Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
File:                     dWyevH_4dZ2KEG__rzNeo0b66lc.mft (raw, json)
Hash identifier:          UULGEQ9aXdWoELQ0rGuxTawNKzhmB7NLmiVht8bR+4U=
Subject key identifier:   EC:22:D5:66:26:A7:E7:28:01:EF:4E:88:2E:CA:CE:83:52:91:D5:D9
Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
Certificate issuer:       /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Certificate serial:       01901D0F49A632976E9E14E259FA71F227C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 18:00:59 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:59 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:59 +0000
Files and hashes:         1: 4dem9-WtM4WhcWz7i3En58hPsd8.roa (hash: a5EoPaEF2r9LgQpxGrHaSUkko4/7aENYqzeYn/LSocw=)
                          2: dWyevH_4dZ2KEG__rzNeo0b66lc.crl (hash: QvxNQvMh+mIZMDfvJDA2hYWuEJwuiTfgnPEPiQAKpg4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:49:a6:32:97:6e:9e:14:e2:59:fa:71:f2:27:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
        Validity
            Not Before: Jun 15 18:00:59 2024 GMT
            Not After : Jun 16 18:00:59 2024 GMT
        Subject: CN=ec22d56626a7e72801ef4e882ecace835291d5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:07:de:34:5e:48:53:9b:02:9c:2d:27:01:fc:
                    06:af:9f:79:c2:d6:6d:e4:9e:a4:64:7c:cd:9a:74:
                    22:e9:19:11:62:51:75:53:ab:ff:5d:97:c6:91:15:
                    d8:4d:6e:f3:be:4c:d4:38:cd:38:39:1e:df:69:c0:
                    2b:78:af:c9:11:dd:61:c5:09:f9:f5:9a:bd:a4:d7:
                    c2:cc:9b:ae:0c:51:5a:45:cb:93:91:dd:c3:48:44:
                    ee:e2:23:84:cf:2a:96:f8:97:34:06:8b:18:58:ad:
                    5b:2c:e2:f1:4c:7d:0e:3c:62:91:1e:6e:18:20:24:
                    fb:94:ed:f5:11:c5:a4:ac:c1:4a:f0:11:e1:b1:5b:
                    9f:14:ac:72:f5:5f:80:08:45:4c:07:76:30:6f:82:
                    4d:67:e8:cc:12:37:40:58:26:5e:a8:98:11:25:4a:
                    62:ea:bd:fa:fa:ab:2b:6a:07:54:98:cf:eb:89:c4:
                    b7:7e:a7:83:ef:e4:9f:92:57:e3:58:10:a1:e4:6b:
                    32:5f:88:bd:ff:ef:69:b4:4d:01:81:23:fb:a8:8a:
                    30:4c:2e:41:34:db:b7:6f:b0:5c:44:db:c2:81:9c:
                    17:9f:da:fd:13:5c:0a:70:67:eb:18:0f:f5:03:cc:
                    ff:53:af:0d:bb:45:d4:09:80:60:8d:fc:c0:90:d2:
                    14:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:22:D5:66:26:A7:E7:28:01:EF:4E:88:2E:CA:CE:83:52:91:D5:D9
            X509v3 Authority Key Identifier:
                keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:62:f4:67:41:40:22:9e:20:75:d6:91:65:ef:54:92:d4:69:
         74:ba:dd:ae:ad:bb:b6:68:0b:df:06:ac:3e:f2:56:07:99:31:
         60:8f:4e:4e:c9:94:cd:25:e6:fe:a0:60:38:b7:01:69:a7:0b:
         fc:e9:7d:27:38:62:ec:29:83:04:ff:63:f3:26:da:5f:56:19:
         d0:90:5e:50:7c:f2:69:de:9b:6c:45:ef:e8:04:58:df:94:da:
         d2:b4:ee:c9:e8:b1:95:85:d4:34:33:01:4a:4b:2c:07:cd:94:
         16:d0:4f:ed:af:4d:2b:7b:80:d4:6c:0c:2d:ca:36:63:69:81:
         45:5e:ba:2a:2c:59:65:44:7e:4a:14:c4:ff:a6:ca:8c:1c:86:
         fa:2c:14:80:3c:79:bf:0f:9e:37:85:6f:ea:a2:7d:92:31:32:
         58:18:53:9f:93:de:bb:f5:94:13:f1:29:bf:85:7a:2c:c0:01:
         99:35:eb:2f:53:92:60:11:b7:d9:2b:b1:ff:7c:4b:01:ad:6e:
         4e:74:db:05:2f:e8:80:da:08:05:43:e3:30:64:75:e3:55:dd:
         45:1c:47:fe:9f:c1:65:16:13:41:84:c2:5f:1c:ab:43:64:33:
         4d:67:30:d6:59:af:5b:38:ba:f8:42:ea:6e:15:88:7f:74:dd:
         63:e4:59:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdD0mmMpdunhTiWfpx8ifEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NmM5ZWJjN2ZmODc1OWQ4YTEwNmZmZmFmMzM1ZWEzNDZm
YWVhNTcwHhcNMjQwNjE1MTgwMDU5WhcNMjQwNjE2MTgwMDU5WjAzMTEwLwYDVQQD
EyhlYzIyZDU2NjI2YTdlNzI4MDFlZjRlODgyZWNhY2U4MzUyOTFkNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygfeNF5IU5sCnC0nAfwGr595wtZt
5J6kZHzNmnQi6RkRYlF1U6v/XZfGkRXYTW7zvkzUOM04OR7facAreK/JEd1hxQn5
9Zq9pNfCzJuuDFFaRcuTkd3DSETu4iOEzyqW+Jc0BosYWK1bLOLxTH0OPGKRHm4Y
ICT7lO31EcWkrMFK8BHhsVufFKxy9V+ACEVMB3Ywb4JNZ+jMEjdAWCZeqJgRJUpi
6r36+qsragdUmM/ricS3fqeD7+SfklfjWBCh5GsyX4i9/+9ptE0BgSP7qIowTC5B
NNu3b7BcRNvCgZwXn9r9E1wKcGfrGA/1A8z/U68Nu0XUCYBgjfzAkNIUPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwi1WYmp+coAe9OiC7KzoNSkdXZMB8GA1UdIwQY
MBaAFHVsnrx/+HWdihBv/68zXqNG+upXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFd5ZXZIXzRkWjJLRUdfX3J6TmVvMGI2NmxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81ZjY1MzAtMTE2Ni00YjlkLTlkZmQt
Y2FhZTBlZGY2OWYxLzEvZFd5ZXZIXzRkWjJLRUdfX3J6TmVvMGI2NmxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy81ZjY1MzAtMTE2Ni00YjlkLTlkZmQtY2FhZTBlZGY2OWYx
LzEvZFd5ZXZIXzRkWjJLRUdfX3J6TmVvMGI2NmxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGL0Z0FA
Ip4gddaRZe9UktRpdLrdrq27tmgL3wasPvJWB5kxYI9OTsmUzSXm/qBgOLcBaacL
/Ol9Jzhi7CmDBP9j8ybaX1YZ0JBeUHzyad6bbEXv6ARY35Ta0rTuyeixlYXUNDMB
SkssB82UFtBP7a9NK3uA1GwMLco2Y2mBRV66KixZZUR+ShTE/6bKjByG+iwUgDx5
vw+eN4Vv6qJ9kjEyWBhTn5Peu/WUE/Epv4V6LMABmTXrL1OSYBG32Sux/3xLAa1u
TnTbBS/ogNoIBUPjMGR141XdRRxH/p/BZRYTQYTCXxyrQ2QzTWcw1lmvWzi6+ELq
bhWIf3TdY+RZcg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:35:51 2024 by rpki-client on console-ams.rpki-client.org