Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
File:                     p4wD9FkI30xFw_B9KkssQCRdUTI.mft (raw, json)
Hash identifier:          eGxfK/Vf9WcUbiKIoPSDaUkup40dY50JVqfj6KPdRhA=
Subject key identifier:   71:B1:A6:87:30:05:9E:A8:11:26:CD:AE:43:CE:5E:D0:3B:CC:CB:AF
Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
Certificate issuer:       /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Certificate serial:       019041C0728F0911427E637C13A96AF4903F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
Manifest number:          11DB
Signing time:             Sat 22 Jun 2024 21:00:49 +0000
Manifest this update:     Sat 22 Jun 2024 21:00:49 +0000
Manifest next update:     Sun 23 Jun 2024 21:00:49 +0000
Files and hashes:         1: P6mU7zqXkmUrEOL_gQQ-LD5GyB0.roa (hash: /tjwbMLFEYfqIW7kYGsgU4Qiw9sMATebwQOdbgCR2dY=)
                          2: p4wD9FkI30xFw_B9KkssQCRdUTI.crl (hash: yJKlV98uH/+hrvgQwYBWsTiqJi9uoOe/8wx3X/wWhzQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:c0:72:8f:09:11:42:7e:63:7c:13:a9:6a:f4:90:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
        Validity
            Not Before: Jun 22 21:00:49 2024 GMT
            Not After : Jun 23 21:00:49 2024 GMT
        Subject: CN=71b1a68730059ea81126cdae43ce5ed03bcccbaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:22:b5:76:5b:72:57:e2:34:97:58:00:a2:
                    7c:69:19:87:60:e0:c5:5f:7d:fc:6a:00:32:88:63:
                    9c:92:b8:20:c5:fc:89:a5:62:49:4d:f2:10:42:83:
                    d7:22:9e:a3:40:a8:68:0d:28:17:e9:2d:3d:8d:cd:
                    5e:74:ef:e3:07:fd:e8:9a:f8:ea:f8:82:61:4f:9d:
                    cd:19:e9:61:cb:d6:76:a7:c3:09:75:ee:78:3c:68:
                    89:d5:c9:df:79:57:72:ad:54:cd:84:a2:05:dd:cf:
                    07:fe:a0:8b:94:85:3e:e1:f5:e2:ea:26:ec:53:5f:
                    18:07:5e:07:b4:43:89:3e:62:26:17:cd:7b:ac:99:
                    25:5f:90:66:d4:a2:6c:b2:46:ea:1f:3e:57:6a:b4:
                    11:0f:6d:9c:ef:e3:f8:66:45:b9:79:51:9b:80:21:
                    39:d1:02:f4:13:1e:0a:f3:26:fe:40:4a:2c:0c:20:
                    84:cf:76:e9:1a:a4:bc:58:6f:ed:7d:3f:1b:7f:c4:
                    22:e6:c1:b3:ec:39:6a:66:72:ed:18:5e:3d:8c:c4:
                    6d:1b:f8:ff:87:c6:36:d0:ef:35:3f:6a:8c:3d:77:
                    be:96:ae:2c:23:25:39:35:47:7d:1c:b7:f3:96:e3:
                    f8:32:22:c2:38:61:46:56:05:45:93:63:0a:88:c4:
                    51:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B1:A6:87:30:05:9E:A8:11:26:CD:AE:43:CE:5E:D0:3B:CC:CB:AF
