Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
File:                     pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft (raw, json)
Hash identifier:          hRtJIN3+KFOotXj1FXcjm/CjCbOGUhe0TLDQGWSf5Ns=
Subject key identifier:   DB:E7:BF:FE:0C:90:FA:75:C8:BC:2B:10:79:11:0D:A0:82:FE:87:27
Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
Certificate issuer:       /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Certificate serial:       01901DED4B109DA55E16178E7A0C35FB3CDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:03:28 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:28 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:28 +0000
Files and hashes:         1: QBkLdfLsnaDtJqiyjI5r5yaRleQ.roa (hash: zIe2+DX9wxRUgAMY+H2/NGTJruISHbKLGYs2lOTA5YY=)
                          2: pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl (hash: vdFsfq0VAGNc9e/n+P7dElmxALeyVmNBAP4QP9MaXE8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:4b:10:9d:a5:5e:16:17:8e:7a:0c:35:fb:3c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
        Validity
            Not Before: Jun 15 22:03:28 2024 GMT
            Not After : Jun 16 22:03:28 2024 GMT
        Subject: CN=dbe7bffe0c90fa75c8bc2b1079110da082fe8727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:16:b5:f5:43:70:6f:40:87:e8:d4:e0:cb:
                    c1:09:06:9e:a6:3f:e2:9b:c4:00:24:29:13:24:6b:
                    a5:69:34:5d:c1:60:3d:f2:02:d0:2f:43:28:6f:cc:
                    01:a1:9e:10:74:66:3c:c2:3a:02:74:9b:7a:f9:70:
                    16:f8:a6:dd:f6:4c:3a:6f:b3:35:04:d8:1a:b7:8a:
                    42:d6:f3:40:77:2c:82:53:0c:b9:31:ae:67:38:1d:
                    99:f6:38:3b:0a:c9:38:7a:69:07:bb:2e:a0:4b:17:
                    87:f1:94:3e:23:3c:34:1f:37:fa:33:a9:90:1f:f2:
                    e0:a0:57:4d:3d:13:d9:a4:51:4e:5c:1a:24:31:f5:
                    7d:32:e8:c5:0b:7f:af:e0:c8:2d:17:80:78:59:91:
                    59:e6:f3:c7:2e:4e:f2:a6:0d:d6:3e:e1:e7:bc:c2:
                    f1:8b:bc:78:4f:3e:b5:0b:89:be:03:11:e3:88:94:
                    20:6d:61:62:6f:be:67:75:4c:a1:7e:27:5b:db:7b:
                    cd:02:ea:54:5b:38:ec:52:57:58:85:c7:7f:2c:49:
                    d8:fc:f0:a7:3a:73:9f:88:ca:54:99:be:52:75:5e:
                    4e:f5:2b:83:01:49:e5:80:3b:04:0f:74:26:2f:91:
                    7f:33:31:af:51:84:44:f4:4f:c6:d5:58:eb:28:55:
                    45:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E7:BF:FE:0C:90:FA:75:C8:BC:2B:10:79:11:0D:A0:82:FE:87:27
            X509v3 Authority Key Identifier:
                keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:2e:63:f1:ff:85:54:19:0a:60:cb:e7:d1:c0:f9:41:e5:bc:
         7c:e5:ac:13:ee:b1:c1:40:f7:f1:89:19:34:39:e7:8f:8f:0f:
         71:63:4c:57:76:a5:92:a9:2c:63:4a:3e:b9:a2:8e:c3:ae:22:
         9e:8a:27:55:ba:ad:85:3b:a7:a4:35:0a:97:91:34:be:9f:22:
         54:3a:6e:d8:58:9d:ae:de:4e:28:06:ab:ab:2c:13:7f:0d:72:
         6c:fa:0f:6f:55:f2:45:eb:ae:24:4b:7b:d7:8d:60:8b:e1:ae:
         d4:70:41:cc:a8:2b:ef:0b:6e:1d:b2:59:32:d3:56:6e:a1:2c:
         3a:13:c6:d7:95:c8:96:e5:f0:a2:84:4d:1b:7d:5f:24:ae:27:
         7e:e4:53:6d:39:dc:8f:2e:58:82:16:f1:91:3d:b3:cc:46:05:
         74:29:7d:f6:38:bd:c5:c4:b8:d9:b0:7d:98:b8:0e:9b:17:f5:
         64:25:8e:47:2e:f3:4d:8c:7f:72:08:b5:11:64:81:ca:81:df:
         1c:5a:8e:dd:49:85:1c:da:b9:92:44:16:74:fb:bf:93:db:a7:
         a7:f5:a5:30:0a:54:dd:15:29:61:3c:12:6b:e6:ff:d6:ca:5e:
         75:e4:00:0a:50:e4:c2:a4:7b:8e:36:61:1f:62:e3:bb:74:14:
         a9:48:ab:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7UsQnaVeFheOegw1+zzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YWE5YmNkMDZlYTZjNTY1ZGQ5MDdjYTA0ZTUwNzdkNjhj
MDY2NGYwHhcNMjQwNjE1MjIwMzI4WhcNMjQwNjE2MjIwMzI4WjAzMTEwLwYDVQQD
EyhkYmU3YmZmZTBjOTBmYTc1YzhiYzJiMTA3OTExMGRhMDgyZmU4NzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRIWtfVDcG9Ah+jU4MvBCQaepj/i
m8QAJCkTJGulaTRdwWA98gLQL0Mob8wBoZ4QdGY8wjoCdJt6+XAW+Kbd9kw6b7M1
BNgat4pC1vNAdyyCUwy5Ma5nOB2Z9jg7Csk4emkHuy6gSxeH8ZQ+Izw0Hzf6M6mQ
H/LgoFdNPRPZpFFOXBokMfV9MujFC3+v4MgtF4B4WZFZ5vPHLk7ypg3WPuHnvMLx
i7x4Tz61C4m+AxHjiJQgbWFib75ndUyhfidb23vNAupUWzjsUldYhcd/LEnY/PCn
OnOfiMpUmb5SdV5O9SuDAUnlgDsED3QmL5F/MzGvUYRE9E/G1VjrKFVF4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvnv/4MkPp1yLwrEHkRDaCC/ocnMB8GA1UdIwQY
MBaAFKSqm80G6mxWXdkHygTlB31owGZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEtxYnpRYnFiRlpkMlFmS0JPVUhmV2pBWms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wNTJmNGMtYmUzYy00ZDE5LWFhMDQt
MGFiOGRkOWViYWIxLzEvcEtxYnpRYnFiRlpkMlFmS0JPVUhmV2pBWms4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wNTJmNGMtYmUzYy00ZDE5LWFhMDQtMGFiOGRkOWViYWIx
LzEvcEtxYnpRYnFiRlpkMlFmS0JPVUhmV2pBWms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANC5j8f+F
VBkKYMvn0cD5QeW8fOWsE+6xwUD38YkZNDnnj48PcWNMV3alkqksY0o+uaKOw64i
noonVbqthTunpDUKl5E0vp8iVDpu2Fidrt5OKAarqywTfw1ybPoPb1XyReuuJEt7
141gi+Gu1HBBzKgr7wtuHbJZMtNWbqEsOhPG15XIluXwooRNG31fJK4nfuRTbTnc
jy5YghbxkT2zzEYFdCl99ji9xcS42bB9mLgOmxf1ZCWORy7zTYx/cgi1EWSByoHf
HFqO3UmFHNq5kkQWdPu/k9unp/WlMApU3RUpYTwSa+b/1spedeQAClDkwqR7jjZh
H2Lju3QUqUirAw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:50:38 2024 by rpki-client on console-fra.rpki-client.org