Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File:                     pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier:          RrxHoa8v1PPysQ1xVjGtvpgniChqgvPq0kwh3duPyp0=
Subject key identifier:   70:8A:45:A9:C7:99:FC:DA:2F:D6:94:5D:76:E4:2D:3F:84:BB:E2:47
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer:       /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial:       01901BFD0451EC3A089C98657A23CBBDC3EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number:          11C9
Signing time:             Sat 15 Jun 2024 13:01:24 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:24 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:24 +0000
Files and hashes:         1: 71qVwY5qrT2g6VhQlQvQ9IM9q3M.roa (hash: cgcb1YkfkdFVKUOKqRnVLMVBegRHXaJV+lpw/pOFPoI=)
                          2: Xc77nOZFw1uoO06GdpYii_vECtY.roa (hash: tT3mpiy3vobBovPeVkyWYXW9iQfSLh0nCunNyn4d2/k=)
                          3: Z4VaaAH-F3FA138AMhi6Q04plKs.roa (hash: QbNMMh9KVkUyXd8R/Oo37DpQ3jqDM9A6owodc6GElgU=)
                          4: eqNkhdgnmT_BvDt83WNw8kQ2ChQ.roa (hash: sKT4Nmiap9wrcjN20JlEE1JUjVn9bjeZiBnDweI2NAk=)
                          5: o8z2KoUjtdC4F_awGgVFXhBaFCg.roa (hash: +kxGQWW2/rmrxU0wu+zxbfwJetpoXbBMLVa8EZ9FXIU=)
                          6: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: ulByI/oYduErXEaLsjNnxyfeM63M9QPJy3P/qSr3Clg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:04:51:ec:3a:08:9c:98:65:7a:23:cb:bd:c3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
        Validity
            Not Before: Jun 15 13:01:24 2024 GMT
            Not After : Jun 16 13:01:24 2024 GMT
        Subject: CN=708a45a9c799fcda2fd6945d76e42d3f84bbe247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:94:ff:56:be:74:c6:e1:cb:16:23:65:2b:d4:
                    05:94:f5:41:41:9b:bc:0b:51:36:64:ed:65:49:be:
                    c8:86:5c:1c:0e:37:e3:7f:a8:5c:33:89:44:04:fe:
                    ad:eb:83:2a:1e:33:60:11:1f:6b:0e:7c:f9:0a:c1:
                    9b:ff:da:56:c2:1a:ff:bb:1d:df:5c:b6:de:17:22:
                    bf:ca:c7:e2:17:9b:3b:ab:ec:23:ee:88:bf:0a:b7:
                    87:78:a3:24:d5:ec:a4:27:31:a2:c1:6f:05:18:56:
                    95:4c:04:0c:6e:e1:4b:ba:d1:e8:a5:bc:5b:4c:ce:
                    a2:1a:35:e6:01:33:fd:6f:99:6d:ef:3f:49:2b:6d:
                    d4:94:ff:0a:a5:fc:ea:82:19:19:54:66:c0:d0:09:
                    b8:d5:6e:a7:7f:ad:59:fa:e5:b1:aa:cf:c0:39:e1:
                    d5:5c:fe:7a:87:3f:af:3a:72:4b:47:ec:9a:21:7d:
                    96:f5:d9:af:ea:65:80:65:5d:a9:dc:9a:7e:d4:80:
                    f0:76:88:c0:1e:55:f4:83:0d:2a:43:88:fe:61:63:
                    b0:c3:30:d5:66:6d:57:b2:c4:dc:8b:43:00:2f:4a:
