Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
File:                     LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft (raw, json)
Hash identifier:          LfSiD9WR4G3oQfH0ux3U4Quc7q1wT5Wj/ZZO469wwnk=
Subject key identifier:   B6:06:9B:29:B7:87:BB:C8:13:0C:6F:E6:9F:E9:4E:19:25:32:C0:3C
Authority key identifier: 2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
Certificate issuer:       /CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Certificate serial:       01901BFD6DD0ECAB91AE94A9679A50FDE28A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
Manifest number:          0CC2
Signing time:             Sat 15 Jun 2024 13:01:51 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:51 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:51 +0000
Files and hashes:         1: 6IR7xaE8Zqir6m1CPg4xur13Ua4.roa (hash: N/ou9nr7c64+2oGins2BNmNaUTxt/J/OzuhIV2VlHU8=)
                          2: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl (hash: K8Lt5fIhwj/9uiZdHwpdsclKon/MaaSsHt84kn+cR/0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:6d:d0:ec:ab:91:ae:94:a9:67:9a:50:fd:e2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
        Validity
            Not Before: Jun 15 13:01:51 2024 GMT
            Not After : Jun 16 13:01:51 2024 GMT
        Subject: CN=b6069b29b787bbc8130c6fe69fe94e192532c03c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:70:fc:8b:ed:a3:4d:40:80:8c:bd:77:8d:
                    fb:66:3f:9d:0d:7b:ca:f2:80:6f:24:69:61:8f:77:
                    de:31:77:f1:95:2f:83:e5:cc:55:23:de:dd:20:fb:
                    44:a2:f3:52:6a:7c:23:1d:ff:d0:f2:6d:ae:c1:09:
                    e9:fe:b7:55:fe:de:4c:dc:97:71:67:78:4e:23:26:
                    31:80:18:d3:13:de:73:50:be:19:a0:c7:fa:e4:76:
                    29:ec:45:27:c3:0c:5e:6d:63:7c:11:9b:3f:b6:23:
                    d4:e2:aa:91:08:9a:0d:3c:c6:05:a9:86:70:e5:2b:
                    83:96:21:c5:cf:f1:a0:91:55:cc:5c:10:ee:55:18:
                    51:fe:d3:9b:6d:c1:19:5c:de:29:d1:2f:1d:4a:14:
                    5a:eb:3a:8e:10:8c:bf:45:76:9e:99:76:c8:d5:9b:
                    90:5e:02:27:47:c9:8d:a3:c4:cd:b4:2a:54:5d:a7:
                    3e:76:96:b9:f8:cd:07:e6:47:77:40:a6:2f:b9:3b:
                    47:51:33:a0:25:8c:2d:12:d7:e4:8b:47:a6:ea:f7:
                    e0:69:be:2b:d0:61:24:2a:d4:4f:bb:ce:2b:d9:f6:
                    5a:41:99:f8:d6:fb:3d:37:9f:63:f7:23:b8:67:fc:
                    33:ac:1e:e9:0a:8e:7e:96:f9:b3:53:e8:01:61:b0:
                    0b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:06:9B:29:B7:87:BB:C8:13:0C:6F:E6:9F:E9:4E:19:25:32:C0:3C
            X509v3 Authority Key Identifier:
                keyid:2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:de:1e:81:fc:1d:21:01:25:b8:a1:4c:a6:96:75:92:61:45:
         12:bb:fe:e5:65:7d:a3:34:fb:4b:cd:61:06:22:a5:fb:45:fd:
         ba:d9:19:9d:7c:b0:80:a8:36:aa:40:4a:d4:a0:68:e7:03:4b:
         cf:27:ee:57:36:c4:c4:b3:e3:c8:91:8c:22:c0:ff:d3:ee:80:
         f5:cb:d3:5e:32:0d:39:08:c8:56:15:3d:16:cb:7b:b8:b8:9d:
         fd:3a:a9:66:79:8f:79:a2:e4:40:19:9a:1c:fe:7c:0b:7a:98:
         5c:30:ba:5d:54:b5:17:2e:93:0c:e3:1a:43:28:cb:87:c5:2e:
         a9:69:21:d7:36:28:7c:91:96:5f:3d:d9:7a:92:7e:6e:04:d9:
         81:46:20:3a:0c:2d:1f:7f:fb:c4:e4:67:2c:e9:2c:8a:d0:4b:
         2b:b1:a8:73:05:62:58:8e:da:fe:60:e2:d5:ba:f4:f5:a0:53:
         d6:4f:46:03:17:f9:ad:c5:e2:b0:82:36:ca:78:e6:d1:68:c5:
         28:f7:a4:b6:b1:27:36:cd:d8:4a:9d:26:36:a1:0c:45:03:4f:
         da:39:9d:10:87:2f:ad:48:f7:94:97:d8:84:6b:cb:71:e1:8e:
         f3:ce:7e:fe:82:33:bc:c0:8f:0c:a6:c0:18:9f:de:8d:45:ff:
         74:1e:13:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/W3Q7KuRrpSpZ5pQ/eKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZmFhMjJiZDY1Y2FjODI4NThlYTA5MTY4NmQ1YjNiNGJl
M2JkMzkwHhcNMjQwNjE1MTMwMTUxWhcNMjQwNjE2MTMwMTUxWjAzMTEwLwYDVQQD
EyhiNjA2OWIyOWI3ODdiYmM4MTMwYzZmZTY5ZmU5NGUxOTI1MzJjMDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk1w/Ivto01AgIy9d437Zj+dDXvK
8oBvJGlhj3feMXfxlS+D5cxVI97dIPtEovNSanwjHf/Q8m2uwQnp/rdV/t5M3Jdx
Z3hOIyYxgBjTE95zUL4ZoMf65HYp7EUnwwxebWN8EZs/tiPU4qqRCJoNPMYFqYZw
5SuDliHFz/GgkVXMXBDuVRhR/tObbcEZXN4p0S8dShRa6zqOEIy/RXaemXbI1ZuQ
XgInR8mNo8TNtCpUXac+dpa5+M0H5kd3QKYvuTtHUTOgJYwtEtfki0em6vfgab4r
0GEkKtRPu84r2fZaQZn41vs9N59j9yO4Z/wzrB7pCo5+lvmzU+gBYbAL/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYGmym3h7vIEwxv5p/pThklMsA8MB8GA1UdIwQY
MBaAFCz6oivWXKyChY6gkWhtWztL4705MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81YmU0NGMtYTRmMi00YmQwLWI1YTct
YjQ2ODgzOGM3ZmRmLzEvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81YmU0NGMtYTRmMi00YmQwLWI1YTctYjQ2ODgzOGM3ZmRm
LzEvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr94egfwd
IQEluKFMppZ1kmFFErv+5WV9ozT7S81hBiKl+0X9utkZnXywgKg2qkBK1KBo5wNL
zyfuVzbExLPjyJGMIsD/0+6A9cvTXjINOQjIVhU9Fst7uLid/TqpZnmPeaLkQBma
HP58C3qYXDC6XVS1Fy6TDOMaQyjLh8UuqWkh1zYofJGWXz3ZepJ+bgTZgUYgOgwt
H3/7xORnLOksitBLK7GocwViWI7a/mDi1br09aBT1k9GAxf5rcXisII2ynjm0WjF
KPektrEnNs3YSp0mNqEMRQNP2jmdEIcvrUj3lJfYhGvLceGO885+/oIzvMCPDKbA
GJ/ejUX/dB4Tsw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:33:02 2024 by rpki-client on console-ams.rpki-client.org