Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File:                     Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier:          WupV8YKbKYZSASGMAitFffMGQvTlKlvv3mf+3dnfEfs=
Subject key identifier:   C2:3E:73:69:2A:98:4F:D4:5D:04:EF:05:7E:75:AA:37:51:E4:DD:A0
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer:       /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial:       019365FC5AD3087C95157971C2D35A60D798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 01:00:57 +0000
Manifest this update:     Tue 26 Nov 2024 01:00:57 +0000
Manifest next update:     Wed 27 Nov 2024 01:00:57 +0000
Files and hashes:         1: 8fqDzNuVU-2nPsDVf8OPnZ8iiyo.roa (hash: i43+gpjdNw/GtUUpjUQtu9drxmfwVwsH5s6kwpF0bLc=)
                          2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: r/KfAx7CtWOd3QrLqNPHW8dnveAolbtgpROAmr/N12w=)
                          3: WtvrFsAd6cqxGstnzIsM4tZKF-8.roa (hash: sWbBagnAFO1BCOsMBR5pMBbf0L1jawwp9spC/lrZTAM=)
                          4: _yCY8mYqw-72y0r0gBi2TmfoSbw.roa (hash: 5EpTXkfN7PQLj7GejAPZKjuVQP2RcujLIJn/V29BG2o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fc:5a:d3:08:7c:95:15:79:71:c2:d3:5a:60:d7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
        Validity
            Not Before: Nov 26 01:00:57 2024 GMT
            Not After : Nov 27 01:00:57 2024 GMT
        Subject: CN=c23e73692a984fd45d04ef057e75aa3751e4dda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d2:48:58:88:35:a1:b4:6b:07:d6:d5:f0:73:
                    6c:3e:84:5e:99:44:7a:bb:c2:00:91:aa:9b:e5:59:
                    a9:95:f4:81:6b:5e:e6:7a:5e:0c:08:9f:9b:2f:dd:
                    e3:89:43:d9:0c:f0:6d:4a:e2:70:ff:25:5e:a8:f4:
                    d0:3c:29:da:63:0c:73:51:42:90:e7:c5:c8:8b:cc:
                    74:5f:a3:a3:b6:ba:76:9a:4a:7d:02:cc:05:d8:db:
                    26:e6:cc:e7:c4:f8:d8:82:cd:9e:f3:da:90:1e:b6:
                    2e:ab:2c:a5:15:91:29:72:ea:d8:fc:c7:9a:60:81:
                    b9:75:cd:4c:61:3b:e0:f2:e0:b3:6e:c6:33:e1:35:
                    6b:83:e2:0e:32:6a:4d:d9:f4:72:6c:57:68:e0:a2:
                    8b:c1:bb:06:e0:62:e2:3b:00:c6:16:81:c3:68:5e:
                    02:0b:9c:ee:5b:63:fa:37:fb:81:b4:94:8d:c4:f1:
                    f6:e4:01:a4:eb:9a:cf:a8:11:1d:40:cf:85:c5:8c:
                    13:ae:f3:7a:6e:91:90:ae:50:63:68:f5:82:b2:a1:
                    76:c6:ae:75:71:22:98:1b:10:06:c5:c0:57:5f:29:
                    f5:8d:5b:a8:24:cd:20:30:c0:2d:d4:9b:63:1d:55:
                    fb:98:07:e1:d2:5f:ff:76:4a:a0:c0:e5:8a:11:5f:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3E:73:69:2A:98:4F:D4:5D:04:EF:05:7E:75:AA:37:51:E4:DD:A0
