Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File:                     IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier:          CeaMddBM+XgEUkCgbA66cyMbr+18xNh+3LHIqwW/8hE=
Subject key identifier:   CE:A5:B5:3E:37:BD:8F:8F:FF:9E:0D:5B:D2:94:AD:C7:7F:5A:C2:8E
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer:       /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial:       01901F6B2F08E285B7794E1404204C6C4CE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number:          0D0E
Signing time:             Sun 16 Jun 2024 05:00:36 +0000
Manifest this update:     Sun 16 Jun 2024 05:00:36 +0000
Manifest next update:     Mon 17 Jun 2024 05:00:36 +0000
Files and hashes:         1: D23DtTg1wwxLMBvRq60vgafK0uI.roa (hash: yPKPMZee9UdAVTHy9yV687Wr40UPm7Pxr9dUGFjaLQA=)
                          2: Hj54pUApylrNHTcKfC9e0qpkNno.roa (hash: GCgaRCHe+ACHFKK/QFpR3uqOQIkNsDqCwzZrP5baRZI=)
                          3: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: XatjPQxG1bB+txGUTOcyummPAtTjBKpATNH99E7BbXQ=)
                          4: XKocDW4jSAFM_OqUOenHjsTKqls.roa (hash: Brmoq7TsgzCtSc9DwrUGO3JxRsXBRBzKdo5mR7DMQMQ=)
                          5: j6UOSc_ktXRVk5nAhgjmfllhkik.roa (hash: H4tS0PmN9Wws0UXcCN6xz1HWfFM5TmvSSR66VGgaVQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:6b:2f:08:e2:85:b7:79:4e:14:04:20:4c:6c:4c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
        Validity
            Not Before: Jun 16 05:00:36 2024 GMT
            Not After : Jun 17 05:00:36 2024 GMT
        Subject: CN=cea5b53e37bd8f8fff9e0d5bd294adc77f5ac28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f7:44:63:3f:98:f0:28:5b:b1:41:c8:1b:44:
                    fa:69:4a:6f:4d:e3:ba:e5:3d:c6:d1:8f:2a:10:e7:
                    2b:88:16:1f:21:e1:0c:e6:62:77:df:cd:18:62:34:
                    10:e6:16:92:90:eb:7a:48:64:ac:31:a4:72:ab:7d:
                    84:22:83:43:70:50:d4:c8:d8:fa:cd:e4:fc:bc:ea:
                    ab:f0:2c:97:97:89:d4:cd:52:a9:ca:77:cd:7f:63:
                    98:5f:7f:de:80:52:86:eb:fb:c2:a7:d9:23:53:7c:
                    e9:1c:e0:33:13:36:77:97:74:6e:74:71:1d:dd:45:
                    b2:72:45:1b:07:d7:60:be:0c:40:fb:b0:3c:e1:bc:
                    d3:c0:15:ec:4a:9e:19:ac:c5:1b:a1:ba:01:2b:9d:
                    db:ca:41:21:db:88:1b:51:28:f2:1d:33:1d:1b:b3:
                    8e:90:66:ab:19:47:19:6e:26:f7:9e:00:57:ab:93:
                    c6:b3:aa:56:ec:b2:f1:79:85:85:96:66:26:56:bc:
                    6c:91:25:f0:35:bb:e3:64:8d:bf:10:f3:88:f1:a3:
                    97:83:65:6b:2f:2c:7c:5b:38:86:07:d6:b2:11:6e:
                    6a:01:bc:21:25:83:f0:1d:09:98:a4:1e:d1:a3:65:
