Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
File:                     K67n6kgtYqZxBj6sg3ia8585C3Q.mft (raw, json)
Hash identifier:          q6nHRn5GY9ResOpXTxfRLumqV4LgkiOdaZzXRaFDdTU=
Subject key identifier:   E9:0A:08:22:58:BB:8E:C4:C2:39:31:C5:E3:B4:BA:E4:C2:E6:B6:F6
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Certificate issuer:       /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial:       01901E58E04952DEDA5FA0F16FF8341A37A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
Manifest number:          0382
Signing time:             Sun 16 Jun 2024 00:00:59 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:59 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:59 +0000
Files and hashes:         1: 3pYKP1uAFy8ovWeXCvaSHsoi140.roa (hash: PxWF64u9mqXKPMJY4t6EaZ7I8kBPxGmNi0s9HcCQvRY=)
                          2: K67n6kgtYqZxBj6sg3ia8585C3Q.crl (hash: TaaJp6FpWGTbcwLHUZDfc/sxpeyfMvbaoR62XB8H17E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:e0:49:52:de:da:5f:a0:f1:6f:f8:34:1a:37:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
        Validity
            Not Before: Jun 16 00:00:59 2024 GMT
            Not After : Jun 17 00:00:59 2024 GMT
        Subject: CN=e90a082258bb8ec4c23931c5e3b4bae4c2e6b6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:23:a1:03:0d:8e:67:62:12:dd:95:91:11:
                    7f:8d:17:7f:a7:60:73:1d:8c:ef:07:bf:16:13:ff:
                    5e:8f:43:b0:db:65:09:f1:88:5f:46:de:2e:95:ab:
                    03:0c:5a:4e:08:50:1b:ad:a2:95:6e:69:b1:d5:8d:
                    34:32:00:16:88:09:2a:aa:98:39:3c:8f:de:70:9b:
                    04:76:21:f8:77:7a:72:b0:18:fb:94:af:ae:db:35:
                    0f:d6:9f:d2:d1:15:e4:f0:5e:cf:dc:e2:aa:38:52:
                    a3:81:88:16:d9:76:9e:28:39:64:69:0f:94:a6:47:
                    f3:89:1b:dd:be:47:80:09:ad:2d:e5:5f:d3:d5:6b:
                    2f:d8:dc:04:63:d2:be:9f:75:67:f6:4d:c0:e0:80:
                    46:b0:0d:dc:92:b5:cf:5e:87:6a:3e:e2:72:8e:37:
                    c0:e7:34:43:b8:48:5d:12:19:66:88:7d:e3:51:c9:
                    b1:9b:3e:f5:c2:16:12:dd:14:c6:67:e8:c3:b1:b8:
                    47:e8:dd:0c:3e:b1:94:f2:ab:05:2d:9c:9f:e9:b9:
                    ec:cb:ad:7d:44:d7:74:33:ea:41:30:43:85:cf:5f:
                    c1:23:5f:3e:a0:97:5e:fd:82:8b:ce:40:03:c7:4a:
                    40:b2:46:fb:c7:72:c8:0e:70:9a:30:32:c1:fb:05:
                    8b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0A:08:22:58:BB:8E:C4:C2:39:31:C5:E3:B4:BA:E4:C2:E6:B6:F6
            X509v3 Authority Key Identifier:
                keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:76:7e:ed:3b:c7:f8:90:06:f9:92:45:bb:69:17:18:fb:e8:
         9c:12:c6:19:df:47:0b:17:0a:c3:b5:3e:06:d1:97:06:dc:22:
         f7:72:f8:ff:03:63:70:9c:43:fb:6f:0d:b0:72:9e:f0:fa:a4:
         d0:ce:ff:d6:52:c2:b8:0c:a1:fa:ed:e3:49:48:ef:49:8b:d1:
         7f:ee:e1:88:0d:f7:e6:9f:4e:d0:01:da:bb:e4:82:a2:e6:4a:
         9c:43:c8:ce:55:a6:9f:60:0d:5e:80:d6:d4:84:b2:04:28:70:
         29:d6:db:87:8a:c4:cb:c8:22:8e:ba:74:c4:f3:0e:2b:41:65:
         28:72:79:27:d7:a9:c0:4d:b2:74:a8:83:91:e4:85:fc:3e:0b:
         38:1b:37:83:b2:86:16:4b:d3:0d:83:51:ea:8c:22:55:e9:0c:
         7d:6a:fa:b0:ad:69:0d:36:47:f5:ed:f0:50:ce:62:bf:d2:20:
         a5:1f:95:8b:51:b9:3d:86:b8:e3:85:8d:57:d6:03:28:2f:7e:
         00:df:98:34:b7:dc:a9:b3:3a:9b:d8:8f:06:5b:7e:af:61:aa:
         be:03:28:84:ac:75:c4:50:2e:34:98:eb:76:57:b1:e9:99:4c:
         21:97:21:12:59:29:01:6d:7a:1b:dd:1e:1c:c6:39:da:33:de:
         88:8d:31:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWOBJUt7aX6Dxb/g0GjenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYWVlN2VhNDgyZDYyYTY3MTA2M2VhYzgzNzg5YWYzOWYz
OTBiNzQwHhcNMjQwNjE2MDAwMDU5WhcNMjQwNjE3MDAwMDU5WjAzMTEwLwYDVQQD
EyhlOTBhMDgyMjU4YmI4ZWM0YzIzOTMxYzVlM2I0YmFlNGMyZTZiNmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswsjoQMNjmdiEt2VkRF/jRd/p2Bz
HYzvB78WE/9ej0Ow22UJ8YhfRt4ulasDDFpOCFAbraKVbmmx1Y00MgAWiAkqqpg5
PI/ecJsEdiH4d3pysBj7lK+u2zUP1p/S0RXk8F7P3OKqOFKjgYgW2XaeKDlkaQ+U
pkfziRvdvkeACa0t5V/T1Wsv2NwEY9K+n3Vn9k3A4IBGsA3ckrXPXodqPuJyjjfA
5zRDuEhdEhlmiH3jUcmxmz71whYS3RTGZ+jDsbhH6N0MPrGU8qsFLZyf6bnsy619
RNd0M+pBMEOFz1/BI18+oJde/YKLzkADx0pAskb7x3LIDnCaMDLB+wWL5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkKCCJYu47EwjkxxeO0uuTC5rb2MB8GA1UdIwQY
MBaAFCuu5+pILWKmcQY+rIN4mvOfOQt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTU3ODQtMzcwNS00MThhLWI5OTQt
NzUyMWFmMWNlMjU5LzEvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMTU3ODQtMzcwNS00MThhLWI5OTQtNzUyMWFmMWNlMjU5
LzEvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnZ+7TvH
+JAG+ZJFu2kXGPvonBLGGd9HCxcKw7U+BtGXBtwi93L4/wNjcJxD+28NsHKe8Pqk
0M7/1lLCuAyh+u3jSUjvSYvRf+7hiA335p9O0AHau+SCouZKnEPIzlWmn2ANXoDW
1ISyBChwKdbbh4rEy8gijrp0xPMOK0FlKHJ5J9epwE2ydKiDkeSF/D4LOBs3g7KG
FkvTDYNR6owiVekMfWr6sK1pDTZH9e3wUM5iv9IgpR+Vi1G5PYa444WNV9YDKC9+
AN+YNLfcqbM6m9iPBlt+r2GqvgMohKx1xFAuNJjrdlex6ZlMIZchElkpAW16G90e
HMY52jPeiI0xTA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:35:46 2024 by rpki-client on console-ams.rpki-client.org