Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File:                     ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier:          BDc1+TdvIHJOVZOuLV2p4f7i9dqghxlMOITX2OxjmPo=
Subject key identifier:   83:AF:34:90:4B:47:75:F5:C8:27:85:04:2B:69:D1:B6:96:70:4C:AD
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer:       /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial:       01901E58D67E4D8E42DDAA7D45FB8B27A527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 00:00:56 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:56 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:56 +0000
Files and hashes:         1: Att4oS7qsrNahmdXMbBalfPlmgQ.roa (hash: jIrVXmv68UO+W3Q6xl3Q6AtKFyesHEzUZ5R7BYVWeRM=)
                          2: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: HssWkIBy2xZw/gyOkMDf1AWLaI+VCkYe8VS4DuFxk5o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:d6:7e:4d:8e:42:dd:aa:7d:45:fb:8b:27:a5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
        Validity
            Not Before: Jun 16 00:00:56 2024 GMT
            Not After : Jun 17 00:00:56 2024 GMT
        Subject: CN=83af34904b4775f5c82785042b69d1b696704cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:24:1b:c8:44:29:2e:eb:23:ca:1d:19:11:
                    57:99:9d:7d:85:a3:89:51:4b:21:0c:d9:d0:8c:66:
                    a6:fe:90:66:5b:d0:ce:03:50:75:dc:ba:98:93:22:
                    eb:87:40:06:69:8d:2e:4f:db:db:e5:13:38:b3:93:
                    4f:d6:00:cb:dd:4a:a5:5f:e0:19:11:0d:a9:58:82:
                    d8:b7:8d:7b:b0:c4:76:22:f3:f3:dd:72:44:09:be:
                    68:8b:6d:26:d4:a2:ba:b3:08:4b:a9:ff:30:4d:c8:
                    79:a9:13:73:30:ec:ef:4c:e2:ec:dd:42:fa:8c:4f:
                    ed:e1:f6:9e:c3:18:40:8d:5d:3f:c9:ef:f3:0f:b7:
                    ca:e7:ab:d8:99:c6:81:40:56:af:ec:df:fd:f5:d6:
                    91:d2:b5:38:a4:a9:26:23:3a:59:27:57:8b:07:e4:
                    ec:a4:78:2e:78:48:0b:be:e1:14:ba:26:8c:58:d3:
                    25:f9:8d:d7:a4:88:34:78:5a:9d:ba:3a:99:fb:70:
                    7f:75:df:87:82:2d:b8:43:21:62:1e:23:87:7d:65:
                    5d:9b:90:8a:dc:8f:07:9a:b4:d0:3d:bb:89:f9:65:
                    4f:14:2e:10:66:55:3e:fe:c1:e8:c8:c5:f0:3f:34:
                    27:41:d7:ab:92:5c:45:0d:07:80:bb:14:e5:77:a2:
                    89:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AF:34:90:4B:47:75:F5:C8:27:85:04:2B:69:D1:B6:96:70:4C:AD
            X509v3 Authority Key Identifier:
                keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:22:3d:46:bc:af:72:6d:e3:fb:c8:99:fe:54:61:d3:ce:07:
         77:9e:6b:fc:f0:f3:68:9a:c2:88:b0:7a:7e:f0:78:4e:06:0e:
         0d:62:b1:f6:87:e0:3a:86:ef:27:53:2a:af:94:f3:c9:d7:55:
         a5:94:92:fe:eb:0c:11:17:5d:0b:5b:df:d5:8f:cc:30:a2:90:
         0b:22:6e:77:43:9f:46:a1:fc:86:6c:99:43:46:20:8b:b3:e8:
         70:79:d7:38:65:65:c5:f1:88:64:78:68:9e:18:e9:6c:9c:7e:
         d9:66:48:ff:35:74:76:1f:99:05:7d:2e:a9:1e:d2:54:c7:cb:
         c2:47:a5:37:64:f5:f4:c1:76:aa:ce:1e:ef:ea:af:08:97:06:
         7d:5b:7b:b4:08:3d:cc:f3:d5:43:e5:7d:03:49:f3:ce:4a:8c:
         79:d5:05:18:6a:ef:3f:2c:88:ad:8d:df:2e:80:70:b3:20:95:
         7e:14:3b:73:c7:7e:06:53:58:d7:a2:38:b4:7c:70:46:b6:7c:
         d2:6b:38:d9:eb:b3:71:82:38:5b:6a:43:58:31:28:46:e0:53:
         f6:c5:bd:4f:6e:cf:30:99:08:c1:5e:6d:9f:07:c3:3e:5d:0a:
         46:46:34:db:63:79:e0:82:ec:a7:7a:bd:d3:28:97:f7:e5:21:
         ba:0a:78:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWNZ+TY5C3ap9RfuLJ6UnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTIxYzNmOTIwN2EzNzM0NWUzODcwMmM4OWQxNzliZjQ0
NGFhMDgwHhcNMjQwNjE2MDAwMDU2WhcNMjQwNjE3MDAwMDU2WjAzMTEwLwYDVQQD
Eyg4M2FmMzQ5MDRiNDc3NWY1YzgyNzg1MDQyYjY5ZDFiNjk2NzA0Y2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQIkG8hEKS7rI8odGRFXmZ19haOJ
UUshDNnQjGam/pBmW9DOA1B13LqYkyLrh0AGaY0uT9vb5RM4s5NP1gDL3UqlX+AZ
EQ2pWILYt417sMR2IvPz3XJECb5oi20m1KK6swhLqf8wTch5qRNzMOzvTOLs3UL6
jE/t4faewxhAjV0/ye/zD7fK56vYmcaBQFav7N/99daR0rU4pKkmIzpZJ1eLB+Ts
pHgueEgLvuEUuiaMWNMl+Y3XpIg0eFqdujqZ+3B/dd+Hgi24QyFiHiOHfWVdm5CK
3I8HmrTQPbuJ+WVPFC4QZlU+/sHoyMXwPzQnQderklxFDQeAuxTld6KJYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOvNJBLR3X1yCeFBCtp0baWcEytMB8GA1UdIwQY
MBaAFGUSHD+SB6NzReOHAsidF5v0RKoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYt
NDhkM2NhMTYxYmIwLzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYtNDhkM2NhMTYxYmIw
LzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiI9Rryv
cm3j+8iZ/lRh084Hd55r/PDzaJrCiLB6fvB4TgYODWKx9ofgOobvJ1Mqr5TzyddV
pZSS/usMERddC1vf1Y/MMKKQCyJud0OfRqH8hmyZQ0Ygi7PocHnXOGVlxfGIZHho
nhjpbJx+2WZI/zV0dh+ZBX0uqR7SVMfLwkelN2T19MF2qs4e7+qvCJcGfVt7tAg9
zPPVQ+V9A0nzzkqMedUFGGrvPyyIrY3fLoBwsyCVfhQ7c8d+BlNY16I4tHxwRrZ8
0ms42euzcYI4W2pDWDEoRuBT9sW9T27PMJkIwV5tnwfDPl0KRkY022N54ILsp3q9
0yiX9+Uhugp4zg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:58:30 2024 by rpki-client on console-fra.rpki-client.org