Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
File:                     q2TJrlviZApf1pRYanBMo0wgh78.mft (raw, json)
Hash identifier:          J9BrD60svl8d+l/AEizjSCvtCHU4vkjBDbL8AZgABKs=
Subject key identifier:   9A:51:31:33:B0:74:89:79:72:C3:94:14:DD:47:5F:10:D0:BF:B9:BA
Authority key identifier: AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
Certificate issuer:       /CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Certificate serial:       01901EFD9163CB121977C581E797FACF38AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 03:00:52 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:52 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:52 +0000
Files and hashes:         1: 8EkUapj8IF7YIl3XI2tkWtq4w5Y.roa (hash: a5v1nvhFUtyIEd8TJdGis5g4iu9eaEtbSXXEy3xSx+g=)
                          2: q2TJrlviZApf1pRYanBMo0wgh78.crl (hash: KVnZte2Z4Vwe4oQAhlVpzAaU4Td8KHWe3c8QEUyiURQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:91:63:cb:12:19:77:c5:81:e7:97:fa:cf:38:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
        Validity
            Not Before: Jun 16 03:00:52 2024 GMT
            Not After : Jun 17 03:00:52 2024 GMT
        Subject: CN=9a513133b074897972c39414dd475f10d0bfb9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:81:3f:fd:81:4b:b7:27:f9:10:05:51:c6:
                    7e:3a:fb:74:a8:d3:93:63:28:b4:56:3f:f2:92:e1:
                    51:42:fd:87:4a:7a:1c:2e:67:c6:e3:ed:0a:b2:44:
                    bd:d4:d8:df:1c:b1:a3:7d:29:c0:bc:91:57:ef:0a:
                    4b:e3:08:3f:ea:ba:37:a2:a6:be:db:2f:ca:fb:bb:
                    39:3c:37:8e:f9:b3:ae:80:20:dd:05:4c:c0:6b:57:
                    95:07:a4:e6:f3:96:8a:c1:70:b1:bd:df:b0:d8:54:
                    4c:3f:ca:48:db:df:32:98:64:04:5d:e1:39:4e:7e:
                    52:90:38:23:09:43:8c:5d:7a:bc:9d:0f:22:08:c5:
                    6a:4c:ca:69:a5:b9:7e:9c:b8:cc:c6:de:47:f2:96:
                    9a:3f:22:e7:65:45:30:27:76:36:1a:79:e7:31:14:
                    31:5f:b6:d2:f6:36:a3:aa:d7:b3:f7:83:16:9f:50:
                    7e:7b:26:ef:42:10:8a:1e:6f:3a:02:0e:c9:78:84:
                    ed:63:c4:7a:57:0f:89:69:fc:5d:0a:b6:33:73:d7:
                    c9:8e:06:ac:8c:94:d3:5f:d6:43:18:81:80:e9:90:
                    63:a9:7b:bf:ed:c4:3c:7a:ee:6a:11:91:27:99:12:
                    e8:ee:52:2f:5d:6b:2d:13:d7:44:a2:81:e0:9c:35:
                    ed:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:51:31:33:B0:74:89:79:72:C3:94:14:DD:47:5F:10:D0:BF:B9:BA
            X509v3 Authority Key Identifier:
