Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
File:                     rUyDCxEmFIOmK2aWpMNyDorYig0.mft (raw, json)
Hash identifier:          mb/t28Heozc4k8zGTNlATXotaIDX4Y14HlvioCbKEs4=
Subject key identifier:   86:3B:8F:AE:92:C9:31:3B:06:15:46:42:99:13:FD:0E:82:50:02:F0
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Certificate issuer:       /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial:       019045D492A9F1DA6FAF859D3FA3260B7E7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
Manifest number:          10A4
Signing time:             Sun 23 Jun 2024 16:01:17 +0000
Manifest this update:     Sun 23 Jun 2024 16:01:17 +0000
Manifest next update:     Mon 24 Jun 2024 16:01:17 +0000
Files and hashes:         1: 3EKZuF61sSru0jw4x5Xj_xQyu_4.roa (hash: f7lp46aWXnE865Rj9JUZ+Dq8CT5RvIv/bCF/4ba8+Jw=)
                          2: 3Hfwcb6LFPRPa1zF8-NRKaFhG0k.roa (hash: KYCB7OJFjqaWxwny8OXARun7ConMD0SQZhWmOiq5gf4=)
                          3: LJJDeG2ZCstsbK9WYMF-Td9iVB0.roa (hash: /4cgx1rYwEvBarmgTnx+k00EFrX73U9g74j9BUl5NKk=)
                          4: rUyDCxEmFIOmK2aWpMNyDorYig0.crl (hash: B2cXoVQCPgjF6KUK9WfOAMiOzOQ+Ny5a+UE2oi03tf4=)
                          5: vA080fTitIQR3CG0dagQLHIiCl4.roa (hash: /dQhbrjbiNT66M/ybT1DIeTtcfP7DLl9sCMeXOIsR70=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:92:a9:f1:da:6f:af:85:9d:3f:a3:26:0b:7e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
        Validity
            Not Before: Jun 23 16:01:17 2024 GMT
            Not After : Jun 24 16:01:17 2024 GMT
        Subject: CN=863b8fae92c9313b061546429913fd0e825002f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a2:ca:21:6f:ab:2b:f1:92:dc:fd:a6:a1:5d:
                    d9:a5:c0:61:65:11:cd:58:c7:df:25:1d:9b:e0:0b:
                    07:5a:6b:33:89:db:a2:a5:7f:fa:99:48:44:1a:5a:
                    73:80:71:50:7f:2c:9a:8e:e1:cf:30:e5:c8:8e:a5:
                    51:ed:be:5a:ad:90:de:22:67:5f:d3:54:e4:7c:83:
                    e2:1f:ff:96:b7:1e:c7:98:7c:36:85:86:a7:bb:ce:
                    44:ea:ce:6a:49:cf:36:25:da:a9:48:75:26:e8:4e:
                    c4:61:e3:fe:0a:30:9a:90:ab:52:9d:0f:9a:c3:dd:
                    c7:a3:cd:b3:86:4e:6b:f4:9d:e0:c3:11:f9:91:25:
                    6f:77:21:cd:47:ce:14:2f:94:8e:ef:cb:69:02:93:
                    e7:8b:7c:e4:60:2a:0f:79:c6:61:f6:ea:04:5b:4e:
                    c5:1d:26:79:62:e0:b0:e1:30:dc:c5:79:90:d6:79:
                    d6:7a:81:b8:ea:b1:36:b1:28:83:03:ae:a4:9b:26:
                    d4:27:2e:df:03:aa:3f:54:a1:92:61:58:20:99:9d:
                    f1:34:0f:d0:0b:d8:b6:eb:d1:e5:79:58:cc:0c:2f:
                    18:ff:c5:a0:0a:08:03:e2:33:76:29:e9:d3:4b:3a:
