Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File:                     2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier:          C4HxEykGO9nDAqkA9MblyvukUYtCKSyJOwiXlSaFxOU=
Subject key identifier:   38:7D:74:E0:65:43:7C:C6:35:05:6B:1F:C8:DA:1F:35:47:5E:30:04
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer:       /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial:       01901DEAA22AB9FD2FCFFFBB262A8F319AC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number:          07A4
Signing time:             Sat 15 Jun 2024 22:00:34 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:34 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:34 +0000
Files and hashes:         1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: vS6x1LoR0mp59GON85lfso6Mnf+dzoaroGGS1beY1aU=)
                          2: in1yhgF-cCERXcu2NtwiBt_jW4s.roa (hash: GMjBFvLWdmCaksTRyAmJKx/Zh0CbDg/GYjnYc/8Tcbs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:a2:2a:b9:fd:2f:cf:ff:bb:26:2a:8f:31:9a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
        Validity
            Not Before: Jun 15 22:00:34 2024 GMT
            Not After : Jun 16 22:00:34 2024 GMT
        Subject: CN=387d74e065437cc635056b1fc8da1f35475e3004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:0a:38:bc:39:37:59:68:25:55:08:15:4f:
                    f0:34:59:c7:40:74:a8:23:3c:47:8d:4a:bd:1b:a2:
                    1d:98:55:3d:84:d1:90:fe:24:9d:31:36:83:e9:c1:
                    ef:59:32:e3:3a:6f:ec:5e:35:d2:7d:7f:bd:cd:89:
                    a5:11:ea:55:19:c4:63:ff:cc:2c:62:b7:d7:7c:26:
                    df:5c:b4:07:24:5d:9c:1b:51:b7:68:87:fa:5f:33:
                    25:16:d2:3a:7b:fe:bd:9a:d7:2b:fd:c4:4c:16:d5:
                    b0:e8:d7:12:a0:22:d0:d3:b5:ee:54:20:11:da:3f:
                    6c:ec:92:a2:8e:f0:8d:06:84:8a:b6:c1:2a:ed:48:
                    e5:3e:54:0d:89:12:c6:8c:8c:13:4f:d6:6c:c1:48:
                    69:21:a0:5f:eb:59:b2:a9:94:b7:33:df:51:0a:f3:
                    c5:18:ac:0c:be:7e:fc:87:69:f6:3b:29:d6:6f:5f:
                    77:c2:ad:40:03:1e:ff:d8:83:9d:9f:71:8f:cf:b5:
                    80:6c:5e:53:01:4e:f7:23:2f:5b:af:6a:29:80:4e:
                    6c:51:fa:15:7a:f8:1c:c8:03:f4:24:25:4c:08:f3:
                    89:15:95:b8:27:0c:0a:63:f0:c7:82:2d:ac:77:36:
                    1e:3a:42:e9:bf:47:b9:23:db:66:b1:67:e0:55:e7:
                    d7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7D:74:E0:65:43:7C:C6:35:05:6B:1F:C8:DA:1F:35:47:5E:30:04
            X509v3 Authority Key Identifier:
                keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ae:4b:6c:7b:1f:e5:00:0f:71:c1:f4:18:26:ca:39:bb:72:
         2f:22:0c:b7:71:51:87:ca:ee:ce:c6:34:af:84:96:40:7b:2e:
         07:f1:f8:dd:ca:c4:78:25:0f:20:eb:3c:86:a2:1a:dd:e1:de:
         2e:26:80:7e:c1:bd:2f:9d:e1:08:a4:b6:d8:3c:61:6d:91:a2:
         7b:69:a6:ea:b7:61:08:b8:77:c8:c4:6b:88:37:a2:ac:0e:c8:
         76:d1:11:57:38:22:54:55:47:2a:5f:f7:3a:d0:d6:b3:42:ea:
         7a:fb:87:5d:06:35:d8:12:13:2d:d1:d8:74:fc:6f:da:65:cf:
         eb:48:34:71:8c:e7:77:86:a2:7f:49:fa:11:b6:80:1e:56:d8:
         cd:81:90:a0:ce:84:ae:0e:0e:97:f4:54:18:a6:66:01:1c:0a:
         a3:17:64:40:54:af:c2:a4:48:d6:29:15:d3:bc:78:d8:0b:c7:
         df:18:00:0e:42:92:fb:c3:f6:1b:94:13:71:84:c9:47:b5:25:
         9b:39:b0:82:2d:01:5f:0c:a4:e0:d7:fe:e2:ca:da:b3:2b:b6:
         94:cb:c3:01:b6:84:a2:4d:e9:05:0b:b9:64:11:8d:cc:8c:58:
         86:09:84:f0:ae:e7:6f:46:bd:fb:60:f8:46:11:93:04:b5:7e:
         bb:44:30:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6qIquf0vz/+7JiqPMZrGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzAwOTM2ZmI1MDBhNzQ1NjQ0MGFiYThiM2I4YWQ1M2M5
ZjAxNDAwHhcNMjQwNjE1MjIwMDM0WhcNMjQwNjE2MjIwMDM0WjAzMTEwLwYDVQQD
EygzODdkNzRlMDY1NDM3Y2M2MzUwNTZiMWZjOGRhMWYzNTQ3NWUzMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNcKOLw5N1loJVUIFU/wNFnHQHSo
IzxHjUq9G6IdmFU9hNGQ/iSdMTaD6cHvWTLjOm/sXjXSfX+9zYmlEepVGcRj/8ws
YrfXfCbfXLQHJF2cG1G3aIf6XzMlFtI6e/69mtcr/cRMFtWw6NcSoCLQ07XuVCAR
2j9s7JKijvCNBoSKtsEq7UjlPlQNiRLGjIwTT9ZswUhpIaBf61myqZS3M99RCvPF
GKwMvn78h2n2OynWb193wq1AAx7/2IOdn3GPz7WAbF5TAU73Iy9br2opgE5sUfoV
evgcyAP0JCVMCPOJFZW4JwwKY/DHgi2sdzYeOkLpv0e5I9tmsWfgVefXmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDh9dOBlQ3zGNQVrH8jaHzVHXjAEMB8GA1UdIwQY
MBaAFNgwCTb7UAp0VkQKuos7itU8nwFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzkt
YWRkY2Q4NTUyMDI2LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzktYWRkY2Q4NTUyMDI2
LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN65LbHsf
5QAPccH0GCbKObtyLyIMt3FRh8ruzsY0r4SWQHsuB/H43crEeCUPIOs8hqIa3eHe
LiaAfsG9L53hCKS22DxhbZGie2mm6rdhCLh3yMRriDeirA7IdtERVzgiVFVHKl/3
OtDWs0LqevuHXQY12BITLdHYdPxv2mXP60g0cYznd4aif0n6EbaAHlbYzYGQoM6E
rg4Ol/RUGKZmARwKoxdkQFSvwqRI1ikV07x42AvH3xgADkKS+8P2G5QTcYTJR7Ul
mzmwgi0BXwyk4Nf+4srasyu2lMvDAbaEok3pBQu5ZBGNzIxYhgmE8K7nb0a9+2D4
RhGTBLV+u0QwXg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:57:29 2024 by rpki-client on console-fra.rpki-client.org