Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File:                     X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier:          TCrjQEk3SRNMnOhk2bU+bAaKuEk4iV5/8ORYE1UB0Lk=
Subject key identifier:   CA:0B:18:5F:81:F2:1B:FF:5A:79:77:C2:32:C4:FC:38:C6:5E:64:D8
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer:       /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial:       0190343BA8828F9B2E140229A329B97B41ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number:          11D5
Signing time:             Thu 20 Jun 2024 06:00:43 +0000
Manifest this update:     Thu 20 Jun 2024 06:00:43 +0000
Manifest next update:     Fri 21 Jun 2024 06:00:43 +0000
Files and hashes:         1: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: 4ZuL+0kkFiKWum+fFclVqFY2/9KlIQ9/xeyMtbr9Rdw=)
                          2: boYMDLX2wQ1bhDvDCF--n1I0bKE.roa (hash: td/2ln1z97zZBrK4bDb99ZFzQXjdkrBPtSGIOiLonk8=)
                          3: iIHLiBZX4PjbUzFvnKkA8sZbYk8.roa (hash: t4JjKVHzeixXmieDDrYpnCLksOYJ2dh0XKnw5x0oUxE=)
                          4: sYFt3rrUBuJk57Y3zAGFmZOltic.roa (hash: gQqoyQHjxZ3QpmMXCuD04vnCJWZx+pARGd3BNASn0U0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:34:3b:a8:82:8f:9b:2e:14:02:29:a3:29:b9:7b:41:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
        Validity
            Not Before: Jun 20 06:00:43 2024 GMT
            Not After : Jun 21 06:00:43 2024 GMT
        Subject: CN=ca0b185f81f21bff5a7977c232c4fc38c65e64d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:dc:ab:17:ab:8d:92:06:20:10:2a:d4:ba:
                    64:3f:36:33:fe:05:29:7a:8e:a5:19:2b:03:c2:2e:
                    d9:6f:9b:66:69:6a:32:f6:e5:db:81:f9:01:e4:5e:
                    25:a9:c0:b7:b6:ac:3f:e3:7f:6c:8a:d1:12:67:c9:
                    e3:62:bc:75:17:c2:4e:1d:17:46:88:93:2e:25:2e:
                    ec:8d:ea:9e:24:f7:a6:b4:3d:c9:03:a6:a8:77:c3:
                    87:0b:a8:bf:93:95:cd:f7:c3:72:de:db:ca:bc:bf:
                    eb:29:3b:0b:4e:0f:69:da:4f:67:e3:ae:3d:9c:67:
                    36:b9:a4:11:bd:09:5a:38:96:f5:1c:43:f7:ed:41:
                    92:ca:83:3d:41:8b:47:c0:c6:c0:d3:43:03:63:c2:
                    f8:06:61:50:bf:45:cd:84:73:b5:88:8c:4d:fa:13:
                    a8:6c:1b:df:52:c5:c6:4f:74:3e:01:8a:d6:81:d9:
                    01:0f:21:23:a2:80:a5:db:0b:b4:54:aa:63:2d:f4:
                    36:71:91:d0:38:a9:97:08:5e:28:9b:7f:fe:d0:42:
                    6a:4f:3a:6b:55:9a:96:f0:59:4a:6b:89:ad:94:a4:
                    6a:d2:55:4f:a7:a9:67:a2:ff:6d:d3:f6:99:15:7c:
                    67:6d:03:94:ac:61:06:a3:18:b0:72:27:0a:5b:c4:
