Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File:                     adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier:          nB9KrARJohoIuC9RViakmUiuxMtPn1DBpoPQT7dScWQ=
Subject key identifier:   F4:DC:71:A3:8C:55:81:91:36:74:EC:4B:8A:83:15:A0:09:40:AB:88
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer:       /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial:       01901DEBF26D63CAA34B8630880A74255A2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number:          0B04
Signing time:             Sat 15 Jun 2024 22:02:00 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:00 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:00 +0000
Files and hashes:         1: aGNCZ9zqJs45LL3xvG6aYo9xpTw.roa (hash: xPIJVm13TkOIfsUFOR2ovAO0Hoc1p63IBS2toZ9YPPc=)
                          2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: q1+1Zy+2uVqImXpJMzEOCzsWdR0OupmibogER+VdhAQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:f2:6d:63:ca:a3:4b:86:30:88:0a:74:25:5a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
        Validity
            Not Before: Jun 15 22:02:00 2024 GMT
            Not After : Jun 16 22:02:00 2024 GMT
        Subject: CN=f4dc71a38c5581913674ec4b8a8315a00940ab88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2e:7f:fb:97:c3:f1:f9:39:38:54:0a:ed:36:
                    b1:88:03:8f:a2:41:44:f6:1f:6a:90:5e:9d:bf:c4:
                    57:b5:1d:a7:7d:72:03:e8:3f:32:94:e7:e4:f4:95:
                    df:94:aa:bc:91:a2:69:01:5c:6e:92:07:f1:1e:c1:
                    52:5a:9c:da:e3:cc:35:88:c5:d7:67:41:1b:3d:ff:
                    8c:df:29:d9:f4:45:60:2f:cf:a2:d4:e8:c8:24:b6:
                    ae:06:e1:8b:8f:7c:a6:b8:19:7e:3a:6e:75:a9:43:
                    53:0b:5d:d8:c3:e3:48:d4:ef:fb:40:06:5e:0d:c5:
                    38:44:a9:be:ef:93:f6:f3:b1:81:eb:d2:49:29:68:
                    0f:66:f8:8c:e2:72:ab:9d:7b:d4:42:4b:81:22:f7:
                    de:a8:f2:be:f9:da:f3:26:d0:20:89:49:79:e6:d2:
                    87:6b:28:71:9d:54:f3:73:ce:11:e8:5a:f9:a2:1e:
                    de:de:0c:a4:92:af:21:27:a9:34:56:61:9b:44:1e:
                    9c:1f:29:a8:5b:b3:36:fe:5d:45:38:a4:c8:e0:2b:
                    d6:a0:40:ca:0d:ed:a4:51:38:24:f2:d4:99:5c:33:
                    10:77:38:c0:8f:5d:f4:63:ba:76:e5:73:8d:27:e6:
                    20:31:4e:52:9a:c7:d3:50:35:53:50:e1:17:0d:48:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DC:71:A3:8C:55:81:91:36:74:EC:4B:8A:83:15:A0:09:40:AB:88
            X509v3 Authority Key Identifier:
                keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:51:61:69:43:20:e0:84:db:53:28:7e:23:64:f1:14:38:d9:
         98:de:d0:5b:c4:b5:d6:d0:e2:1e:fd:74:4a:a1:d5:ce:85:c5:
         97:03:a4:98:8c:aa:1f:08:44:43:b3:c7:04:f5:3c:dc:db:3d:
         ab:20:54:4e:24:c0:cf:99:75:26:f2:13:a7:4a:b1:9f:59:4c:
         fc:8c:3d:fb:29:9e:0d:de:92:bf:5d:84:48:ed:c0:b0:bb:2b:
         df:46:e5:30:e6:e5:c5:dd:b9:3b:f6:2c:75:a9:a5:0d:0b:aa:
         4e:7d:fc:62:2a:53:7f:79:f9:f7:46:dd:41:d2:91:00:93:3a:
         15:4f:12:43:1d:61:72:fa:4c:4e:52:51:36:67:ff:a2:26:11:
         a3:8d:71:e1:90:99:81:d7:03:92:64:12:67:c6:0e:1c:ea:21:
         5e:68:af:38:20:46:41:c9:4b:db:d0:99:fe:bc:cc:89:53:74:
         ab:19:3c:e6:8e:13:73:0e:89:8a:1f:fe:71:34:f2:72:bb:4c:
         a3:b1:b0:f9:6d:6c:d0:f9:52:c8:5c:51:c7:19:4e:ca:02:11:
         d1:a2:1d:27:35:5a:64:7c:fe:7f:86:4a:84:31:fd:d1:c7:f5:
         8e:09:88:a9:98:af:03:3c:f2:cd:52:be:21:e9:10:56:96:d5:
         68:7f:ce:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6/JtY8qjS4YwiAp0JVosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDYwNDg1NzFkODdlYWJjNGJlZDFhN2NkZmY4MzU4N2Zi
ODk2NjQwHhcNMjQwNjE1MjIwMjAwWhcNMjQwNjE2MjIwMjAwWjAzMTEwLwYDVQQD
EyhmNGRjNzFhMzhjNTU4MTkxMzY3NGVjNGI4YTgzMTVhMDA5NDBhYjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji5/+5fD8fk5OFQK7TaxiAOPokFE
9h9qkF6dv8RXtR2nfXID6D8ylOfk9JXflKq8kaJpAVxukgfxHsFSWpza48w1iMXX
Z0EbPf+M3ynZ9EVgL8+i1OjIJLauBuGLj3ymuBl+Om51qUNTC13Yw+NI1O/7QAZe
DcU4RKm+75P287GB69JJKWgPZviM4nKrnXvUQkuBIvfeqPK++drzJtAgiUl55tKH
ayhxnVTzc84R6Fr5oh7e3gykkq8hJ6k0VmGbRB6cHymoW7M2/l1FOKTI4CvWoEDK
De2kUTgk8tSZXDMQdzjAj130Y7p25XONJ+YgMU5SmsfTUDVTUOEXDUjc+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTccaOMVYGRNnTsS4qDFaAJQKuIMB8GA1UdIwQY
MBaAFGnWBIVx2H6rxL7Rp83/g1h/uJZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMWNkZjItY2EzMC00NzE4LWFjODAt
ZjE5NmZkMGE0OTdiLzEvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xMWNkZjItY2EzMC00NzE4LWFjODAtZjE5NmZkMGE0OTdi
LzEvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1FhaUMg
4ITbUyh+I2TxFDjZmN7QW8S11tDiHv10SqHVzoXFlwOkmIyqHwhEQ7PHBPU83Ns9
qyBUTiTAz5l1JvITp0qxn1lM/Iw9+ymeDd6Sv12ESO3AsLsr30blMOblxd25O/Ys
damlDQuqTn38YipTf3n590bdQdKRAJM6FU8SQx1hcvpMTlJRNmf/oiYRo41x4ZCZ
gdcDkmQSZ8YOHOohXmivOCBGQclL29CZ/rzMiVN0qxk85o4Tcw6Jih/+cTTycrtM
o7Gw+W1s0PlSyFxRxxlOygIR0aIdJzVaZHz+f4ZKhDH90cf1jgmIqZivAzzyzVK+
IekQVpbVaH/OZA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:48 2024 by rpki-client on console-ams.rpki-client.org