Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
File:                     XqFlPhd6opVUAIBcjHW9DWhYOvw.mft (raw, json)
Hash identifier:          NGicvi3KI0T4mQB+O327TMJYJ/kYEc6nO+eevAb+chM=
Subject key identifier:   EA:72:FB:CA:15:5E:19:FA:91:0D:1D:0E:D1:C6:F0:78:F8:AC:DC:99
Authority key identifier: 5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
Certificate issuer:       /CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Certificate serial:       01901DEC4C40BC1AEFBC031F770C02832CB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
Manifest number:          0655
Signing time:             Sat 15 Jun 2024 22:02:23 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:23 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:23 +0000
Files and hashes:         1: XqFlPhd6opVUAIBcjHW9DWhYOvw.crl (hash: FMn0qmmqaNxhzxNdFNXBz2plCd6DmYLmoPYw1xxxxqM=)
                          2: eNZA__1ccfG_o61unflPAZGa2T0.roa (hash: lKQXNSSDuxMFcLZQj7bXX+HSWrqr2tzAGDw78Dlynu4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:4c:40:bc:1a:ef:bc:03:1f:77:0c:02:83:2c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ea1653e177aa2955400805c8c75bd0d68583afc
        Validity
            Not Before: Jun 15 22:02:23 2024 GMT
            Not After : Jun 16 22:02:23 2024 GMT
        Subject: CN=ea72fbca155e19fa910d1d0ed1c6f078f8acdc99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:75:d6:27:5a:95:7b:d7:73:1b:43:fb:fd:
                    43:54:ab:5c:97:ab:ca:f1:c6:93:c5:d9:f7:86:f0:
                    1c:0e:1b:67:05:d4:28:7d:d8:09:9e:36:c0:14:b8:
                    4c:08:24:1a:b6:16:39:45:b8:c0:71:5e:6b:3b:80:
                    d2:4f:56:d4:78:5a:94:18:1c:d3:96:14:41:d2:e6:
                    6d:96:f2:26:65:c5:4f:98:0a:34:c0:00:a2:b8:3d:
                    c3:f4:ec:20:65:37:25:cb:52:33:75:76:7e:3e:38:
                    df:b5:27:02:78:70:c3:1f:4e:5a:18:be:2c:92:c4:
                    14:6a:82:f2:11:d1:40:a0:90:2b:37:8f:bc:10:97:
                    89:d0:b4:d1:a5:61:81:a9:75:c5:b0:d9:61:96:4d:
                    4b:50:85:69:0d:12:de:c2:05:1a:ac:5f:cd:7d:03:
                    72:8f:f1:3e:36:20:59:46:bf:17:f6:41:36:c0:10:
                    e8:b4:0e:02:b2:d7:54:ba:70:03:91:1c:e2:4a:e1:
                    11:5e:b6:36:46:45:59:6f:82:54:8e:41:28:b0:50:
                    3c:fd:16:16:59:e9:3a:60:79:e6:18:ed:ac:2a:ef:
                    6f:ea:d9:de:02:f0:44:44:65:5a:b9:4e:eb:fa:a2:
                    4b:ff:b8:ed:c0:6d:37:7a:0d:42:6c:d5:b8:6e:7e:
                    6d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:72:FB:CA:15:5E:19:FA:91:0D:1D:0E:D1:C6:F0:78:F8:AC:DC:99
            X509v3 Authority Key Identifier:
                keyid:5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f0:ad:11:73:33:e6:b8:c4:91:b5:35:73:c4:4b:3e:85:c1:
         e8:37:9b:fc:ba:54:a5:dd:86:e6:b1:a7:b4:ed:0d:d6:8f:78:
         99:31:85:50:21:f2:c9:ae:26:02:b5:17:26:68:fa:26:be:5c:
         65:9e:de:65:aa:a2:bc:10:04:b4:9f:61:45:56:bd:6b:51:a6:
         9f:5d:21:88:cc:d9:1f:ea:bc:ab:ca:d6:82:a7:95:ef:6f:ba:
         aa:9f:65:0b:82:57:3a:12:92:2a:31:30:17:1a:0d:a8:29:db:
         ca:14:c1:a8:d2:31:ca:1f:1b:ad:82:87:a5:da:49:9c:98:54:
         82:85:33:16:83:99:6c:a9:ff:21:b6:8f:3f:2b:44:a3:ee:70:
         c4:84:eb:83:0e:3c:18:81:fc:54:d4:57:05:09:17:87:6b:00:
         96:f7:e4:80:48:9e:5c:2f:71:e1:3d:c0:a4:d8:2b:be:1e:e8:
         11:4d:63:ae:7d:19:36:b6:7e:17:cd:e0:97:a1:66:7b:11:04:
         84:ce:a9:65:7f:19:5d:6f:15:00:3d:4b:e9:1b:70:be:2d:87:
         05:4b:39:2e:35:e7:ff:c1:23:e7:ec:f2:fc:8b:fd:a5:ca:6d:
         55:cd:a3:85:02:11:9a:f3:ef:15:38:4a:30:43:46:3c:87:c8:
         ca:bc:8c:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7ExAvBrvvAMfdwwCgyy5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYTE2NTNlMTc3YWEyOTU1NDAwODA1YzhjNzViZDBkNjg1
ODNhZmMwHhcNMjQwNjE1MjIwMjIzWhcNMjQwNjE2MjIwMjIzWjAzMTEwLwYDVQQD
EyhlYTcyZmJjYTE1NWUxOWZhOTEwZDFkMGVkMWM2ZjA3OGY4YWNkYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1t11idalXvXcxtD+/1DVKtcl6vK
8caTxdn3hvAcDhtnBdQofdgJnjbAFLhMCCQathY5RbjAcV5rO4DST1bUeFqUGBzT
lhRB0uZtlvImZcVPmAo0wACiuD3D9OwgZTcly1IzdXZ+PjjftScCeHDDH05aGL4s
ksQUaoLyEdFAoJArN4+8EJeJ0LTRpWGBqXXFsNlhlk1LUIVpDRLewgUarF/NfQNy
j/E+NiBZRr8X9kE2wBDotA4CstdUunADkRziSuERXrY2RkVZb4JUjkEosFA8/RYW
Wek6YHnmGO2sKu9v6tneAvBERGVauU7r+qJL/7jtwG03eg1CbNW4bn5tPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpy+8oVXhn6kQ0dDtHG8Hj4rNyZMB8GA1UdIwQY
MBaAFF6hZT4XeqKVVACAXIx1vQ1oWDr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHFGbFBoZDZvcFZVQUlCY2pIVzlEV2hZT3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hNGFmMTUtN2ZkZC00NWE0LWExNzIt
MWRmOGZhMjBmYTllLzEvWHFGbFBoZDZvcFZVQUlCY2pIVzlEV2hZT3Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hNGFmMTUtN2ZkZC00NWE0LWExNzItMWRmOGZhMjBmYTll
LzEvWHFGbFBoZDZvcFZVQUlCY2pIVzlEV2hZT3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/CtEXMz
5rjEkbU1c8RLPoXB6Deb/LpUpd2G5rGntO0N1o94mTGFUCHyya4mArUXJmj6Jr5c
ZZ7eZaqivBAEtJ9hRVa9a1Gmn10hiMzZH+q8q8rWgqeV72+6qp9lC4JXOhKSKjEw
FxoNqCnbyhTBqNIxyh8brYKHpdpJnJhUgoUzFoOZbKn/IbaPPytEo+5wxITrgw48
GIH8VNRXBQkXh2sAlvfkgEieXC9x4T3ApNgrvh7oEU1jrn0ZNrZ+F83gl6FmexEE
hM6pZX8ZXW8VAD1L6Rtwvi2HBUs5LjXn/8Ej5+zy/Iv9pcptVc2jhQIRmvPvFThK
MENGPIfIyryMYw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:47:43 2024 by rpki-client on console-ams.rpki-client.org