2b:2c:86:6d:70:27:75:4e:8c:0f:d7:83:4b:
         b4:36:5e:22:85:e7:d0:8d:81:b6:e5:9d:d8:7e:a7:bc:89:ed:
         ec:8d:da:51:a0:5f:d9:f4:3e:fb:d2:3b:3c:e7:3b:fe:56:7a:
         84:1d:88:f2:93:5b:30:f6:85:a4:cf:d0:a3:2d:25:43:53:ea:
         6d:1b:cc:73:b5:6b:3a:f8:e2:4d:d1:68:cb:20:a5:64:8a:9f:
         25:67:a3:6c:28:1c:4f:1c:ae:49:e1:f4:72:e5:66:ae:83:d0:
         87:98:39:b4:15:79:05:77:5c:93:ce:f9:48:85:ef:a0:0f:fb:
         44:dc:15:4e:00:9a:2b:b8:31:aa:a8:76:e8:c3:3b:59:28:9b:
         d1:f2:3f:5b:c4:d9:40:99:cc:36:e1:55:4f:cd:02:32:c3:50:
         68:4c:e5:77:a3:94:0c:f6:8e:58:f0:0a:35:b9:ca:8b:24:06:
         53:b2:ed:55:db:4d:a4:58:c1:ef:91:2a:ce:12:33:75:0e:b5:
         fd:65:03:a2:05:6c:1d:80:88:66:c1:d9:77:a0:52:eb:a0:98:
         2d:9a:b8:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZ93Y1RlQD3xgKxkBfHb2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzQ1ODczMzVjMjkwZmY4ZjJiMzc0ZGYyNGFiZTIzMzNi
Y2VkNWUwHhcNMjQxMTIzMTcwMDA5WhcNMjQxMTI0MTcwMDA5WjAzMTEwLwYDVQQD
Eyg0NmRmY2RjMjMzNzlhODY0OGVkOWYwOTZhMDE4YmFhY2JlYjAxNzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqqE7FKcfJK3hcVRSTPljKsAi3fY
aOxlVN1Ze+Zydd/XO5Qm43jngGpeweRTmmZtVVquIgNzqRRCV0NMkAfLhCZVn29t
RMIcgWBJH9rfk6VEDUgbXMxD5g3E1rAQCymOYTTVpT+rbJbCpWMfrYWejMlCo1rA
rStqQeUpvw2GdGvh3St/5ESAABjTOoB5K0I1D6g0QGMWPUe65nzKEx5lusuRiDl0
ZRSwaz0+HbspW0R4GGU8jiIUHnbqEyp9xD3R1KrDkJou2EcDE8dTO0jniNnLOpNE
zbaEFPpm9NgbVJn5ebuINosSWeBg62Lb1EaqRaVKiCkDnUUde4sGng7F9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbfzcIzeahkjtnwlqAYuqy+sBeGMB8GA1UdIwQY
MBaAFI3EWHM1wpD/jys3TfJKviMzvO1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYt
ZDYwNmQ5OTI1YWI3LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYtZDYwNmQ5OTI1YWI3
LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuaVw1fB
A0HiQW89G8STZj3zkaSWnAU6+cX4hvASTCixyJCkmObwvJkrLIZtcCd1TowP14NL
tDZeIoXn0I2BtuWd2H6nvInt7I3aUaBf2fQ++9I7POc7/lZ6hB2I8pNbMPaFpM/Q
oy0lQ1PqbRvMc7VrOvjiTdFoyyClZIqfJWejbCgcTxyuSeH0cuVmroPQh5g5tBV5
BXdck875SIXvoA/7RNwVTgCaK7gxqqh26MM7WSib0fI/W8TZQJnMNuFVT80CMsNQ
aEzld6OUDPaOWPAKNbnKiyQGU7LtVdtNpFjB75EqzhIzdQ61/WUDogVsHYCIZsHZ
d6BS66CYLZq4bw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 19:21:22 2024 by rpki-client on console-fra.rpki-client.org