Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File:                     9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier:          DWO9SHc6xK8kCY8VgwlC93YwLGxGHRalKFTgWwqL+S0=
Subject key identifier:   76:2B:C2:B6:10:73:C9:42:15:15:15:D7:25:F2:40:61:5E:33:41:AB
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer:       /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial:       01901BFE59425705FEA4B2170ADBAF1B0D7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number:          04DB
Signing time:             Sat 15 Jun 2024 13:02:51 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:51 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:51 +0000
Files and hashes:         1: 4g5HEaFFljWmR0JVf5FxhlhciQQ.roa (hash: wnAoZUGMXgcdr/y8VKogl7eL+n5HTBN4Ie1IT5AoMlo=)
                          2: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: GztBliKk8QVCDzYFUKyESpWaME2g1JfRwnW4P8sTVCw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:59:42:57:05:fe:a4:b2:17:0a:db:af:1b:0d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
        Validity
            Not Before: Jun 15 13:02:51 2024 GMT
            Not After : Jun 16 13:02:51 2024 GMT
        Subject: CN=762bc2b61073c942151515d725f240615e3341ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:20:22:9e:38:11:da:86:4a:e6:3d:a6:52:59:
                    20:41:f9:d3:7f:91:33:b3:6b:a7:fa:1c:85:80:43:
                    2e:0d:b6:e3:2d:65:5c:9c:70:d8:79:a4:92:d0:a2:
                    14:e0:ba:33:74:00:ad:a4:46:72:df:57:fa:b0:31:
                    11:d3:59:31:a2:c6:d0:7e:31:67:00:6c:5b:f1:d3:
                    d6:4f:51:a7:da:fb:fd:60:ea:92:00:a7:82:e1:8f:
                    c2:4a:82:27:21:43:d9:f1:5c:a7:38:01:8e:fe:3d:
                    65:d8:29:67:9f:db:40:a8:c3:1b:87:bf:47:44:77:
                    27:86:c7:58:19:7f:fc:6e:64:c5:f7:a0:4a:db:05:
                    c9:1c:e9:0f:cd:ef:6c:d8:3a:99:5e:d2:73:ad:96:
                    d6:cb:7f:70:0b:47:3c:c8:c5:45:6f:41:e5:61:d2:
                    17:cf:bb:d7:53:64:51:74:48:98:41:25:a5:22:67:
                    9b:f1:ea:cc:3a:1c:a8:8b:ff:b8:cd:87:48:0a:c6:
                    7b:ac:02:6b:0a:8d:c8:a9:67:1d:ad:bc:ea:90:f7:
                    84:fe:21:30:f8:6a:69:b3:1c:6f:8b:47:1b:4d:68:
                    d3:27:8a:31:34:6f:a0:6f:ee:42:ff:e1:80:10:f2:
                    ed:b7:23:9b:aa:47:7f:54:29:ac:ef:5b:23:1b:a3:
                    c9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2B:C2:B6:10:73:C9:42:15:15:15:D7:25:F2:40:61:5E:33:41:AB
            X509v3 Authority Key Identifier:
                keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:64:93:ed:9c:19:c1:61:cb:3a:05:a0:fe:a6:8a:de:21:01:
         20:3c:9e:d1:82:ce:d3:4d:63:c3:7d:05:4e:15:05:5a:4c:69:
         96:07:ec:2c:19:ac:ce:81:34:df:62:fe:4b:17:96:91:a2:55:
         aa:32:f6:f4:a2:a5:18:09:b4:67:be:c1:ab:af:5c:b1:63:5e:
         e6:e7:b8:2b:f9:93:5c:e7:44:0b:37:10:5c:0e:f2:bc:64:d1:
         40:49:09:fe:b3:eb:8e:11:32:c2:84:01:58:b7:47:1f:3e:cd:
         04:28:ff:c0:32:2d:05:44:ca:0e:30:7c:a7:ee:48:e8:30:a7:
         04:d4:52:98:4a:6e:32:d9:b3:96:5e:2c:f6:ae:4d:8d:7f:fa:
         22:be:25:39:15:aa:5b:de:f3:30:41:6c:93:52:bd:d4:9c:e6:
         7c:ee:d4:63:22:d4:af:56:c2:bb:32:f6:7a:3d:76:1e:3f:10:
         70:3e:82:49:f0:fc:88:94:4d:c4:7f:1b:be:f3:4f:51:cf:c7:
         02:87:fb:78:ec:6f:a7:1f:77:57:08:42:24:aa:bb:75:6e:00:
         cb:95:b9:ce:4f:53:fc:db:fa:2f:bc:d7:d4:53:2b:b4:62:5f:
         23:04:68:3a:fa:e8:a7:d9:0a:e6:46:7b:c1:5f:ba:24:0e:1d:
         a8:47:0a:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/llCVwX+pLIXCtuvGw18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MjcyYWMwNDIzZmIwOTc1ODNjNjg3MjU2N2Q4NGNhZTQx
MGM4OWIwHhcNMjQwNjE1MTMwMjUxWhcNMjQwNjE2MTMwMjUxWjAzMTEwLwYDVQQD
Eyg3NjJiYzJiNjEwNzNjOTQyMTUxNTE1ZDcyNWYyNDA2MTVlMzM0MWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSAinjgR2oZK5j2mUlkgQfnTf5Ez
s2un+hyFgEMuDbbjLWVcnHDYeaSS0KIU4LozdACtpEZy31f6sDER01kxosbQfjFn
AGxb8dPWT1Gn2vv9YOqSAKeC4Y/CSoInIUPZ8VynOAGO/j1l2Clnn9tAqMMbh79H
RHcnhsdYGX/8bmTF96BK2wXJHOkPze9s2DqZXtJzrZbWy39wC0c8yMVFb0HlYdIX
z7vXU2RRdEiYQSWlImeb8erMOhyoi/+4zYdICsZ7rAJrCo3IqWcdrbzqkPeE/iEw
+Gppsxxvi0cbTWjTJ4oxNG+gb+5C/+GAEPLttyObqkd/VCms71sjG6PJ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYrwrYQc8lCFRUV1yXyQGFeM0GrMB8GA1UdIwQY
MBaAFPQnKsBCP7CXWDxoclZ9hMrkEMibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83ZjJjZjItNDI5NC00M2Q2LWEzMjEt
NDdlZGRkZTJhMzcyLzEvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83ZjJjZjItNDI5NC00M2Q2LWEzMjEtNDdlZGRkZTJhMzcy
LzEvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWST7ZwZ
wWHLOgWg/qaK3iEBIDye0YLO001jw30FThUFWkxplgfsLBmszoE032L+SxeWkaJV
qjL29KKlGAm0Z77Bq69csWNe5ue4K/mTXOdECzcQXA7yvGTRQEkJ/rPrjhEywoQB
WLdHHz7NBCj/wDItBUTKDjB8p+5I6DCnBNRSmEpuMtmzll4s9q5NjX/6Ir4lORWq
W97zMEFsk1K91JzmfO7UYyLUr1bCuzL2ej12Hj8QcD6CSfD8iJRNxH8bvvNPUc/H
Aof7eOxvpx93VwhCJKq7dW4Ay5W5zk9T/Nv6L7zX1FMrtGJfIwRoOvrop9kK5kZ7
wV+6JA4dqEcKug==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:43:05 2024 by rpki-client on console-fra.rpki-client.org