Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File:                     CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier:          II/y522CUpBDO9JXAhj1Zu1DGjiC3W+OLEIf8xMXBnc=
Subject key identifier:   F4:10:46:09:75:DE:0E:41:08:A6:68:5C:56:F6:ED:10:92:FE:3C:21
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer:       /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial:       0191F9348E6ED0563A644F31ECD6DD8B8C32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number:          E1
Signing time:             Mon 16 Sep 2024 05:00:56 +0000
Manifest this update:     Mon 16 Sep 2024 05:00:56 +0000
Manifest next update:     Tue 17 Sep 2024 05:00:56 +0000
Files and hashes:         1: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: y6zl57fViByy1zHi2dqc7Ih+2eir0tWT9l6BlJcjyBM=)
                          2: MfPQ-BjwLMfWFITDXA0Px_bCGz4.roa (hash: Yv5uQzFQd7ZuIeljFghDlTOYLi/Q4Mx16y2099C3OgE=)
                          3: vnzz_HwfvY8vw-eSD_C6PXKBfcM.roa (hash: 1ddTGlZQgh50jPcoT7u1QbcmXkj+1OWiX4FvUYrN1GE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:34:8e:6e:d0:56:3a:64:4f:31:ec:d6:dd:8b:8c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
        Validity
            Not Before: Sep 16 05:00:56 2024 GMT
            Not After : Sep 17 05:00:56 2024 GMT
        Subject: CN=f410460975de0e4108a6685c56f6ed1092fe3c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:99:2a:10:5d:f4:a6:53:d1:4a:c0:4b:cd:05:
                    05:74:f1:5a:aa:df:f4:0b:4e:e8:1d:65:5c:00:5a:
                    58:fb:e8:fd:c9:52:b7:a4:32:8c:a5:af:a3:cf:46:
                    97:b4:83:5c:8d:3b:5c:73:2d:e4:ab:09:e5:8b:67:
                    58:e8:f7:a2:c2:8a:c6:fd:ea:c5:cb:6c:65:8e:59:
                    5f:39:d0:03:b3:0d:18:98:34:24:7e:e8:31:8b:c8:
                    ad:c3:26:45:f8:17:33:26:53:ee:fe:6f:cc:e2:ff:
                    1e:45:d5:99:ce:73:e5:a6:bb:c1:41:25:06:86:51:
                    be:dc:15:9b:de:c0:18:dd:a4:86:8b:46:da:f5:f2:
                    32:04:a0:c6:59:d8:d7:6a:16:ef:34:a5:aa:56:81:
                    71:08:6a:d7:7f:1c:ab:3f:d0:03:92:5b:e0:d0:47:
                    3e:27:92:52:bc:d8:cd:0d:69:eb:2e:86:83:f2:59:
                    19:ec:67:06:ce:e4:32:64:c1:62:15:ab:7c:a6:08:
                    f4:5e:e1:51:05:7e:75:ea:00:de:aa:e3:36:13:09:
                    48:5f:c6:ff:8c:88:e5:fe:2f:e3:4d:49:69:16:f0:
                    89:9b:f7:0d:9c:20:01:2a:92:64:12:fc:13:22:9a:
                    86:48:3a:08:d5:e7:cc:f1:56:61:4b:82:45:3b:17:
                    f1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:10:46:09:75:DE:0E:41:08:A6:68:5C:56:F6:ED:10:92:FE:3C:21
            X509v3 Authority Key Identifier:
                keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e3:2b:3e:72:e9:85:83:60:c2:64:ea:66:55:7b:9a:81:39:
         27:57:1d:5a:ef:1d:61:c6:d5:67:06:25:25:72:6c:f2:94:6d:
         9c:63:f4:32:79:27:01:f5:3d:53:44:21:ae:7b:9a:80:ec:07:
         22:82:d9:5b:2a:be:49:3a:f3:f2:86:be:e5:93:12:28:86:7d:
         16:b7:48:55:27:53:35:10:f4:3a:74:64:46:89:67:b7:f6:17:
         62:e5:b2:93:e1:7c:3a:1c:cb:f6:e3:0c:1c:6c:51:b4:82:24:
         c8:aa:b9:13:dc:81:78:ea:52:e1:f1:3f:75:fd:33:e8:8c:27:
         70:93:26:f5:cc:27:d6:9e:a4:a0:3f:df:b8:b3:b5:29:8a:6e:
         cf:97:01:ea:eb:76:c2:04:8d:4a:f5:94:38:bc:a7:45:e1:1e:
         23:49:a5:f5:ed:0e:fc:8f:fe:88:42:9f:14:44:59:a0:13:ac:
         d2:1d:fb:60:27:51:21:13:4c:93:a5:0d:46:d0:14:a5:1a:a6:
         6d:0f:f2:54:05:f8:36:99:01:0b:94:4d:77:0c:9e:3a:dd:6b:
         08:ec:2a:ab:1f:68:bf:42:cc:67:32:ed:43:73:c8:63:66:0b:
         d6:4c:68:ca:fb:b2:5d:c8:42:d0:d3:17:9e:25:bc:94:05:db:
         c3:49:3a:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH5NI5u0FY6ZE8x7Nbdi4wyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDJiYzNlMzk3Mjg5Y2U5YzNhYTAyZTE1NmUyMGMwM2Q0
ZDczNDIwHhcNMjQwOTE2MDUwMDU2WhcNMjQwOTE3MDUwMDU2WjAzMTEwLwYDVQQD
EyhmNDEwNDYwOTc1ZGUwZTQxMDhhNjY4NWM1NmY2ZWQxMDkyZmUzYzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JkqEF30plPRSsBLzQUFdPFaqt/0
C07oHWVcAFpY++j9yVK3pDKMpa+jz0aXtINcjTtccy3kqwnli2dY6PeiworG/erF
y2xljllfOdADsw0YmDQkfugxi8itwyZF+BczJlPu/m/M4v8eRdWZznPlprvBQSUG
hlG+3BWb3sAY3aSGi0ba9fIyBKDGWdjXahbvNKWqVoFxCGrXfxyrP9ADklvg0Ec+
J5JSvNjNDWnrLoaD8lkZ7GcGzuQyZMFiFat8pgj0XuFRBX516gDequM2EwlIX8b/
jIjl/i/jTUlpFvCJm/cNnCABKpJkEvwTIpqGSDoI1efM8VZhS4JFOxfxswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQQRgl13g5BCKZoXFb27RCS/jwhMB8GA1UdIwQY
MBaAFAjSvD45conOnDqgLhVuIMA9TXNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUt
MmUwZWI0ZjQ2ZmE0LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUtMmUwZWI0ZjQ2ZmE0
LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuMrPnLp
hYNgwmTqZlV7moE5J1cdWu8dYcbVZwYlJXJs8pRtnGP0MnknAfU9U0QhrnuagOwH
IoLZWyq+STrz8oa+5ZMSKIZ9FrdIVSdTNRD0OnRkRolnt/YXYuWyk+F8OhzL9uMM
HGxRtIIkyKq5E9yBeOpS4fE/df0z6IwncJMm9cwn1p6koD/fuLO1KYpuz5cB6ut2
wgSNSvWUOLynReEeI0ml9e0O/I/+iEKfFERZoBOs0h37YCdRIRNMk6UNRtAUpRqm
bQ/yVAX4NpkBC5RNdwyeOt1rCOwqqx9ov0LMZzLtQ3PIY2YL1kxoyvuyXchC0NMX
niW8lAXbw0k6BA==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:32:15 2024 by rpki-client on console-fra.rpki-client.org