Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File:                     Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier:          UoTHBv2QvPpNRvffTj3cXSnuZzo5RtKolsAj/Y9bhfA=
Subject key identifier:   AD:29:08:78:10:02:D0:14:F7:D5:3F:D8:35:6E:86:93:0F:10:C1:FF
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer:       /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial:       01901D0F8846FCC7935786BA7119C0F2CFF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number:          0EE1
Signing time:             Sat 15 Jun 2024 18:01:15 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:15 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:15 +0000
Files and hashes:         1: 1-FLJLyiUm8oDxeZ8l12MNlfNojg.roa (hash: +2PsEFyx2YnquOEHBJzNj7nUXJqc9OUMNARHxeljqiY=)
                          2: T4Ompwr-kUDY-c2o4LuA9Tog1ds.roa (hash: HNEafpjJwhYZ5xM51yYtQTAThxL7C79G6YZjpFGxvgs=)
                          3: XGVz_aUFjO2Zl5dSX8HvQ5PMp_o.roa (hash: OUg5KJ2qZpcIHvGZ9z9kLqkG28wmtcJSqgxf8+kKdOc=)
                          4: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: xjvgc1lsGajBhLWX7by8Ie2SJ4myifl3SsEEZZRhl5I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:88:46:fc:c7:93:57:86:ba:71:19:c0:f2:cf:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
        Validity
            Not Before: Jun 15 18:01:15 2024 GMT
            Not After : Jun 16 18:01:15 2024 GMT
        Subject: CN=ad2908781002d014f7d53fd8356e86930f10c1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:e8:6a:bb:e2:49:60:75:83:cb:fc:4e:9b:
                    c6:8d:fb:76:06:bb:c5:35:9c:9b:50:1d:6a:6f:a3:
                    82:43:ab:8a:65:7e:82:1a:26:9c:58:7a:1f:4e:33:
                    ec:3d:9e:98:83:23:41:72:a4:35:ca:f2:d8:33:02:
                    9c:c0:f9:65:46:25:41:0d:57:ab:48:a1:3d:71:a2:
                    4e:a9:eb:c3:5c:a7:7f:6c:fe:0c:fd:e1:da:80:13:
                    b6:99:4d:ba:d6:a2:f6:b9:b5:6b:ea:83:89:c8:b6:
                    4a:e6:a3:8d:f8:4b:c9:2c:2a:08:a6:8f:c6:06:ee:
                    85:37:b8:3c:7d:14:1d:41:39:c8:dd:69:50:c7:bc:
                    43:f3:c1:fa:5b:f9:47:44:ee:f7:00:0e:36:95:00:
                    6a:3a:bb:9c:76:b7:2a:09:e5:0a:8b:17:b7:fe:38:
                    0f:f3:68:3c:4a:27:fc:0b:2a:c8:41:15:29:9c:8c:
                    d4:5c:16:cc:7b:bd:a7:d8:2f:7b:83:35:1d:1e:e4:
                    76:7b:5a:bd:03:82:03:a7:15:ac:63:8b:c9:af:87:
                    79:45:33:37:4a:0d:d1:f2:c1:7d:0d:ae:f0:4c:d3:
                    c4:56:fe:6a:7c:bb:e9:40:86:bc:7a:b2:62:45:d3:
                    93:c0:f2:82:10:d2:ce:38:5d:23:d4:e7:cf:fc:6f:
