Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File:                     2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier:          0ND1VQm1i1fdPGPsw9mSvPqmtARHsM5eoksd7ISFRaQ=
Subject key identifier:   09:AB:F2:21:2E:E7:DB:A9:76:99:30:2F:D6:0F:35:32:D0:03:CE:6E
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer:       /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial:       01901BFCFF0C291A6C91B275B8460EC0F514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number:          0C29
Signing time:             Sat 15 Jun 2024 13:01:23 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:23 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:23 +0000
Files and hashes:         1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: JzmE5egkJLL55rY1qZ8lVMSR81gTCI8Tazxa+ILP2R8=)
                          2: wBPl-J0_NEjC8yclSCZzAA9Nw4Q.roa (hash: yVACB5PpvXZuv6IE/gIVyImNClRWP6Az0DQ4QSGFwx0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:ff:0c:29:1a:6c:91:b2:75:b8:46:0e:c0:f5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
        Validity
            Not Before: Jun 15 13:01:23 2024 GMT
            Not After : Jun 16 13:01:23 2024 GMT
        Subject: CN=09abf2212ee7dba97699302fd60f3532d003ce6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:57:76:d0:53:ed:c1:c9:0d:78:04:10:f2:f6:
                    6d:c1:50:84:37:b7:ce:f9:75:7d:0e:3b:6f:29:18:
                    2e:a7:bc:90:14:7a:b4:2b:d4:ac:a1:35:83:25:f5:
                    d1:c4:de:22:94:90:f8:66:09:34:24:6f:ca:85:7f:
                    fc:b5:bf:88:d8:6f:57:4f:6c:58:5a:b8:19:b2:a7:
                    ee:e1:01:f0:d4:40:b9:1b:89:1a:43:95:31:03:65:
                    0d:ea:a0:9f:db:0e:48:80:61:97:31:65:3d:a7:ee:
                    3b:e3:92:f5:5f:96:79:a9:e4:f7:ee:be:45:80:49:
                    e6:86:03:86:d6:ee:a4:df:8f:05:15:50:a5:28:60:
                    c9:ac:53:84:ab:90:4c:5b:5c:e8:d0:d2:7f:b9:b4:
                    69:93:db:5a:23:ed:f0:07:e8:35:00:11:fd:e9:14:
                    5a:7b:6d:a0:e8:e2:fe:c6:6f:80:20:0f:d2:c1:ef:
                    22:11:0d:69:89:ea:1e:d8:71:e9:a5:b4:66:07:09:
                    eb:77:6d:a6:b9:b4:52:13:8c:34:e6:76:28:25:6b:
                    ed:f1:12:fb:54:11:85:dc:ce:e5:00:ce:50:30:7d:
                    36:a6:36:3f:2d:18:f6:dc:bf:07:e7:05:ed:d2:e4:
                    8d:00:09:4d:6c:47:73:75:a6:f2:cb:e3:4e:2b:90:
                    f3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AB:F2:21:2E:E7:DB:A9:76:99:30:2F:D6:0F:35:32:D0:03:CE:6E
            X509v3 Authority Key Identifier:
                keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:aa:46:91:3b:d3:d1:7b:39:b2:3e:b5:e4:8d:be:61:f6:08:
         62:ed:a7:32:cd:6c:4b:68:fe:13:e2:92:d9:dc:c6:0a:f6:4f:
         81:72:89:b9:a7:14:21:1c:25:f1:85:45:1e:b5:c5:50:8b:d1:
         c7:6f:38:02:f9:18:ee:b0:84:71:05:37:0b:93:f5:9d:01:cb:
         67:1a:c4:17:9f:45:a3:f0:17:28:0b:ee:5c:02:5d:c2:0b:48:
         94:c1:79:17:c2:72:bb:4e:ff:ea:c1:af:d0:1b:b4:51:db:fb:
         8e:42:d2:38:98:fa:c1:bf:1f:f5:33:ff:43:ff:24:ca:75:37:
         ea:2c:30:fd:f7:01:a3:2a:d8:ad:3d:85:eb:ef:76:2d:e8:8a:
         89:92:f6:30:fb:36:4d:0f:e6:e4:4c:9d:00:e0:ed:b9:05:db:
         33:09:df:53:24:41:ce:41:87:86:e3:d7:f0:c6:e3:00:c4:67:
         a1:a3:5b:af:a9:a4:53:44:10:4f:31:cc:90:02:5c:35:a0:a9:
         cd:44:d2:e1:d2:d4:7c:cd:c3:07:0c:7f:65:d0:9b:e9:fe:9a:
         47:6f:a5:00:4d:0d:27:a2:43:88:34:ff:b7:2e:e1:bc:6f:4f:
         26:95:85:9c:f4:2d:d4:9d:b4:ce:af:ae:2d:b8:db:62:a8:27:
         ab:b1:97:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/P8MKRpskbJ1uEYOwPUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTE1NjA5NjU2ZjA4ZjdhMjhkMjRiN2M0YmE5YjYzOWNh
MGIwMDkwHhcNMjQwNjE1MTMwMTIzWhcNMjQwNjE2MTMwMTIzWjAzMTEwLwYDVQQD
EygwOWFiZjIyMTJlZTdkYmE5NzY5OTMwMmZkNjBmMzUzMmQwMDNjZTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61d20FPtwckNeAQQ8vZtwVCEN7fO
+XV9DjtvKRgup7yQFHq0K9SsoTWDJfXRxN4ilJD4Zgk0JG/KhX/8tb+I2G9XT2xY
WrgZsqfu4QHw1EC5G4kaQ5UxA2UN6qCf2w5IgGGXMWU9p+4745L1X5Z5qeT37r5F
gEnmhgOG1u6k348FFVClKGDJrFOEq5BMW1zo0NJ/ubRpk9taI+3wB+g1ABH96RRa
e22g6OL+xm+AIA/Swe8iEQ1pieoe2HHppbRmBwnrd22mubRSE4w05nYoJWvt8RL7
VBGF3M7lAM5QMH02pjY/LRj23L8H5wXt0uSNAAlNbEdzdabyy+NOK5DzgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmr8iEu59updpkwL9YPNTLQA85uMB8GA1UdIwQY
MBaAFNiRVgllbwj3oo0kt8S6m2OcoLAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yMGU4ZTAtNjhkMy00ODllLWJjZjMt
ZmU0YjVlMzQ2ODQwLzEvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yMGU4ZTAtNjhkMy00ODllLWJjZjMtZmU0YjVlMzQ2ODQw
LzEvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiapGkTvT
0Xs5sj615I2+YfYIYu2nMs1sS2j+E+KS2dzGCvZPgXKJuacUIRwl8YVFHrXFUIvR
x284AvkY7rCEcQU3C5P1nQHLZxrEF59Fo/AXKAvuXAJdwgtIlMF5F8Jyu07/6sGv
0Bu0Udv7jkLSOJj6wb8f9TP/Q/8kynU36iww/fcBoyrYrT2F6+92LeiKiZL2MPs2
TQ/m5EydAODtuQXbMwnfUyRBzkGHhuPX8MbjAMRnoaNbr6mkU0QQTzHMkAJcNaCp
zUTS4dLUfM3DBwx/ZdCb6f6aR2+lAE0NJ6JDiDT/ty7hvG9PJpWFnPQt1J20zq+u
LbjbYqgnq7GXzw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:37:40 2024 by rpki-client on console-fra.rpki-client.org