                    c6:69:30:9f:91:88:8d:35:55:90:ec:05:bb:da:e5:
                    fd:46:5d:ed:88:f1:2f:ce:50:93:c5:16:8d:a4:4a:
                    68:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8A:45:A9:C7:99:FC:DA:2F:D6:94:5D:76:E4:2D:3F:84:BB:E2:47
            X509v3 Authority Key Identifier:
                keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f6:11:6e:73:5c:d5:c8:5b:f2:d5:7a:f7:c8:b9:6e:68:7f:
         3d:d1:cf:de:9f:87:be:ed:e0:7b:8b:56:9f:6d:53:9a:d1:a6:
         54:42:b5:c2:db:8e:d4:6a:ab:32:a9:cf:e0:ac:22:d1:55:ec:
         4b:ed:86:19:5d:c9:e6:1e:e6:5f:c5:57:f9:bd:5c:51:53:ff:
         7b:fe:21:64:36:bc:61:f4:9b:cf:07:be:87:c6:27:9c:6c:3c:
         61:7c:f8:34:67:48:44:47:e9:1e:da:b4:82:a5:3a:ae:7b:4d:
         bf:7a:17:7d:0e:52:d9:1c:28:7d:c3:ed:d2:3b:6a:c8:20:2b:
         70:d9:6b:0f:8d:f9:b8:a2:22:fa:53:3e:58:dc:b7:a9:00:10:
         0f:6b:30:3b:0f:5f:f5:6d:86:bf:b0:be:32:04:fb:85:b6:97:
         1e:67:3a:96:a5:0b:9b:b6:a5:99:05:78:e6:4e:2d:68:10:21:
         db:a4:1b:51:31:37:a5:d5:77:99:9d:f1:82:96:aa:a9:23:dc:
         b7:56:bf:1d:64:a3:5d:d5:85:d8:00:4c:03:4d:df:dc:9c:8f:
         06:38:e3:33:9f:56:15:e5:6c:39:b5:74:83:99:2c:4f:b0:9a:
         75:ac:a7:00:2c:82:c2:8f:d1:90:4a:81:42:43:ed:37:4c:6c:
         55:34:70:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/QRR7DoInJhleiPLvcPvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTk5MDNkYWI4NWY2YTU5NzcyYjNlZGZkNGJmMGU0OTFh
ZjU3YzQwHhcNMjQwNjE1MTMwMTI0WhcNMjQwNjE2MTMwMTI0WjAzMTEwLwYDVQQD
Eyg3MDhhNDVhOWM3OTlmY2RhMmZkNjk0NWQ3NmU0MmQzZjg0YmJlMjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5T/Vr50xuHLFiNlK9QFlPVBQZu8
C1E2ZO1lSb7IhlwcDjfjf6hcM4lEBP6t64MqHjNgER9rDnz5CsGb/9pWwhr/ux3f
XLbeFyK/ysfiF5s7q+wj7oi/CreHeKMk1eykJzGiwW8FGFaVTAQMbuFLutHopbxb
TM6iGjXmATP9b5lt7z9JK23UlP8KpfzqghkZVGbA0Am41W6nf61Z+uWxqs/AOeHV
XP56hz+vOnJLR+yaIX2W9dmv6mWAZV2p3Jp+1IDwdojAHlX0gw0qQ4j+YWOwwzDV
Zm1XssTci0MAL0rGaTCfkYiNNVWQ7AW72uX9Rl3tiPEvzlCTxRaNpEpo/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCKRanHmfzaL9aUXXbkLT+Eu+JHMB8GA1UdIwQY
MBaAFKSZkD2rhfall3Kz7f1L8OSRr1fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQt
NTdlYzEyZTg2NDFlLzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQtNTdlYzEyZTg2NDFl
LzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/YRbnNc
1chb8tV698i5bmh/PdHP3p+Hvu3ge4tWn21TmtGmVEK1wtuO1GqrMqnP4Kwi0VXs
S+2GGV3J5h7mX8VX+b1cUVP/e/4hZDa8YfSbzwe+h8YnnGw8YXz4NGdIREfpHtq0
gqU6rntNv3oXfQ5S2RwofcPt0jtqyCArcNlrD435uKIi+lM+WNy3qQAQD2swOw9f
9W2Gv7C+MgT7hbaXHmc6lqULm7almQV45k4taBAh26QbUTE3pdV3mZ3xgpaqqSPc
t1a/HWSjXdWF2ABMA03f3JyPBjjjM59WFeVsObV0g5ksT7CadaynACyCwo/RkEqB
QkPtN0xsVTRwcQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:27:56 2024 by rpki-client on console-ams.rpki-client.org