Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
File:                     m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json)
Hash identifier:          wvK6IpMiCb46Bq0dARuFQzzMcJp7gfxES2kSnV+wxss=
Subject key identifier:   EA:A7:87:E2:FA:15:BB:A0:EA:2D:F3:55:F5:66:B4:3F:0F:98:03:10
Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
Certificate issuer:       /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Certificate serial:       01935879930C11684A3799E38D55B2590D8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
Manifest number:          09F2
Signing time:             Sat 23 Nov 2024 10:03:02 +0000
Manifest this update:     Sat 23 Nov 2024 10:03:02 +0000
Manifest next update:     Sun 24 Nov 2024 10:03:02 +0000
Files and hashes:         1: 7GHI4QuVrAkRYG1t18ix54B05QU.roa (hash: 5IK+bpb3qI93xt5wRqboWXMk6O+FnqaxD8zFDhl3mOs=)
                          2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: IjPf084ZFtD29JI6ElrTnwfqA2qrXKM1OntDaGcAZ4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:93:0c:11:68:4a:37:99:e3:8d:55:b2:59:0d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
        Validity
            Not Before: Nov 23 10:03:02 2024 GMT
            Not After : Nov 24 10:03:02 2024 GMT
        Subject: CN=eaa787e2fa15bba0ea2df355f566b43f0f980310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:11:e8:8a:96:99:80:e6:0e:9e:3f:5f:6f:
                    fb:a3:df:ba:0f:de:45:d7:15:4a:b3:e1:29:68:8c:
                    9d:90:f0:a6:e8:3f:3c:d3:aa:15:f8:47:3b:2f:90:
                    14:5a:dc:87:62:2c:1a:25:e2:a2:09:23:97:ba:66:
                    5d:19:36:2e:fe:c1:bd:e3:58:11:6b:80:b8:85:a4:
                    c4:f9:75:a5:ae:34:06:01:b4:97:78:8c:14:16:76:
                    3b:b2:a6:a4:1d:44:1e:21:ab:93:7b:2d:4b:ca:d7:
                    0d:ee:7f:3e:83:e7:34:96:45:cb:ef:30:d2:9e:06:
                    f3:d4:df:45:4f:83:d1:dd:b3:05:05:db:a5:71:6e:
                    4f:5f:1d:a4:50:60:57:f4:77:fd:03:23:8b:ff:53:
                    8d:29:bd:e0:31:80:39:a6:2b:56:63:fe:f0:66:98:
                    1d:1c:e7:71:2b:f3:99:cd:76:ca:5e:13:01:96:69:
                    a7:e0:38:15:74:2e:68:b3:16:6d:31:7c:75:18:13:
                    df:ee:82:e5:9f:71:46:9d:c5:67:e5:35:a0:02:d6:
                    b2:f4:7a:af:b6:88:14:6c:39:82:4a:1b:d1:31:69:
                    97:bd:60:50:34:d9:1c:f3:74:f7:b0:d1:84:4d:11:
                    b7:cc:46:10:a7:ab:56:9e:26:7f:07:dc:1b:99:c0:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A7:87:E2:FA:15:BB:A0:EA:2D:F3:55:F5:66:B4:3F:0F:98:03:10
            X509v3 Authority Key Identifier:
                keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:4c:29:ab:13:d2:e3:fe:02:40:84:b5:65:8a:70:72:67:b6:
         7b:5b:6f:91:3b:4a:59:be:b5:ce:18:d6:37:e3:9a:21:6d:8a:
         c0:67:96:68:5a:d1:c7:b4:57:bd:50:36:4e:cb:a5:fe:d0:3d:
         76:4f:dc:b6:53:06:82:35:c2:c2:0b:ea:c6:8f:02:55:d6:e9:
         1f:63:91:31:d7:49:ff:04:a1:7a:e7:ac:e2:8c:07:d8:82:92:
         93:cd:16:0d:5f:c6:f4:88:fa:13:3b:83:a2:a8:90:63:ce:dc:
         30:05:06:23:0f:e9:67:72:ef:af:07:f8:3c:b7:eb:be:31:34:
         2e:98:a9:d5:dc:28:7e:3d:4a:88:19:13:c4:ea:61:72:cf:73:
         28:32:3d:dd:cc:db:b6:6b:1b:c6:ed:0b:14:bd:c1:45:d5:b2:
         e7:3d:3e:a4:a7:d5:7f:d8:e0:28:70:54:cf:b9:1b:a1:d8:9e:
         53:3f:cf:bb:55:3c:63:ed:96:57:0b:02:53:60:f1:94:86:96:
         aa:8d:41:36:3a:7d:41:37:73:ab:0e:3e:66:f6:ae:b5:ad:c1:
         96:1c:d3:db:4e:f3:3a:0e:42:b5:e1:5f:05:00:b8:e1:ef:4d:
         a0:d0:f9:d0:de:4e:da:9f:0e:78:08:de:fc:77:3f:f2:d6:d0:
         98:2c:e6:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeZMMEWhKN5njjVWyWQ2OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYjM1MGE5MDVkZjNmZGJiYzI0NTZkNWM4MWMyZjIwOWFl
NzUyZjMwHhcNMjQxMTIzMTAwMzAyWhcNMjQxMTI0MTAwMzAyWjAzMTEwLwYDVQQD
EyhlYWE3ODdlMmZhMTViYmEwZWEyZGYzNTVmNTY2YjQzZjBmOTgwMzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyakR6IqWmYDmDp4/X2/7o9+6D95F
1xVKs+EpaIydkPCm6D8806oV+Ec7L5AUWtyHYiwaJeKiCSOXumZdGTYu/sG941gR
a4C4haTE+XWlrjQGAbSXeIwUFnY7sqakHUQeIauTey1LytcN7n8+g+c0lkXL7zDS
ngbz1N9FT4PR3bMFBdulcW5PXx2kUGBX9Hf9AyOL/1ONKb3gMYA5pitWY/7wZpgd
HOdxK/OZzXbKXhMBlmmn4DgVdC5osxZtMXx1GBPf7oLln3FGncVn5TWgAtay9Hqv
togUbDmCShvRMWmXvWBQNNkc83T3sNGETRG3zEYQp6tWniZ/B9wbmcC/UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqnh+L6Fbug6i3zVfVmtD8PmAMQMB8GA1UdIwQY
MBaAFJuzUKkF3z/bvCRW1cgcLyCa51LzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iMTRkZGQtYWZkYS00MDhjLTljNDYt
OWMxZjY5YTI0MmJhLzEvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iMTRkZGQtYWZkYS00MDhjLTljNDYtOWMxZjY5YTI0MmJh
LzEvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkwpqxPS
4/4CQIS1ZYpwcme2e1tvkTtKWb61zhjWN+OaIW2KwGeWaFrRx7RXvVA2Tsul/tA9
dk/ctlMGgjXCwgvqxo8CVdbpH2ORMddJ/wSheues4owH2IKSk80WDV/G9Ij6EzuD
oqiQY87cMAUGIw/pZ3Lvrwf4PLfrvjE0Lpip1dwofj1KiBkTxOphcs9zKDI93czb
tmsbxu0LFL3BRdWy5z0+pKfVf9jgKHBUz7kbodieUz/Pu1U8Y+2WVwsCU2DxlIaW
qo1BNjp9QTdzqw4+Zvauta3BlhzT207zOg5CteFfBQC44e9NoND50N5O2p8OeAje
/Hc/8tbQmCzmVA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:57 2024 by rpki-client on console-ams.rpki-client.org