Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
File:                     vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft (raw, json)
Hash identifier:          4t3Gwszr4XYyVq7hIJy2c7Ft5pyXG9kQfDAzaSloruU=
Subject key identifier:   4E:A2:33:FB:83:FD:40:42:5C:03:21:49:29:9F:78:08:B9:C4:DC:A8
Authority key identifier: BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
Certificate issuer:       /CN=bd974dc8c645ed235145caaa1355ba85f5257634
Certificate serial:       0190452F8C1AB1D654469B28D14EC036ED5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
Manifest number:          0EF6
Signing time:             Sun 23 Jun 2024 13:01:02 +0000
Manifest this update:     Sun 23 Jun 2024 13:01:02 +0000
Manifest next update:     Mon 24 Jun 2024 13:01:02 +0000
Files and hashes:         1: eEskLAXxa5lqo7Le0dIhJVhjW4E.roa (hash: 8O5TGGgkLmIZxA+U7DvWep1WBkZlID6lUYSNbpUMzGE=)
                          2: vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl (hash: 7h1vbO2/gvMGswJNibdqOx5GVJt66XZI2avI4bt8szA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:8c:1a:b1:d6:54:46:9b:28:d1:4e:c0:36:ed:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd974dc8c645ed235145caaa1355ba85f5257634
        Validity
            Not Before: Jun 23 13:01:02 2024 GMT
            Not After : Jun 24 13:01:02 2024 GMT
        Subject: CN=4ea233fb83fd40425c032149299f7808b9c4dca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b7:66:c3:7d:ed:ad:78:be:76:20:ee:60:ce:
                    64:05:3e:53:be:53:a0:3b:f0:a4:4b:66:c6:09:9f:
                    3a:01:df:53:ef:4d:18:34:83:25:64:ae:a5:3e:fd:
                    63:de:89:78:56:26:f2:db:fe:9c:72:9a:3a:c5:2b:
                    95:12:8e:0b:40:a1:c9:18:9a:25:ee:b9:37:6f:76:
                    35:29:45:08:bc:86:08:5a:98:4c:83:9a:6a:97:5d:
                    55:0f:85:a0:eb:7b:85:ad:a8:ad:eb:3c:4c:a4:1d:
                    2f:36:a6:82:9a:4a:8f:4c:6e:03:15:e0:10:db:a8:
                    45:be:1f:67:8b:61:46:56:b4:a9:55:1e:94:be:92:
                    98:b8:f9:84:b4:7f:4a:c4:b0:cd:16:d3:ac:32:cf:
                    b7:4d:3a:ce:85:7a:06:f6:98:2a:29:c2:82:14:c8:
                    19:14:4f:9a:49:74:c7:0a:cf:df:40:38:d7:04:24:
                    e9:15:c4:b5:ec:8b:84:ba:33:66:99:3f:82:25:df:
                    94:d5:d6:df:e0:8c:b3:29:6c:2d:c1:2e:bd:5a:da:
                    db:92:59:dc:da:99:db:b0:92:64:e0:3b:76:be:4e:
                    8c:08:5e:74:10:8a:d5:94:67:5b:4a:09:ab:05:1c:
                    d4:6c:bc:21:2b:a6:a3:08:69:e8:12:72:9c:a5:d5:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A2:33:FB:83:FD:40:42:5C:03:21:49:29:9F:78:08:B9:C4:DC:A8
            X509v3 Authority Key Identifier:
