Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File:                     zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier:          aLDu/JMMyyyX7L8DJuyXXzbXLFv0ScR2or8QqVe1do0=
Subject key identifier:   4F:D9:BC:D3:A2:8F:3A:AD:7B:7F:78:E0:29:3C:F4:13:83:64:B6:9C
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer:       /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial:       01901C6A44FE7947A57C3A957066F354D779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number:          016B
Signing time:             Sat 15 Jun 2024 15:00:44 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:44 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:44 +0000
Files and hashes:         1: 60OZGqbdIA3xp1MCKmT04tIbSUs.roa (hash: ZZWuWvA/QU/EBhEjocxiupa3ENX71OYDCFObvTFDqq0=)
                          2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: N5n5wWxqcDunlseICtTrwmXEhJdEVD3As40maDklH2A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:44:fe:79:47:a5:7c:3a:95:70:66:f3:54:d7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
        Validity
            Not Before: Jun 15 15:00:44 2024 GMT
            Not After : Jun 16 15:00:44 2024 GMT
        Subject: CN=4fd9bcd3a28f3aad7b7f78e0293cf4138364b69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:31:ca:ad:23:3d:2b:07:ae:b8:1d:de:d5:
                    15:ec:c5:f0:8a:3d:fd:e7:7c:ad:96:43:4b:08:cc:
                    62:25:45:ac:f3:da:c2:a9:ff:54:91:e8:f3:09:e1:
                    22:61:40:b4:ae:39:5e:1f:bb:64:c5:9b:0e:c7:0d:
                    8e:17:34:45:27:e1:7f:57:61:b0:a2:12:4e:ec:2d:
                    84:2a:3c:17:9e:43:15:a6:d1:a5:d5:b2:59:dd:e3:
                    a2:14:19:df:a9:03:76:dc:08:9e:2f:9f:d3:84:8c:
                    f6:8a:78:3d:cf:84:f0:bb:d9:86:b9:48:a8:f9:45:
                    43:bf:0e:3d:ac:36:7c:8e:01:fd:5d:aa:81:fb:d5:
                    7b:88:19:9c:8e:4c:f9:1a:ac:13:d1:ec:f9:63:06:
                    ad:63:7e:3f:df:42:45:d9:d7:2b:a8:87:2f:fc:6a:
                    c9:17:d0:e4:8e:ab:e2:f1:18:5c:11:d9:c4:aa:08:
                    ad:14:ae:67:09:a3:3b:e8:68:08:c0:b0:06:b5:9b:
                    4a:94:54:1f:3a:60:2e:a0:f4:c9:e0:fa:53:76:28:
                    5b:d9:2b:4e:b4:e2:88:61:ad:74:a7:52:be:db:78:
                    20:c2:38:5d:e4:6b:ec:35:2b:57:9d:16:8c:16:75:
                    a1:ae:0e:f2:76:3f:34:83:70:4d:93:75:6d:ef:11:
                    d2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D9:BC:D3:A2:8F:3A:AD:7B:7F:78:E0:29:3C:F4:13:83:64:B6:9C
            X509v3 Authority Key Identifier:
                keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:61:6f:76:4b:43:66:67:f0:71:f0:89:22:61:d1:84:a8:22:
         67:dc:fd:25:2e:c3:e4:d4:fb:8a:36:45:24:58:f7:98:f7:7c:
         63:6c:c0:b2:c3:55:6c:a0:bc:eb:d9:1b:08:cc:d2:37:fa:07:
         e6:05:da:32:06:ec:3a:3d:c1:81:93:9b:99:93:f6:8d:31:32:
         af:8b:96:1c:63:64:b4:5b:06:50:cf:39:6b:c0:f0:5b:61:b3:
         a4:45:02:dc:a1:d6:d3:a5:cb:16:18:58:b1:a1:91:ce:26:0c:
         a1:20:46:30:33:72:21:ba:a7:73:37:73:63:72:2f:99:20:7b:
         7e:d1:04:2f:a5:34:1c:bc:c1:6f:6a:64:73:44:c6:06:1b:a9:
         88:41:21:d6:6e:e8:78:90:b7:ed:93:3b:0b:b2:b7:3d:44:de:
         e5:ce:dd:9e:dd:ca:88:84:c5:82:cf:48:5f:85:7c:82:cb:4e:
         cc:77:aa:29:e0:d8:1c:65:be:03:4c:ed:b0:0f:4b:14:7a:64:
         6a:32:c2:07:e6:87:ef:9e:86:80:7f:56:28:a5:25:2b:8a:f7:
         4d:a4:f5:c4:d9:d7:90:23:6d:54:77:ee:8c:f5:fe:52:85:84:
         d1:ee:10:08:7a:40:ad:53:ae:da:05:1f:c8:c6:2e:74:3c:c9:
         99:7a:e8:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcakT+eUelfDqVcGbzVNd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkM2RiZDVmYzZmOTFiODA3YjdiYzRjZjZlNjQ2ZTM0NTg2
MmFmM2UwHhcNMjQwNjE1MTUwMDQ0WhcNMjQwNjE2MTUwMDQ0WjAzMTEwLwYDVQQD
Eyg0ZmQ5YmNkM2EyOGYzYWFkN2I3Zjc4ZTAyOTNjZjQxMzgzNjRiNjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNoxyq0jPSsHrrgd3tUV7MXwij39
53ytlkNLCMxiJUWs89rCqf9UkejzCeEiYUC0rjleH7tkxZsOxw2OFzRFJ+F/V2Gw
ohJO7C2EKjwXnkMVptGl1bJZ3eOiFBnfqQN23AieL5/ThIz2ing9z4Twu9mGuUio
+UVDvw49rDZ8jgH9XaqB+9V7iBmcjkz5GqwT0ez5YwatY34/30JF2dcrqIcv/GrJ
F9Dkjqvi8RhcEdnEqgitFK5nCaM76GgIwLAGtZtKlFQfOmAuoPTJ4PpTdihb2StO
tOKIYa10p1K+23ggwjhd5GvsNStXnRaMFnWhrg7ydj80g3BNk3Vt7xHSUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/ZvNOijzqte3944Ck89BODZLacMB8GA1UdIwQY
MBaAFM09vV/G+RuAe3vEz25kbjRYYq8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xNGI5MzMtN2UzNC00YTg3LWIyMTUt
OGNhYWQzZTMxYWRjLzEvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xNGI5MzMtN2UzNC00YTg3LWIyMTUtOGNhYWQzZTMxYWRj
LzEvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmFvdktD
ZmfwcfCJImHRhKgiZ9z9JS7D5NT7ijZFJFj3mPd8Y2zAssNVbKC869kbCMzSN/oH
5gXaMgbsOj3BgZObmZP2jTEyr4uWHGNktFsGUM85a8DwW2GzpEUC3KHW06XLFhhY
saGRziYMoSBGMDNyIbqnczdzY3IvmSB7ftEEL6U0HLzBb2pkc0TGBhupiEEh1m7o
eJC37ZM7C7K3PUTe5c7dnt3KiITFgs9IX4V8gstOzHeqKeDYHGW+A0ztsA9LFHpk
ajLCB+aH756GgH9WKKUlK4r3TaT1xNnXkCNtVHfujPX+UoWE0e4QCHpArVOu2gUf
yMYudDzJmXroGQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:45:56 2024 by rpki-client on console-fra.rpki-client.org