Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File:                     1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier:          38jQQxKppFws6XblIKyvCGdqV3mR3CsWjRLSJiUBNps=
Subject key identifier:   8D:60:AA:1E:12:C3:1C:B1:E1:4D:C4:2E:6B:12:05:A5:4D:55:A4:BA
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer:       /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial:       01901F34565C7E84F6C5D967056CC2C2EAE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number:          F1
Signing time:             Sun 16 Jun 2024 04:00:41 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:41 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:41 +0000
Files and hashes:         1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: 3+3ee4h8p489b/fCUX3uYauWzbZanJya3/lPPHGiFg4=)
                          2: 4y7L4loJxAmG7Lrc8oUUJEYU1kE.roa (hash: nmSmjd9yEwlo2QtPhNbJ1Iif9VdMzZuHLKo598Gw7HM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:56:5c:7e:84:f6:c5:d9:67:05:6c:c2:c2:ea:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
        Validity
            Not Before: Jun 16 04:00:41 2024 GMT
            Not After : Jun 17 04:00:41 2024 GMT
        Subject: CN=8d60aa1e12c31cb1e14dc42e6b1205a54d55a4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:81:5b:06:88:3e:6d:d1:ea:ad:62:85:a7:be:
                    10:7d:7a:90:f1:4b:56:31:a7:aa:db:2e:52:72:b4:
                    a3:6d:2d:ca:b3:e8:6a:6c:fd:a5:a5:94:eb:80:98:
                    51:d2:34:32:05:fd:39:36:e7:7d:5b:6b:ad:48:21:
                    48:f4:e1:b3:61:73:f1:e0:84:c4:14:fa:e5:e7:e6:
                    9a:1e:62:89:7f:4c:2a:07:07:0f:07:4d:2d:d4:c0:
                    ce:60:8c:05:09:01:0b:35:d0:c7:ea:45:d3:dd:a9:
                    09:77:f0:13:13:c3:fa:e8:4f:18:06:ea:e9:81:aa:
                    5a:1c:7d:51:f7:f9:31:db:7a:1a:57:ba:95:a3:7d:
                    55:52:0a:79:88:dd:d3:57:ef:df:30:17:26:ce:46:
                    7d:15:c0:fb:6c:1a:69:9c:b7:72:33:6a:63:61:dd:
                    2c:41:38:16:a3:fb:4b:cc:96:f3:e2:cf:35:f0:99:
                    e9:fc:29:bd:f3:b5:08:7b:6e:bd:7b:9b:03:13:1e:
                    b3:74:fe:69:e4:02:15:bd:09:67:44:bc:db:51:5f:
                    85:23:80:9a:3d:ee:0e:27:34:47:e6:fd:c9:80:67:
                    ff:2c:c1:bd:27:fa:5a:dc:51:8d:4e:6e:da:68:d6:
                    e4:6c:bb:08:41:24:30:2b:b1:47:57:65:22:2c:c6:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:60:AA:1E:12:C3:1C:B1:E1:4D:C4:2E:6B:12:05:A5:4D:55:A4:BA
            X509v3 Authority Key Identifier:
                keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:5d:88:11:b9:65:49:10:95:8d:f0:30:bc:69:80:01:d0:a5:
         f6:9f:f6:38:57:4b:eb:ce:77:f4:9f:97:27:07:4f:37:08:c7:
         f2:37:46:c3:f3:63:f8:42:d2:61:4d:18:61:e3:21:ef:8b:41:
         da:49:2b:60:3d:34:b7:4a:20:e2:0e:63:13:9c:21:54:8e:7f:
         c4:95:90:be:a6:42:23:79:71:9a:f9:54:70:0f:f9:02:22:ec:
         5f:e0:38:00:f0:81:b1:af:ed:1d:31:c9:87:1f:c3:56:26:68:
         a4:d7:f5:39:f6:37:e0:21:19:5c:e7:76:eb:75:23:37:8b:7f:
         f9:8b:f1:f4:01:c1:fe:a2:f3:84:d7:5c:a8:21:4a:77:7c:f8:
         91:1a:80:11:e9:e6:3d:02:93:e6:88:af:1b:3b:58:d7:d9:99:
         3e:87:84:b4:40:13:86:f4:02:43:9c:56:0f:8d:19:98:bf:5c:
         13:07:84:6c:27:4c:26:ab:33:70:b4:fc:e0:ff:d8:78:13:93:
         05:c5:02:83:c6:23:41:fc:2c:b9:1f:18:15:d3:6f:d9:72:e7:
         e5:15:52:5e:39:26:8d:1f:cb:c5:98:e6:17:07:df:c4:e5:d3:
         db:82:60:a3:67:12:96:a6:52:95:f2:5f:c0:65:49:e2:d5:ca:
         89:f7:04:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfNFZcfoT2xdlnBWzCwurkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YWE5YzExNjU3ZDhhMmE1NGNlNjcyODE0YjZiZGI5Nzk2
MTg4MzAwHhcNMjQwNjE2MDQwMDQxWhcNMjQwNjE3MDQwMDQxWjAzMTEwLwYDVQQD
Eyg4ZDYwYWExZTEyYzMxY2IxZTE0ZGM0MmU2YjEyMDVhNTRkNTVhNGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYFbBog+bdHqrWKFp74QfXqQ8UtW
Maeq2y5ScrSjbS3Ks+hqbP2lpZTrgJhR0jQyBf05Nud9W2utSCFI9OGzYXPx4ITE
FPrl5+aaHmKJf0wqBwcPB00t1MDOYIwFCQELNdDH6kXT3akJd/ATE8P66E8YBurp
gapaHH1R9/kx23oaV7qVo31VUgp5iN3TV+/fMBcmzkZ9FcD7bBppnLdyM2pjYd0s
QTgWo/tLzJbz4s818Jnp/Cm987UIe269e5sDEx6zdP5p5AIVvQlnRLzbUV+FI4Ca
Pe4OJzRH5v3JgGf/LMG9J/pa3FGNTm7aaNbkbLsIQSQwK7FHV2UiLMbqAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1gqh4Swxyx4U3ELmsSBaVNVaS6MB8GA1UdIwQY
MBaAFNWqnBFlfYoqVM5nKBS2vbl5YYgwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYt
Y2Y5OWQ1ZTI1N2U5LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYtY2Y5OWQ1ZTI1N2U5
LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFl2IEbll
SRCVjfAwvGmAAdCl9p/2OFdL68539J+XJwdPNwjH8jdGw/Nj+ELSYU0YYeMh74tB
2kkrYD00t0og4g5jE5whVI5/xJWQvqZCI3lxmvlUcA/5AiLsX+A4APCBsa/tHTHJ
hx/DViZopNf1OfY34CEZXOd263UjN4t/+Yvx9AHB/qLzhNdcqCFKd3z4kRqAEenm
PQKT5oivGztY19mZPoeEtEAThvQCQ5xWD40ZmL9cEweEbCdMJqszcLT84P/YeBOT
BcUCg8YjQfwsuR8YFdNv2XLn5RVSXjkmjR/LxZjmFwffxOXT24Jgo2cSlqZSlfJf
wGVJ4tXKifcEyQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:14 2024 by rpki-client on console-fra.rpki-client.org