                keyid:BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d3:84:e9:8b:dd:b5:8c:2b:c1:02:36:f4:f6:9d:3e:e4:d5:
         e8:4a:d7:77:83:60:95:cd:4a:95:74:8e:c0:e2:1f:10:23:c0:
         64:6b:28:c8:ca:f6:2b:c3:38:f1:13:9b:f2:4c:8d:e5:2d:0a:
         a7:ee:34:80:ab:4a:3b:c3:fb:f8:e7:30:2c:d8:62:81:f4:f4:
         a0:a8:6d:44:83:75:87:bd:2d:7f:d3:d7:a0:3e:0c:42:ba:e7:
         9b:e9:7c:26:f3:41:99:83:e9:78:8d:bd:5a:03:b3:3c:95:92:
         fa:74:88:f6:f8:79:ea:5c:d0:b1:cb:c4:65:36:81:74:5d:a9:
         87:8f:9a:86:1f:24:02:a8:c0:8a:d1:9a:bb:f0:92:b1:94:f1:
         b1:7b:17:8b:e5:d0:43:6b:68:f4:e9:da:72:97:aa:ad:78:a8:
         21:49:a3:a8:e9:eb:d3:14:72:d6:90:f7:80:4c:88:0d:40:43:
         d6:d1:8c:5c:bb:6c:79:07:94:96:df:8f:b2:e7:02:2a:ad:a2:
         73:a0:7c:75:00:44:af:f4:91:f9:88:ed:6a:64:ae:8e:c7:6c:
         84:c1:d3:07:45:b4:77:84:e5:2f:30:46:d4:81:d4:fa:e1:b2:
         cc:f0:e5:be:0d:1e:6e:04:d2:a0:2c:e2:8a:3a:98:7a:5d:a3:
         ce:5f:d5:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFL4wasdZURpso0U7ANu1fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTc0ZGM4YzY0NWVkMjM1MTQ1Y2FhYTEzNTViYTg1ZjUy
NTc2MzQwHhcNMjQwNjIzMTMwMTAyWhcNMjQwNjI0MTMwMTAyWjAzMTEwLwYDVQQD
Eyg0ZWEyMzNmYjgzZmQ0MDQyNWMwMzIxNDkyOTlmNzgwOGI5YzRkY2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bdmw33trXi+diDuYM5kBT5TvlOg
O/CkS2bGCZ86Ad9T700YNIMlZK6lPv1j3ol4Viby2/6ccpo6xSuVEo4LQKHJGJol
7rk3b3Y1KUUIvIYIWphMg5pql11VD4Wg63uFrait6zxMpB0vNqaCmkqPTG4DFeAQ
26hFvh9ni2FGVrSpVR6UvpKYuPmEtH9KxLDNFtOsMs+3TTrOhXoG9pgqKcKCFMgZ
FE+aSXTHCs/fQDjXBCTpFcS17IuEujNmmT+CJd+U1dbf4IyzKWwtwS69Wtrbklnc
2pnbsJJk4Dt2vk6MCF50EIrVlGdbSgmrBRzUbLwhK6ajCGnoEnKcpdWfHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6iM/uD/UBCXAMhSSmfeAi5xNyoMB8GA1UdIwQY
MBaAFL2XTcjGRe0jUUXKqhNVuoX1JXY0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpkTnlNWkY3U05SUmNxcUUxVzZoZlVsZGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84OGM1YjctYjEyNi00ZWQzLTlkN2Et
ZTViYTRiZmExNzFhLzEvdlpkTnlNWkY3U05SUmNxcUUxVzZoZlVsZGpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84OGM1YjctYjEyNi00ZWQzLTlkN2EtZTViYTRiZmExNzFh
LzEvdlpkTnlNWkY3U05SUmNxcUUxVzZoZlVsZGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtOE6Yvd
tYwrwQI29PadPuTV6ErXd4Nglc1KlXSOwOIfECPAZGsoyMr2K8M48ROb8kyN5S0K
p+40gKtKO8P7+OcwLNhigfT0oKhtRIN1h70tf9PXoD4MQrrnm+l8JvNBmYPpeI29
WgOzPJWS+nSI9vh56lzQscvEZTaBdF2ph4+ahh8kAqjAitGau/CSsZTxsXsXi+XQ
Q2to9OnacpeqrXioIUmjqOnr0xRy1pD3gEyIDUBD1tGMXLtseQeUlt+PsucCKq2i
c6B8dQBEr/SR+YjtamSujsdshMHTB0W0d4TlLzBG1IHU+uGyzPDlvg0ebgTSoCzi
ijqYel2jzl/VEA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:14:25 2024 by rpki-client on console-fra.rpki-client.org