                    60:0d:7a:68:56:e4:04:18:b2:08:1b:c8:44:0f:89:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A5:B5:3E:37:BD:8F:8F:FF:9E:0D:5B:D2:94:AD:C7:7F:5A:C2:8E
            X509v3 Authority Key Identifier:
                keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f9:9b:02:9e:91:34:71:8e:e7:b8:7b:f3:3b:a1:14:9e:eb:
         48:1d:de:5c:38:02:7b:fb:fb:97:d6:42:e7:1b:35:e2:00:15:
         68:7f:59:20:12:54:d9:c8:82:96:17:b8:ac:3f:1f:50:65:d5:
         45:84:c1:aa:92:c2:13:d3:cf:f3:e2:12:b3:28:96:09:6d:87:
         eb:a8:c7:96:e4:12:54:76:97:01:38:8c:f1:db:ca:0c:ef:7a:
         fe:14:55:8e:1a:31:f0:34:bc:e1:69:32:b6:4e:53:db:9f:c3:
         6c:c6:d9:d2:e0:77:f4:fe:a4:ee:0f:5e:f6:24:d1:7b:9c:73:
         b2:48:36:68:58:ce:4f:11:4e:48:10:69:de:67:00:b0:fc:99:
         d4:3c:22:9e:fe:cd:41:fe:ed:2c:9f:83:97:1f:7a:bd:5b:35:
         c5:7c:b1:00:21:af:15:71:a2:dd:f2:52:4f:94:4c:f7:61:69:
         b5:e2:45:69:e2:62:fb:17:de:a5:d2:1b:c2:4d:44:98:b3:86:
         0c:7b:ab:55:5b:82:d6:3c:e9:b8:20:cb:fe:84:eb:10:75:81:
         a7:c0:07:65:ef:76:cf:d9:2d:cf:fe:e2:15:cd:a9:a4:f3:7d:
         a3:fb:0c:2d:64:26:82:1b:9e:30:1b:08:a0:eb:be:66:f5:a0:
         50:60:1c:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfay8I4oW3eU4UBCBMbEzpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxM2UxZDUwZDUyMjg4YmVlODBlZWE0MzU1NzcwMTg3MTI0
MDliYmUwHhcNMjQwNjE2MDUwMDM2WhcNMjQwNjE3MDUwMDM2WjAzMTEwLwYDVQQD
EyhjZWE1YjUzZTM3YmQ4ZjhmZmY5ZTBkNWJkMjk0YWRjNzdmNWFjMjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifdEYz+Y8ChbsUHIG0T6aUpvTeO6
5T3G0Y8qEOcriBYfIeEM5mJ3380YYjQQ5haSkOt6SGSsMaRyq32EIoNDcFDUyNj6
zeT8vOqr8CyXl4nUzVKpynfNf2OYX3/egFKG6/vCp9kjU3zpHOAzEzZ3l3RudHEd
3UWyckUbB9dgvgxA+7A84bzTwBXsSp4ZrMUboboBK53bykEh24gbUSjyHTMdG7OO
kGarGUcZbib3ngBXq5PGs6pW7LLxeYWFlmYmVrxskSXwNbvjZI2/EPOI8aOXg2Vr
Lyx8WziGB9ayEW5qAbwhJYPwHQmYpB7Ro2VgDXpoVuQEGLIIG8hED4lpVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6ltT43vY+P/54NW9KUrcd/WsKOMB8GA1UdIwQY
MBaAFCE+HVDVIoi+6A7qQ1V3AYcSQJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYt
MzE2ZWYyNjFmNGE1LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYtMzE2ZWYyNjFmNGE1
LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPmbAp6R
NHGO57h78zuhFJ7rSB3eXDgCe/v7l9ZC5xs14gAVaH9ZIBJU2ciClhe4rD8fUGXV
RYTBqpLCE9PP8+ISsyiWCW2H66jHluQSVHaXATiM8dvKDO96/hRVjhox8DS84Wky
tk5T25/DbMbZ0uB39P6k7g9e9iTRe5xzskg2aFjOTxFOSBBp3mcAsPyZ1Dwinv7N
Qf7tLJ+Dlx96vVs1xXyxACGvFXGi3fJST5RM92FpteJFaeJi+xfepdIbwk1EmLOG
DHurVVuC1jzpuCDL/oTrEHWBp8AHZe92z9ktz/7iFc2ppPN9o/sMLWQmghueMBsI
oOu+ZvWgUGAcVg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 05:30:16 2024 by rpki-client on console-fra.rpki-client.org