Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/f599f7-b4f8-4e52-8a96-45cb7ee20ebd/1/0tWM9MaDj5s9F3GNy8lI8sRVqD0.mft
File:                     0tWM9MaDj5s9F3GNy8lI8sRVqD0.mft (raw, json)
Hash identifier:          GTgFVEH75MmyyGKJqV9xXOiBOCoxyVBopv2LL5FOHEs=
Subject key identifier:   F1:A3:BD:25:43:D4:1E:C2:ED:E8:EE:A2:CD:95:52:0D:58:7C:CB:CE
Authority key identifier: D2:D5:8C:F4:C6:83:8F:9B:3D:17:71:8D:CB:C9:48:F2:C4:55:A8:3D
Certificate issuer:       /CN=d2d58cf4c6838f9b3d17718dcbc948f2c455a83d
Certificate serial:       019040AE8D1F7B06D51BE8BE2E9CD26E0539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0tWM9MaDj5s9F3GNy8lI8sRVqD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/f599f7-b4f8-4e52-8a96-45cb7ee20ebd/1/0tWM9MaDj5s9F3GNy8lI8sRVqD0.mft
Manifest number:          067E
Signing time:             Sat 22 Jun 2024 16:01:39 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:39 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:39 +0000
Files and hashes:         1: 0tWM9MaDj5s9F3GNy8lI8sRVqD0.crl (hash: nkMB2O3SkIX+xmB+6gydyJIaqSPLoXgiqQdcGPdq9Wk=)
                          2: qBa0P_EhLzgmJxj2FhuMjUCCgDA.roa (hash: /CbhYy0Fw+GwdLpVIFzwvgX8oLLZdPA6DIe1c6O3CGE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/f599f7-b4f8-4e52-8a96-45cb7ee20ebd/1/0tWM9MaDj5s9F3GNy8lI8sRVqD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/f599f7-b4f8-4e52-8a96-45cb7ee20ebd/1/0tWM9MaDj5s9F3GNy8lI8sRVqD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0tWM9MaDj5s9F3GNy8lI8sRVqD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:8d:1f:7b:06:d5:1b:e8:be:2e:9c:d2:6e:05:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2d58cf4c6838f9b3d17718dcbc948f2c455a83d
        Validity
            Not Before: Jun 22 16:01:39 2024 GMT
            Not After : Jun 23 16:01:39 2024 GMT
        Subject: CN=f1a3bd2543d41ec2ede8eea2cd95520d587ccbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:75:91:19:a7:66:34:77:97:51:96:fa:61:
                    75:4b:0d:96:7c:8f:36:d4:a4:7c:b7:c7:82:59:5b:
                    8f:5d:a7:2e:0a:a9:85:30:f5:b5:60:e6:5b:48:c6:
                    28:22:44:a0:45:73:88:df:1e:4f:35:a3:63:e0:3f:
                    6c:15:9c:0b:6b:51:49:92:7d:5e:2f:96:03:47:43:
                    65:50:c9:e3:4f:c3:11:f4:0f:61:d0:c1:f7:d7:95:
                    64:81:eb:df:02:38:59:69:8e:ce:53:24:d9:de:88:
                    c2:03:bd:fd:30:c0:04:a5:05:f6:ec:7d:64:ac:d2:
                    04:da:15:3b:24:3a:5e:30:7f:02:61:e7:8e:e8:74:
                    d6:3f:ba:98:89:b2:75:42:29:97:b5:b6:f8:de:7d:
                    00:85:7b:a7:09:87:2f:2e:a2:9b:99:52:fd:38:98:
                    24:1a:9b:be:b1:8f:53:51:b3:8b:70:27:bc:ff:ae:
                    a5:fb:a6:8e:39:13:2b:e5:1d:01:8a:89:65:ad:4d:
                    ea:27:40:af:8d:93:2c:e7:b4:2f:c3:6c:3c:2f:c8:
                    66:cb:60:be:5c:2f:3e:aa:26:6d:3e:28:dd:c4:d0:
                    ec:25:29:2d:98:f7:f2:e6:8e:41:f2:2c:d1:72:86:
                    f4:8d:c0:b6:9a:58:25:02:fe:a7:6f:b6:4b:db:a7:
                    22:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A3:BD:25:43:D4:1E:C2:ED:E8:EE:A2:CD:95:52:0D:58:7C:CB:CE
