Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft
File:                     iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json)
Hash identifier:          1qbi/WEw8lNKKxwCDc7/+CsPZ5gtrFhgH3xBQ30FVrQ=
Subject key identifier:   3C:EC:97:B4:1E:92:ED:E0:F3:16:E9:87:F6:5E:AF:A3:73:6E:FA:9B
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Certificate issuer:       /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial:       01901D0F6DD93913BE9C766CEA96C4337E42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft
Manifest number:          11CD
Signing time:             Sat 15 Jun 2024 18:01:08 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:08 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:08 +0000
Files and hashes:         1: ZxBPcLMmva1bYPo3iRkNrUkvCHk.roa (hash: QUL0Pf41OG1cwKo2XjLVpokA+kgYmoy9oA+Nw8r/d9Q=)
                          2: hBHGDSUJnbInp10tDOGMQ3JLEmc.roa (hash: wbEih45wFXmAmiFph3JidpiY9VFOHtKmvKDs2mvgovM=)
                          3: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: IoP96z4SE1mFfpkmzIzhiTuR0MhHxDLYR4KZUk1Pjxo=)
                          4: jxVqkTd_Y-0BmXMgUIUd0nhaPA0.roa (hash: oToRyyXEjUe2YHUSueV2Du2dUBdPLVjwcqWw9B2WSIE=)
                          5: pL2uqtMbX8Uz3VS4PlAIIMsisXk.roa (hash: j49l54TLMI6uWlQFuOqXT5sOi1eKJK79R5Xml0k1KE4=)
                          6: vNW4fO3dmryD6WLR1KJexjiY89Y.roa (hash: /io3UuZICKsnrIe2j8zx2aqX2r5Q0kerUiKYfuhOKDQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:6d:d9:39:13:be:9c:76:6c:ea:96:c4:33:7e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
        Validity
            Not Before: Jun 15 18:01:08 2024 GMT
            Not After : Jun 16 18:01:08 2024 GMT
        Subject: CN=3cec97b41e92ede0f316e987f65eafa3736efa9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:fb:12:19:17:1f:f8:37:94:c1:f8:65:50:
                    d1:46:bd:a8:94:f7:b1:ee:91:58:9e:ff:a0:86:91:
                    d9:51:0d:35:86:3e:68:f5:62:b3:30:31:7d:69:1e:
                    02:b4:5a:09:f2:c2:32:b5:6c:55:36:f5:6b:88:0d:
                    97:20:92:5e:db:ea:d5:cc:18:6c:18:1d:d4:98:66:
                    d4:f7:ca:5f:61:67:99:16:91:f2:e8:81:af:c0:ea:
                    57:53:f2:95:13:bc:53:3a:27:7a:53:0a:e0:c2:20:
                    36:de:93:b5:31:e8:3e:a5:68:ca:61:a1:f4:83:54:
                    42:e9:08:96:01:9a:84:d1:16:b2:1d:c4:41:f9:37:
                    41:e8:8d:6a:d7:18:99:12:00:30:d3:5b:6a:b8:3c:
                    ac:24:6d:14:e9:2e:0b:04:50:1a:84:ef:ce:b1:ea:
                    10:11:50:03:7d:68:e9:44:ba:5d:5e:0c:86:88:27:
                    1d:26:b2:99:0f:a9:50:a8:8a:77:4a:32:93:3a:12:
                    9d:10:9c:b8:dc:a6:74:54:94:b7:09:ef:a7:4f:97:
