Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
File:                     REIuqj2u32uQIVnu2-lMqbfSKE8.mft (raw, json)
Hash identifier:          w559gbzNJnQ9QXSusx0xQs/ofr92fwLc5EBMkEFg5mY=
Subject key identifier:   E7:6D:1E:11:70:34:17:92:0A:DA:49:68:DA:9B:7C:11:94:7F:45:19
Authority key identifier: 44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
Certificate issuer:       /CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Certificate serial:       019041C0A6346BC90F3C07302A31606FC66B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
Manifest number:          080B
Signing time:             Sat 22 Jun 2024 21:01:02 +0000
Manifest this update:     Sat 22 Jun 2024 21:01:02 +0000
Manifest next update:     Sun 23 Jun 2024 21:01:02 +0000
Files and hashes:         1: REIuqj2u32uQIVnu2-lMqbfSKE8.crl (hash: 2QGZeD6tfHucmv68vwrl+h4SLSv4x1KRkVabv1WtJng=)
                          2: XZlZ_8GBedUKnRXCB745V57iRrU.roa (hash: knTSN57tIEFuuC7/UZ1UfHk3hGF0A7sk13FH8GIHzV0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:c0:a6:34:6b:c9:0f:3c:07:30:2a:31:60:6f:c6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
        Validity
            Not Before: Jun 22 21:01:02 2024 GMT
            Not After : Jun 23 21:01:02 2024 GMT
        Subject: CN=e76d1e11703417920ada4968da9b7c11947f4519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:30:9d:f4:79:cb:4f:56:7e:e0:21:d7:e2:
                    d5:f0:11:23:bd:33:1e:99:4b:6d:20:44:44:07:26:
                    c3:f1:f0:65:8e:1d:b7:13:41:90:8b:6b:82:5a:7d:
                    45:b6:cf:4f:77:91:53:b9:4b:fd:39:2e:65:67:da:
                    7f:07:93:62:4d:45:38:b7:20:f0:6d:78:51:4a:f0:
                    60:1f:67:06:b4:cd:32:a8:03:70:80:30:a1:c1:d0:
                    13:28:d2:3d:4a:77:5e:64:48:e8:4c:b4:e9:06:59:
                    06:14:0f:79:cf:b9:77:5d:eb:8b:78:24:8c:17:43:
                    8e:b1:11:4d:0e:fc:fc:91:94:aa:35:ed:cc:f0:80:
                    f7:8e:73:27:c3:5b:ed:8b:33:ab:2f:26:ad:6a:a8:
                    f9:de:63:69:80:56:97:05:2a:5b:40:34:db:12:57:
                    d0:09:12:46:87:ab:43:19:44:49:65:13:a3:6d:a8:
                    94:c5:e6:74:91:a8:5c:7d:5e:74:b7:47:53:a5:b0:
                    68:9e:ae:59:75:09:7b:98:06:3d:8a:6b:2f:21:22:
                    eb:44:54:19:03:1e:e7:89:e7:2a:f8:d8:96:22:c1:
                    85:cf:99:e4:21:27:d0:c2:8e:10:c9:8a:dd:04:4b:
                    8a:91:fe:ef:9b:75:38:69:cc:64:05:2e:94:bc:68:
                    69:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6D:1E:11:70:34:17:92:0A:DA:49:68:DA:9B:7C:11:94:7F:45:19
            X509v3 Authority Key Identifier:
