Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File:                     aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier:          xeBSqhUhDFp8AdH0cKbK9GAbjEdGtDPpbSzYgBY/9/M=
Subject key identifier:   D8:F0:53:DD:1E:7F:30:87:A9:6D:5E:7C:23:41:E6:0C:8A:E2:FF:EE
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer:       /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial:       01901F34556AA89A015D04DEA1A34B85506E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number:          11C4
Signing time:             Sun 16 Jun 2024 04:00:41 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:41 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:41 +0000
Files and hashes:         1: Bd_b6fzTAuU26a43knucH0iD3SQ.roa (hash: 1Re1OnU6xuN92nLJNDmybHEMJ9HGZeyIg0N+Y8kggDc=)
                          2: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: 6gmrHAmMyTXn3wRtE5ry4YDsaCLy58jioq5YJxdznK0=)
                          3: mCyNSgBEcbQmKwjiKRc7QpO9Jak.roa (hash: FoBUzYK+0XU/QS7JhPXxw1rJVOG+XUEC02jPuBFD8aA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:55:6a:a8:9a:01:5d:04:de:a1:a3:4b:85:50:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6954e90899ff25644520724cde8c211613600bef
        Validity
            Not Before: Jun 16 04:00:41 2024 GMT
            Not After : Jun 17 04:00:41 2024 GMT
        Subject: CN=d8f053dd1e7f3087a96d5e7c2341e60c8ae2ffee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:21:35:50:5e:12:c2:ec:86:08:86:3f:30:da:
                    6a:bd:3d:47:21:f7:bb:19:b0:4f:c5:82:c8:be:42:
                    bc:4f:0f:3d:61:9e:ad:10:aa:cc:c4:2a:1e:e5:99:
                    ba:dc:bc:63:f9:c4:79:2b:80:af:77:1b:ff:9a:1d:
                    fa:10:2f:d4:a4:64:ed:e3:f8:32:1c:d9:05:b5:59:
                    47:05:c6:96:63:c1:fe:b6:46:12:f1:57:52:73:1d:
                    45:cb:c1:20:00:f9:90:66:d1:42:53:23:bd:27:02:
                    fc:d8:62:e4:78:0c:fa:e0:04:06:ce:d5:92:86:c8:
                    09:b0:e0:17:26:86:cf:04:c4:7c:10:ea:65:3f:a1:
                    21:9e:2c:5e:9a:1c:7d:34:6a:4a:73:ab:a2:d5:fc:
                    88:c5:05:ff:89:d6:63:45:93:4c:ac:b5:3e:e2:39:
                    8d:73:d4:72:b5:93:3a:ac:e4:33:df:a1:57:10:32:
                    48:42:8a:99:99:70:3d:9e:da:b7:52:b8:cd:d1:0d:
                    4a:98:ce:8d:a7:ea:53:38:be:f5:3b:e5:e6:d2:58:
                    39:e5:dd:b6:74:f0:85:68:ce:bb:d3:f7:9b:b7:9e:
                    a0:a7:a5:20:06:9d:45:42:8f:bb:b2:ab:99:63:c0:
                    0d:40:04:18:58:2c:e0:2e:2a:47:5a:f0:89:c3:b5:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F0:53:DD:1E:7F:30:87:A9:6D:5E:7C:23:41:E6:0C:8A:E2:FF:EE