                    f6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:29:08:78:10:02:D0:14:F7:D5:3F:D8:35:6E:86:93:0F:10:C1:FF
            X509v3 Authority Key Identifier:
                keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:13:cf:b9:a2:0b:ad:25:7e:a7:d5:5b:b5:12:f6:9b:f1:1e:
         39:19:ac:3f:fe:ec:ce:c9:c9:14:8f:5a:a4:43:7d:2e:20:9c:
         f1:eb:40:f9:b9:49:36:87:e5:b2:36:45:e1:c0:b0:bc:77:bb:
         69:bb:4d:5a:d9:5b:5a:41:1a:a1:04:69:78:3a:f2:d6:00:ea:
         d4:ae:79:5b:1a:56:aa:eb:93:88:7f:d7:5e:7c:11:7d:68:c9:
         b6:33:c9:b0:77:84:12:38:5a:c9:53:00:be:20:d9:75:bc:28:
         63:4f:a9:ee:ac:07:80:dd:82:e0:b1:84:07:f3:f5:37:44:fc:
         a6:1e:41:b2:a3:88:0d:c8:78:c4:69:c7:1a:ee:25:62:53:87:
         f8:7c:09:4e:4e:da:d8:09:3e:65:e6:89:e2:fa:53:4a:0b:54:
         12:ca:69:00:0a:30:9d:f7:55:60:98:02:ef:51:ae:c5:7b:87:
         bd:8e:e3:0a:55:f5:a9:e3:21:5b:42:90:e7:ad:96:99:1c:0d:
         72:2f:f7:45:40:83:c4:00:de:27:44:1a:1d:cd:41:8f:71:c2:
         55:c3:4c:01:ea:4b:12:03:c8:f2:10:74:4c:ac:16:8b:42:8f:
         37:94:0b:af:c3:72:a8:85:7f:23:de:62:98:33:d2:6a:de:1e:
         63:12:5b:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdD4hG/MeTV4a6cRnA8s/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NWU0ZDdlYThhMzQ3MGM5NzAzZWU3NTUxNDgxYzM2Zjc3
NGZlYmIwHhcNMjQwNjE1MTgwMTE1WhcNMjQwNjE2MTgwMTE1WjAzMTEwLwYDVQQD
EyhhZDI5MDg3ODEwMDJkMDE0ZjdkNTNmZDgzNTZlODY5MzBmMTBjMWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN3oarviSWB1g8v8TpvGjft2BrvF
NZybUB1qb6OCQ6uKZX6CGiacWHofTjPsPZ6YgyNBcqQ1yvLYMwKcwPllRiVBDVer
SKE9caJOqevDXKd/bP4M/eHagBO2mU261qL2ubVr6oOJyLZK5qON+EvJLCoIpo/G
Bu6FN7g8fRQdQTnI3WlQx7xD88H6W/lHRO73AA42lQBqOrucdrcqCeUKixe3/jgP
82g8Sif8CyrIQRUpnIzUXBbMe72n2C97gzUdHuR2e1q9A4IDpxWsY4vJr4d5RTM3
Sg3R8sF9Da7wTNPEVv5qfLvpQIa8erJiRdOTwPKCENLOOF0j1OfP/G/2xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0pCHgQAtAU99U/2DVuhpMPEMH/MB8GA1UdIwQY
MBaAFGZeTX6oo0cMlwPudVFIHDb3dP67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmIt
MTYyZWQ2MjRlMjgyLzEvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmItMTYyZWQ2MjRlMjgy
LzEvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBPPuaIL
rSV+p9VbtRL2m/EeORmsP/7szsnJFI9apEN9LiCc8etA+blJNoflsjZF4cCwvHe7
abtNWtlbWkEaoQRpeDry1gDq1K55WxpWquuTiH/XXnwRfWjJtjPJsHeEEjhayVMA
viDZdbwoY0+p7qwHgN2C4LGEB/P1N0T8ph5BsqOIDch4xGnHGu4lYlOH+HwJTk7a
2Ak+ZeaJ4vpTSgtUEsppAAownfdVYJgC71GuxXuHvY7jClX1qeMhW0KQ562WmRwN
ci/3RUCDxADeJ0QaHc1Bj3HCVcNMAepLEgPI8hB0TKwWi0KPN5QLr8NyqIV/I95i
mDPSat4eYxJb3w==
-----END CERTIFICATE-----
Generated at Sat Jun 15 21:07:25 2024 by rpki-client on console-ams.rpki-client.org