Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File:                     qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier:          SwHxMmpoCCiw0N5mjeMEcG968fEx89wEQcxiekmnnvc=
Subject key identifier:   93:9D:72:58:0F:74:43:96:53:3D:CD:DA:83:B0:69:93:2F:97:99:FC
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer:       /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial:       0190429E97E0A7415BB16D738EE3DE583D75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 01:03:28 +0000
Manifest this update:     Sun 23 Jun 2024 01:03:28 +0000
Manifest next update:     Mon 24 Jun 2024 01:03:28 +0000
Files and hashes:         1: ScccwXon05t59yBDYOkj_6pSBzo.roa (hash: 9L40E9vJNuaMsmt05Rbbr1j90sCXRETKEjensRsXvSM=)
                          2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: mWivXUWaQi/j8/EW2gkT3mSiAN3kI6BvF42KTM9cA7g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:42:9e:97:e0:a7:41:5b:b1:6d:73:8e:e3:de:58:3d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
        Validity
            Not Before: Jun 23 01:03:28 2024 GMT
            Not After : Jun 24 01:03:28 2024 GMT
        Subject: CN=939d72580f744396533dcdda83b069932f9799fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a0:00:44:e5:83:f2:cf:d6:04:4a:7a:48:13:
                    18:74:18:d8:96:b0:29:ab:ee:53:00:cb:21:83:53:
                    cc:fd:46:be:c8:c8:f4:3a:c8:87:f5:ac:c6:5e:e9:
                    42:cb:f5:83:3f:80:b6:ba:f6:61:19:2e:43:c9:1f:
                    3b:a1:d9:43:54:ca:52:18:78:10:da:4d:ff:b8:f8:
                    12:7c:67:78:3d:4e:f8:10:02:dc:1a:b8:fe:1e:7d:
                    af:69:15:8b:6f:a2:16:fa:e5:21:d9:93:8b:23:3c:
                    c0:43:f6:fc:17:c7:dd:26:ea:3c:72:7a:24:23:71:
                    5a:c7:b6:d1:ee:55:dd:d1:54:6a:6f:6b:04:79:88:
                    ec:08:2b:05:05:0c:33:67:bb:d7:6b:a8:8d:f0:f8:
                    32:93:c3:23:e8:7b:12:57:2d:48:55:60:ae:89:8a:
                    58:3d:f6:d5:fe:b0:ab:5e:10:1e:ed:49:5f:12:ef:
                    0a:e5:d8:94:01:0f:5d:99:5e:7e:f0:86:99:c4:db:
                    5b:98:70:de:f0:b9:88:b4:0c:dd:d2:6b:55:48:55:
                    f7:db:b9:0d:7f:44:c2:6f:08:55:36:11:90:dc:a8:
                    fa:5e:6d:14:12:30:0d:9d:de:14:39:c5:65:73:07:
                    80:01:ed:36:03:ec:9b:d6:ac:ae:fb:32:3d:4d:75:
                    60:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9D:72:58:0F:74:43:96:53:3D:CD:DA:83:B0:69:93:2F:97:99:FC
            X509v3 Authority Key Identifier:
                keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:36:41:31:3f:21:4e:4c:b4:ff:06:5a:14:71:49:d0:e6:75:
         51:ab:0d:d2:80:32:6c:ad:a9:d3:71:ad:08:bd:ea:90:4d:e2:
         1d:0d:cf:ed:6e:66:09:36:51:7c:ae:58:f6:31:b8:1a:7e:58:
         73:9b:f7:18:70:99:c4:3b:8d:d4:50:49:85:21:23:24:47:e3:
         f6:7d:03:ac:bd:6b:88:a4:69:0c:74:3c:49:5c:46:34:bb:fc:
         de:8a:45:67:bf:32:2c:60:96:10:e6:30:5d:63:22:d3:05:da:
         ac:fe:a5:5e:fb:fa:48:50:e8:43:8a:60:f7:b7:08:65:a1:80:
         70:23:b4:55:20:90:2f:b4:c5:d4:b9:22:33:fb:83:18:8d:17:
         ae:87:fa:9e:da:2a:f8:77:2e:82:e5:83:45:1a:f5:62:92:b8:
         a6:4e:f8:e8:53:c5:02:2e:a2:e7:4a:7c:3c:27:1b:48:59:12:
         04:d3:52:37:30:20:3e:4c:66:e3:b2:37:ce:a2:26:bf:69:12:
         24:c2:ff:a9:cf:c3:2e:c7:01:89:43:99:40:10:46:5c:78:24:
         be:c5:0e:46:ee:08:2a:8c:f1:33:2f:93:f1:45:05:e4:25:d3:
         a2:40:54:52:7b:b5:0d:a0:e3:cb:9c:92:ed:dc:25:72:77:8e:
         76:2c:15:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBCnpfgp0FbsW1zjuPeWD11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Yzc3ODQ0YWViNmFhYjU4YzQ2MDNjYTA4MmJkZDRhNzgw
NDc3OWYwHhcNMjQwNjIzMDEwMzI4WhcNMjQwNjI0MDEwMzI4WjAzMTEwLwYDVQQD
Eyg5MzlkNzI1ODBmNzQ0Mzk2NTMzZGNkZGE4M2IwNjk5MzJmOTc5OWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaAAROWD8s/WBEp6SBMYdBjYlrAp
q+5TAMshg1PM/Ua+yMj0OsiH9azGXulCy/WDP4C2uvZhGS5DyR87odlDVMpSGHgQ
2k3/uPgSfGd4PU74EALcGrj+Hn2vaRWLb6IW+uUh2ZOLIzzAQ/b8F8fdJuo8cnok
I3Fax7bR7lXd0VRqb2sEeYjsCCsFBQwzZ7vXa6iN8Pgyk8Mj6HsSVy1IVWCuiYpY
PfbV/rCrXhAe7UlfEu8K5diUAQ9dmV5+8IaZxNtbmHDe8LmItAzd0mtVSFX327kN
f0TCbwhVNhGQ3Kj6Xm0UEjANnd4UOcVlcweAAe02A+yb1qyu+zI9TXVgBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOdclgPdEOWUz3N2oOwaZMvl5n8MB8GA1UdIwQY
MBaAFKnHeESutqq1jEYDyggr3Up4BHefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgt
ZjI2MWZlNTE2OTUxLzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgtZjI2MWZlNTE2OTUx
LzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjZBMT8h
Tky0/wZaFHFJ0OZ1UasN0oAybK2p03GtCL3qkE3iHQ3P7W5mCTZRfK5Y9jG4Gn5Y
c5v3GHCZxDuN1FBJhSEjJEfj9n0DrL1riKRpDHQ8SVxGNLv83opFZ78yLGCWEOYw
XWMi0wXarP6lXvv6SFDoQ4pg97cIZaGAcCO0VSCQL7TF1LkiM/uDGI0Xrof6ntoq
+HcuguWDRRr1YpK4pk746FPFAi6i50p8PCcbSFkSBNNSNzAgPkxm47I3zqImv2kS
JML/qc/DLscBiUOZQBBGXHgkvsUORu4IKozxMy+T8UUF5CXTokBUUnu1DaDjy5yS
7dwlcneOdiwVgQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 03:08:21 2024 by rpki-client on console-fra.rpki-client.org