                keyid:44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1a:3d:d5:ed:a8:6b:c5:ad:f2:45:db:15:0b:1b:43:61:33:
         da:c5:ac:9e:34:8a:75:6a:f3:d3:8b:b1:ab:9f:95:df:02:a4:
         42:45:3f:f2:3a:26:37:26:a4:dd:2c:03:ab:83:fc:8d:e1:bf:
         6d:cc:22:67:08:aa:d1:89:56:dd:98:7f:73:01:c8:fa:48:40:
         64:9d:a3:e8:f9:90:ee:b1:39:7d:c2:a9:c0:43:21:6b:e1:00:
         c1:32:3c:3c:ed:dd:ec:15:e5:2d:74:2b:3f:5a:12:3b:f1:94:
         90:85:91:92:76:98:a0:6d:0b:9b:2b:2b:e4:e6:59:4a:00:7a:
         44:fd:80:f4:c8:4b:68:79:42:d8:f6:37:63:f0:dd:3e:e9:43:
         d9:dd:d2:2f:03:48:a1:78:5e:ad:67:ed:7d:fe:2b:71:48:ea:
         20:a1:9b:11:20:73:1d:3a:22:42:e3:85:e3:cb:37:56:e9:81:
         38:dd:47:68:49:fb:87:15:d2:a2:78:ba:c9:b7:04:09:78:46:
         c3:ad:80:d2:c1:b3:a2:e4:56:74:87:d6:b8:0d:1a:ae:9c:a8:
         31:12:e9:1a:b0:c1:45:0e:18:c5:ba:30:6d:ab:eb:52:a7:74:
         7f:51:1a:09:b2:b7:df:59:bd:87:67:19:17:aa:aa:68:f2:ff:
         7e:03:06:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBBwKY0a8kPPAcwKjFgb8ZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDIyZWFhM2RhZWRmNmI5MDIxNTllZWRiZTk0Y2E5Yjdk
MjI4NGYwHhcNMjQwNjIyMjEwMTAyWhcNMjQwNjIzMjEwMTAyWjAzMTEwLwYDVQQD
EyhlNzZkMWUxMTcwMzQxNzkyMGFkYTQ5NjhkYTliN2MxMTk0N2Y0NTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjUwnfR5y09WfuAh1+LV8BEjvTMe
mUttIEREBybD8fBljh23E0GQi2uCWn1Fts9Pd5FTuUv9OS5lZ9p/B5NiTUU4tyDw
bXhRSvBgH2cGtM0yqANwgDChwdATKNI9SndeZEjoTLTpBlkGFA95z7l3XeuLeCSM
F0OOsRFNDvz8kZSqNe3M8ID3jnMnw1vtizOrLyataqj53mNpgFaXBSpbQDTbElfQ
CRJGh6tDGURJZROjbaiUxeZ0kahcfV50t0dTpbBonq5ZdQl7mAY9imsvISLrRFQZ
Ax7niecq+NiWIsGFz5nkISfQwo4QyYrdBEuKkf7vm3U4acxkBS6UvGhpzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdtHhFwNBeSCtpJaNqbfBGUf0UZMB8GA1UdIwQY
MBaAFERCLqo9rt9rkCFZ7tvpTKm30ihPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVJdXFqMnUzMnVRSVZudTItbE1xYmZTS0U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9kZDk0NGQtOGZhYS00Y2NlLWFhZmUt
YzA1MGY0YzA1ZjI5LzEvUkVJdXFqMnUzMnVRSVZudTItbE1xYmZTS0U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9kZDk0NGQtOGZhYS00Y2NlLWFhZmUtYzA1MGY0YzA1ZjI5
LzEvUkVJdXFqMnUzMnVRSVZudTItbE1xYmZTS0U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFho91e2o
a8Wt8kXbFQsbQ2Ez2sWsnjSKdWrz04uxq5+V3wKkQkU/8jomNyak3SwDq4P8jeG/
bcwiZwiq0YlW3Zh/cwHI+khAZJ2j6PmQ7rE5fcKpwEMha+EAwTI8PO3d7BXlLXQr
P1oSO/GUkIWRknaYoG0Lmysr5OZZSgB6RP2A9MhLaHlC2PY3Y/DdPulD2d3SLwNI
oXherWftff4rcUjqIKGbESBzHToiQuOF48s3VumBON1HaEn7hxXSoni6ybcECXhG
w62A0sGzouRWdIfWuA0arpyoMRLpGrDBRQ4YxbowbavrUqd0f1EaCbK331m9h2cZ
F6qqaPL/fgMGiQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:25:29 2024 by rpki-client on console-ams.rpki-client.org