Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/827dcd-5695-41e6-bbfb-88e15fb19f74/1/RzErKAdMuN-tFVF4yiVL209ecRo.mft
File:                     RzErKAdMuN-tFVF4yiVL209ecRo.mft (raw, json)
Hash identifier:          0Hln8EphmXAPp923SOrmwkx/E0D8uDcilmKIP7cJpXI=
Subject key identifier:   41:2D:D2:7D:A6:D6:A8:65:60:E8:70:CC:1E:5F:3C:79:95:0E:4B:8A
Authority key identifier: 47:31:2B:28:07:4C:B8:DF:AD:15:51:78:CA:25:4B:DB:4F:5E:71:1A
Certificate issuer:       /CN=47312b28074cb8dfad155178ca254bdb4f5e711a
Certificate serial:       01901F34EF77DBF9DD44404710E35D5B8FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RzErKAdMuN-tFVF4yiVL209ecRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/827dcd-5695-41e6-bbfb-88e15fb19f74/1/RzErKAdMuN-tFVF4yiVL209ecRo.mft
Manifest number:          058F
Signing time:             Sun 16 Jun 2024 04:01:20 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:20 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:20 +0000
Files and hashes:         1: RzErKAdMuN-tFVF4yiVL209ecRo.crl (hash: JtuhghqrLPJGV8L4dc9Qcr2ZLfu6dsIifpW1e+GCMMc=)
                          2: _E2V2vz2AAs8KhmFZGJjH5lTfXE.roa (hash: 1d20XyUZKGmckyCYD4ACHe3usZoInjqMI+DMTqpGIOM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/827dcd-5695-41e6-bbfb-88e15fb19f74/1/RzErKAdMuN-tFVF4yiVL209ecRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/827dcd-5695-41e6-bbfb-88e15fb19f74/1/RzErKAdMuN-tFVF4yiVL209ecRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RzErKAdMuN-tFVF4yiVL209ecRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:ef:77:db:f9:dd:44:40:47:10:e3:5d:5b:8f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47312b28074cb8dfad155178ca254bdb4f5e711a
        Validity
            Not Before: Jun 16 04:01:20 2024 GMT
            Not After : Jun 17 04:01:20 2024 GMT
        Subject: CN=412dd27da6d6a86560e870cc1e5f3c79950e4b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:fe:f0:49:70:eb:3e:77:b8:f3:66:13:be:
                    3f:f4:a3:f1:c8:bd:ae:b7:ed:a0:25:09:c3:cb:ae:
                    a5:b3:1b:a7:c9:99:88:2c:5b:f7:9a:4e:92:90:06:
                    68:1b:c7:bf:06:f5:0a:0d:bc:dd:ea:30:65:a1:78:
                    0c:7d:01:30:85:78:41:e3:a7:74:46:33:7d:6e:e8:
                    76:1a:f5:2d:22:be:ed:a9:ed:53:5c:14:f0:5d:26:
                    23:14:80:6e:f2:47:be:db:fd:2b:76:0f:61:e4:bc:
                    7d:8d:b7:df:f0:98:04:87:4d:f9:05:3c:16:ee:5c:
                    61:47:73:6c:0f:e3:27:e8:e2:db:a2:55:84:90:08:
                    a4:0c:76:24:3c:6c:22:55:77:74:ba:cf:ef:4c:24:
                    f2:e4:f1:5e:16:a6:24:1d:5f:1f:8b:9a:b9:a0:28:
                    3f:50:bd:c3:1c:da:06:52:f0:3f:cf:ba:e8:18:93:
                    25:c0:ce:c4:b9:15:8a:b1:ce:8e:00:de:d0:52:9e:
                    bd:bd:68:ac:77:e5:1f:72:2d:f2:13:39:f4:78:82:
                    da:db:51:10:87:78:c7:29:1e:57:73:a6:87:8b:18:
                    b7:97:d6:23:22:16:9d:a4:be:69:86:af:fd:d0:a4:
                    6f:b8:ef:3e:16:77:9b:57:90:86:d8:74:1c:51:5a:
                    fe:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2D:D2:7D:A6:D6:A8:65:60:E8:70:CC:1E:5F:3C:79:95:0E:4B:8A