                keyid:AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:9f:5a:74:03:15:41:70:45:1d:68:23:3e:bc:7c:61:6d:92:
         84:7c:cb:29:73:b9:86:50:bb:fe:87:c0:58:f0:ca:4a:d5:0a:
         4c:b2:cb:83:23:38:07:72:1e:e9:e2:30:33:c4:98:62:bb:15:
         99:db:30:3c:bd:6a:6f:84:f4:66:a1:49:19:d3:ab:fa:7d:3c:
         3f:8f:20:b8:5e:ee:95:06:36:8e:98:a2:ed:c7:32:0a:2e:38:
         a1:5a:90:79:63:ef:29:e9:30:06:f0:8d:69:6b:c6:10:81:81:
         17:60:a1:2e:60:44:fe:a9:85:13:2c:8f:70:26:61:ef:d9:58:
         80:0c:01:7f:55:56:b3:6f:29:97:51:15:23:a7:6a:45:b4:5d:
         68:c5:95:fd:de:37:c0:37:e0:5d:32:e8:72:fc:79:d6:8c:3f:
         c6:99:51:13:04:45:d3:60:a8:3f:bf:64:e2:78:48:28:ba:8d:
         13:da:41:86:90:71:a9:8a:51:42:53:28:1f:c6:b3:d8:08:bd:
         01:68:7a:9d:29:34:10:db:23:2c:52:4f:d7:da:26:23:c6:77:
         5d:c4:35:91:8a:55:c7:98:47:f2:89:5a:43:68:5e:83:89:b6:
         a0:7e:ad:0f:c8:0a:37:2b:6e:42:91:3f:49:90:9a:66:9c:71:
         36:6d:18:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAe/ZFjyxIZd8WB55f6zzivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNjRjOWFlNWJlMjY0MGE1ZmQ2OTQ1ODZhNzA0Y2EzNGMy
MDg3YmYwHhcNMjQwNjE2MDMwMDUyWhcNMjQwNjE3MDMwMDUyWjAzMTEwLwYDVQQD
Eyg5YTUxMzEzM2IwNzQ4OTc5NzJjMzk0MTRkZDQ3NWYxMGQwYmZiOWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydWBP/2BS7cn+RAFUcZ+Ovt0qNOT
Yyi0Vj/ykuFRQv2HSnocLmfG4+0KskS91NjfHLGjfSnAvJFX7wpL4wg/6ro3oqa+
2y/K+7s5PDeO+bOugCDdBUzAa1eVB6Tm85aKwXCxvd+w2FRMP8pI298ymGQEXeE5
Tn5SkDgjCUOMXXq8nQ8iCMVqTMpppbl+nLjMxt5H8paaPyLnZUUwJ3Y2GnnnMRQx
X7bS9jajqtez94MWn1B+eybvQhCKHm86Ag7JeITtY8R6Vw+JafxdCrYzc9fJjgas
jJTTX9ZDGIGA6ZBjqXu/7cQ8eu5qEZEnmRLo7lIvXWstE9dEooHgnDXtPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpRMTOwdIl5csOUFN1HXxDQv7m6MB8GA1UdIwQY
MBaAFKtkya5b4mQKX9aUWGpwTKNMIIe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTJUSnJsdmlaQXBmMXBSWWFuQk1vMHdnaDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNTVjYmMtZTQzZC00MGNiLTg0NGYt
MzFjNTEzN2VjMzhhLzEvcTJUSnJsdmlaQXBmMXBSWWFuQk1vMHdnaDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jNTVjYmMtZTQzZC00MGNiLTg0NGYtMzFjNTEzN2VjMzhh
LzEvcTJUSnJsdmlaQXBmMXBSWWFuQk1vMHdnaDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZ9adAMV
QXBFHWgjPrx8YW2ShHzLKXO5hlC7/ofAWPDKStUKTLLLgyM4B3Ie6eIwM8SYYrsV
mdswPL1qb4T0ZqFJGdOr+n08P48guF7ulQY2jpii7ccyCi44oVqQeWPvKekwBvCN
aWvGEIGBF2ChLmBE/qmFEyyPcCZh79lYgAwBf1VWs28pl1EVI6dqRbRdaMWV/d43
wDfgXTLocvx51ow/xplREwRF02CoP79k4nhIKLqNE9pBhpBxqYpRQlMoH8az2Ai9
AWh6nSk0ENsjLFJP19omI8Z3XcQ1kYpVx5hH8olaQ2heg4m2oH6tD8gKNytuQpE/
SZCaZpxxNm0Y+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:15 2024 by rpki-client on console-fra.rpki-client.org