Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File:                     hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier:          rVoHqVuVXP6WzoT9suMKdQg2sN8+++Of51tCw8MazkI=
Subject key identifier:   43:C6:38:15:0B:B8:35:67:9E:28:D0:68:A6:85:D8:43:9E:32:55:7F
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer:       /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial:       01923AA7AF0769229D4E72029127F4A2F3E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number:          12E0
Signing time:             Sat 28 Sep 2024 22:02:00 +0000
Manifest this update:     Sat 28 Sep 2024 22:02:00 +0000
Manifest next update:     Sun 29 Sep 2024 22:02:00 +0000
Files and hashes:         1: 80Y7xtFSDGWegp64kfLvuZw7G1s.roa (hash: VGWRq51PeDWISXoPdTXcmIYCESNl/LCDa4mB73a2C3U=)
                          2: A3pEBkbPJoeZ_hEzYaWeu7diE1g.roa (hash: fBMbz2X08dZhz4Y6MwIZBc9MV2Igh1gfqHpkl5prtrE=)
                          3: _Max0Z4EpViarfxIxq5QV6fb_rg.roa (hash: 0eNDE+Z/vl8zKAlKb8QGfnBh2dq3T1pVxEjMKP19s00=)
                          4: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: T0Ne6KrkyaYVw3XJ35i6u/f1oqeCbqeI7Z4ovBDZJE4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:a7:af:07:69:22:9d:4e:72:02:91:27:f4:a2:f3:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
        Validity
            Not Before: Sep 28 22:02:00 2024 GMT
            Not After : Sep 29 22:02:00 2024 GMT
        Subject: CN=43c638150bb835679e28d068a685d8439e32557f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:27:cd:7b:22:22:27:34:5d:fb:89:cc:05:
                    37:c3:c2:e3:56:f9:5f:2f:f7:3d:e2:26:47:db:bc:
                    dc:f8:68:5f:3f:05:3e:c3:31:72:2e:b4:90:b1:a6:
                    92:de:47:9a:b0:07:38:06:4f:ac:bc:89:b2:9e:ab:
                    7b:8c:eb:64:5e:b2:93:27:ea:92:cd:e8:a9:9d:c2:
                    c6:f0:e5:00:08:24:59:0f:16:e0:8e:49:dd:0d:78:
                    ba:15:20:03:b3:5d:91:22:0a:bc:34:58:58:8b:da:
                    3b:a0:23:de:9a:89:05:c6:d0:ff:b0:43:14:3d:f6:
                    ff:69:9d:e4:8f:cf:68:bd:58:1a:82:da:34:29:7e:
                    ab:56:86:93:23:7e:58:fa:ec:f9:b0:6e:00:0a:fb:
                    ef:c8:07:cd:50:03:e6:3e:84:e4:e9:48:ff:da:b0:
                    66:85:ac:40:09:27:ce:aa:e8:66:4c:0d:f6:08:02:
                    6e:b7:be:d5:8c:e3:de:70:3f:e8:fc:08:02:b1:c8:
                    54:20:9d:7e:96:7f:ca:51:e5:5a:10:2b:25:3e:9b:
                    a9:48:10:f7:6a:98:35:cf:9f:4f:c2:f5:83:1b:4d:
                    35:85:80:54:c8:c1:53:5b:9a:35:7f:b2:33:2c:08:
                    ab:45:6f:4e:30:48:45:18:5f:fd:1c:07:0a:dd:2c:
                    4e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C6:38:15:0B:B8:35:67:9E:28:D0:68:A6:85:D8:43:9E:32:55:7F
            X509v3 Authority Key Identifier:
                keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:5e:c4:05:ad:6f:c0:13:33:ad:c4:38:05:e4:5c:52:c3:07:
         5a:53:87:1e:ed:f2:6a:1d:de:d5:f7:a6:c2:08:3f:d9:77:ef:
         4e:b6:75:39:40:43:06:34:d9:d4:5b:ef:f8:03:a1:5e:73:a5:
         02:e3:24:46:cd:cb:4e:eb:74:c5:23:59:38:a5:37:a1:04:ec:
         6d:ce:4d:fb:04:24:06:bb:d7:ac:26:37:4a:ce:b3:45:a5:73:
         1f:bf:ae:76:1c:2a:4c:5e:b6:0f:dc:ab:08:ea:3d:f7:77:ae:
         70:31:c2:75:f1:b6:f0:dd:d7:8f:d0:e6:ea:a4:62:03:58:2a:
         4c:33:3a:6f:9a:a2:0f:bf:11:0f:ce:3a:81:be:b7:6c:d4:a0:
         8f:ba:23:98:5a:4e:62:14:46:88:2d:77:f2:e2:6a:8a:e8:d9:
         a8:5c:fd:17:08:db:6c:94:26:3e:a0:a6:99:8a:01:d9:9f:b3:
         ea:8d:9f:3a:47:a4:63:9c:31:2b:95:10:80:7e:55:fe:66:48:
         0e:e6:0a:d4:17:1d:4e:c0:36:3e:8c:43:d0:58:b4:f1:c5:44:
         a1:8c:1f:a1:c7:1d:dd:1f:b4:00:6b:3a:75:70:fe:c5:d7:1a:
         8e:cf:71:03:95:a9:d9:93:43:34:bd:8e:3b:4c:93:ca:52:d1:
         69:5b:6a:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI6p68HaSKdTnICkSf0ovPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MTg0Y2U5MTkwMjM2NDBiYjkyNTZjMmQ4ZDFhMDQ5ZmEx
MDI1MjAwHhcNMjQwOTI4MjIwMjAwWhcNMjQwOTI5MjIwMjAwWjAzMTEwLwYDVQQD
Eyg0M2M2MzgxNTBiYjgzNTY3OWUyOGQwNjhhNjg1ZDg0MzllMzI1NTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz0nzXsiIic0XfuJzAU3w8LjVvlf
L/c94iZH27zc+GhfPwU+wzFyLrSQsaaS3keasAc4Bk+svImynqt7jOtkXrKTJ+qS
zeipncLG8OUACCRZDxbgjkndDXi6FSADs12RIgq8NFhYi9o7oCPemokFxtD/sEMU
Pfb/aZ3kj89ovVgagto0KX6rVoaTI35Y+uz5sG4ACvvvyAfNUAPmPoTk6Uj/2rBm
haxACSfOquhmTA32CAJut77VjOPecD/o/AgCschUIJ1+ln/KUeVaECslPpupSBD3
apg1z59PwvWDG001hYBUyMFTW5o1f7IzLAirRW9OMEhFGF/9HAcK3SxOyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPGOBULuDVnnijQaKaF2EOeMlV/MB8GA1UdIwQY
MBaAFIQYTOkZAjZAu5JWwtjRoEn6ECUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yOTIyY2YtMTg2MS00MTlkLTllZWEt
MGE3OWQ1NDk2NWE5LzEvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8yOTIyY2YtMTg2MS00MTlkLTllZWEtMGE3OWQ1NDk2NWE5
LzEvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlF7EBa1v
wBMzrcQ4BeRcUsMHWlOHHu3yah3e1femwgg/2XfvTrZ1OUBDBjTZ1Fvv+AOhXnOl
AuMkRs3LTut0xSNZOKU3oQTsbc5N+wQkBrvXrCY3Ss6zRaVzH7+udhwqTF62D9yr
COo993eucDHCdfG28N3Xj9Dm6qRiA1gqTDM6b5qiD78RD846gb63bNSgj7ojmFpO
YhRGiC138uJqiujZqFz9FwjbbJQmPqCmmYoB2Z+z6o2fOkekY5wxK5UQgH5V/mZI
DuYK1BcdTsA2PoxD0Fi08cVEoYwfoccd3R+0AGs6dXD+xdcajs9xA5Wp2ZNDNL2O
O0yTylLRaVtqcQ==
-----END CERTIFICATE-----
Generated at Sun Sep 29 00:33:16 2024 by rpki-client on console-fra.rpki-client.org