Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/46e7a2-639a-4162-9ddf-b6392c50f95a/1/g54H5RFqXa9VeOX9ahjH7zSe8EQ.mft
File:                     g54H5RFqXa9VeOX9ahjH7zSe8EQ.mft (raw, json)
Hash identifier:          eghUhdUBgltad11t/h1uEOQZujfQlO0XXV0UsAYQth4=
Subject key identifier:   9F:82:E0:5F:6F:18:A7:C1:75:27:3D:C8:F0:EC:93:B6:26:EA:24:FF
Authority key identifier: 83:9E:07:E5:11:6A:5D:AF:55:78:E5:FD:6A:18:C7:EF:34:9E:F0:44
Certificate issuer:       /CN=839e07e5116a5daf5578e5fd6a18c7ef349ef044
Certificate serial:       01901D7CD2C6781D2F6F138B08242256CA41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g54H5RFqXa9VeOX9ahjH7zSe8EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/46e7a2-639a-4162-9ddf-b6392c50f95a/1/g54H5RFqXa9VeOX9ahjH7zSe8EQ.mft
Manifest number:          0ED2
Signing time:             Sat 15 Jun 2024 20:00:37 +0000
Manifest this update:     Sat 15 Jun 2024 20:00:37 +0000
Manifest next update:     Sun 16 Jun 2024 20:00:37 +0000
Files and hashes:         1: 88RkDfPV4GmLxy2mAorD5wQ4Oco.roa (hash: dAo2qWEkyAQ4zC6n5BobHLJyNlhIpqkDQW1qqzADGVE=)
                          2: g54H5RFqXa9VeOX9ahjH7zSe8EQ.crl (hash: T22FkYgpu7brW6nsvW4Kjiv6FYyAYi2mr1uWbdUIcPE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/46e7a2-639a-4162-9ddf-b6392c50f95a/1/g54H5RFqXa9VeOX9ahjH7zSe8EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/46e7a2-639a-4162-9ddf-b6392c50f95a/1/g54H5RFqXa9VeOX9ahjH7zSe8EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g54H5RFqXa9VeOX9ahjH7zSe8EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 20:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:7c:d2:c6:78:1d:2f:6f:13:8b:08:24:22:56:ca:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839e07e5116a5daf5578e5fd6a18c7ef349ef044
        Validity
            Not Before: Jun 15 20:00:37 2024 GMT
            Not After : Jun 16 20:00:37 2024 GMT
        Subject: CN=9f82e05f6f18a7c175273dc8f0ec93b626ea24ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:f0:9a:22:a3:57:5a:a2:6e:66:3b:ea:e1:
                    e6:aa:10:25:b7:31:ab:d7:f4:23:d1:4c:5f:be:8f:
                    15:5d:ba:c2:84:1a:f6:d3:f9:0b:b0:77:ce:4c:57:
                    9b:18:89:aa:eb:e5:b0:2f:85:f4:25:38:56:17:9c:
                    9e:94:ee:c2:22:f3:b6:f6:08:ce:10:b5:21:4a:9b:
                    21:58:70:fe:e3:f7:b2:50:aa:99:94:13:29:ea:d1:
                    75:9c:20:d8:ed:63:ce:54:8a:d5:00:07:4b:bc:57:
                    b0:3a:14:b6:29:35:81:57:76:ea:8d:5f:8f:8d:b0:
                    73:60:d3:de:3d:fe:6c:ba:fa:f5:63:cb:e8:1c:58:
                    c1:f5:68:a8:15:58:9a:04:16:21:5f:19:42:a8:38:
                    94:09:e8:dc:38:f5:7f:77:18:b4:21:64:6d:5f:1f:
                    e5:23:fe:ef:ff:8e:09:0a:f2:7d:54:06:41:4c:89:
                    03:6a:f3:b9:d1:23:02:28:28:cd:57:6c:4b:32:63:
                    18:a8:b1:60:99:7e:58:d0:4a:5e:1d:84:ce:78:0a:
                    53:79:60:09:f7:d5:6f:9e:a4:01:87:28:75:cc:13:
                    9d:c5:88:2c:75:ec:bf:8d:85:79:e3:97:cd:91:48:
                    c0:36:58:14:eb:0e:f5:f1:5d:ca:f5:1a:83:4a:f7:
