Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
File:                     CWmio5Y1t5dHbx8WM66PJ78ztTM.mft (raw, json)
Hash identifier:          HEQWeHmbUv4sDEzu41IEg0ETMIpd8XSCr6vR2Shiz9o=
Subject key identifier:   B4:9C:08:6B:E3:06:71:70:12:91:D1:89:06:5C:27:8C:EB:29:BA:42
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Certificate issuer:       /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial:       01901D0EF53B7F90829A1662DF7200C9484E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
Manifest number:          031C
Signing time:             Sat 15 Jun 2024 18:00:37 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:37 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:37 +0000
Files and hashes:         1: CWmio5Y1t5dHbx8WM66PJ78ztTM.crl (hash: iVrtQWi6jqpWVqlutnH2BcdWEMllO63lA2a7m+9D3aI=)
                          2: JLUDDsziZQSGMCnv0vCYdskVu9Q.roa (hash: 2Wv0xKOxaSE8fsyG3tC9A5p2+Wmoscj8sSMUZ41H9nE=)
                          3: PgGvShD4KcJY7UqIrCsI9n7mWJk.roa (hash: r9MRp9PsRXVgXPhxp0MgiHKljXGZLUzhqoFk+DZF9r0=)
                          4: uR5xcSFVdn58FRGfsyjKU_HRV_c.roa (hash: XPLYCprR9tADT692gjLy77Qp63H3y/dk9tYwL1o6M+c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0e:f5:3b:7f:90:82:9a:16:62:df:72:00:c9:48:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
        Validity
            Not Before: Jun 15 18:00:37 2024 GMT
            Not After : Jun 16 18:00:37 2024 GMT
        Subject: CN=b49c086be30671701291d189065c278ceb29ba42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0a:9f:7a:4f:77:6b:f3:1c:5e:90:c6:80:7c:
                    42:e3:4e:36:79:6f:a8:cf:57:ac:79:f5:37:49:1f:
                    61:cc:3b:cb:9b:ba:16:22:05:d4:23:2a:29:4a:76:
                    11:9d:22:c3:1d:22:39:51:20:3c:b5:bc:69:51:83:
                    32:72:56:3d:b9:f8:cc:be:3d:d7:cb:33:3b:c1:df:
                    35:cc:db:df:ef:27:fc:f2:17:8b:10:20:0e:f8:8e:
                    09:71:c0:75:ab:4f:16:c3:1e:0e:97:06:18:c4:ae:
                    59:34:42:fe:b2:ac:a1:d4:1f:26:e9:8e:d7:c8:ab:
                    74:fd:2c:2d:c9:54:2f:5b:b4:66:93:c3:99:5a:c5:
                    1f:73:f4:57:a1:01:2d:e5:63:59:dd:c5:ae:dc:78:
                    a4:8a:0f:6e:0a:b6:5d:d9:b4:ee:f4:c4:a7:52:ff:
                    02:65:28:74:ea:eb:83:9a:fa:33:b2:e1:62:8d:4c:
                    59:42:3a:60:35:6c:4f:11:28:97:7c:c0:48:fd:d3:
                    a3:7b:eb:f4:a9:b8:7b:52:4f:0d:7b:54:50:5a:28:
                    be:a8:0c:d1:22:17:11:35:c9:69:8b:64:9c:1e:43:
                    6c:69:13:93:f7:fb:a4:c9:65:78:23:71:2a:3b:a8:
                    d4:b4:11:9f:4a:9c:c1:e7:59:9f:45:a3:8d:8a:33:
