Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
File:                     ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json)
Hash identifier:          2uH/fGKMn5dHKWGjH1wbodUrgd91VygkZr9e//TcH8M=
Subject key identifier:   F8:2D:86:2C:95:F2:D3:70:20:3C:F6:61:6D:82:7A:CC:6E:6C:F7:99
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Certificate issuer:       /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial:       01901DEB05A501696299BBF206A12776835D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:00:59 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:59 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:59 +0000
Files and hashes:         1: L-IgO97tvYvE3c4q3VeG1tWDinY.roa (hash: 9R+51sGm98JEPtR3FnReXmdDmvJTP4KhW9acEf+MH5s=)
                          2: TcxSRGXWMKMzQoQPacE2Vfjsr90.roa (hash: p9jam/5lKozVPpdV5K2BhVx1OU5ZxEwJ9sXfgxDJF10=)
                          3: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: NO/AFsYRwVNEj5kM8dRM3fXZe8CBj1VEgzql0E7qWtg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:05:a5:01:69:62:99:bb:f2:06:a1:27:76:83:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
        Validity
            Not Before: Jun 15 22:00:59 2024 GMT
            Not After : Jun 16 22:00:59 2024 GMT
        Subject: CN=f82d862c95f2d370203cf6616d827acc6e6cf799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2b:51:c3:c4:0e:e3:e6:b2:ab:dd:af:c9:1d:
                    c3:98:d2:ae:68:51:36:aa:c5:1f:15:a9:09:87:eb:
                    7f:1f:ef:ed:d0:94:31:76:a1:49:8d:d8:34:6f:b8:
                    fc:f9:44:4c:89:11:e5:76:6d:99:43:1d:df:57:66:
                    ee:35:b0:d5:33:c4:a4:95:e3:5b:31:24:80:b4:29:
                    12:7e:47:34:0c:2c:3c:cf:5f:e2:dd:67:e1:24:be:
                    42:0f:f1:ee:25:d2:b8:e0:51:f5:d9:f3:72:99:86:
                    be:4f:fe:e6:17:fc:59:d0:4b:fe:d2:b1:0d:bc:e3:
                    d8:14:ae:a8:e9:0c:59:d3:7f:58:9b:74:75:f7:96:
                    ee:56:a9:07:3c:36:2d:a3:8c:f5:f6:5d:fb:95:6f:
                    e5:aa:89:b3:42:51:14:cf:8b:2e:1d:f6:dc:e6:be:
                    55:fe:1b:e4:7b:1e:6f:ed:de:9e:c7:93:4a:75:1d:
                    6c:89:f7:29:5c:2e:e2:f5:68:8b:cc:14:41:d0:7e:
                    5a:4f:27:0b:a5:c1:af:17:59:9d:cd:27:93:22:2b:
                    5d:d4:8d:83:9f:a8:cb:c4:19:7f:43:a6:ec:72:dd:
                    d9:78:6e:67:6d:a9:d5:05:10:68:67:37:d2:3a:9c:
                    9a:94:c3:46:1d:70:96:e1:da:21:86:20:db:a8:bd:
                    41:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2D:86:2C:95:F2:D3:70:20:3C:F6:61:6D:82:7A:CC:6E:6C:F7:99
            X509v3 Authority Key Identifier:
                keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:22:15:64:50:f9:fd:c7:0b:55:7b:34:59:03:74:e7:7c:5e:
         9c:4c:a5:b7:2b:84:e3:e3:0e:15:bd:c8:e1:6a:bc:e6:2e:23:
         96:45:aa:8a:00:8c:e4:d5:fe:76:81:a6:c7:12:95:21:b5:45:
         2e:68:ea:7c:9c:e1:a1:b5:d6:2e:57:94:55:58:81:a9:d9:59:
         87:dd:38:0d:31:c8:b7:d1:f0:f0:6b:fa:93:5c:72:dd:4d:5a:
         6e:50:84:33:f1:ca:c4:1c:3f:8f:f5:05:1e:bf:dc:a8:f5:dc:
         b6:2e:ba:41:31:26:0e:45:c6:19:ad:00:8b:0f:48:23:1e:f5:
         c7:a7:64:fd:90:9d:83:b9:4f:92:25:0a:93:98:ad:89:df:a4:
         db:28:6c:72:2d:aa:25:60:0e:82:17:66:f4:a0:27:37:c9:05:
         e2:29:f9:04:65:07:2a:77:59:ea:91:cb:bd:c5:0b:e4:f4:0b:
         72:5e:00:3b:22:16:d5:da:e0:c2:8b:92:e3:5c:c4:6e:da:76:
         8c:03:96:99:d3:ba:26:b2:ac:33:ef:96:ba:3e:45:b9:5c:1f:
         22:82:0a:f2:70:df:bb:a8:ca:9e:4e:a8:a5:bc:d1:cc:b0:60:
         44:32:92:84:a8:c7:0a:5e:03:4e:de:98:f9:f6:60:d6:b7:49:
         f7:95:eb:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6wWlAWlimbvyBqEndoNdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ODI4OTBiN2VkMjMzNDc0NzhkNGQ2NWRiMDk0OGMzZGIy
M2ViZTcwHhcNMjQwNjE1MjIwMDU5WhcNMjQwNjE2MjIwMDU5WjAzMTEwLwYDVQQD
EyhmODJkODYyYzk1ZjJkMzcwMjAzY2Y2NjE2ZDgyN2FjYzZlNmNmNzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxytRw8QO4+ayq92vyR3DmNKuaFE2
qsUfFakJh+t/H+/t0JQxdqFJjdg0b7j8+URMiRHldm2ZQx3fV2buNbDVM8SkleNb
MSSAtCkSfkc0DCw8z1/i3WfhJL5CD/HuJdK44FH12fNymYa+T/7mF/xZ0Ev+0rEN
vOPYFK6o6QxZ039Ym3R195buVqkHPDYto4z19l37lW/lqomzQlEUz4suHfbc5r5V
/hvkex5v7d6ex5NKdR1sifcpXC7i9WiLzBRB0H5aTycLpcGvF1mdzSeTIitd1I2D
n6jLxBl/Q6bsct3ZeG5nbanVBRBoZzfSOpyalMNGHXCW4dohhiDbqL1BLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgthiyV8tNwIDz2YW2CesxubPeZMB8GA1UdIwQY
MBaAFGaCiQt+0jNHR41NZdsJSMPbI+vnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yYTk4MWQtNjdmNS00ODRlLWJlMWIt
ZmY2NGE5YmE1OTdjLzEvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yYTk4MWQtNjdmNS00ODRlLWJlMWItZmY2NGE5YmE1OTdj
LzEvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxSIVZFD5
/ccLVXs0WQN053xenEyltyuE4+MOFb3I4Wq85i4jlkWqigCM5NX+doGmxxKVIbVF
LmjqfJzhobXWLleUVViBqdlZh904DTHIt9Hw8Gv6k1xy3U1ablCEM/HKxBw/j/UF
Hr/cqPXcti66QTEmDkXGGa0Aiw9IIx71x6dk/ZCdg7lPkiUKk5itid+k2yhsci2q
JWAOghdm9KAnN8kF4in5BGUHKndZ6pHLvcUL5PQLcl4AOyIW1drgwouS41zEbtp2
jAOWmdO6JrKsM++Wuj5FuVwfIoIK8nDfu6jKnk6opbzRzLBgRDKShKjHCl4DTt6Y
+fZg1rdJ95XrHA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:53:10 2024 by rpki-client on console-fra.rpki-client.org