Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File:                     tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier:          3TGQhCXZxAW1JLlq349EHompjJUBJtFr90hrpp8SS4I=
Subject key identifier:   1B:C2:29:4E:97:70:50:A4:FB:F5:AC:E3:BD:72:04:C3:BB:69:E9:92
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer:       /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial:       01901EC6F44290318C0D56845511DD05E66A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number:          11C4
Signing time:             Sun 16 Jun 2024 02:01:13 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:13 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:13 +0000
Files and hashes:         1: X-yUds0raYvMDiXf2mdMuIqhC-k.roa (hash: vZWbCCGOlPwp0UrD6VjjJ1rsH2e2JDL2ni+7691v3B4=)
                          2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: Hu9ybWOq7ZmJoegMKu3svoBovz46OTcVMWouXHL6XYY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:f4:42:90:31:8c:0d:56:84:55:11:dd:05:e6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
        Validity
            Not Before: Jun 16 02:01:13 2024 GMT
            Not After : Jun 17 02:01:13 2024 GMT
        Subject: CN=1bc2294e977050a4fbf5ace3bd7204c3bb69e992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:89:f3:3a:39:1c:0c:86:11:41:ce:2d:6e:a7:
                    36:3b:ac:1b:4b:1c:f6:47:df:1e:31:f2:05:e5:46:
                    92:7d:ed:70:0f:f1:c0:d3:1c:e5:bd:6d:30:4c:d3:
                    aa:e6:ec:3c:0c:03:d3:ee:c9:3f:3a:79:5b:ee:5b:
                    02:7b:45:fe:db:bf:67:92:60:39:62:b4:d3:10:c2:
                    52:e3:12:96:76:83:b8:00:8d:e3:68:fa:88:46:f8:
                    4a:27:3d:f1:56:8f:84:30:b8:02:38:bf:a9:f2:39:
                    a0:ee:f3:97:18:3d:a2:b1:b4:c6:cc:e7:0c:f1:dc:
                    1f:37:7b:c9:5a:9f:32:6b:48:dc:60:c6:3e:15:38:
                    df:69:5f:21:e6:8a:05:a6:22:11:99:b4:57:fc:46:
                    90:d7:e9:c4:2f:2c:8f:c4:ce:4c:cd:b6:b9:dc:cb:
                    b9:66:c6:c0:88:76:2f:e8:82:70:91:8e:59:f2:dc:
                    28:73:f4:a5:42:3f:ed:c2:d7:34:eb:0e:9f:f8:79:
                    77:58:1b:97:96:2e:c6:50:a1:0b:17:b1:4c:66:67:
                    5c:04:a8:67:78:91:8e:7e:2e:fc:3f:53:3e:a2:ee:
                    18:98:c7:7f:0e:e9:e2:fd:c2:29:79:77:27:9a:6d:
                    a9:83:61:09:a8:53:80:65:1e:c2:56:f0:56:1f:62:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C2:29:4E:97:70:50:A4:FB:F5:AC:E3:BD:72:04:C3:BB:69:E9:92
            X509v3 Authority Key Identifier:
                keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:dc:3e:fd:bd:ab:42:44:f1:cd:44:0c:49:48:fb:fb:4e:6b:
         c2:10:1a:15:6b:9a:11:06:03:55:2e:52:f8:21:4e:47:ea:0e:
         a7:a6:f3:f1:c7:dc:27:83:5a:48:5e:82:a4:97:54:f5:12:a9:
         8a:de:f5:45:0d:eb:f2:13:13:82:dc:a8:ec:39:8f:ba:41:62:
         f9:cb:82:ab:61:4c:5b:8e:0a:e1:69:6c:4a:2d:70:f6:a8:d3:
         8b:ea:8f:da:58:3f:8d:4e:4c:f0:92:c4:8e:d3:3a:66:19:5c:
         12:7a:e0:65:40:3a:e1:80:98:54:0a:c5:f3:81:02:09:3d:70:
         60:af:e2:e9:85:23:53:79:33:89:9b:11:ca:c4:f2:1e:02:d7:
         85:a4:02:c7:4d:13:08:95:d6:d9:e5:b2:3e:5a:c3:0b:fc:e0:
         47:da:1d:7f:a0:30:f4:93:3a:0d:ef:f9:c7:67:f8:73:a4:6d:
         2e:07:31:71:85:7e:8e:db:74:1c:04:34:fa:af:94:54:07:e7:
         22:92:2d:f5:9c:b3:7d:c5:09:77:48:a1:60:b8:ab:ef:18:46:
         b5:d1:d2:95:3b:45:68:27:34:5c:ae:c1:48:1b:57:04:16:19:
         b2:a1:24:5c:20:d6:95:03:d1:04:fa:11:f2:60:69:11:9c:d9:
         bb:7d:70:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexvRCkDGMDVaEVRHdBeZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTg4MmY3MTcxYWY2ZGNkY2NjOWNkNzlmOThkZWM2NzU3
ZmUxODkwHhcNMjQwNjE2MDIwMTEzWhcNMjQwNjE3MDIwMTEzWjAzMTEwLwYDVQQD
EygxYmMyMjk0ZTk3NzA1MGE0ZmJmNWFjZTNiZDcyMDRjM2JiNjllOTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjInzOjkcDIYRQc4tbqc2O6wbSxz2
R98eMfIF5UaSfe1wD/HA0xzlvW0wTNOq5uw8DAPT7sk/Onlb7lsCe0X+279nkmA5
YrTTEMJS4xKWdoO4AI3jaPqIRvhKJz3xVo+EMLgCOL+p8jmg7vOXGD2isbTGzOcM
8dwfN3vJWp8ya0jcYMY+FTjfaV8h5ooFpiIRmbRX/EaQ1+nELyyPxM5Mzba53Mu5
ZsbAiHYv6IJwkY5Z8twoc/SlQj/twtc06w6f+Hl3WBuXli7GUKELF7FMZmdcBKhn
eJGOfi78P1M+ou4YmMd/Duni/cIpeXcnmm2pg2EJqFOAZR7CVvBWH2JKSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvCKU6XcFCk+/Ws471yBMO7aemSMB8GA1UdIwQY
MBaAFLTogvcXGvbc3Myc15+Y3sZ1f+GJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAt
ZmVmZThlMzQwMDZjLzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAtZmVmZThlMzQwMDZj
LzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtw+/b2r
QkTxzUQMSUj7+05rwhAaFWuaEQYDVS5S+CFOR+oOp6bz8cfcJ4NaSF6CpJdU9RKp
it71RQ3r8hMTgtyo7DmPukFi+cuCq2FMW44K4WlsSi1w9qjTi+qP2lg/jU5M8JLE
jtM6ZhlcEnrgZUA64YCYVArF84ECCT1wYK/i6YUjU3kziZsRysTyHgLXhaQCx00T
CJXW2eWyPlrDC/zgR9odf6Aw9JM6De/5x2f4c6RtLgcxcYV+jtt0HAQ0+q+UVAfn
IpIt9ZyzfcUJd0ihYLir7xhGtdHSlTtFaCc0XK7BSBtXBBYZsqEkXCDWlQPRBPoR
8mBpEZzZu31w1A==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:03:05 2024 by rpki-client on console-fra.rpki-client.org