                    7c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9C:08:6B:E3:06:71:70:12:91:D1:89:06:5C:27:8C:EB:29:BA:42
            X509v3 Authority Key Identifier:
                keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c9:ec:30:fa:68:3d:66:f0:7b:2e:5f:c8:8f:92:48:74:b5:
         f3:de:d3:7a:ad:f6:76:0d:d4:36:ae:ae:1f:50:4d:bc:1b:c1:
         85:2b:b4:0a:c0:1c:49:08:c6:79:f4:49:84:56:5f:33:31:4c:
         26:81:89:ff:bf:96:41:99:85:6c:4f:c3:29:51:3a:a3:96:67:
         c9:36:64:9d:53:ca:ac:e9:20:7f:bd:5a:03:c7:da:72:99:7d:
         a1:5a:3a:21:16:fc:93:ff:e6:55:ef:f6:36:96:fc:c4:63:74:
         ac:06:09:6d:49:ca:3b:be:3d:78:96:b0:54:08:b8:25:dd:fd:
         6c:7f:58:9d:7a:4b:d1:3e:54:be:de:34:c6:9c:62:90:6e:34:
         8f:f7:8d:07:59:7a:a1:f7:d1:96:7a:22:f1:c1:5d:64:e1:c1:
         ca:86:ef:37:cc:5f:c7:ab:0b:0d:63:cd:37:f3:85:6c:b0:30:
         42:0a:ec:11:fc:bf:eb:51:e1:99:00:ed:e2:08:e4:dd:ee:37:
         6d:b0:65:47:b8:f2:fe:35:8e:e9:32:80:9c:1e:ca:14:44:52:
         ce:48:2b:cc:a1:45:ab:22:74:df:7f:7b:05:d6:e8:f0:5d:5d:
         84:77:d5:a0:99:13:d1:57:d6:88:2c:31:85:0e:4f:3e:fb:fb:
         70:5f:ec:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdDvU7f5CCmhZi33IAyUhOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjlhMmEzOTYzNWI3OTc0NzZmMWYxNjMzYWU4ZjI3YmYz
M2I1MzMwHhcNMjQwNjE1MTgwMDM3WhcNMjQwNjE2MTgwMDM3WjAzMTEwLwYDVQQD
EyhiNDljMDg2YmUzMDY3MTcwMTI5MWQxODkwNjVjMjc4Y2ViMjliYTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugqfek93a/McXpDGgHxC4042eW+o
z1esefU3SR9hzDvLm7oWIgXUIyopSnYRnSLDHSI5USA8tbxpUYMyclY9ufjMvj3X
yzM7wd81zNvf7yf88heLECAO+I4JccB1q08Wwx4OlwYYxK5ZNEL+sqyh1B8m6Y7X
yKt0/SwtyVQvW7Rmk8OZWsUfc/RXoQEt5WNZ3cWu3Hikig9uCrZd2bTu9MSnUv8C
ZSh06uuDmvozsuFijUxZQjpgNWxPESiXfMBI/dOje+v0qbh7Uk8Ne1RQWii+qAzR
IhcRNclpi2ScHkNsaROT9/ukyWV4I3EqO6jUtBGfSpzB51mfRaONijN81QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLScCGvjBnFwEpHRiQZcJ4zrKbpCMB8GA1UdIwQY
MBaAFAlpoqOWNbeXR28fFjOujye/M7UzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUt
NDE0OTA4NzJmYzRlLzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUtNDE0OTA4NzJmYzRl
LzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMnsMPpo
PWbwey5fyI+SSHS1897Teq32dg3UNq6uH1BNvBvBhSu0CsAcSQjGefRJhFZfMzFM
JoGJ/7+WQZmFbE/DKVE6o5ZnyTZknVPKrOkgf71aA8facpl9oVo6IRb8k//mVe/2
Npb8xGN0rAYJbUnKO749eJawVAi4Jd39bH9YnXpL0T5Uvt40xpxikG40j/eNB1l6
offRlnoi8cFdZOHByobvN8xfx6sLDWPNN/OFbLAwQgrsEfy/61HhmQDt4gjk3e43
bbBlR7jy/jWO6TKAnB7KFERSzkgrzKFFqyJ03397Bdbo8F1dhHfVoJkT0VfWiCwx
hQ5PPvv7cF/sGg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:43:49 2024 by rpki-client on console-fra.rpki-client.org