            X509v3 Authority Key Identifier:
                keyid:D2:D5:8C:F4:C6:83:8F:9B:3D:17:71:8D:CB:C9:48:F2:C4:55:A8:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tWM9MaDj5s9F3GNy8lI8sRVqD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f599f7-b4f8-4e52-8a96-45cb7ee20ebd/1/0tWM9MaDj5s9F3GNy8lI8sRVqD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f599f7-b4f8-4e52-8a96-45cb7ee20ebd/1/0tWM9MaDj5s9F3GNy8lI8sRVqD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:c7:32:fe:d9:27:84:27:d0:f3:30:af:91:b9:42:80:b9:18:
         90:74:1b:97:e8:b7:23:56:96:2e:bd:05:eb:ef:73:f0:7b:19:
         7b:8a:5b:38:03:64:23:45:7c:e6:dd:54:56:90:6a:4d:25:95:
         3e:d0:20:a8:02:e7:eb:77:64:d3:d8:13:57:4f:5c:45:db:e3:
         67:e0:42:ce:e4:4e:07:8d:65:30:e8:5a:8f:de:25:a4:d2:b4:
         7c:03:37:d0:fc:24:39:87:e8:89:be:24:7c:f0:fd:93:6f:22:
         17:75:81:30:7d:72:a6:3d:cd:fe:4f:58:b3:2a:3e:7c:69:e6:
         5c:a8:27:97:cd:30:2c:8c:fe:d8:35:a7:7f:c2:01:09:ba:d8:
         64:42:e6:5f:5f:d6:07:3b:40:44:96:42:4d:5e:0c:53:d0:bd:
         a5:4f:72:25:c2:50:ae:b7:72:ea:0a:04:96:42:0e:9e:20:3c:
         87:38:01:26:6f:01:0b:16:9f:18:60:da:ba:3b:7a:8a:50:7e:
         0d:fd:10:cb:31:7b:ae:14:7d:ae:79:fb:48:56:01:10:06:c4:
         f8:9c:1b:7a:fd:34:82:46:85:95:49:a0:22:47:64:32:90:5f:
         75:fd:db:49:dd:97:d9:20:73:16:73:31:42:a8:1e:bc:c4:f8:
         5b:b2:82:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBAro0fewbVG+i+LpzSbgU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZDU4Y2Y0YzY4MzhmOWIzZDE3NzE4ZGNiYzk0OGYyYzQ1
NWE4M2QwHhcNMjQwNjIyMTYwMTM5WhcNMjQwNjIzMTYwMTM5WjAzMTEwLwYDVQQD
EyhmMWEzYmQyNTQzZDQxZWMyZWRlOGVlYTJjZDk1NTIwZDU4N2NjYmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVt1kRmnZjR3l1GW+mF1Sw2WfI82
1KR8t8eCWVuPXacuCqmFMPW1YOZbSMYoIkSgRXOI3x5PNaNj4D9sFZwLa1FJkn1e
L5YDR0NlUMnjT8MR9A9h0MH315VkgevfAjhZaY7OUyTZ3ojCA739MMAEpQX27H1k
rNIE2hU7JDpeMH8CYeeO6HTWP7qYibJ1QimXtbb43n0AhXunCYcvLqKbmVL9OJgk
Gpu+sY9TUbOLcCe8/66l+6aOORMr5R0BiollrU3qJ0CvjZMs57Qvw2w8L8hmy2C+
XC8+qiZtPijdxNDsJSktmPfy5o5B8izRcob0jcC2mlglAv6nb7ZL26ci9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGjvSVD1B7C7ejuos2VUg1YfMvOMB8GA1UdIwQY
MBaAFNLVjPTGg4+bPRdxjcvJSPLEVag9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHRXTTlNYURqNXM5RjNHTnk4bEk4c1JWcUQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mNTk5ZjctYjRmOC00ZTUyLThhOTYt
NDVjYjdlZTIwZWJkLzEvMHRXTTlNYURqNXM5RjNHTnk4bEk4c1JWcUQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9mNTk5ZjctYjRmOC00ZTUyLThhOTYtNDVjYjdlZTIwZWJk
LzEvMHRXTTlNYURqNXM5RjNHTnk4bEk4c1JWcUQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA08cy/tkn
hCfQ8zCvkblCgLkYkHQbl+i3I1aWLr0F6+9z8HsZe4pbOANkI0V85t1UVpBqTSWV
PtAgqALn63dk09gTV09cRdvjZ+BCzuROB41lMOhaj94lpNK0fAM30PwkOYfoib4k
fPD9k28iF3WBMH1ypj3N/k9Ysyo+fGnmXKgnl80wLIz+2DWnf8IBCbrYZELmX1/W
BztARJZCTV4MU9C9pU9yJcJQrrdy6goElkIOniA8hzgBJm8BCxafGGDaujt6ilB+
Df0QyzF7rhR9rnn7SFYBEAbE+Jwbev00gkaFlUmgIkdkMpBfdf3bSd2X2SBzFnMx
QqgevMT4W7KCLg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:21:59 2024 by rpki-client on console-ams.rpki-client.org