Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
File:                     x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json)
Hash identifier:          gKPCxQbkOcZLhdvrteBrTTkgwgRGPhiaDWajd2fTdT8=
Subject key identifier:   9A:C3:BB:5E:F5:F7:AB:3F:BC:22:6A:35:24:19:0A:A2:9E:86:1F:F4
Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
Certificate issuer:       /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Certificate serial:       019037E1F4D053EB28B827D6AE7729D72112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
Manifest number:          0AD4
Signing time:             Thu 20 Jun 2024 23:01:13 +0000
Manifest this update:     Thu 20 Jun 2024 23:01:13 +0000
Manifest next update:     Fri 21 Jun 2024 23:01:13 +0000
Files and hashes:         1: jB3cCRzlw8UKSXwtly7der_E4ws.roa (hash: k7zV9KD2ITl3DShdwJHJJ49PLD7ZPchjQTcJquKL8w0=)
                          2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: CW9d3JZ2eZ6W33hOEpua6HpJ4etZxUAmDh4zh4DGqIg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 23:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:e1:f4:d0:53:eb:28:b8:27:d6:ae:77:29:d7:21:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
        Validity
            Not Before: Jun 20 23:01:13 2024 GMT
            Not After : Jun 21 23:01:13 2024 GMT
        Subject: CN=9ac3bb5ef5f7ab3fbc226a3524190aa29e861ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:d4:2e:36:db:f7:e0:3c:17:2f:38:e8:d7:
                    c6:c6:ec:e2:11:a2:1c:3c:b3:40:b8:d3:49:7d:f3:
                    c8:fe:81:d6:27:9c:1b:55:20:a6:31:a4:e7:74:5c:
                    6e:04:0f:5a:76:36:15:af:3a:9c:f4:d9:33:28:0b:
                    02:0d:ea:f6:fc:41:2b:4a:82:18:30:fe:45:ef:be:
                    82:6b:2c:5d:10:d3:7e:b6:ca:7f:50:04:83:72:95:
                    df:22:de:1a:ce:fa:3d:6d:43:0e:0a:e0:4c:96:e1:
                    b9:ab:c6:15:27:25:a5:c9:c5:a1:07:eb:c3:ef:f3:
                    b1:06:f4:4e:51:47:64:24:0c:7d:6c:8a:ed:55:e0:
                    89:b5:50:cb:f7:c4:e0:c4:be:bd:b2:43:01:c6:be:
                    d6:8a:38:12:9b:10:9a:7c:db:fb:25:39:83:be:da:
                    10:5d:41:bb:4f:63:2f:11:00:72:d0:25:3c:2b:0d:
                    06:45:87:46:46:a9:1a:b2:19:8c:6d:ab:29:1e:5d:
                    a2:fa:7c:01:e3:a8:b6:f9:64:9b:16:32:bc:ca:95:
                    08:dc:2b:a3:bb:99:3c:e8:d9:06:12:f9:a2:d8:6c:
                    7e:bc:cb:aa:d7:22:e1:95:8f:61:86:da:5d:29:ac:
                    4f:bf:03:d2:20:64:8d:b7:f8:39:88:57:26:4e:c4:
                    cf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C3:BB:5E:F5:F7:AB:3F:BC:22:6A:35:24:19:0A:A2:9E:86:1F:F4
            X509v3 Authority Key Identifier:
                keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:df:07:0a:da:97:c4:aa:02:1d:a3:1f:81:9b:e1:7f:57:
         cd:a9:6f:85:41:6a:1d:11:79:be:47:95:79:2d:15:67:2a:c2:
         ee:c7:9f:dc:bf:b7:38:ab:72:3d:a6:d9:96:56:6b:70:1f:e1:
         26:41:e1:d4:42:fd:66:3f:21:44:36:49:3f:e6:86:2a:c1:b2:
         4e:d9:7e:fd:f0:e7:d3:52:c6:17:fe:2d:82:7f:dc:a3:3c:67:
         f7:c8:37:98:17:9a:e2:c1:4f:d9:48:b9:6e:7c:ae:24:c9:0e:
         13:5b:1a:25:8f:7a:66:87:a9:18:02:81:8b:2b:87:9b:91:d8:
         5d:11:a8:59:c9:77:b2:d1:e4:5d:3e:aa:99:04:18:cd:fe:56:
         b6:49:45:f9:20:fc:e6:99:99:1c:30:ef:57:14:5b:86:7c:e9:
         26:58:96:9f:f6:64:ca:da:62:d8:28:4d:5c:c4:ef:f0:f7:45:
         6c:89:98:c7:b3:71:4c:04:91:8a:0e:9b:c8:7b:cf:4f:27:f4:
         78:18:23:e1:87:3f:bd:20:83:21:2e:b8:c9:6c:23:58:30:a1:
         33:ac:b0:57:0e:a6:f5:0d:0a:30:1c:f8:c2:4b:e1:07:2a:d4:
         17:12:f0:94:05:c5:4b:77:cd:2a:a8:76:52:d2:d6:89:5f:36:
         bb:4b:94:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA34fTQU+souCfWrncp1yESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzM2ZWRlYjkyZjkzN2VhNDU4OTNlYTliY2Y0ZWY4M2Yx
NWZmYzgwHhcNMjQwNjIwMjMwMTEzWhcNMjQwNjIxMjMwMTEzWjAzMTEwLwYDVQQD
Eyg5YWMzYmI1ZWY1ZjdhYjNmYmMyMjZhMzUyNDE5MGFhMjllODYxZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2TULjbb9+A8Fy846NfGxuziEaIc
PLNAuNNJffPI/oHWJ5wbVSCmMaTndFxuBA9adjYVrzqc9NkzKAsCDer2/EErSoIY
MP5F776CayxdENN+tsp/UASDcpXfIt4azvo9bUMOCuBMluG5q8YVJyWlycWhB+vD
7/OxBvROUUdkJAx9bIrtVeCJtVDL98TgxL69skMBxr7WijgSmxCafNv7JTmDvtoQ
XUG7T2MvEQBy0CU8Kw0GRYdGRqkashmMbaspHl2i+nwB46i2+WSbFjK8ypUI3Cuj
u5k86NkGEvmi2Gx+vMuq1yLhlY9hhtpdKaxPvwPSIGSNt/g5iFcmTsTPxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrDu17196s/vCJqNSQZCqKehh/0MB8GA1UdIwQY
MBaAFMdzbt65L5N+pFiT6pvPTvg/Ff/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYt
NjY5NmRhZGI0NWViLzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYtNjY5NmRhZGI0NWVi
LzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmvfBwra
l8SqAh2jH4Gb4X9XzalvhUFqHRF5vkeVeS0VZyrC7sef3L+3OKtyPabZllZrcB/h
JkHh1EL9Zj8hRDZJP+aGKsGyTtl+/fDn01LGF/4tgn/cozxn98g3mBea4sFP2Ui5
bnyuJMkOE1saJY96ZoepGAKBiyuHm5HYXRGoWcl3stHkXT6qmQQYzf5WtklF+SD8
5pmZHDDvVxRbhnzpJliWn/Zkytpi2ChNXMTv8PdFbImYx7NxTASRig6byHvPTyf0
eBgj4Yc/vSCDIS64yWwjWDChM6ywVw6m9Q0KMBz4wkvhByrUFxLwlAXFS3fNKqh2
UtLWiV82u0uUaQ==
-----END CERTIFICATE-----
Generated at Fri Jun 21 03:17:46 2024 by rpki-client on console-ams.rpki-client.org