            X509v3 Authority Key Identifier:
                keyid:47:31:2B:28:07:4C:B8:DF:AD:15:51:78:CA:25:4B:DB:4F:5E:71:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzErKAdMuN-tFVF4yiVL209ecRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/827dcd-5695-41e6-bbfb-88e15fb19f74/1/RzErKAdMuN-tFVF4yiVL209ecRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/827dcd-5695-41e6-bbfb-88e15fb19f74/1/RzErKAdMuN-tFVF4yiVL209ecRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b9:a8:5c:2e:b7:b2:71:f8:da:27:8a:23:c3:66:90:21:e0:
         dd:c9:20:a6:ff:3c:5f:59:44:66:ff:e4:8f:e6:7e:dd:52:eb:
         b2:d3:5f:03:f6:03:f1:53:72:bb:ca:3e:9d:ba:d8:f7:58:1c:
         47:57:44:12:60:d3:b3:85:fe:63:78:dd:7e:de:a7:84:4b:0e:
         92:9f:fb:7b:94:76:75:07:99:d1:87:d2:ec:84:41:33:a3:97:
         6f:e3:87:4d:97:05:d3:21:b0:7d:d3:22:4d:9d:3a:b0:95:31:
         30:c8:fa:9e:da:40:a6:64:a7:6a:0d:51:86:af:f0:2a:b3:39:
         22:29:9b:df:fd:91:d0:47:4e:5a:c0:47:ea:f9:ba:65:2d:95:
         41:92:87:ad:68:30:5f:d6:c1:dd:39:20:1b:e5:ca:f4:d0:40:
         8a:7c:5b:7b:f9:db:e9:3c:88:34:0b:27:2a:49:04:d4:47:d9:
         fb:a5:93:e1:f4:3c:56:83:34:68:64:3a:a9:07:88:7a:35:63:
         f7:93:db:14:79:16:b8:2a:f0:3e:72:66:b1:e2:97:00:1e:08:
         61:65:bc:f2:7d:1a:cd:dd:8b:5c:19:1c:30:77:07:ea:0c:b1:
         b7:00:c9:4a:e0:c2:6a:f0:26:97:1b:0b:88:0a:7e:ba:13:a2:
         43:19:c8:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfNO932/ndREBHEONdW4/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzEyYjI4MDc0Y2I4ZGZhZDE1NTE3OGNhMjU0YmRiNGY1
ZTcxMWEwHhcNMjQwNjE2MDQwMTIwWhcNMjQwNjE3MDQwMTIwWjAzMTEwLwYDVQQD
Eyg0MTJkZDI3ZGE2ZDZhODY1NjBlODcwY2MxZTVmM2M3OTk1MGU0YjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Fv+8Elw6z53uPNmE74/9KPxyL2u
t+2gJQnDy66lsxunyZmILFv3mk6SkAZoG8e/BvUKDbzd6jBloXgMfQEwhXhB46d0
RjN9buh2GvUtIr7tqe1TXBTwXSYjFIBu8ke+2/0rdg9h5Lx9jbff8JgEh035BTwW
7lxhR3NsD+Mn6OLbolWEkAikDHYkPGwiVXd0us/vTCTy5PFeFqYkHV8fi5q5oCg/
UL3DHNoGUvA/z7roGJMlwM7EuRWKsc6OAN7QUp69vWisd+Ufci3yEzn0eILa21EQ
h3jHKR5Xc6aHixi3l9YjIhadpL5phq/90KRvuO8+FnebV5CG2HQcUVr+hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEt0n2m1qhlYOhwzB5fPHmVDkuKMB8GA1UdIwQY
MBaAFEcxKygHTLjfrRVReMolS9tPXnEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpFcktBZE11Ti10RlZGNHlpVkwyMDllY1JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84MjdkY2QtNTY5NS00MWU2LWJiZmIt
ODhlMTVmYjE5Zjc0LzEvUnpFcktBZE11Ti10RlZGNHlpVkwyMDllY1JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84MjdkY2QtNTY5NS00MWU2LWJiZmItODhlMTVmYjE5Zjc0
LzEvUnpFcktBZE11Ti10RlZGNHlpVkwyMDllY1JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7moXC63
snH42ieKI8NmkCHg3ckgpv88X1lEZv/kj+Z+3VLrstNfA/YD8VNyu8o+nbrY91gc
R1dEEmDTs4X+Y3jdft6nhEsOkp/7e5R2dQeZ0YfS7IRBM6OXb+OHTZcF0yGwfdMi
TZ06sJUxMMj6ntpApmSnag1Rhq/wKrM5Iimb3/2R0EdOWsBH6vm6ZS2VQZKHrWgw
X9bB3TkgG+XK9NBAinxbe/nb6TyINAsnKkkE1EfZ+6WT4fQ8VoM0aGQ6qQeIejVj
95PbFHkWuCrwPnJmseKXAB4IYWW88n0azd2LXBkcMHcH6gyxtwDJSuDCavAmlxsL
iAp+uhOiQxnI/Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:59 2024 by rpki-client on console-fra.rpki-client.org