Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
File:                     da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json)
Hash identifier:          6ztTww1LbH32YAp9vivh+UpoSADAMeCv/F4md0pAMOA=
Subject key identifier:   A2:EB:A2:1F:F6:17:85:31:93:79:83:05:26:9C:89:9C:F1:3B:3B:2A
Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
Certificate issuer:       /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Certificate serial:       019235EE5A56A295E192D5D56AA2E5CC6060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
Manifest number:          0BC4
Signing time:             Sat 28 Sep 2024 00:01:06 +0000
Manifest this update:     Sat 28 Sep 2024 00:01:06 +0000
Manifest next update:     Sun 29 Sep 2024 00:01:06 +0000
Files and hashes:         1: ARrRG4LJ8faj4TtQIh21BhaeKJY.roa (hash: +qi9mfi3w1Io59p4hcQ8tlwbKo2bosIsijeTd+n6yJI=)
                          2: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: TAGus1xCFTh3JWDsNj1vjBO5iwbpM3iNH6DqIG4mPSI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:ee:5a:56:a2:95:e1:92:d5:d5:6a:a2:e5:cc:60:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
        Validity
            Not Before: Sep 28 00:01:06 2024 GMT
            Not After : Sep 29 00:01:06 2024 GMT
        Subject: CN=a2eba21ff617853193798305269c899cf13b3b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:1a:e4:9d:27:1e:c2:c0:f4:da:79:c5:a3:
                    cb:1f:32:2b:b6:76:49:e9:ef:d5:f2:43:72:89:7c:
                    58:08:59:b3:41:3d:9b:c0:95:07:fd:01:24:ec:f0:
                    46:ef:31:71:3e:d0:b6:a1:53:98:ca:ac:a2:f6:df:
                    7c:65:14:7d:9f:3e:7c:b6:88:32:8f:76:39:ce:47:
                    82:3d:2e:c1:aa:8e:38:86:b0:0b:89:f7:50:4b:6a:
                    da:80:df:a4:ff:68:8f:13:82:2b:d8:7e:88:eb:60:
                    db:67:bd:de:60:74:63:71:07:d6:ac:c9:8b:7b:03:
                    c4:d2:75:ee:d8:f5:ca:b4:d2:a6:d8:f8:11:02:15:
                    cb:55:72:70:f3:f8:10:82:ab:1b:64:4a:1f:b3:8a:
                    42:cc:8a:bc:03:6b:08:ea:11:42:74:85:45:a5:c6:
                    bb:68:b1:5d:b4:2b:6a:c4:0e:6e:d0:30:0b:ba:78:
                    d2:21:e4:b4:47:47:92:b2:e4:df:fe:5f:c0:fd:6a:
                    4b:d6:8c:82:ed:b3:2a:72:34:fe:10:d7:95:15:0e:
                    80:63:d6:d3:e3:f5:cf:61:39:52:2e:71:73:b1:d6:
                    98:18:6f:2f:42:98:86:38:eb:6d:3a:85:16:af:09:
                    2f:38:f1:cf:c5:88:0c:58:ec:77:21:eb:d0:aa:d7:
                    55:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EB:A2:1F:F6:17:85:31:93:79:83:05:26:9C:89:9C:F1:3B:3B:2A
            X509v3 Authority Key Identifier:
                keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0a:68:8d:76:24:a9:b4:00:31:63:0d:9e:26:93:4e:18:c6:
         56:7a:ef:a6:43:bc:e4:72:13:e3:02:68:e2:5a:d3:2a:53:08:
         bf:be:6f:ea:d5:38:de:d2:54:eb:44:3b:8b:c1:fc:0f:9f:2d:
         ba:7b:49:3e:24:c0:05:47:dd:71:ee:93:b4:0f:3a:9e:ef:ba:
         2b:b2:1d:b9:73:ac:4e:cb:5c:c1:78:0e:3e:25:8a:f6:f3:47:
         87:76:00:7e:fe:29:f0:82:ce:a6:8d:cd:52:4b:05:26:d4:2f:
         49:24:68:e8:e2:e8:96:89:7e:49:59:0d:be:2e:6f:57:a6:c2:
         e7:fe:80:d0:7f:d7:8a:5f:cd:be:af:bb:c9:ac:29:d4:df:2e:
         70:1b:a2:37:0f:ce:68:18:84:d9:4b:42:07:51:16:16:52:be:
         2c:ae:1d:18:0a:f7:cd:57:10:a5:4a:22:de:1a:42:ab:1d:ef:
         ee:e6:14:14:6f:78:2d:2d:9c:bc:cf:f2:94:fa:33:bd:67:c8:
         06:6c:50:b0:7c:ab:a6:ff:2a:8f:c5:41:2e:c9:25:b1:a5:cd:
         73:b6:b4:d6:8f:21:70:7d:aa:ca:03:7f:b7:ac:fa:a8:76:c4:
         8d:67:a2:8a:f0:93:e1:e2:da:51:c8:f0:11:76:16:35:c2:fd:
         e7:1a:cc:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI17lpWopXhktXVaqLlzGBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YWY0ZTJjMzQ3ODBmM2Q5ZjUxZTgwYTUzYmFjM2JlNmYz
MjU5NDMwHhcNMjQwOTI4MDAwMTA2WhcNMjQwOTI5MDAwMTA2WjAzMTEwLwYDVQQD
EyhhMmViYTIxZmY2MTc4NTMxOTM3OTgzMDUyNjljODk5Y2YxM2IzYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryca5J0nHsLA9Np5xaPLHzIrtnZJ
6e/V8kNyiXxYCFmzQT2bwJUH/QEk7PBG7zFxPtC2oVOYyqyi9t98ZRR9nz58togy
j3Y5zkeCPS7Bqo44hrALifdQS2ragN+k/2iPE4Ir2H6I62DbZ73eYHRjcQfWrMmL
ewPE0nXu2PXKtNKm2PgRAhXLVXJw8/gQgqsbZEofs4pCzIq8A2sI6hFCdIVFpca7
aLFdtCtqxA5u0DALunjSIeS0R0eSsuTf/l/A/WpL1oyC7bMqcjT+ENeVFQ6AY9bT
4/XPYTlSLnFzsdaYGG8vQpiGOOttOoUWrwkvOPHPxYgMWOx3IevQqtdVcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLroh/2F4Uxk3mDBSaciZzxOzsqMB8GA1UdIwQY
MBaAFHWvTiw0eA89n1HoClO6w75vMllDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wOTIzOWEtNGY4OC00MDliLWE3ODEt
NzUzMzBkNGNlODZlLzEvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wOTIzOWEtNGY4OC00MDliLWE3ODEtNzUzMzBkNGNlODZl
LzEvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQpojXYk
qbQAMWMNniaTThjGVnrvpkO85HIT4wJo4lrTKlMIv75v6tU43tJU60Q7i8H8D58t
untJPiTABUfdce6TtA86nu+6K7IduXOsTstcwXgOPiWK9vNHh3YAfv4p8ILOpo3N
UksFJtQvSSRo6OLolol+SVkNvi5vV6bC5/6A0H/Xil/Nvq+7yawp1N8ucBuiNw/O
aBiE2UtCB1EWFlK+LK4dGAr3zVcQpUoi3hpCqx3v7uYUFG94LS2cvM/ylPozvWfI
BmxQsHyrpv8qj8VBLsklsaXNc7a01o8hcH2qygN/t6z6qHbEjWeiivCT4eLaUcjw
EXYWNcL95xrMow==
-----END CERTIFICATE-----
Generated at Sat Sep 28 01:08:50 2024 by rpki-client on console-fra.rpki-client.org