Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
File:                     aMwyXIrZdpobVNopYwX-DDZXN3U.mft (raw, json)
Hash identifier:          muzJR+4LUeUAYHPhT+s4y3DQDp52PVaqHGD+rsuSU8E=
Subject key identifier:   7D:A1:0A:A6:FF:D0:3E:F6:AB:C0:0D:14:75:74:43:B8:98:DF:C5:27
Authority key identifier: 68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75
Certificate issuer:       /CN=68cc325c8ad9769a1b54da296305fe0c36573775
Certificate serial:       0190448C2D7A8C271553119AD1352F7707AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
Manifest number:          0519
Signing time:             Sun 23 Jun 2024 10:02:35 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:35 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:35 +0000
Files and hashes:         1: 5fLniQgziIB26DOgv3LeR2U0xtE.roa (hash: zllTuf0DPYCNnUrsnk38AzVGT0TECgFpNDOR0Vaty2c=)
                          2: OmEy79Y0i7zJlH1eawleJZpBMJU.roa (hash: 5Ez4L/le0xnpHNYvekZy8BbeVJoa1mmQ4fFJEiv29bQ=)
                          3: TFGWzMJJAor4DFQBRC3JRc7jeUo.roa (hash: aZBVERg/AQwbBvY7gUfbbTaczK2Mt9n45YPLC/aGRnM=)
                          4: U0U80ScVCsYNYydZLR0-3ybrNwk.roa (hash: rWgzWofx9ehf3jAZ1eFvpb2U9txZCuk8jMihI/Cn5YU=)
                          5: aMwyXIrZdpobVNopYwX-DDZXN3U.crl (hash: fHsbSoVVXTUuE4qt7cZfNNbMRdG5JbXT2hadc6L4r4k=)
                          6: hzB5pmwX56_ByZMLWxNfB0qu4Lg.roa (hash: tAFBPGIhkQ11PPyYxBSRWdrzwaxcEEecz63vuT668/o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:2d:7a:8c:27:15:53:11:9a:d1:35:2f:77:07:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68cc325c8ad9769a1b54da296305fe0c36573775
        Validity
            Not Before: Jun 23 10:02:35 2024 GMT
            Not After : Jun 24 10:02:35 2024 GMT
        Subject: CN=7da10aa6ffd03ef6abc00d14757443b898dfc527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:05:a9:39:04:b4:30:ec:a2:41:7f:98:d1:
                    e1:fb:db:dd:d4:5a:62:d2:18:0f:e6:2b:20:11:64:
                    06:cc:c8:dc:fd:02:48:33:5f:ef:2c:da:4d:2c:60:
                    07:c9:67:b1:66:0d:32:f9:16:da:e8:9f:79:c9:ad:
                    fa:88:b6:98:2e:76:55:7f:c3:25:82:26:f2:44:30:
                    72:4b:5c:24:e9:2e:42:e6:de:dc:05:b1:e9:87:c4:
                    1e:e5:02:3a:6f:b5:2d:c1:2d:76:3a:26:92:14:02:
                    fa:c0:27:10:2d:89:20:b8:b2:79:e8:89:b0:1d:50:
                    5b:80:72:46:a8:18:e2:bb:dc:74:08:28:b0:4c:aa:
                    c4:e7:e1:b8:79:2f:9c:ed:e4:7d:d3:70:61:33:db:
                    c9:19:d3:2c:6d:1e:26:b0:3d:7f:1f:55:52:ed:33:
                    3d:2b:c2:1a:0b:5a:94:06:1b:99:e4:85:f4:ca:4b:
                    16:21:37:bf:63:43:90:d6:2c:c4:db:97:68:58:8e:
                    b1:43:4d:4a:7c:ee:50:94:4d:c3:fb:56:4f:ee:34:
                    1c:d9:af:78:18:b9:6b:cf:07:4f:30:e2:6b:42:32:
                    8f:5b:9d:f5:eb:f7:a0:e8:5c:bb:59:a5:0c:36:5e:
