Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.mft
File:                     cqdZqCUCUkHhqOASv57Mbyp8Uns.mft (raw, json)
Hash identifier:          iQY0dibFJ9iu9m7bsYYI6inyO0LfuwE70O0lBHm0icM=
Subject key identifier:   00:3F:66:E2:DA:F9:15:82:40:47:11:7E:40:A4:EB:07:9D:7F:CA:B4
Authority key identifier: 72:A7:59:A8:25:02:52:41:E1:A8:E0:12:BF:9E:CC:6F:2A:7C:52:7B
Certificate issuer:       /CN=72a759a825025241e1a8e012bf9ecc6f2a7c527b
Certificate serial:       01901DEC7F44722644267AC4064D83991DBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cqdZqCUCUkHhqOASv57Mbyp8Uns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:02:36 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:36 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:36 +0000
Files and hashes:         1: 8k6GkAOae_jBFbQbLdXCkL41trs.roa (hash: mDxeFwwYKV92WPAg0+nnbr5JYz2pP6RQagd/3AjluUQ=)
                          2: cqdZqCUCUkHhqOASv57Mbyp8Uns.crl (hash: YPMLzoMI7mvrJ8EIF9Fe1SgrZRT6IwY9+rFbFkAC6ow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cqdZqCUCUkHhqOASv57Mbyp8Uns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:7f:44:72:26:44:26:7a:c4:06:4d:83:99:1d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72a759a825025241e1a8e012bf9ecc6f2a7c527b
        Validity
            Not Before: Jun 15 22:02:36 2024 GMT
            Not After : Jun 16 22:02:36 2024 GMT
        Subject: CN=003f66e2daf915824047117e40a4eb079d7fcab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e0:14:c0:01:8d:3b:2c:2f:49:29:76:1c:14:
                    bd:ce:d9:15:d5:9e:90:50:3f:89:c7:29:e9:5d:0e:
                    f8:00:23:2a:df:f4:03:72:5b:6c:fb:df:eb:82:8b:
                    73:ba:00:d1:db:8f:15:74:e7:cc:68:7d:c0:de:f5:
                    73:f3:fa:ef:c5:f9:63:cf:4c:ac:11:9b:0e:68:b0:
                    62:e8:67:8f:2b:f0:06:ff:3c:15:70:25:a7:6a:71:
                    70:85:e7:20:ef:c5:db:5b:b7:fa:0f:d2:6f:94:93:
                    9e:b6:6e:4c:3b:d7:63:10:6b:85:4b:ad:01:fe:86:
                    b4:ad:b3:b6:a1:39:91:cf:8c:3b:cc:30:9f:b0:22:
                    7c:1c:32:10:d4:d7:e5:38:b1:ed:32:a0:4f:1e:32:
                    a0:ab:56:4f:16:76:dd:8e:a2:48:31:ee:06:48:4f:
                    50:04:5b:f5:ad:65:6b:b8:7e:c3:a9:cf:fb:4b:e8:
                    91:c4:77:3b:87:15:48:47:d3:d5:1c:7f:23:11:a9:
                    64:76:72:d5:ce:03:de:4e:3c:c4:8c:03:4b:cb:eb:
                    00:45:5e:4a:d4:54:5b:e5:da:e1:97:07:0f:db:8a:
                    d8:38:f2:8a:a2:15:bf:3b:c1:2c:1d:b5:a3:12:67:
                    8f:a2:8d:3e:46:d5:73:4f:ee:ec:6f:80:1a:e6:57:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3F:66:E2:DA:F9:15:82:40:47:11:7E:40:A4:EB:07:9D:7F:CA:B4
            X509v3 Authority Key Identifier:
                keyid:72:A7:59:A8:25:02:52:41:E1:A8:E0:12:BF:9E:CC:6F:2A:7C:52:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqdZqCUCUkHhqOASv57Mbyp8Uns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:89:54:ac:1d:db:5d:f4:e5:56:12:59:db:12:90:51:c8:2e:
         ff:c9:75:17:1a:86:2f:19:7f:6f:e6:3e:1b:2a:30:9c:be:fb:
         d7:d8:49:12:0f:31:51:62:6c:9b:c9:14:a6:ea:e1:d6:ae:05:
         7b:0e:0c:ba:50:19:07:cd:a1:94:83:38:7b:62:b0:6b:1b:61:
         d2:13:bd:df:37:d8:40:6c:dd:f7:97:06:9d:64:ee:84:fd:67:
         c0:a2:15:b0:ee:88:cb:4a:a7:6e:3c:f8:58:cd:8f:a0:c5:ba:
         aa:6c:f5:17:1c:ce:3d:0f:19:26:38:72:bc:1b:50:59:ee:06:
         07:27:f7:a1:f2:be:d2:f4:b0:d1:b6:d7:4f:6f:fe:ad:40:f5:
         79:ac:7d:47:a6:85:0f:9d:14:da:99:6c:71:fe:16:c4:aa:ed:
         a3:d7:71:a0:36:1a:f8:7d:5a:50:87:26:d7:f3:06:b4:c0:f1:
         c9:55:6c:71:e5:ff:d6:93:82:7f:4a:aa:89:9c:be:85:a4:59:
         58:8d:a1:85:16:88:ee:d7:e1:73:bf:d3:e1:6d:9b:14:76:60:
         fd:a1:1c:00:a4:a1:10:91:15:e0:ac:07:12:77:14:e2:64:6a:
         2a:b4:43:75:cf:eb:b1:b7:0a:b8:38:08:db:75:05:7b:30:99:
         c2:2b:13:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7H9EciZEJnrEBk2DmR26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYTc1OWE4MjUwMjUyNDFlMWE4ZTAxMmJmOWVjYzZmMmE3
YzUyN2IwHhcNMjQwNjE1MjIwMjM2WhcNMjQwNjE2MjIwMjM2WjAzMTEwLwYDVQQD
EygwMDNmNjZlMmRhZjkxNTgyNDA0NzExN2U0MGE0ZWIwNzlkN2ZjYWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOAUwAGNOywvSSl2HBS9ztkV1Z6Q
UD+JxynpXQ74ACMq3/QDclts+9/rgotzugDR248VdOfMaH3A3vVz8/rvxfljz0ys
EZsOaLBi6GePK/AG/zwVcCWnanFwhecg78XbW7f6D9JvlJOetm5MO9djEGuFS60B
/oa0rbO2oTmRz4w7zDCfsCJ8HDIQ1NflOLHtMqBPHjKgq1ZPFnbdjqJIMe4GSE9Q
BFv1rWVruH7Dqc/7S+iRxHc7hxVIR9PVHH8jEalkdnLVzgPeTjzEjANLy+sARV5K
1FRb5drhlwcP24rYOPKKohW/O8EsHbWjEmePoo0+RtVzT+7sb4Aa5lcZ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAA/ZuLa+RWCQEcRfkCk6wedf8q0MB8GA1UdIwQY
MBaAFHKnWaglAlJB4ajgEr+ezG8qfFJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3FkWnFDVUNVa0hocU9BU3Y1N01ieXA4VW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iMjljNWMtZDdjNC00MGRkLTk2Mzkt
NTU3MzFjMGE1M2E0LzEvY3FkWnFDVUNVa0hocU9BU3Y1N01ieXA4VW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9iMjljNWMtZDdjNC00MGRkLTk2MzktNTU3MzFjMGE1M2E0
LzEvY3FkWnFDVUNVa0hocU9BU3Y1N01ieXA4VW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIlUrB3b
XfTlVhJZ2xKQUcgu/8l1FxqGLxl/b+Y+GyownL7719hJEg8xUWJsm8kUpurh1q4F
ew4MulAZB82hlIM4e2Kwaxth0hO93zfYQGzd95cGnWTuhP1nwKIVsO6Iy0qnbjz4
WM2PoMW6qmz1FxzOPQ8ZJjhyvBtQWe4GByf3ofK+0vSw0bbXT2/+rUD1eax9R6aF
D50U2plscf4WxKrto9dxoDYa+H1aUIcm1/MGtMDxyVVsceX/1pOCf0qqiZy+haRZ
WI2hhRaI7tfhc7/T4W2bFHZg/aEcAKShEJEV4KwHEncU4mRqKrRDdc/rsbcKuDgI
23UFezCZwisTWA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:58:39 2024 by rpki-client on console-ams.rpki-client.org