            X509v3 Authority Key Identifier:
                keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:04:8e:f0:7d:a5:e8:44:6d:6a:53:19:c0:4b:2b:b4:ce:3f:
         6a:13:4b:62:f9:a2:d1:78:18:64:cc:78:5f:d5:25:2b:71:f3:
         03:b1:1e:3c:ae:4f:83:56:3f:3d:82:e7:f1:70:6d:65:18:81:
         b9:1e:0c:a5:28:f3:ac:6d:67:28:d4:b8:e8:4d:22:bf:6f:00:
         a2:25:28:70:f1:ed:48:92:05:01:cf:a4:09:22:29:87:e7:1d:
         66:3d:13:a7:21:fe:5e:9a:a0:c6:06:11:85:ec:5d:4c:f7:96:
         54:6b:74:ce:39:28:16:f2:bb:a8:f4:d5:b6:3d:92:83:15:5d:
         6c:35:0c:58:a2:f8:22:96:3e:0c:78:ec:a9:f7:82:3c:d9:c2:
         1b:5b:ec:b8:73:de:f8:87:0c:40:eb:d5:2e:b9:b2:8f:2e:35:
         63:57:15:07:78:4b:bd:1e:94:29:cb:89:b1:8a:70:14:e2:be:
         49:5c:cf:38:c7:d8:6f:14:61:63:84:c3:0e:d0:eb:8a:cc:26:
         9b:02:bb:3c:c7:cd:f5:02:e9:6a:3e:bc:84:df:ad:39:49:62:
         6c:c1:3e:09:06:45:fa:be:d7:b3:7e:bc:ef:ad:01:19:aa:c0:
         42:d8:b8:cd:52:10:2e:91:c8:2f:4f:03:61:ab:80:87:14:f2:
         d6:9b:d3:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBBwHKPCRFCfmN8E6lq9JA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OGMwM2Y0NTkwOGRmNGM0NWMzZjA3ZDJhNGIyYzQwMjQ1
ZDUxMzIwHhcNMjQwNjIyMjEwMDQ5WhcNMjQwNjIzMjEwMDQ5WjAzMTEwLwYDVQQD
Eyg3MWIxYTY4NzMwMDU5ZWE4MTEyNmNkYWU0M2NlNWVkMDNiY2NjYmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFUitXZbclfiNJdYAKJ8aRmHYODF
X338agAyiGOckrggxfyJpWJJTfIQQoPXIp6jQKhoDSgX6S09jc1edO/jB/3omvjq
+IJhT53NGelhy9Z2p8MJde54PGiJ1cnfeVdyrVTNhKIF3c8H/qCLlIU+4fXi6ibs
U18YB14HtEOJPmImF817rJklX5Bm1KJsskbqHz5XarQRD22c7+P4ZkW5eVGbgCE5
0QL0Ex4K8yb+QEosDCCEz3bpGqS8WG/tfT8bf8Qi5sGz7DlqZnLtGF49jMRtG/j/
h8Y20O81P2qMPXe+lq4sIyU5NUd9HLfzluP4MiLCOGFGVgVFk2MKiMRRSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGxpocwBZ6oESbNrkPOXtA7zMuvMB8GA1UdIwQY
MBaAFKeMA/RZCN9MRcPwfSpLLEAkXVEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lNWM2OTctY2M5My00ZDcxLWI5NDAt
OWJhODViZTNiZjA5LzEvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9lNWM2OTctY2M5My00ZDcxLWI5NDAtOWJhODViZTNiZjA5
LzEvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQSO8H2l
6ERtalMZwEsrtM4/ahNLYvmi0XgYZMx4X9UlK3HzA7EePK5Pg1Y/PYLn8XBtZRiB
uR4MpSjzrG1nKNS46E0iv28AoiUocPHtSJIFAc+kCSIph+cdZj0TpyH+XpqgxgYR
hexdTPeWVGt0zjkoFvK7qPTVtj2SgxVdbDUMWKL4IpY+DHjsqfeCPNnCG1vsuHPe
+IcMQOvVLrmyjy41Y1cVB3hLvR6UKcuJsYpwFOK+SVzPOMfYbxRhY4TDDtDriswm
mwK7PMfN9QLpaj68hN+tOUlibME+CQZF+r7Xs368760BGarAQti4zVIQLpHIL08D
YauAhxTy1pvT+w==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:22:51 2024 by rpki-client on console-ams.rpki-client.org