                    9f:82:35:45:af:e1:53:d7:98:93:69:6b:62:39:b0:
                    e3:4f:c6:ea:ac:1b:c4:58:db:21:4f:8f:37:8b:2c:
                    3d:b7:0c:26:98:82:7f:db:b4:98:04:46:b1:88:0a:
                    f1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EC:97:B4:1E:92:ED:E0:F3:16:E9:87:F6:5E:AF:A3:73:6E:FA:9B
            X509v3 Authority Key Identifier:
                keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:58:42:57:c3:41:6b:9a:e4:72:e9:e8:10:74:16:15:e6:c5:
         ba:e9:01:fe:06:d5:b1:6a:63:4b:af:63:67:0f:8e:49:9e:99:
         b8:7b:70:c8:5c:fe:e8:cd:78:d9:19:6a:55:c1:c4:95:d3:c2:
         46:7f:22:d6:b6:5d:d5:1b:4d:c2:cd:25:47:35:a3:85:95:ea:
         0f:35:b2:60:32:2a:0c:5c:d5:2b:82:13:40:f2:d9:b4:ba:0b:
         23:60:b6:a8:c2:88:8a:90:e8:bf:e0:33:51:81:cb:97:aa:26:
         10:31:95:b3:bf:5d:c7:ef:d6:5b:ae:0d:c0:89:ed:2c:db:c0:
         ef:3f:0e:75:25:86:8f:1f:db:6e:da:d2:85:07:a5:e9:c8:1f:
         c1:95:38:df:34:53:cc:de:99:34:d5:03:66:85:2f:5a:ea:28:
         56:d4:d3:23:c7:b2:a3:05:f2:4d:36:d4:0e:9d:c2:47:c8:49:
         f1:82:ff:76:dc:96:19:62:6a:5d:b0:57:7f:d1:23:f9:16:08:
         74:9b:1f:5c:a2:07:40:50:52:6e:14:1f:66:e6:72:36:c3:74:
         32:18:3b:15:7c:20:46:19:ca:89:2c:91:28:5c:26:5d:5a:fe:
         e9:e5:f3:66:fd:4d:a4:e1:29:d8:c7:81:9c:a6:2a:08:97:4f:
         d2:c0:1e:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdD23ZORO+nHZs6pbEM35CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy
NWMxMDgwHhcNMjQwNjE1MTgwMTA4WhcNMjQwNjE2MTgwMTA4WjAzMTEwLwYDVQQD
EygzY2VjOTdiNDFlOTJlZGUwZjMxNmU5ODdmNjVlYWZhMzczNmVmYTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc37EhkXH/g3lMH4ZVDRRr2olPex
7pFYnv+ghpHZUQ01hj5o9WKzMDF9aR4CtFoJ8sIytWxVNvVriA2XIJJe2+rVzBhs
GB3UmGbU98pfYWeZFpHy6IGvwOpXU/KVE7xTOid6UwrgwiA23pO1Meg+pWjKYaH0
g1RC6QiWAZqE0RayHcRB+TdB6I1q1xiZEgAw01tquDysJG0U6S4LBFAahO/OseoQ
EVADfWjpRLpdXgyGiCcdJrKZD6lQqIp3SjKTOhKdEJy43KZ0VJS3Ce+nT5efgjVF
r+FT15iTaWtiObDjT8bqrBvEWNshT483iyw9twwmmIJ/27SYBEaxiArxlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzsl7Qeku3g8xbph/Zer6NzbvqbMB8GA1UdIwQY
MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt
MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5
LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlhCV8NB
a5rkcunoEHQWFebFuukB/gbVsWpjS69jZw+OSZ6ZuHtwyFz+6M142RlqVcHEldPC
Rn8i1rZd1RtNws0lRzWjhZXqDzWyYDIqDFzVK4ITQPLZtLoLI2C2qMKIipDov+Az
UYHLl6omEDGVs79dx+/WW64NwIntLNvA7z8OdSWGjx/bbtrShQel6cgfwZU43zRT
zN6ZNNUDZoUvWuooVtTTI8eyowXyTTbUDp3CR8hJ8YL/dtyWGWJqXbBXf9Ej+RYI
dJsfXKIHQFBSbhQfZuZyNsN0Mhg7FXwgRhnKiSyRKFwmXVr+6eXzZv1NpOEp2MeB
nKYqCJdP0sAeUA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:55:34 2024 by rpki-client on console-ams.rpki-client.org