Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File:                     F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier:          zChf7AgMYdS9HdhnpVVcU80Zcm+vTL96zKzyn3w+3vA=
Subject key identifier:   6B:89:02:A6:0E:42:B1:DF:50:A6:F5:E7:CB:2D:F5:1B:68:07:AB:A5
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer:       /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial:       01901CA178A3037C04959C1CC9D2E0807DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number:          0BBF
Signing time:             Sat 15 Jun 2024 16:01:02 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:02 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:02 +0000
Files and hashes:         1: 1-OurgVfTD7pKsf0V3bEdJdKxNGA.roa (hash: +Dy1+BOIoNFH7Xx9tQ2F8405tMUbLJARnihqd0dDWUM=)
                          2: 9aZEA4Nk8EErOYwavy5TNiAwQvA.roa (hash: yJxRteR9hjsDYywi96aJDl8Kp+eWsAq2bp4QRouucu8=)
                          3: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: NUHWEm09c1shN1KI2ei7c2x9Z1ZjMxqaZHkU1aX+Wxs=)
                          4: HMsvAiDbh4kC8ggLmj0y0DoXO64.roa (hash: uUoaPJoC7VBtn0vdccXfZO2Ub/4VCgEVJ/mOlyL3+eQ=)
                          5: V2WDoJrybND7YYaECxFZWDEVUeM.roa (hash: nCs9N0q2Y1C5KQ1y/Yrni6QZ9aXf5Ic7+h/NE8hDkkI=)
                          6: oGJuP4zp5ogFb1jyT-5hnlbtvL8.roa (hash: +Gwd5RiAAvYH6AdT/RTYhy5dHSs4DEN9n3c+3E9LSnc=)
                          7: zieeDPMx67M4B1oTpLp9uppB96A.roa (hash: VEgsodan6jU1YOD90HIWgyzWcvKA+O6c+nNwgk/OuDs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:78:a3:03:7c:04:95:9c:1c:c9:d2:e0:80:7d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
        Validity
            Not Before: Jun 15 16:01:02 2024 GMT
            Not After : Jun 16 16:01:02 2024 GMT
        Subject: CN=6b8902a60e42b1df50a6f5e7cb2df51b6807aba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:ca:d6:64:86:bd:3f:d0:6d:1b:ad:e4:36:
                    25:97:81:e1:9c:e4:c8:ef:79:57:96:90:a1:fb:6f:
                    f1:31:6a:a1:3c:f4:06:c6:fe:5e:b9:d8:44:61:e3:
                    ac:1a:69:01:e8:bb:b4:67:86:57:69:45:be:86:a1:
                    38:be:4f:9f:8c:5e:44:65:9e:ec:df:75:be:95:2d:
                    2e:b9:0f:f4:e2:92:0d:ed:da:cc:81:e2:5a:a7:95:
                    e6:bc:d0:2c:bd:08:b0:50:1f:cf:ba:d6:0f:b4:d3:
                    c4:ac:8d:73:f6:0b:f0:9a:bf:1c:fd:78:8b:b3:cf:
                    08:57:0d:2a:64:09:f3:7d:c9:5a:87:47:67:5d:29:
                    1e:7d:c7:bb:87:7b:ed:99:ec:af:c5:00:06:63:f4:
                    6c:c3:de:00:3f:cf:2f:23:4d:38:5e:9e:d6:eb:7f:
                    f7:ad:ef:6a:33:94:91:a9:1b:54:e3:d3:5c:7e:d8:
                    ff:bf:1d:b5:13:90:83:2a:40:13:ea:24:3f:b9:f8:
                    6b:cc:3d:93:8b:17:55:b6:59:5c:77:47:cc:7a:98:
                    a2:b2:67:60:f5:5e:33:a9:14:3f:11:c4:e0:9d:33:
                    b6:cf:2b:31:8f:6e:50:f3:ca:ee:65:31:34:5b:ea:
                    cf:9e:89:cf:56:e0:c6:2d:d2:33:02:9b:99:fd:d8:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:89:02:A6:0E:42:B1:DF:50:A6:F5:E7:CB:2D:F5:1B:68:07:AB:A5
            X509v3 Authority Key Identifier:
                keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:72:e1:99:3a:45:87:a8:38:d4:15:95:5a:e9:53:59:84:21:
         54:ff:f0:f9:5f:92:80:51:60:97:98:e4:af:c7:7b:1d:6a:de:
         10:7c:97:45:27:20:0d:bd:f5:30:c3:ff:17:90:a5:33:17:7b:
         ae:06:ed:d4:34:5c:89:94:40:3b:e8:e7:7a:6e:83:1b:9c:22:
         31:b2:96:68:06:53:92:a8:47:68:12:f2:fe:c3:d5:3b:31:52:
         21:a7:20:f8:de:31:dc:0b:95:6b:94:e7:41:e4:d6:73:62:6e:
         4b:47:e7:a9:e0:4a:99:b2:d7:19:a4:c9:8d:54:5d:ee:8c:03:
         b8:b7:fb:d3:fd:2b:d6:39:77:01:ed:be:f6:9a:95:30:f6:e8:
         e5:61:c5:f8:68:ee:aa:24:22:fb:8a:24:3a:99:53:66:54:27:
         5d:5d:82:3a:3b:f8:e4:7d:7f:1d:0f:eb:7f:10:85:83:68:2a:
         a2:47:fc:15:c0:3b:ad:e1:29:be:30:13:8a:01:c7:62:55:08:
         d1:d6:68:c3:58:39:f8:9a:8a:4b:1c:2e:66:5f:c6:47:d1:ea:
         84:7f:eb:22:12:9a:04:be:75:79:b1:e0:c2:37:b3:ef:d6:c7:
         f3:5a:52:82:fa:69:14:27:dd:1a:92:93:da:c0:4d:0a:6f:49:
         b6:ea:9b:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcoXijA3wElZwcydLggH3RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTI2Y2NhYzRmOTA2NGUwNTg1NDliMzAxNzJjODQ0Mzk3
ODdmYmMwHhcNMjQwNjE1MTYwMTAyWhcNMjQwNjE2MTYwMTAyWjAzMTEwLwYDVQQD
Eyg2Yjg5MDJhNjBlNDJiMWRmNTBhNmY1ZTdjYjJkZjUxYjY4MDdhYmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy7K1mSGvT/QbRut5DYll4HhnOTI
73lXlpCh+2/xMWqhPPQGxv5eudhEYeOsGmkB6Lu0Z4ZXaUW+hqE4vk+fjF5EZZ7s
33W+lS0uuQ/04pIN7drMgeJap5XmvNAsvQiwUB/PutYPtNPErI1z9gvwmr8c/XiL
s88IVw0qZAnzfclah0dnXSkefce7h3vtmeyvxQAGY/Rsw94AP88vI004Xp7W63/3
re9qM5SRqRtU49Ncftj/vx21E5CDKkAT6iQ/ufhrzD2TixdVtllcd0fMepiismdg
9V4zqRQ/EcTgnTO2zysxj25Q88ruZTE0W+rPnonPVuDGLdIzApuZ/dgIpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuJAqYOQrHfUKb158st9RtoB6ulMB8GA1UdIwQY
MBaAFBdSbMrE+QZOBYVJswFyyEQ5eH+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYt
OTQxY2M2YTdiYWQ5LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYtOTQxY2M2YTdiYWQ5
LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHLhmTpF
h6g41BWVWulTWYQhVP/w+V+SgFFgl5jkr8d7HWreEHyXRScgDb31MMP/F5ClMxd7
rgbt1DRciZRAO+jnem6DG5wiMbKWaAZTkqhHaBLy/sPVOzFSIacg+N4x3AuVa5Tn
QeTWc2JuS0fnqeBKmbLXGaTJjVRd7owDuLf70/0r1jl3Ae2+9pqVMPbo5WHF+Gju
qiQi+4okOplTZlQnXV2COjv45H1/HQ/rfxCFg2gqokf8FcA7reEpvjATigHHYlUI
0dZow1g5+JqKSxwuZl/GR9HqhH/rIhKaBL51ebHgwjez79bH81pSgvppFCfdGpKT
2sBNCm9JtuqbYA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:29:04 2024 by rpki-client on console-ams.rpki-client.org