Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
File:                     j5D2t16RPyeC7VSetyFyxZzEevE.mft (raw, json)
Hash identifier:          Bh2P4ACw3J48ihRi8VkZVBdyXPmHGf1IcGIvdSw8stY=
Subject key identifier:   86:9C:08:BC:90:36:93:F7:AA:BB:38:4D:E3:B2:8B:B5:C5:0C:84:70
Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
Certificate issuer:       /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Certificate serial:       01901DEBDCAC7064091D1169974249AA7F19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
Manifest number:          11CA
Signing time:             Sat 15 Jun 2024 22:01:54 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:54 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:54 +0000
Files and hashes:         1: 0tyMUUgSdfQrxDfvO3c5g-GJbKk.roa (hash: x6nfIgxw7Vf0Ecx/EvK4IlleeyetM9tP3W6nWMEo7jA=)
                          2: j5D2t16RPyeC7VSetyFyxZzEevE.crl (hash: Wq61btPW6dnK8Hm2pAldJrPG2WYXZ14SenfadTB9mL4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:dc:ac:70:64:09:1d:11:69:97:42:49:aa:7f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
        Validity
            Not Before: Jun 15 22:01:54 2024 GMT
            Not After : Jun 16 22:01:54 2024 GMT
        Subject: CN=869c08bc903693f7aabb384de3b28bb5c50c8470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:1f:87:f9:10:1b:f5:6f:01:23:51:ca:ae:
                    74:18:1b:3b:26:52:b2:e8:ff:7a:97:d1:1f:7c:25:
                    5b:c6:7f:71:b1:43:7d:4c:a1:a1:ca:85:4b:80:5f:
                    ec:08:c2:08:e3:72:f6:8f:7d:e0:84:2d:47:04:b8:
                    6d:a9:8c:c3:56:9a:8f:d7:67:fd:73:d4:e8:a9:37:
                    ee:1f:3d:98:a1:7e:30:b2:9f:58:5c:56:5f:a3:86:
                    f8:72:0d:19:fa:eb:0d:3d:60:fd:85:a6:99:b7:7f:
                    85:31:30:e2:d1:00:f3:1b:f4:e5:22:96:cd:bf:e0:
                    03:3c:19:c6:14:c7:46:7c:cf:78:a6:d9:5c:56:c3:
                    e0:98:3f:c7:b5:b7:24:39:c7:01:7c:01:50:95:0f:
                    2b:6b:f3:4b:bc:16:1b:d2:83:2c:59:a9:60:50:03:
                    d4:e1:aa:7c:d3:b8:84:29:ab:c6:c0:b3:bd:88:58:
                    5e:02:86:91:3b:0a:d4:85:bc:31:51:eb:a7:98:9e:
                    22:0d:d8:28:7e:4e:c4:86:f5:01:1b:60:22:2d:af:
                    cf:f6:d1:eb:6f:4a:e2:0c:c0:f3:92:60:1b:00:51:
                    00:fd:e9:93:fc:63:13:a7:3a:3d:05:ac:9d:1d:c7:
                    dd:9e:e6:d2:d3:3e:b7:e2:75:1e:ba:d9:56:9a:dc:
                    e8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9C:08:BC:90:36:93:F7:AA:BB:38:4D:E3:B2:8B:B5:C5:0C:84:70
            X509v3 Authority Key Identifier:
                keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:08:1b:3d:82:e3:3f:85:2d:41:ef:ac:1b:b6:03:53:1d:2b:
         3f:e7:2b:68:a2:a4:8f:54:d1:ed:41:e3:4d:6e:8f:f1:18:9f:
         b4:67:04:22:18:6d:11:b6:c8:66:5c:0c:77:e1:01:99:b9:ef:
         76:24:77:34:a2:06:49:e7:2b:b7:e1:36:53:54:0a:ff:79:14:
         a6:1b:49:34:e6:a8:fb:fe:4b:32:18:f1:45:b2:b9:a6:ee:de:
         d0:7b:5c:28:c3:83:db:37:ed:55:55:97:83:d5:d8:f2:ae:b5:
         c0:83:a4:ba:d3:7e:93:ef:45:a2:fb:65:57:de:cd:44:32:fe:
         a7:21:95:74:ff:cb:e8:cd:3e:a4:f7:3d:3c:7a:98:83:d6:93:
         cd:d7:1f:bc:2e:ee:bd:4f:8e:3d:b6:e4:16:27:ca:1c:85:57:
         80:49:83:19:17:5a:ae:af:a6:2a:9b:f7:1c:73:be:29:2a:84:
         f0:a9:81:8c:d9:f8:5b:3f:35:10:e9:e5:2d:1d:ba:dc:bc:b0:
         99:ac:16:a4:ce:9a:1d:70:35:7a:c9:4b:a1:63:7d:16:7b:36:
         60:1b:10:8e:11:13:b3:c8:4c:fc:4f:48:b6:32:bd:76:f0:32:
         f2:d8:d9:0d:4c:42:5e:7e:f8:e9:22:f3:44:09:2c:3a:20:61:
         6d:40:cb:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd69yscGQJHRFpl0JJqn8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOTBmNmI3NWU5MTNmMjc4MmVkNTQ5ZWI3MjE3MmM1OWNj
NDdhZjEwHhcNMjQwNjE1MjIwMTU0WhcNMjQwNjE2MjIwMTU0WjAzMTEwLwYDVQQD
Eyg4NjljMDhiYzkwMzY5M2Y3YWFiYjM4NGRlM2IyOGJiNWM1MGM4NDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf0fh/kQG/VvASNRyq50GBs7JlKy
6P96l9EffCVbxn9xsUN9TKGhyoVLgF/sCMII43L2j33ghC1HBLhtqYzDVpqP12f9
c9ToqTfuHz2YoX4wsp9YXFZfo4b4cg0Z+usNPWD9haaZt3+FMTDi0QDzG/TlIpbN
v+ADPBnGFMdGfM94ptlcVsPgmD/HtbckOccBfAFQlQ8ra/NLvBYb0oMsWalgUAPU
4ap807iEKavGwLO9iFheAoaROwrUhbwxUeunmJ4iDdgofk7EhvUBG2AiLa/P9tHr
b0riDMDzkmAbAFEA/emT/GMTpzo9BaydHcfdnubS0z634nUeutlWmtzoUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIacCLyQNpP3qrs4TeOyi7XFDIRwMB8GA1UdIwQY
MBaAFI+Q9rdekT8ngu1UnrchcsWcxHrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajVEMnQxNlJQeWVDN1ZTZXR5Rnl4WnpFZXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zZDNjM2ItMWE5NS00YjUwLTg5NzQt
YzFkMGFjYjc4MTlhLzEvajVEMnQxNlJQeWVDN1ZTZXR5Rnl4WnpFZXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zZDNjM2ItMWE5NS00YjUwLTg5NzQtYzFkMGFjYjc4MTlh
LzEvajVEMnQxNlJQeWVDN1ZTZXR5Rnl4WnpFZXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAgbPYLj
P4UtQe+sG7YDUx0rP+craKKkj1TR7UHjTW6P8RiftGcEIhhtEbbIZlwMd+EBmbnv
diR3NKIGSecrt+E2U1QK/3kUphtJNOao+/5LMhjxRbK5pu7e0HtcKMOD2zftVVWX
g9XY8q61wIOkutN+k+9FovtlV97NRDL+pyGVdP/L6M0+pPc9PHqYg9aTzdcfvC7u
vU+OPbbkFifKHIVXgEmDGRdarq+mKpv3HHO+KSqE8KmBjNn4Wz81EOnlLR263Lyw
mawWpM6aHXA1eslLoWN9Fns2YBsQjhETs8hM/E9ItjK9dvAy8tjZDUxCXn746SLz
RAksOiBhbUDLCA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:36:21 2024 by rpki-client on console-ams.rpki-client.org