Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File:                     b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier:          0Y/82jSo52Hzfr4Qyq2fL7t8Pg3aPmCGp9kQqZHUUYo=
Subject key identifier:   59:1E:5C:E8:9C:46:40:2A:F4:93:9B:81:16:AD:56:F4:BD:27:60:3C
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer:       /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial:       019041527C30F12F7542795A9C40BF786228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number:          11D8
Signing time:             Sat 22 Jun 2024 19:00:43 +0000
Manifest this update:     Sat 22 Jun 2024 19:00:43 +0000
Manifest next update:     Sun 23 Jun 2024 19:00:43 +0000
Files and hashes:         1: POKDbL-AkzxIj7FgRIvMrj1Ad6Q.roa (hash: pdICwjxED76xlMct7i3abRdXrJoMWDjl6hPMAKyonl4=)
                          2: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: t7KWRU5xIJHk7H7pMqqC6OlJ3XU7XZFNmBgVQcUJ0vo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:52:7c:30:f1:2f:75:42:79:5a:9c:40:bf:78:62:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
        Validity
            Not Before: Jun 22 19:00:43 2024 GMT
            Not After : Jun 23 19:00:43 2024 GMT
        Subject: CN=591e5ce89c46402af4939b8116ad56f4bd27603c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:2f:f8:ba:9f:a1:02:f2:29:7c:6f:34:94:
                    c9:18:15:85:f7:77:17:08:f7:fe:18:a5:63:19:33:
                    0f:b4:72:0d:7f:f3:2a:30:ed:ef:6d:05:6a:d8:cf:
                    1a:07:e8:63:f2:55:1a:ee:d1:e8:71:0f:b5:c0:c2:
                    09:b6:e4:17:ab:a9:9e:86:12:15:bd:3e:36:8e:34:
                    40:92:c0:5c:0a:89:87:43:20:bd:d8:80:5a:2a:3e:
                    49:61:81:4d:cf:aa:e1:97:74:0d:60:6a:ec:59:de:
                    eb:e9:8a:85:d0:84:d3:00:e3:a7:76:10:54:0e:28:
                    50:58:03:91:47:16:3d:95:ea:ee:c8:89:17:9f:33:
                    d3:ac:3a:9b:2f:a1:1f:59:e0:b9:20:b4:79:3c:5c:
                    9f:bc:e5:9f:f7:c9:29:97:b3:ae:50:f4:15:f5:ff:
                    85:a4:65:61:b0:08:8c:71:a0:11:a2:88:50:c6:d0:
                    38:74:c0:61:d8:dc:bc:25:b8:f4:bb:c1:2c:bb:14:
                    37:ce:ce:56:65:73:fc:05:0a:5a:ab:ec:9d:ca:e2:
                    7b:db:2b:ad:cd:a2:53:4e:ca:e6:30:24:6a:4c:3b:
                    a5:41:dc:21:42:49:a9:28:c9:6a:40:ee:86:a2:09:
                    74:68:8b:9b:b0:e4:ea:6f:60:a0:77:ba:dc:2f:b0:
                    f7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1E:5C:E8:9C:46:40:2A:F4:93:9B:81:16:AD:56:F4:BD:27:60:3C
            X509v3 Authority Key Identifier:
                keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:15:8d:0a:c1:73:42:ad:ae:f9:42:fe:8a:59:a5:d3:25:dc:
         23:ac:3b:d0:10:39:f3:3b:c0:c2:10:89:cd:bb:5b:24:bb:71:
         84:b7:d0:67:ef:f5:b9:d1:56:86:2d:16:59:92:f5:03:f9:3f:
         19:9f:ba:16:73:11:ef:74:be:7d:09:b7:6a:2e:5a:25:f1:a3:
         75:64:f0:f8:83:1b:7d:c5:4b:03:24:65:0d:9f:f0:08:39:61:
         4d:2e:f3:3d:84:02:f4:f4:87:99:e6:c1:eb:67:7c:41:99:e8:
         24:07:18:46:e3:d4:6b:22:b8:2a:e5:2f:73:52:0e:c0:c7:db:
         75:6d:d8:96:55:a6:ad:ec:08:7b:ba:65:39:e0:07:c8:fb:5d:
         28:b1:f8:a2:3d:15:85:e8:78:49:f3:b7:1b:11:2d:2e:09:e2:
         2b:08:9f:93:f5:3d:1e:9d:46:22:11:4b:bd:14:9a:51:26:9f:
         2e:ed:4b:6b:28:4d:1e:eb:48:0c:18:30:c9:c4:9a:dd:b6:bc:
         79:6c:d6:6a:72:34:42:86:ea:a2:3a:43:9e:96:50:fb:a7:b7:
         b2:ea:2b:e7:af:21:0d:d7:0f:14:13:b1:6e:ba:de:9f:aa:c6:
         7e:81:4b:db:99:53:56:40:c1:53:13:30:d4:f5:f7:75:7a:a7:
         c1:b5:49:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBBUnww8S91QnlanEC/eGIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYmJiNWVjMTI3YTA2MzJkMjI2YWYwN2ZhYzljNGQyODRi
ZDFiYWMwHhcNMjQwNjIyMTkwMDQzWhcNMjQwNjIzMTkwMDQzWjAzMTEwLwYDVQQD
Eyg1OTFlNWNlODljNDY0MDJhZjQ5MzliODExNmFkNTZmNGJkMjc2MDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEcv+LqfoQLyKXxvNJTJGBWF93cX
CPf+GKVjGTMPtHINf/MqMO3vbQVq2M8aB+hj8lUa7tHocQ+1wMIJtuQXq6mehhIV
vT42jjRAksBcComHQyC92IBaKj5JYYFNz6rhl3QNYGrsWd7r6YqF0ITTAOOndhBU
DihQWAORRxY9leruyIkXnzPTrDqbL6EfWeC5ILR5PFyfvOWf98kpl7OuUPQV9f+F
pGVhsAiMcaARoohQxtA4dMBh2Ny8Jbj0u8EsuxQ3zs5WZXP8BQpaq+ydyuJ72yut
zaJTTsrmMCRqTDulQdwhQkmpKMlqQO6Gogl0aIubsOTqb2Cgd7rcL7D3kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkeXOicRkAq9JObgRatVvS9J2A8MB8GA1UdIwQY
MBaAFG+7tewSegYy0iavB/rJxNKEvRusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEt
NjU0OTA4Mzg0ZGQ4LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEtNjU0OTA4Mzg0ZGQ4
LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxWNCsFz
Qq2u+UL+ilml0yXcI6w70BA58zvAwhCJzbtbJLtxhLfQZ+/1udFWhi0WWZL1A/k/
GZ+6FnMR73S+fQm3ai5aJfGjdWTw+IMbfcVLAyRlDZ/wCDlhTS7zPYQC9PSHmebB
62d8QZnoJAcYRuPUayK4KuUvc1IOwMfbdW3YllWmrewIe7plOeAHyPtdKLH4oj0V
heh4SfO3GxEtLgniKwifk/U9Hp1GIhFLvRSaUSafLu1LayhNHutIDBgwycSa3ba8
eWzWanI0QobqojpDnpZQ+6e3suor568hDdcPFBOxbrren6rGfoFL25lTVkDBUxMw
1PX3dXqnwbVJvQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:21:36 2024 by rpki-client on console-ams.rpki-client.org