            X509v3 Authority Key Identifier:
                keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:0a:a4:ef:c6:b6:99:ba:db:ac:b6:16:bf:56:85:1f:1b:c0:
         36:16:c5:be:12:b2:7d:cb:9c:21:a1:6c:3b:bc:d5:f2:f2:e7:
         a1:e0:8e:6f:9b:90:5c:5d:8b:79:17:1f:d4:e5:52:18:cb:87:
         bf:99:09:fc:8a:3c:4a:82:13:5f:83:97:73:60:a8:86:88:98:
         07:ef:f6:49:b5:7e:05:9a:2d:16:3c:d1:c7:f0:52:7e:0d:83:
         39:9c:db:66:6b:f3:17:91:7f:27:f7:b5:33:59:ab:d7:29:78:
         96:87:52:6e:eb:8d:f1:07:37:b4:f5:e4:8c:f8:1a:a1:64:78:
         46:ff:ff:08:36:5a:95:66:84:35:0c:fd:80:cb:c2:a7:7c:e2:
         c7:49:ce:6a:30:af:fa:da:48:ef:f6:e3:37:bd:0f:62:8a:c8:
         74:f2:c8:3f:63:f5:db:2a:be:93:c1:d7:fe:35:7d:ab:29:d4:
         7d:cd:ec:27:7e:8c:25:a4:d6:40:2b:07:e4:88:02:81:0c:f4:
         3a:2c:3d:9a:25:6b:82:d1:a0:c5:98:7e:a8:70:a4:f7:f0:3b:
         54:d2:13:87:8d:6d:f2:3f:e0:7d:78:17:8a:32:cb:62:52:67:
         d9:94:98:56:49:d4:d3:b6:8b:29:9a:a1:64:e1:2a:ca:8a:51:
         ce:f5:93:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNl/FrTCHyVFXlxwtNaYNeYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMWU2NWY4MDgzYzg1OWJjZDBkMmM1MmExZTA2MWViNTEz
MWY1ZjEwHhcNMjQxMTI2MDEwMDU3WhcNMjQxMTI3MDEwMDU3WjAzMTEwLwYDVQQD
EyhjMjNlNzM2OTJhOTg0ZmQ0NWQwNGVmMDU3ZTc1YWEzNzUxZTRkZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldJIWIg1obRrB9bV8HNsPoRemUR6
u8IAkaqb5VmplfSBa17mel4MCJ+bL93jiUPZDPBtSuJw/yVeqPTQPCnaYwxzUUKQ
58XIi8x0X6Ojtrp2mkp9AswF2Nsm5sznxPjYgs2e89qQHrYuqyylFZEpcurY/Mea
YIG5dc1MYTvg8uCzbsYz4TVrg+IOMmpN2fRybFdo4KKLwbsG4GLiOwDGFoHDaF4C
C5zuW2P6N/uBtJSNxPH25AGk65rPqBEdQM+FxYwTrvN6bpGQrlBjaPWCsqF2xq51
cSKYGxAGxcBXXyn1jVuoJM0gMMAt1JtjHVX7mAfh0l//dkqgwOWKEV+VuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMI+c2kqmE/UXQTvBX51qjdR5N2gMB8GA1UdIwQY
MBaAFCoeZfgIPIWbzQ0sUqHgYetRMfXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTIt
Y2ZiOGRhNTQ5MDY3LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kMDk3YmYtYjBmNS00M2UxLTg2YTItY2ZiOGRhNTQ5MDY3
LzEvS2g1bC1BZzhoWnZORFN4U29lQmg2MUV4OWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwqk78a2
mbrbrLYWv1aFHxvANhbFvhKyfcucIaFsO7zV8vLnoeCOb5uQXF2LeRcf1OVSGMuH
v5kJ/Io8SoITX4OXc2CohoiYB+/2SbV+BZotFjzRx/BSfg2DOZzbZmvzF5F/J/e1
M1mr1yl4lodSbuuN8Qc3tPXkjPgaoWR4Rv//CDZalWaENQz9gMvCp3zix0nOajCv
+tpI7/bjN70PYorIdPLIP2P12yq+k8HX/jV9qynUfc3sJ36MJaTWQCsH5IgCgQz0
Oiw9miVrgtGgxZh+qHCk9/A7VNITh41t8j/gfXgXijLLYlJn2ZSYVknU07aLKZqh
ZOEqyopRzvWTPQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 10:20:09 2024 by rpki-client on console-ams.rpki-client.org