                    d4:70:c3:c7:38:50:34:43:3b:09:ed:77:16:c6:17:
                    f4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A1:0A:A6:FF:D0:3E:F6:AB:C0:0D:14:75:74:43:B8:98:DF:C5:27
            X509v3 Authority Key Identifier:
                keyid:68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:cb:15:d9:87:1f:28:1e:f9:f7:31:86:96:33:72:d1:1d:3f:
         46:89:01:48:e8:24:06:59:97:af:4b:ce:57:46:3e:c9:5a:dd:
         1a:9a:e0:3e:9e:3a:9c:0f:d7:c8:f9:3b:27:63:f2:5d:cd:1c:
         af:18:5f:4e:27:c3:01:a6:b5:cd:02:9b:d3:5f:82:c7:4e:6e:
         b4:03:48:b2:46:c1:15:1d:d1:61:58:51:bc:90:cc:1b:68:36:
         10:8b:ce:10:63:67:38:26:20:06:be:34:86:cc:f3:97:ca:16:
         8f:87:79:7a:b0:69:6f:18:f0:54:f2:ff:76:93:cd:78:04:10:
         69:b9:91:ca:69:ef:7b:96:d7:8c:09:4d:10:2f:38:da:1e:8e:
         fa:3d:bf:3e:58:9d:f2:eb:19:33:0c:7e:1b:ce:c6:e2:c9:55:
         90:93:f1:ed:34:c1:9a:f1:58:87:56:73:77:0f:7f:04:92:a5:
         2e:14:f4:14:5c:d5:03:9b:13:47:ee:90:0b:47:c5:91:ad:ba:
         08:c6:ff:dd:63:f8:f1:bd:02:77:0b:dd:c4:be:d1:e5:ab:b2:
         e2:fd:1a:de:d2:bf:96:4b:0a:b4:90:5c:c8:1e:e1:f7:78:29:
         17:cc:2b:b4:e5:4d:90:4c:98:62:61:a5:57:98:01:fa:54:78:
         31:a4:12:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEjC16jCcVUxGa0TUvdwesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4Y2MzMjVjOGFkOTc2OWExYjU0ZGEyOTYzMDVmZTBjMzY1
NzM3NzUwHhcNMjQwNjIzMTAwMjM1WhcNMjQwNjI0MTAwMjM1WjAzMTEwLwYDVQQD
Eyg3ZGExMGFhNmZmZDAzZWY2YWJjMDBkMTQ3NTc0NDNiODk4ZGZjNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqIFqTkEtDDsokF/mNHh+9vd1Fpi
0hgP5isgEWQGzMjc/QJIM1/vLNpNLGAHyWexZg0y+Rba6J95ya36iLaYLnZVf8Ml
gibyRDByS1wk6S5C5t7cBbHph8Qe5QI6b7UtwS12OiaSFAL6wCcQLYkguLJ56Imw
HVBbgHJGqBjiu9x0CCiwTKrE5+G4eS+c7eR903BhM9vJGdMsbR4msD1/H1VS7TM9
K8IaC1qUBhuZ5IX0yksWITe/Y0OQ1izE25doWI6xQ01KfO5QlE3D+1ZP7jQc2a94
GLlrzwdPMOJrQjKPW5316/eg6Fy7WaUMNl7UcMPHOFA0QzsJ7XcWxhf0RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2hCqb/0D72q8ANFHV0Q7iY38UnMB8GA1UdIwQY
MBaAFGjMMlyK2XaaG1TaKWMF/gw2Vzd1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU13eVhJclpkcG9iVk5vcFl3WC1ERFpYTjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MTc3NzgtOWYzMS00NzViLTg0ZmEt
NzRjOTc5YTY1MzZlLzEvYU13eVhJclpkcG9iVk5vcFl3WC1ERFpYTjNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82MTc3NzgtOWYzMS00NzViLTg0ZmEtNzRjOTc5YTY1MzZl
LzEvYU13eVhJclpkcG9iVk5vcFl3WC1ERFpYTjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcsV2Ycf
KB759zGGljNy0R0/RokBSOgkBlmXr0vOV0Y+yVrdGprgPp46nA/XyPk7J2PyXc0c
rxhfTifDAaa1zQKb01+Cx05utANIskbBFR3RYVhRvJDMG2g2EIvOEGNnOCYgBr40
hszzl8oWj4d5erBpbxjwVPL/dpPNeAQQabmRymnve5bXjAlNEC842h6O+j2/Plid
8usZMwx+G87G4slVkJPx7TTBmvFYh1Zzdw9/BJKlLhT0FFzVA5sTR+6QC0fFka26
CMb/3WP48b0CdwvdxL7R5auy4v0a3tK/lksKtJBcyB7h93gpF8wrtOVNkEyYYmGl
V5gB+lR4MaQSNQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:03:53 2024 by rpki-client on console-fra.rpki-client.org