                    0f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:82:E0:5F:6F:18:A7:C1:75:27:3D:C8:F0:EC:93:B6:26:EA:24:FF
            X509v3 Authority Key Identifier:
                keyid:83:9E:07:E5:11:6A:5D:AF:55:78:E5:FD:6A:18:C7:EF:34:9E:F0:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g54H5RFqXa9VeOX9ahjH7zSe8EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/46e7a2-639a-4162-9ddf-b6392c50f95a/1/g54H5RFqXa9VeOX9ahjH7zSe8EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/46e7a2-639a-4162-9ddf-b6392c50f95a/1/g54H5RFqXa9VeOX9ahjH7zSe8EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ad:73:8e:61:7e:92:7e:fc:0c:9f:78:87:81:2d:06:d5:7f:
         dd:1f:ca:57:3a:86:a1:89:38:76:c6:c7:2c:80:b7:e0:5a:06:
         3c:18:31:09:0c:a1:a9:06:2e:75:f6:41:2e:19:93:e7:58:7b:
         c1:ee:22:1c:3b:1b:43:f3:97:bf:dc:06:e9:24:df:67:51:50:
         63:2e:4f:fc:d4:d7:a7:95:ba:b1:17:b6:ff:0c:68:8c:27:13:
         c7:0f:c2:8b:7b:25:56:44:55:e4:b6:45:38:40:2f:f6:4d:e5:
         73:52:4a:71:a5:48:56:2f:48:57:17:4b:d9:94:54:fd:dc:75:
         f8:bc:b6:85:ae:ec:82:d2:93:cf:6e:96:c6:f4:e2:6b:99:dc:
         d3:25:20:3c:c5:2d:be:8d:f2:b7:6a:71:d2:ab:90:d8:79:ab:
         46:b9:2d:a9:d3:90:d7:1e:4f:16:ae:3e:a6:9a:e0:30:8c:11:
         5c:1e:c1:d0:fb:1b:e5:01:12:fc:8a:4b:64:cb:d2:d1:34:6f:
         5f:75:c6:ba:24:63:5a:5a:0c:65:8b:40:4c:71:2a:41:c6:d0:
         f4:be:2a:7c:f9:bc:a7:89:e9:40:6a:23:f6:f9:42:3a:1e:20:
         da:23:07:45:0d:d5:63:ee:08:9e:bb:20:d8:d7:4a:19:c4:89:
         84:b2:17:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdfNLGeB0vbxOLCCQiVspBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOWUwN2U1MTE2YTVkYWY1NTc4ZTVmZDZhMThjN2VmMzQ5
ZWYwNDQwHhcNMjQwNjE1MjAwMDM3WhcNMjQwNjE2MjAwMDM3WjAzMTEwLwYDVQQD
Eyg5ZjgyZTA1ZjZmMThhN2MxNzUyNzNkYzhmMGVjOTNiNjI2ZWEyNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyjwmiKjV1qibmY76uHmqhAltzGr
1/Qj0Uxfvo8VXbrChBr20/kLsHfOTFebGImq6+WwL4X0JThWF5yelO7CIvO29gjO
ELUhSpshWHD+4/eyUKqZlBMp6tF1nCDY7WPOVIrVAAdLvFewOhS2KTWBV3bqjV+P
jbBzYNPePf5suvr1Y8voHFjB9WioFViaBBYhXxlCqDiUCejcOPV/dxi0IWRtXx/l
I/7v/44JCvJ9VAZBTIkDavO50SMCKCjNV2xLMmMYqLFgmX5Y0EpeHYTOeApTeWAJ
99VvnqQBhyh1zBOdxYgsdey/jYV545fNkUjANlgU6w718V3K9RqDSvcPmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+C4F9vGKfBdSc9yPDsk7Ym6iT/MB8GA1UdIwQY
MBaAFIOeB+URal2vVXjl/WoYx+80nvBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzU0SDVSRnFYYTlWZU9YOWFoakg3elNlOEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80NmU3YTItNjM5YS00MTYyLTlkZGYt
YjYzOTJjNTBmOTVhLzEvZzU0SDVSRnFYYTlWZU9YOWFoakg3elNlOEVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80NmU3YTItNjM5YS00MTYyLTlkZGYtYjYzOTJjNTBmOTVh
LzEvZzU0SDVSRnFYYTlWZU9YOWFoakg3elNlOEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAea1zjmF+
kn78DJ94h4EtBtV/3R/KVzqGoYk4dsbHLIC34FoGPBgxCQyhqQYudfZBLhmT51h7
we4iHDsbQ/OXv9wG6STfZ1FQYy5P/NTXp5W6sRe2/wxojCcTxw/Ci3slVkRV5LZF
OEAv9k3lc1JKcaVIVi9IVxdL2ZRU/dx1+Ly2ha7sgtKTz26WxvTia5nc0yUgPMUt
vo3yt2px0quQ2HmrRrktqdOQ1x5PFq4+pprgMIwRXB7B0Psb5QES/IpLZMvS0TRv
X3XGuiRjWloMZYtATHEqQcbQ9L4qfPm8p4npQGoj9vlCOh4g2iMHRQ3VY+4Inrsg
2NdKGcSJhLIXLw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:02 2024 by rpki-client on console-ams.rpki-client.org