Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
File:                     MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft (raw, json)
Hash identifier:          5iHW5K7SiqXA10aLtWOlqZ+UPBGpZILDI270KrwBV7Y=
Subject key identifier:   ED:0C:B1:16:A4:AC:9D:6D:43:CA:5D:71:77:0B:4A:EC:4C:E5:60:E1
Authority key identifier: 32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43
Certificate issuer:       /CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
Certificate serial:       01903328F0FACAB1AC7BAD70EFA4BE64294C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
Manifest number:          01B3
Signing time:             Thu 20 Jun 2024 01:00:39 +0000
Manifest this update:     Thu 20 Jun 2024 01:00:39 +0000
Manifest next update:     Fri 21 Jun 2024 01:00:39 +0000
Files and hashes:         1: 6C5NluXbCGGIZvz90v7p5F-ZkuY.roa (hash: bZ8iWCsffXWoB7Tbp6+x9Q4F0M7xUxole7teHahCMMk=)
                          2: MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl (hash: qGiK6SpBCUkRB+Ngwo76vGOvQHIiO5YRk9g3KuzBPvc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 01:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:28:f0:fa:ca:b1:ac:7b:ad:70:ef:a4:be:64:29:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3204c03c36c806d687e83ea8d2720ceebbbdc343
        Validity
            Not Before: Jun 20 01:00:39 2024 GMT
            Not After : Jun 21 01:00:39 2024 GMT
        Subject: CN=ed0cb116a4ac9d6d43ca5d71770b4aec4ce560e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:53:37:26:ae:8d:79:3c:c1:ba:e2:83:a9:
                    ae:44:70:a3:fe:c0:91:5b:0f:a6:29:e3:d9:e7:82:
                    a7:13:d4:c0:b0:1e:0d:2b:4f:ac:5c:8f:4b:3f:82:
                    39:d3:4f:c1:9a:3a:95:7e:a7:4a:5e:4e:bc:d5:e3:
                    11:01:aa:eb:20:59:28:53:16:d4:cc:f1:3c:18:14:
                    69:9c:5b:3e:e8:bf:65:78:ec:79:7a:a5:9d:88:e2:
                    89:39:ef:e0:74:63:cc:ea:2c:ba:59:88:31:c8:6e:
                    f7:61:eb:b6:fa:0d:1c:1e:f3:8e:49:b6:11:0c:35:
                    42:60:6f:48:c8:db:03:e0:09:32:02:d6:b9:94:28:
                    2a:bc:61:05:f6:d9:04:7d:32:04:aa:1b:c3:f8:6f:
                    4e:23:e9:ac:5b:f9:61:53:5f:f3:47:ce:45:4c:e8:
                    39:0f:cd:ab:5d:1e:fd:ae:2e:84:10:3d:14:57:03:
                    45:87:c8:c7:40:04:3a:e0:2f:fe:e3:fc:6c:a0:af:
                    c5:bb:68:41:c6:60:33:0e:29:88:b7:8a:91:93:12:
                    97:f3:9c:0a:a1:92:ce:d7:54:bd:36:ea:f7:21:6e:
                    0b:15:a8:11:16:2b:7b:c3:4f:df:76:73:84:c9:76:
                    db:0e:ff:2b:9e:ca:ff:f7:80:48:a5:4b:27:9d:e9:
                    a0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0C:B1:16:A4:AC:9D:6D:43:CA:5D:71:77:0B:4A:EC:4C:E5:60:E1
            X509v3 Authority Key Identifier:
                keyid:32:04:C0:3C:36:C8:06:D6:87:E8:3E:A8:D2:72:0C:EE:BB:BD:C3:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgTAPDbIBtaH6D6o0nIM7ru9w0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5bf797-bc55-48c1-9e92-992825cd3214/1/MgTAPDbIBtaH6D6o0nIM7ru9w0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a5:b1:88:36:7e:ff:60:f5:2c:ca:30:d0:ff:df:59:3c:f5:
         97:17:50:b1:5b:05:c0:ba:6a:32:c0:4e:c2:c5:37:f8:42:2e:
         af:67:da:ea:0e:d7:cf:9c:8d:5f:ce:3c:1c:6d:bf:7b:03:06:
         88:5e:c3:4d:02:9a:fc:d9:72:b8:14:89:18:75:4b:13:63:58:
         78:53:cd:0f:33:12:c6:4d:29:f7:b0:58:69:44:f0:00:a5:06:
         1a:f1:bd:ab:ab:23:6b:e2:c0:57:20:10:50:83:b9:e2:0c:f1:
         12:68:f8:5f:a5:bb:67:d9:67:62:1b:38:85:11:22:57:c8:6e:
         8c:b4:99:55:81:bf:4a:70:a4:a4:ad:c5:16:4c:17:70:70:d6:
         ef:72:2f:1e:f9:30:25:48:05:d9:f9:96:15:16:e1:1c:11:5c:
         fa:97:39:ed:b9:90:88:ad:26:fd:5c:43:3e:b9:45:dd:7c:17:
         70:3c:8f:1b:05:f8:1d:62:86:e4:19:a6:df:05:6c:22:10:f3:
         ef:93:c7:b7:23:24:0d:91:a9:14:08:d8:8c:99:db:b6:3c:01:
         af:34:54:3e:bd:d3:3e:bc:05:1c:0a:c9:c7:56:a9:3c:ad:11:
         6a:0b:72:08:d5:95:ec:f5:1a:05:10:98:22:b3:33:f9:1a:16:
         89:13:c7:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAzKPD6yrGse61w76S+ZClMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDRjMDNjMzZjODA2ZDY4N2U4M2VhOGQyNzIwY2VlYmJi
ZGMzNDMwHhcNMjQwNjIwMDEwMDM5WhcNMjQwNjIxMDEwMDM5WjAzMTEwLwYDVQQD
EyhlZDBjYjExNmE0YWM5ZDZkNDNjYTVkNzE3NzBiNGFlYzRjZTU2MGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oRTNyaujXk8wbrig6muRHCj/sCR
Ww+mKePZ54KnE9TAsB4NK0+sXI9LP4I500/BmjqVfqdKXk681eMRAarrIFkoUxbU
zPE8GBRpnFs+6L9leOx5eqWdiOKJOe/gdGPM6iy6WYgxyG73Yeu2+g0cHvOOSbYR
DDVCYG9IyNsD4AkyAta5lCgqvGEF9tkEfTIEqhvD+G9OI+msW/lhU1/zR85FTOg5
D82rXR79ri6EED0UVwNFh8jHQAQ64C/+4/xsoK/Fu2hBxmAzDimIt4qRkxKX85wK
oZLO11S9Nur3IW4LFagRFit7w0/fdnOEyXbbDv8rnsr/94BIpUsnnemgEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0MsRakrJ1tQ8pdcXcLSuxM5WDhMB8GA1UdIwQY
MBaAFDIEwDw2yAbWh+g+qNJyDO67vcNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81YmY3OTctYmM1NS00OGMxLTllOTIt
OTkyODI1Y2QzMjE0LzEvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81YmY3OTctYmM1NS00OGMxLTllOTItOTkyODI1Y2QzMjE0
LzEvTWdUQVBEYklCdGFINkQ2bzBuSU03cnU5dzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqWxiDZ+
/2D1LMow0P/fWTz1lxdQsVsFwLpqMsBOwsU3+EIur2fa6g7Xz5yNX848HG2/ewMG
iF7DTQKa/NlyuBSJGHVLE2NYeFPNDzMSxk0p97BYaUTwAKUGGvG9q6sja+LAVyAQ
UIO54gzxEmj4X6W7Z9lnYhs4hREiV8hujLSZVYG/SnCkpK3FFkwXcHDW73IvHvkw
JUgF2fmWFRbhHBFc+pc57bmQiK0m/VxDPrlF3XwXcDyPGwX4HWKG5Bmm3wVsIhDz
75PHtyMkDZGpFAjYjJnbtjwBrzRUPr3TPrwFHArJx1apPK0RagtyCNWV7PUaBRCY
IrMz+RoWiRPH5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 20 10:42:05 2024 by rpki-client on console-ams.rpki-client.org