Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File:                     r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier:          5VU8KeFtBl2cTqqz3S7SFbYkp0WiHJLY4DAZ13U3/TY=
Subject key identifier:   C8:1E:9E:BA:5A:B5:4E:F1:A5:07:0E:9D:24:E0:79:37:DC:05:E5:1B
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer:       /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial:       0190459D88288E79622D91AFEEFD9C9DA160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number:          11DD
Signing time:             Sun 23 Jun 2024 15:01:10 +0000
Manifest this update:     Sun 23 Jun 2024 15:01:10 +0000
Manifest next update:     Mon 24 Jun 2024 15:01:10 +0000
Files and hashes:         1: PeexqNSiQc99rcm_VoKyCbguMF0.roa (hash: GLq4kn4bA3gBXs0Ap/3MCi0/A7LBby848AD8TbEKj84=)
                          2: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: e6dP2cObP5O91yOrL482zQZ/Haqhq0nYNbSaM2AM90o=)
                          3: uIKX8t6tTImBh1iZQn16or_6d3Q.roa (hash: T1A//JrN/0KqesEvZD0WRnyQxl4tuAbyJYkUfGRrZpc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:88:28:8e:79:62:2d:91:af:ee:fd:9c:9d:a1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
        Validity
            Not Before: Jun 23 15:01:10 2024 GMT
            Not After : Jun 24 15:01:10 2024 GMT
        Subject: CN=c81e9eba5ab54ef1a5070e9d24e07937dc05e51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:01:0c:e7:da:74:19:ff:61:b0:11:de:42:
                    7f:6f:fe:d3:6b:8e:f4:11:33:de:40:7d:18:d2:2d:
                    6d:f7:84:b1:7b:72:1c:33:7b:4f:e8:53:59:fb:d5:
                    82:fd:24:12:70:83:97:14:9d:68:cc:df:27:97:27:
                    2d:73:ba:66:d2:cc:81:b0:3d:e8:5b:b6:8f:0d:92:
                    e6:6e:cb:30:61:6e:86:7e:94:0f:04:69:ce:e3:0f:
                    34:12:0f:5c:56:ff:3b:2d:99:2e:86:d3:28:01:48:
                    02:f8:5a:50:38:d6:57:e3:48:5f:1f:c4:52:0d:27:
                    4b:ad:9a:ce:d2:22:03:4e:e0:c5:a5:03:e2:75:39:
                    de:65:2a:d5:7e:7d:4f:9b:06:3e:e3:24:db:6a:26:
                    18:10:71:9b:90:9d:e7:37:8f:8e:d0:5c:ef:54:a7:
                    d7:23:74:28:ea:9f:e9:d9:04:a8:bd:c1:a3:f6:c4:
                    b7:2d:59:65:ac:12:d2:1f:d1:93:5c:28:1b:2f:ab:
                    b6:a1:f7:76:38:81:21:3b:f1:3c:b1:4c:1b:81:87:
                    a2:08:88:06:d3:4e:7b:47:71:d5:36:88:ed:4f:d4:
                    4a:25:fb:4c:d8:dd:c7:a5:c5:f3:4e:47:a3:8e:6e:
                    91:45:d0:6d:e3:9d:53:9d:2a:d1:ab:49:54:94:e9:
                    a8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1E:9E:BA:5A:B5:4E:F1:A5:07:0E:9D:24:E0:79:37:DC:05:E5:1B
            X509v3 Authority Key Identifier:
                keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a7:1a:9a:4f:0a:9b:b3:a3:37:36:89:51:05:ab:d2:1f:7b:
         6a:03:0f:47:b2:f5:39:5f:bb:1d:92:e0:fa:e0:94:11:10:c3:
         fd:31:98:f3:ad:5a:29:19:9e:ca:68:ae:af:50:1a:eb:3f:f3:
         65:c0:92:1f:d2:ea:8f:22:c0:3d:ea:42:be:e2:cd:57:56:84:
         7a:aa:cb:0a:59:3a:21:2a:2c:a5:a0:bf:12:64:09:a4:ae:c0:
         62:99:b9:42:99:e5:be:f4:cf:38:b6:b5:75:f7:7e:34:dd:1c:
         4d:78:fe:64:c9:6b:df:6b:67:b1:1d:f3:b3:83:d1:a7:49:9a:
         5a:2f:4c:21:c7:56:71:8c:45:38:f0:43:91:28:90:f9:7c:96:
         11:aa:22:bc:f6:81:15:f1:cd:e0:b5:d4:51:ac:de:da:d0:ce:
         43:91:88:13:56:d1:d8:73:85:6c:bd:d8:06:6d:92:01:6e:f7:
         4b:1e:57:0f:c8:9f:77:88:f1:6b:f9:5a:98:b0:8b:9f:25:f8:
         17:ce:bc:64:33:2d:a8:8d:65:22:1c:e2:57:7e:8c:4c:c7:22:
         b8:d6:6a:f6:3f:0a:14:cc:f0:46:7f:48:9b:0e:55:47:dc:b7:
         3f:8a:4c:ff:9b:fc:85:cf:65:3f:45:28:69:31:af:46:15:ce:
         74:98:e1:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFnYgojnliLZGv7v2cnaFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNGVmNGE4ZWQzNzExYjZhY2Q2OGMwZjQ4ZjYyMTgzMWZk
NWFhYWUwHhcNMjQwNjIzMTUwMTEwWhcNMjQwNjI0MTUwMTEwWjAzMTEwLwYDVQQD
EyhjODFlOWViYTVhYjU0ZWYxYTUwNzBlOWQyNGUwNzkzN2RjMDVlNTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp4BDOfadBn/YbAR3kJ/b/7Ta470
ETPeQH0Y0i1t94Sxe3IcM3tP6FNZ+9WC/SQScIOXFJ1ozN8nlyctc7pm0syBsD3o
W7aPDZLmbsswYW6GfpQPBGnO4w80Eg9cVv87LZkuhtMoAUgC+FpQONZX40hfH8RS
DSdLrZrO0iIDTuDFpQPidTneZSrVfn1PmwY+4yTbaiYYEHGbkJ3nN4+O0FzvVKfX
I3Qo6p/p2QSovcGj9sS3LVllrBLSH9GTXCgbL6u2ofd2OIEhO/E8sUwbgYeiCIgG
0057R3HVNojtT9RKJftM2N3HpcXzTkejjm6RRdBt451TnSrRq0lUlOmoFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgenrpatU7xpQcOnSTgeTfcBeUbMB8GA1UdIwQY
MBaAFK9O9KjtNxG2rNaMD0j2IYMf1aquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDkt
Y2I5YzU4ZjUxMGNiLzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDktY2I5YzU4ZjUxMGNi
LzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfacamk8K
m7OjNzaJUQWr0h97agMPR7L1OV+7HZLg+uCUERDD/TGY861aKRmeymiur1Aa6z/z
ZcCSH9LqjyLAPepCvuLNV1aEeqrLClk6ISospaC/EmQJpK7AYpm5QpnlvvTPOLa1
dfd+NN0cTXj+ZMlr32tnsR3zs4PRp0maWi9MIcdWcYxFOPBDkSiQ+XyWEaoivPaB
FfHN4LXUUaze2tDOQ5GIE1bR2HOFbL3YBm2SAW73Sx5XD8ifd4jxa/lamLCLnyX4
F868ZDMtqI1lIhziV36MTMciuNZq9j8KFMzwRn9Imw5VR9y3P4pM/5v8hc9lP0Uo
aTGvRhXOdJjhDA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:15:56 2024 by rpki-client on console-fra.rpki-client.org