Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
File:                     Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft (raw, json)
Hash identifier:          XU68tHLUEsULdWE4HRWI4ePaSFmbYTDd6g+uilaP+28=
Subject key identifier:   97:F2:EB:09:B2:32:30:A7:47:B1:91:7F:6D:7F:04:E3:85:D7:61:EB
Authority key identifier: 31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E
Certificate issuer:       /CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
Certificate serial:       0190448D0CEE1C8AF8CD1D969FEEF2B4D5FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
Manifest number:          0451
Signing time:             Sun 23 Jun 2024 10:03:32 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:32 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:32 +0000
Files and hashes:         1: Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl (hash: gHCKxWQ5ZyQD3VEtYVHgRe0A/FQXW3ryliwcy5oNtFU=)
                          2: T0I9w-rdR3K6ibXx3zm2EtgYOAw.roa (hash: +uFTAqjbvCC+uvxrktyt0zlozk8eSM2yy995uMFUaKI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8d:0c:ee:1c:8a:f8:cd:1d:96:9f:ee:f2:b4:d5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
        Validity
            Not Before: Jun 23 10:03:32 2024 GMT
            Not After : Jun 24 10:03:32 2024 GMT
        Subject: CN=97f2eb09b23230a747b1917f6d7f04e385d761eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7d:83:2b:d4:0d:5b:8d:0d:9b:8d:4c:d2:4e:
                    74:4e:43:e9:b0:eb:b9:0d:bc:4c:54:71:a6:f2:97:
                    04:3c:a5:54:06:89:33:61:cf:86:92:10:db:96:01:
                    1a:79:77:b2:98:f0:64:84:10:6f:32:52:02:ee:3b:
                    70:86:70:40:a2:b9:7a:58:ea:8b:cc:6e:05:f4:c2:
                    fe:cc:3e:59:00:c6:6d:32:5c:ea:c2:e7:6f:d2:b0:
                    e2:c8:53:fb:21:67:37:1e:1d:e2:74:4e:34:90:54:
                    78:d6:7d:8c:66:de:a3:b5:d4:2d:ed:e0:cb:a5:55:
                    06:b4:46:96:23:ca:51:4b:40:15:d1:1b:88:be:30:
                    3d:93:aa:62:6b:a5:f8:79:10:e0:a5:ca:07:2a:15:
                    93:08:bb:4a:69:72:b4:38:5f:18:4c:17:3c:49:68:
                    a1:e1:5e:32:6b:fa:66:86:cd:93:29:af:c6:a4:5a:
                    79:2d:1c:23:62:b5:37:ce:e4:8f:7b:97:0c:94:8f:
                    a7:a1:b8:c8:68:8a:33:c3:ec:f8:69:58:a1:ee:5e:
                    31:6c:39:bf:c3:39:e2:e7:bc:73:97:53:e7:de:9b:
                    3b:ab:77:c2:c7:a5:38:5b:67:fb:92:1f:d7:e6:45:
                    af:c1:c3:da:19:5f:74:c5:84:7c:f9:8e:67:f7:ec:
                    5a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F2:EB:09:B2:32:30:A7:47:B1:91:7F:6D:7F:04:E3:85:D7:61:EB
            X509v3 Authority Key Identifier:
                keyid:31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:02:fd:62:ee:47:bd:c0:b5:8d:7e:0b:95:91:cc:f6:bb:32:
         21:34:2d:a2:7c:f7:f1:18:d9:11:02:e8:d3:25:8e:69:ce:da:
         8e:a5:c8:21:1e:02:79:8b:77:15:d5:cb:b9:20:48:73:38:7b:
         03:e0:86:31:ae:00:76:e9:46:3d:5c:0b:b5:da:19:f0:03:11:
         8f:ee:dc:e2:1d:3e:aa:06:a8:e8:01:ce:b0:5c:0e:c5:41:79:
         91:57:e1:5a:0a:df:7b:02:85:68:8e:61:eb:90:ca:02:b8:6d:
         58:39:cb:f4:4d:47:f8:8f:9d:bb:4b:7a:03:2e:cc:f4:00:96:
         64:db:6b:c8:9b:7b:55:b4:c3:0a:45:ce:9b:9a:1a:42:f9:89:
         d1:b3:15:e1:ac:5a:16:10:c7:a1:6e:94:cc:d7:01:e5:c4:b5:
         0e:eb:3b:37:47:85:80:5b:e3:af:6e:da:00:77:09:b9:0a:73:
         8f:18:17:5d:c3:8b:56:0c:40:63:7d:ae:ea:1a:17:f3:d5:f3:
         d6:8b:43:95:89:0b:49:fe:3f:9e:ca:71:f9:e1:1e:af:a3:f0:
         e5:6d:63:78:9e:4d:77:68:aa:82:7d:0d:f6:b8:11:11:e6:7a:
         4d:70:ca:fc:d4:88:63:d1:c6:06:d1:2a:bc:df:d9:07:b0:d9:
         c4:64:20:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEjQzuHIr4zR2Wn+7ytNX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZmY2YTIyOTM3ZWYxNjQwZDgzMTg4ZGZjZDdhYmIzMGZj
YzcyMWUwHhcNMjQwNjIzMTAwMzMyWhcNMjQwNjI0MTAwMzMyWjAzMTEwLwYDVQQD
Eyg5N2YyZWIwOWIyMzIzMGE3NDdiMTkxN2Y2ZDdmMDRlMzg1ZDc2MWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH2DK9QNW40Nm41M0k50TkPpsOu5
DbxMVHGm8pcEPKVUBokzYc+GkhDblgEaeXeymPBkhBBvMlIC7jtwhnBAorl6WOqL
zG4F9ML+zD5ZAMZtMlzqwudv0rDiyFP7IWc3Hh3idE40kFR41n2MZt6jtdQt7eDL
pVUGtEaWI8pRS0AV0RuIvjA9k6pia6X4eRDgpcoHKhWTCLtKaXK0OF8YTBc8SWih
4V4ya/pmhs2TKa/GpFp5LRwjYrU3zuSPe5cMlI+nobjIaIozw+z4aVih7l4xbDm/
wzni57xzl1Pn3ps7q3fCx6U4W2f7kh/X5kWvwcPaGV90xYR8+Y5n9+xaHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfy6wmyMjCnR7GRf21/BOOF12HrMB8GA1UdIwQY
MBaAFDH/aiKTfvFkDYMYjfzXq7MPzHIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWY5cUlwTi04V1FOZ3hpTl9OZXJzd19NY2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zMzY4OWYtOGU0OC00YmYzLTg5ZjUt
Yzc2ZjdiNmIwZWI2LzEvTWY5cUlwTi04V1FOZ3hpTl9OZXJzd19NY2g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8zMzY4OWYtOGU0OC00YmYzLTg5ZjUtYzc2ZjdiNmIwZWI2
LzEvTWY5cUlwTi04V1FOZ3hpTl9OZXJzd19NY2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAL9Yu5H
vcC1jX4LlZHM9rsyITQtonz38RjZEQLo0yWOac7ajqXIIR4CeYt3FdXLuSBIczh7
A+CGMa4AdulGPVwLtdoZ8AMRj+7c4h0+qgao6AHOsFwOxUF5kVfhWgrfewKFaI5h
65DKArhtWDnL9E1H+I+du0t6Ay7M9ACWZNtryJt7VbTDCkXOm5oaQvmJ0bMV4axa
FhDHoW6UzNcB5cS1Dus7N0eFgFvjr27aAHcJuQpzjxgXXcOLVgxAY32u6hoX89Xz
1otDlYkLSf4/nspx+eEer6Pw5W1jeJ5Nd2iqgn0N9rgREeZ6TXDK/NSIY9HGBtEq
vN/ZB7DZxGQgPg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:13:50 2024 by rpki-client on console-fra.rpki-client.org