            X509v3 Authority Key Identifier:
                keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d7:dc:22:bd:5c:14:7c:f7:5c:a5:2c:50:84:96:d5:e0:94:
         e9:d3:38:71:fa:34:42:68:90:30:21:e2:a9:53:6c:14:e1:9a:
         b6:f1:77:02:0c:54:32:73:bc:5f:c5:f5:b5:e5:c2:d7:08:06:
         84:40:86:c5:35:78:d3:d8:42:83:a2:5a:86:f4:53:82:1b:f9:
         cd:42:d0:79:78:7f:0b:9a:bd:96:ba:02:88:9a:bd:d5:b6:e6:
         84:02:00:ad:4f:c1:f1:00:74:da:59:4b:fa:e0:54:00:31:15:
         6b:b4:cc:7e:ad:6e:5f:bc:ed:a2:30:b3:9d:1c:b0:3d:ea:f7:
         0d:11:31:d5:4c:67:53:9c:37:dc:3e:fb:5c:6d:15:15:1f:30:
         d0:21:33:30:7d:95:b9:2a:c9:8c:81:d0:56:53:fb:c9:70:14:
         83:a5:6e:50:d2:a8:ec:76:87:09:68:38:5c:69:74:ea:4a:55:
         c1:95:1b:91:cc:10:5e:a1:34:a6:c3:be:6e:a3:9e:d5:2a:a0:
         01:7f:e3:46:75:3f:ac:c2:ca:21:46:38:e3:f4:99:1f:a0:db:
         38:65:bc:1f:8e:fd:a0:50:ca:e0:56:0f:5f:7e:a6:28:53:d7:
         e4:9f:98:1a:88:8e:f7:d8:8c:2e:7e:56:5b:4d:27:66:cb:47:
         cc:d8:0f:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfNFVqqJoBXQTeoaNLhVBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTRlOTA4OTlmZjI1NjQ0NTIwNzI0Y2RlOGMyMTE2MTM2
MDBiZWYwHhcNMjQwNjE2MDQwMDQxWhcNMjQwNjE3MDQwMDQxWjAzMTEwLwYDVQQD
EyhkOGYwNTNkZDFlN2YzMDg3YTk2ZDVlN2MyMzQxZTYwYzhhZTJmZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySE1UF4SwuyGCIY/MNpqvT1HIfe7
GbBPxYLIvkK8Tw89YZ6tEKrMxCoe5Zm63Lxj+cR5K4Cvdxv/mh36EC/UpGTt4/gy
HNkFtVlHBcaWY8H+tkYS8VdScx1Fy8EgAPmQZtFCUyO9JwL82GLkeAz64AQGztWS
hsgJsOAXJobPBMR8EOplP6Ehnixemhx9NGpKc6ui1fyIxQX/idZjRZNMrLU+4jmN
c9RytZM6rOQz36FXEDJIQoqZmXA9ntq3UrjN0Q1KmM6Np+pTOL71O+Xm0lg55d22
dPCFaM670/ebt56gp6UgBp1FQo+7squZY8ANQAQYWCzgLipHWvCJw7UwyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjwU90efzCHqW1efCNB5gyK4v/uMB8GA1UdIwQY
MBaAFGlU6QiZ/yVkRSByTN6MIRYTYAvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xY2I5MTEtNWU3Zi00OWU4LWI0ZjAt
M2Y2ZWU3MDU5MTViLzEvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xY2I5MTEtNWU3Zi00OWU4LWI0ZjAtM2Y2ZWU3MDU5MTVi
LzEvYVZUcENKbl9KV1JGSUhKTTNvd2hGaE5nQy04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtfcIr1c
FHz3XKUsUISW1eCU6dM4cfo0QmiQMCHiqVNsFOGatvF3AgxUMnO8X8X1teXC1wgG
hECGxTV409hCg6JahvRTghv5zULQeXh/C5q9lroCiJq91bbmhAIArU/B8QB02llL
+uBUADEVa7TMfq1uX7ztojCznRywPer3DREx1UxnU5w33D77XG0VFR8w0CEzMH2V
uSrJjIHQVlP7yXAUg6VuUNKo7HaHCWg4XGl06kpVwZUbkcwQXqE0psO+bqOe1Sqg
AX/jRnU/rMLKIUY44/SZH6DbOGW8H479oFDK4FYPX36mKFPX5J+YGoiO99iMLn5W
W00nZstHzNgPkQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 06:30:30 2024 by rpki-client on console-ams.rpki-client.org