Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File:                     Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier:          dY0TwxftHSdDxBkcL1pC22HPyIKK3G420bZxfjt+IOw=
Subject key identifier:   EA:73:1E:48:52:13:A9:3C:10:29:1F:14:AF:CC:82:A1:25:6B:F6:40
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer:       /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial:       01901DED2BA82B384C26CF09DA6A972BA035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number:          1014
Signing time:             Sat 15 Jun 2024 22:03:20 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:20 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:20 +0000
Files and hashes:         1: 1-fOtLCEip_cQmd0fYXtz6ZS5KC4.roa (hash: fII76EazRJLSng2UTYKDT3nLIKk/Wv/XQiwGHdZ74mc=)
                          2: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: DPpZZDHE6S8Kirz6rv9iAx4d0jfqxemMKvlUNblabAk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:2b:a8:2b:38:4c:26:cf:09:da:6a:97:2b:a0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
        Validity
            Not Before: Jun 15 22:03:20 2024 GMT
            Not After : Jun 16 22:03:20 2024 GMT
        Subject: CN=ea731e485213a93c10291f14afcc82a1256bf640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b7:82:19:22:b6:06:c7:e8:b3:86:cc:be:2d:
                    de:a2:16:bf:d9:4d:86:05:f1:33:65:d7:b5:e2:bb:
                    01:9a:c3:bc:65:c0:8a:5b:c0:a6:e4:94:19:cb:f0:
                    85:25:d0:31:a9:b2:fd:5f:de:0f:b4:32:f0:d3:c2:
                    ad:77:64:16:55:78:fd:47:9d:16:06:5e:e2:9c:f7:
                    8d:a8:6e:c9:8b:89:b0:fc:6a:b8:7b:33:20:d2:dd:
                    4f:8c:14:6f:61:8a:29:02:dc:42:73:d2:1d:eb:01:
                    87:c3:04:f1:2d:fd:cd:94:98:65:11:8c:fc:ae:28:
                    c6:98:9d:b9:c5:cd:1b:61:49:f2:06:76:27:d8:7c:
                    50:64:2e:5f:a7:75:6f:32:77:1d:24:06:cf:34:df:
                    08:9e:c8:96:e7:ef:e8:52:b6:dc:c3:d6:66:e9:21:
                    0b:56:4a:37:69:05:4c:7f:81:aa:d8:d1:cf:b3:72:
                    6e:d5:e4:7b:fc:e8:5c:c4:15:87:35:72:1d:49:b1:
                    ea:8a:e3:0e:75:84:6c:d5:38:e7:6b:6d:9f:6a:4e:
                    1e:b3:94:f0:fc:cf:a6:5a:f0:47:55:92:b0:04:94:
                    67:92:e2:a6:18:f0:7f:1c:37:c3:53:aa:0c:88:88:
                    97:30:b2:d9:ed:bf:78:01:2c:df:46:db:a4:d2:04:
                    b4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:73:1E:48:52:13:A9:3C:10:29:1F:14:AF:CC:82:A1:25:6B:F6:40
            X509v3 Authority Key Identifier:
                keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:44:7c:51:58:e7:e5:54:49:b6:a5:27:f2:d8:90:1f:2d:4f:
         0e:3d:eb:75:78:d3:c3:ef:b1:49:3b:21:f8:31:cb:db:0a:a0:
         df:5b:b8:58:5e:8d:30:5b:a2:0f:bc:f0:0f:1a:34:ce:c4:11:
         b8:c6:24:0d:ef:d6:63:b0:7c:48:02:35:1e:fb:6e:b4:e7:03:
         44:4f:bd:41:2e:f3:e6:7a:56:1b:b6:4a:e2:48:74:16:89:f3:
         12:e8:fb:d5:35:c4:7e:ab:6c:8e:1d:31:0d:16:38:00:14:e2:
         09:47:95:33:99:db:46:ab:7f:9c:2b:cd:b1:65:3b:65:12:64:
         1a:d3:91:c9:13:99:5c:84:ae:c4:e1:e0:40:3b:f1:f8:71:66:
         38:9a:f0:5c:db:87:4a:03:41:58:1c:bb:53:3d:59:b2:17:36:
         34:74:fa:22:7c:ad:82:f1:8d:0b:1a:47:f8:9d:da:ca:56:55:
         4f:7d:f3:bc:c8:5e:79:64:82:7e:88:ae:01:10:5c:13:e1:a9:
         b2:4a:86:a2:df:35:67:cb:9f:b1:56:b6:5b:af:b7:81:8a:d5:
         44:96:e8:c9:e1:73:fb:10:c6:64:56:ed:bc:f4:24:0f:89:1c:
         8e:a9:c6:0b:6e:62:3b:2a:91:e9:45:cd:39:d4:f7:f4:ff:d7:
         72:63:45:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7SuoKzhMJs8J2mqXK6A1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYThlMjg5OTY5M2ZjYTAwYmQ4MDQxYmE4ODAxZjJkODg4
NjkxMDgwHhcNMjQwNjE1MjIwMzIwWhcNMjQwNjE2MjIwMzIwWjAzMTEwLwYDVQQD
EyhlYTczMWU0ODUyMTNhOTNjMTAyOTFmMTRhZmNjODJhMTI1NmJmNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2reCGSK2Bsfos4bMvi3eoha/2U2G
BfEzZde14rsBmsO8ZcCKW8Cm5JQZy/CFJdAxqbL9X94PtDLw08Ktd2QWVXj9R50W
Bl7inPeNqG7Ji4mw/Gq4ezMg0t1PjBRvYYopAtxCc9Id6wGHwwTxLf3NlJhlEYz8
rijGmJ25xc0bYUnyBnYn2HxQZC5fp3VvMncdJAbPNN8InsiW5+/oUrbcw9Zm6SEL
Vko3aQVMf4Gq2NHPs3Ju1eR7/OhcxBWHNXIdSbHqiuMOdYRs1Tjna22fak4es5Tw
/M+mWvBHVZKwBJRnkuKmGPB/HDfDU6oMiIiXMLLZ7b94ASzfRtuk0gS0wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpzHkhSE6k8ECkfFK/MgqEla/ZAMB8GA1UdIwQY
MBaAFEOo4omWk/ygC9gEG6iAHy2IhpEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUt
NDk1NDI3MGUyNTA3LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUtNDk1NDI3MGUyNTA3
LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0R8UVjn
5VRJtqUn8tiQHy1PDj3rdXjTw++xSTsh+DHL2wqg31u4WF6NMFuiD7zwDxo0zsQR
uMYkDe/WY7B8SAI1HvtutOcDRE+9QS7z5npWG7ZK4kh0FonzEuj71TXEfqtsjh0x
DRY4ABTiCUeVM5nbRqt/nCvNsWU7ZRJkGtORyROZXISuxOHgQDvx+HFmOJrwXNuH
SgNBWBy7Uz1Zshc2NHT6InytgvGNCxpH+J3aylZVT33zvMheeWSCfoiuARBcE+Gp
skqGot81Z8ufsVa2W6+3gYrVRJboyeFz+xDGZFbtvPQkD4kcjqnGC25iOyqR6UXN
OdT39P/XcmNFKQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:50:29 2024 by rpki-client on console-fra.rpki-client.org