                    48:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0B:18:5F:81:F2:1B:FF:5A:79:77:C2:32:C4:FC:38:C6:5E:64:D8
            X509v3 Authority Key Identifier:
                keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:fb:cd:20:a4:90:17:10:53:75:ff:20:47:56:80:96:5c:a2:
         a0:d3:d4:78:6c:6e:de:2f:5e:42:5d:16:e0:2a:ff:99:65:ef:
         c1:59:3f:00:d1:ce:97:c2:95:62:b5:e8:26:ed:24:d1:d9:a9:
         de:5b:24:cd:26:e0:0a:7d:19:a0:2d:b4:82:24:f1:d6:ad:f9:
         72:f4:e3:9d:d2:27:f7:62:58:71:ea:e0:e2:a5:c7:79:28:a9:
         de:7f:1c:f6:52:83:15:26:33:d8:60:e3:55:9f:6f:b0:cb:71:
         f2:8c:82:2f:1e:14:c9:00:0c:eb:8b:cc:91:9d:96:7c:f0:7e:
         a4:c3:99:13:76:d8:6f:53:d7:42:60:49:b1:5a:a6:a7:6e:2c:
         8c:11:df:40:e9:ce:6d:59:ca:4f:40:55:27:71:82:28:77:6f:
         29:f4:62:60:dd:4f:0c:b2:74:b9:b1:78:84:3c:69:f2:ae:d1:
         cb:74:fd:ef:32:27:c2:66:1b:70:c5:08:25:df:40:a4:e8:e3:
         0a:e4:b0:37:1f:fd:9d:80:fe:9f:fb:d2:6d:b7:b9:0a:12:a6:
         4d:e6:a8:77:90:25:e8:da:b0:07:5c:8b:a7:a0:00:e4:29:8c:
         a1:c0:3a:8d:db:2b:5a:b8:c5:c4:97:a8:a8:b8:22:78:d3:4e:
         43:82:4b:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA0O6iCj5suFAIpoym5e0HtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjczNTJkNDdkYjk3ODVmNDkxMTgwOTJkZTg3MDRhNjdm
NjUyMGQwHhcNMjQwNjIwMDYwMDQzWhcNMjQwNjIxMDYwMDQzWjAzMTEwLwYDVQQD
EyhjYTBiMTg1ZjgxZjIxYmZmNWE3OTc3YzIzMmM0ZmMzOGM2NWU2NGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJLcqxerjZIGIBAq1LpkPzYz/gUp
eo6lGSsDwi7Zb5tmaWoy9uXbgfkB5F4lqcC3tqw/439sitESZ8njYrx1F8JOHRdG
iJMuJS7sjeqeJPemtD3JA6aod8OHC6i/k5XN98Ny3tvKvL/rKTsLTg9p2k9n4649
nGc2uaQRvQlaOJb1HEP37UGSyoM9QYtHwMbA00MDY8L4BmFQv0XNhHO1iIxN+hOo
bBvfUsXGT3Q+AYrWgdkBDyEjooCl2wu0VKpjLfQ2cZHQOKmXCF4om3/+0EJqTzpr
VZqW8FlKa4mtlKRq0lVPp6lnov9t0/aZFXxnbQOUrGEGoxiwcicKW8RICQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoLGF+B8hv/Wnl3wjLE/DjGXmTYMB8GA1UdIwQY
MBaAFF/3NS1H25eF9JEYCS3ocEpn9lINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWQyYjMtN2M0Mi00Nzg1LTk1OTYt
NTE3NDgxZDBmODUwLzEvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kNWQyYjMtN2M0Mi00Nzg1LTk1OTYtNTE3NDgxZDBmODUw
LzEvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtfvNIKSQ
FxBTdf8gR1aAllyioNPUeGxu3i9eQl0W4Cr/mWXvwVk/ANHOl8KVYrXoJu0k0dmp
3lskzSbgCn0ZoC20giTx1q35cvTjndIn92JYcerg4qXHeSip3n8c9lKDFSYz2GDj
VZ9vsMtx8oyCLx4UyQAM64vMkZ2WfPB+pMOZE3bYb1PXQmBJsVqmp24sjBHfQOnO
bVnKT0BVJ3GCKHdvKfRiYN1PDLJ0ubF4hDxp8q7Ry3T97zInwmYbcMUIJd9ApOjj
CuSwNx/9nYD+n/vSbbe5ChKmTeaod5Al6NqwB1yLp6AA5CmMocA6jdsrWrjFxJeo
qLgieNNOQ4JLyA==
-----END CERTIFICATE-----
Generated at Thu Jun 20 10:33:33 2024 by rpki-client on console-ams.rpki-client.org