Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File:                     SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier:          /9s6GLFIAGADzX1eY8ATw/wGGiMkjlfbC1GtHgyPObA=
Subject key identifier:   33:6A:38:0A:34:18:F9:85:4D:8E:AC:B4:2C:9B:DF:EA:56:2F:F6:CD
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer:       /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial:       01901CD85D83D341AF3B06E0F3B1E8E111C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number:          0BB6
Signing time:             Sat 15 Jun 2024 17:01:00 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:00 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:00 +0000
Files and hashes:         1: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: OtvuiN6wRBbxTZBrOaJVGP5WFO8GH6UJO8oqRoWBcXc=)
                          2: Takwh2UUw4zKj4kR9VWKOZy0Uts.roa (hash: 9X3lNIMseAURT8n4kiHFuqssax4N2qy0qkkusRpu/RU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:5d:83:d3:41:af:3b:06:e0:f3:b1:e8:e1:11:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
        Validity
            Not Before: Jun 15 17:01:00 2024 GMT
            Not After : Jun 16 17:01:00 2024 GMT
        Subject: CN=336a380a3418f9854d8eacb42c9bdfea562ff6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:ca:84:cc:29:52:88:b3:9f:5d:09:4a:b4:
                    52:21:e7:48:6f:66:86:6b:c2:06:43:ac:a7:79:04:
                    bc:8b:2c:2f:33:b6:ea:48:f6:7b:2b:27:5c:fd:6e:
                    a7:cc:e7:c4:43:13:b8:21:54:91:f8:df:70:8a:06:
                    b4:10:90:61:c0:4d:f4:46:6d:1d:16:71:84:16:12:
                    fe:9e:79:bd:37:f5:c5:64:5c:67:5a:f6:a0:f6:29:
                    e4:1f:1d:ce:c2:fe:5d:df:d7:b7:69:ee:e1:a4:7e:
                    f7:d5:7c:39:fc:64:ab:da:47:be:c1:41:2d:d4:3c:
                    82:35:8f:26:8e:90:de:48:8b:35:62:92:7a:c8:4c:
                    3d:a7:df:20:35:3d:9c:61:21:a8:00:01:65:9f:89:
                    e0:fd:7a:26:dd:f8:a6:6f:6b:66:15:a3:b3:e7:ab:
                    c7:4b:c6:6e:b6:03:96:08:62:30:e5:1a:cd:a4:0b:
                    2f:38:2d:44:84:eb:f0:68:af:e9:45:2d:97:69:2b:
                    f5:6a:eb:08:a7:67:4a:3c:45:b5:1b:ed:92:b2:c2:
                    2a:ee:5d:3e:3c:8c:55:7a:5e:8c:36:c7:c4:63:66:
                    03:d1:f5:27:63:96:ce:2e:ce:2b:92:79:9e:e5:3b:
                    8e:90:a0:41:c5:cb:57:93:c6:2d:77:f9:b6:dd:9e:
                    b3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6A:38:0A:34:18:F9:85:4D:8E:AC:B4:2C:9B:DF:EA:56:2F:F6:CD
            X509v3 Authority Key Identifier:
                keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:5a:36:dd:be:13:48:2d:25:ac:d0:0b:18:e9:a4:ab:eb:ea:
         b7:c8:09:ba:ee:d9:96:42:bb:02:34:12:06:4c:8d:78:bf:f5:
         97:ea:87:0d:bf:f4:73:ec:a2:e1:1e:89:9d:bf:b5:52:34:21:
         3e:1c:b3:69:44:16:ff:d3:2c:2d:9a:b3:c6:af:d6:89:8f:cd:
         9e:c8:c8:1a:ae:cf:e6:80:44:27:a0:6f:e2:c2:8f:58:02:8f:
         3a:f9:d6:1f:5b:53:ec:a9:22:f7:bf:ae:3c:b3:49:9b:19:c9:
         63:8b:d6:21:a9:65:d7:a6:6a:db:78:e2:4d:e5:06:74:3a:6a:
         3a:97:d8:34:af:0d:ef:25:65:01:02:99:f9:d8:a7:41:42:a5:
         3c:44:2c:de:11:9c:bf:2f:d3:c4:ab:f4:36:ea:01:cb:75:c3:
         78:25:91:66:f7:e9:e6:ac:ec:1d:1a:52:1e:f6:20:a8:5f:ed:
         00:39:35:a9:35:94:e6:28:22:23:3d:00:1a:fa:f2:44:97:40:
         ff:2d:85:d7:54:dc:22:29:1d:c6:f1:3c:22:05:ac:42:48:fb:
         92:23:09:bc:b4:4b:46:d0:78:21:d6:b6:86:41:be:57:58:4d:
         09:0e:f9:d2:c5:87:11:be:bf:27:3a:ea:16:4a:a0:fa:ff:8e:
         36:9a:1f:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAc2F2D00GvOwbg87Ho4RHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NWY3NjI3NGM4MDVkMjViMTE1YTNhZGJhMWQyZWExNTRk
ZWVhZDcwHhcNMjQwNjE1MTcwMTAwWhcNMjQwNjE2MTcwMTAwWjAzMTEwLwYDVQQD
EygzMzZhMzgwYTM0MThmOTg1NGQ4ZWFjYjQyYzliZGZlYTU2MmZmNmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnnKhMwpUoizn10JSrRSIedIb2aG
a8IGQ6yneQS8iywvM7bqSPZ7Kydc/W6nzOfEQxO4IVSR+N9wiga0EJBhwE30Rm0d
FnGEFhL+nnm9N/XFZFxnWvag9inkHx3Owv5d39e3ae7hpH731Xw5/GSr2ke+wUEt
1DyCNY8mjpDeSIs1YpJ6yEw9p98gNT2cYSGoAAFln4ng/Xom3fimb2tmFaOz56vH
S8ZutgOWCGIw5RrNpAsvOC1EhOvwaK/pRS2XaSv1ausIp2dKPEW1G+2SssIq7l0+
PIxVel6MNsfEY2YD0fUnY5bOLs4rknme5TuOkKBBxctXk8Ytd/m23Z6z8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNqOAo0GPmFTY6stCyb3+pWL/bNMB8GA1UdIwQY
MBaAFEhfdidMgF0lsRWjrbodLqFU3urXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQt
NDNlYWY3NTY3Y2FhLzEvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQtNDNlYWY3NTY3Y2Fh
LzEvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy1o23b4T
SC0lrNALGOmkq+vqt8gJuu7ZlkK7AjQSBkyNeL/1l+qHDb/0c+yi4R6Jnb+1UjQh
PhyzaUQW/9MsLZqzxq/WiY/NnsjIGq7P5oBEJ6Bv4sKPWAKPOvnWH1tT7Kki97+u
PLNJmxnJY4vWIall16Zq23jiTeUGdDpqOpfYNK8N7yVlAQKZ+dinQUKlPEQs3hGc
vy/TxKv0NuoBy3XDeCWRZvfp5qzsHRpSHvYgqF/tADk1qTWU5igiIz0AGvryRJdA
/y2F11TcIikdxvE8IgWsQkj7kiMJvLRLRtB4Ida2hkG+V1hNCQ750sWHEb6/Jzrq
Fkqg+v+ONpofNA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:23:29 2024 by rpki-client on console-ams.rpki-client.org