Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
File:                     pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json)
Hash identifier:          4ayTT9vMtgQmXt8SOT2sBbW1T8lw3LsbVq0lYV9bswI=
Subject key identifier:   7A:B8:F8:56:11:B9:32:14:2E:7D:87:4C:E8:5B:55:39:C7:00:C2:BB
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Certificate issuer:       /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial:       01901DED3CE4A4E70F60CACE6327184AA237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
Manifest number:          0C50
Signing time:             Sat 15 Jun 2024 22:03:25 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:25 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:25 +0000
Files and hashes:         1: gSGg9qtewK0fp84hWq1R2p7K-fs.roa (hash: nUyUdBYDygkUgrfQF+bQKRlZ3pErg5Eg+VQXgaHAOLU=)
                          2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: wIrMWKBBfSC+RC9R3N81FhwDNG8EXPBlc2apOf+a1fM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:3c:e4:a4:e7:0f:60:ca:ce:63:27:18:4a:a2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
        Validity
            Not Before: Jun 15 22:03:25 2024 GMT
            Not After : Jun 16 22:03:25 2024 GMT
        Subject: CN=7ab8f85611b932142e7d874ce85b5539c700c2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:da:d4:88:8a:29:24:f0:42:d9:bc:4b:5f:
                    b9:c9:08:2b:09:81:3d:a9:9b:7f:c8:fd:f7:b2:1a:
                    25:98:65:af:ef:fb:8c:22:04:bc:88:8d:13:a0:f1:
                    f1:1b:47:48:dd:2f:db:b1:f2:7a:1e:a7:18:ad:ae:
                    f8:08:63:79:9c:9a:4c:1b:f1:89:7b:9c:d1:e4:58:
                    22:44:c3:49:3b:67:a6:f6:8e:0a:41:7e:ad:74:64:
                    17:d3:22:6a:b3:03:f5:6e:f1:e1:16:05:47:57:5f:
                    27:46:26:d6:28:cd:22:62:0e:1e:50:77:0f:a9:a3:
                    80:c7:5b:4f:f2:d5:e2:34:9a:01:a9:a3:2c:01:90:
                    02:2d:b8:00:e5:ef:16:b8:9c:59:b8:51:0f:d0:e1:
                    1d:14:7e:d4:3f:86:df:af:7d:5d:ef:9a:c7:96:fc:
                    5d:bd:1b:d1:6d:a3:f0:11:32:28:55:4e:28:ed:fb:
                    22:e6:31:b3:0c:1e:61:af:83:80:72:33:ff:52:71:
                    b0:8b:89:d3:06:22:55:8b:a8:e3:14:cd:73:67:5e:
                    39:aa:02:4a:02:6a:c6:d2:3b:bf:07:2b:7d:c2:62:
                    48:50:fa:1c:84:4f:b1:4b:03:24:63:02:91:3e:3e:
                    dc:17:15:f4:01:ee:cd:70:e2:a7:00:46:18:21:7e:
                    62:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B8:F8:56:11:B9:32:14:2E:7D:87:4C:E8:5B:55:39:C7:00:C2:BB
            X509v3 Authority Key Identifier:
                keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:79:0d:f2:99:fb:61:da:23:51:ae:fa:88:93:60:66:b4:bc:
         59:3b:af:79:9a:9d:9f:bd:d9:22:15:3d:c1:c3:1b:a4:40:45:
         e1:2f:69:28:82:90:63:a8:ef:fb:12:ca:1b:03:af:c6:b3:f1:
         66:76:62:35:8f:7a:f7:d9:b7:56:b6:ed:02:95:a7:02:56:9d:
         49:4f:43:69:f7:2a:f4:c7:4e:b6:81:1d:d4:48:81:fd:f0:78:
         3c:97:87:44:a0:86:da:5d:da:05:10:84:a1:d4:26:f8:54:91:
         5d:2e:6f:0f:a0:34:c8:2b:31:ed:f0:fb:97:62:b3:1b:45:a4:
         6f:77:b0:8f:e9:aa:db:f4:3d:8a:01:96:12:fa:01:30:30:7c:
         7a:db:21:ab:4b:ae:e3:97:16:db:9c:e5:54:df:92:71:95:8c:
         bb:60:d9:fc:53:5c:16:f9:eb:2c:f3:54:5b:fd:cb:17:ab:e8:
         04:44:52:4b:db:b6:27:d5:19:d3:3b:91:54:87:8a:20:be:39:
         02:dd:c6:ad:25:f2:a2:87:ba:e9:43:03:14:38:75:3f:45:2a:
         ca:16:61:56:a8:cb:ad:84:b1:db:f3:ce:3a:72:bb:81:77:bf:
         f0:2f:26:ff:33:8d:28:fc:56:43:c7:5b:af:d4:f2:7a:88:22:
         1f:a3:55:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7TzkpOcPYMrOYycYSqI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2I2MDhmY2NmMzIzMGU0NDVjOTgzZjllMzZiNTBlMTFm
NzJjZjIwHhcNMjQwNjE1MjIwMzI1WhcNMjQwNjE2MjIwMzI1WjAzMTEwLwYDVQQD
Eyg3YWI4Zjg1NjExYjkzMjE0MmU3ZDg3NGNlODViNTUzOWM3MDBjMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNza1IiKKSTwQtm8S1+5yQgrCYE9
qZt/yP33sholmGWv7/uMIgS8iI0ToPHxG0dI3S/bsfJ6HqcYra74CGN5nJpMG/GJ
e5zR5FgiRMNJO2em9o4KQX6tdGQX0yJqswP1bvHhFgVHV18nRibWKM0iYg4eUHcP
qaOAx1tP8tXiNJoBqaMsAZACLbgA5e8WuJxZuFEP0OEdFH7UP4bfr31d75rHlvxd
vRvRbaPwETIoVU4o7fsi5jGzDB5hr4OAcjP/UnGwi4nTBiJVi6jjFM1zZ145qgJK
AmrG0ju/Byt9wmJIUPochE+xSwMkYwKRPj7cFxX0Ae7NcOKnAEYYIX5iKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq4+FYRuTIULn2HTOhbVTnHAMK7MB8GA1UdIwQY
MBaAFKV7YI/M8yMORFyYP542tQ4R9yzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFh0Z2o4enpJdzVFWEpnX25qYTFEaEgzTFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82MjE2MjktZWQzZC00OWFmLWJmMzkt
ODVhMzdjZjFiMmVhLzEvcFh0Z2o4enpJdzVFWEpnX25qYTFEaEgzTFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC82MjE2MjktZWQzZC00OWFmLWJmMzktODVhMzdjZjFiMmVh
LzEvcFh0Z2o4enpJdzVFWEpnX25qYTFEaEgzTFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3kN8pn7
YdojUa76iJNgZrS8WTuveZqdn73ZIhU9wcMbpEBF4S9pKIKQY6jv+xLKGwOvxrPx
ZnZiNY9699m3VrbtApWnAladSU9Dafcq9MdOtoEd1EiB/fB4PJeHRKCG2l3aBRCE
odQm+FSRXS5vD6A0yCsx7fD7l2KzG0Wkb3ewj+mq2/Q9igGWEvoBMDB8etshq0uu
45cW25zlVN+ScZWMu2DZ/FNcFvnrLPNUW/3LF6voBERSS9u2J9UZ0zuRVIeKIL45
At3GrSXyooe66UMDFDh1P0UqyhZhVqjLrYSx2/POOnK7gXe/8C8m/zONKPxWQ8db
r9TyeogiH6NVtg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:00 2024 by rpki-client on console-ams.rpki-client.org