                    59:36:93:9b:c2:88:22:2f:0e:bd:c6:7b:a8:92:14:
                    35:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3B:8F:AE:92:C9:31:3B:06:15:46:42:99:13:FD:0E:82:50:02:F0
            X509v3 Authority Key Identifier:
                keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:73:ef:90:de:e6:a8:87:eb:db:15:19:f5:d2:9d:ed:56:3f:
         69:d2:6b:8e:74:1c:1e:a4:e9:d9:47:28:50:44:35:a8:e3:e5:
         f9:a1:cb:b6:ad:0d:ce:df:fc:aa:58:56:77:ed:6b:ff:53:b5:
         1e:6a:4f:78:8c:a6:ac:57:20:0a:c0:4b:57:25:71:fa:c4:0a:
         75:0d:fd:eb:0b:ba:37:0d:0c:fe:78:aa:99:10:96:01:13:88:
         10:d7:71:0b:e6:7f:5c:a5:2d:83:c9:e2:54:a5:68:d6:dd:a6:
         cf:30:72:16:08:9a:c4:fb:5a:cf:6d:4d:cc:4f:39:54:e6:06:
         78:db:7d:46:56:a7:df:fd:6d:e6:4c:be:0b:04:44:71:35:e5:
         f2:35:44:d1:f6:09:5e:7b:16:ea:f1:6c:29:55:2e:16:b1:23:
         ea:d9:96:a0:48:52:b1:f8:83:e1:da:bc:31:c3:f6:1f:27:9c:
         ac:eb:fc:f4:83:e6:ff:b3:e9:9d:17:51:77:14:be:e7:99:7c:
         e2:4f:34:48:ea:c7:83:d4:bb:d0:67:7d:a9:16:f8:44:fb:0c:
         d3:26:6c:d5:19:b0:1c:28:29:73:bc:1e:2a:e3:95:90:62:98:
         be:57:ff:2d:b4:09:14:e8:10:35:f8:da:c1:fa:ed:f0:e5:ba:
         70:6b:bc:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBF1JKp8dpvr4WdP6MmC359MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNGM4MzBiMTEyNjE0ODNhNjJiNjY5NmE0YzM3MjBlOGFk
ODhhMGQwHhcNMjQwNjIzMTYwMTE3WhcNMjQwNjI0MTYwMTE3WjAzMTEwLwYDVQQD
Eyg4NjNiOGZhZTkyYzkzMTNiMDYxNTQ2NDI5OTEzZmQwZTgyNTAwMmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaLKIW+rK/GS3P2moV3ZpcBhZRHN
WMffJR2b4AsHWmsziduipX/6mUhEGlpzgHFQfyyajuHPMOXIjqVR7b5arZDeImdf
01TkfIPiH/+Wtx7HmHw2hYanu85E6s5qSc82JdqpSHUm6E7EYeP+CjCakKtSnQ+a
w93Ho82zhk5r9J3gwxH5kSVvdyHNR84UL5SO78tpApPni3zkYCoPecZh9uoEW07F
HSZ5YuCw4TDcxXmQ1nnWeoG46rE2sSiDA66kmybUJy7fA6o/VKGSYVggmZ3xNA/Q
C9i269HleVjMDC8Y/8WgCggD4jN2KenTSzpZNpObwogiLw69xnuokhQ1/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIY7j66SyTE7BhVGQpkT/Q6CUALwMB8GA1UdIwQY
MBaAFK1MgwsRJhSDpitmlqTDcg6K2IoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEt
MjIyY2ViNmMzNDRjLzEvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEtMjIyY2ViNmMzNDRj
LzEvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXPvkN7m
qIfr2xUZ9dKd7VY/adJrjnQcHqTp2UcoUEQ1qOPl+aHLtq0Nzt/8qlhWd+1r/1O1
HmpPeIymrFcgCsBLVyVx+sQKdQ396wu6Nw0M/niqmRCWAROIENdxC+Z/XKUtg8ni
VKVo1t2mzzByFgiaxPtaz21NzE85VOYGeNt9Rlan3/1t5ky+CwREcTXl8jVE0fYJ
XnsW6vFsKVUuFrEj6tmWoEhSsfiD4dq8McP2HyecrOv89IPm/7PpnRdRdxS+55l8
4k80SOrHg9S70Gd9qRb4RPsM0yZs1RmwHCgpc7weKuOVkGKYvlf/LbQJFOgQNfja
wfrt8OW6cGu83Q==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:22:20 2024 by rpki-client on console-ams.rpki-client.org