Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File:                     VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier:          /loP/uUxiltqvIJNYHQt8xkhykFEM7cn5nM2MfbOleA=
Subject key identifier:   C2:DD:86:BF:79:28:53:CF:A6:07:48:EE:7A:24:7D:28:85:31:F8:B1
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer:       /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial:       01901E21BC5C9227F4E4E208A94402297C21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number:          7E
Signing time:             Sat 15 Jun 2024 23:00:45 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:45 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:45 +0000
Files and hashes:         1: JlhRl0uLppmmLALr-hlGhPQ06ws.roa (hash: qemfp1EDPxHNZUgskMQMESooUQzg2M+K/canaQ0Gj3Y=)
                          2: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: 4Mgqd5+PGjiKn513CusjIv2IUNmK8fkGIpUFtnQbs/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:bc:5c:92:27:f4:e4:e2:08:a9:44:02:29:7c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
        Validity
            Not Before: Jun 15 23:00:45 2024 GMT
            Not After : Jun 16 23:00:45 2024 GMT
        Subject: CN=c2dd86bf792853cfa60748ee7a247d288531f8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:48:70:47:e6:5a:08:68:e8:ed:2b:ab:7e:
                    c7:60:1e:ca:8d:c3:94:de:37:2d:8e:97:dc:2c:20:
                    de:f7:ed:37:df:10:75:53:9f:a8:ee:8e:f4:d8:86:
                    36:cf:81:a3:e0:f2:76:bc:0d:c8:06:74:61:c9:04:
                    3c:90:5a:44:65:ea:6f:de:23:c0:89:ed:a0:21:81:
                    f7:54:f7:8c:c6:c6:e4:43:c6:de:80:a5:d5:f8:88:
                    05:dc:65:ab:97:3d:d1:c5:d6:dd:76:40:3e:bb:04:
                    06:38:8f:8a:2b:8b:32:cc:65:a3:45:70:98:b4:df:
                    5d:f7:53:81:b1:37:aa:71:83:68:f3:d8:39:41:70:
                    59:e9:0f:73:5e:28:72:1f:d3:78:d1:0e:92:2b:0b:
                    bc:4d:5b:d1:56:11:2f:57:50:3b:46:15:fb:56:a6:
                    bb:c6:66:82:c1:66:bb:f8:cc:f6:15:e1:12:e3:45:
                    af:be:01:27:34:3f:46:a7:22:06:2e:85:c7:de:0d:
                    02:9f:51:3c:99:2d:a3:15:a7:e0:c0:1e:c5:18:50:
                    76:49:5c:fc:c2:f7:4d:6e:9d:5c:32:17:56:76:1a:
                    3b:69:0b:de:4d:62:b9:be:fc:0e:f2:56:84:be:4e:
                    d1:ae:f1:c4:c6:3e:10:a8:4d:ae:a3:9b:93:1d:20:
                    0a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DD:86:BF:79:28:53:CF:A6:07:48:EE:7A:24:7D:28:85:31:F8:B1
            X509v3 Authority Key Identifier:
                keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:84:42:76:3d:a6:ff:17:f4:4e:10:3e:6f:52:e0:28:32:17:
         3e:9d:26:9f:73:67:a2:27:ee:53:2b:0d:38:85:b1:a8:cd:45:
         12:be:71:4e:f4:95:d0:5d:4c:a4:70:71:3c:98:38:84:07:8c:
         e0:22:f1:18:ef:66:a1:ad:ef:74:95:1f:4b:50:6c:a6:cf:55:
         b8:ef:80:8e:d3:c2:f4:34:45:d9:15:61:61:b9:72:e2:6d:3a:
         3f:c1:ab:ca:44:79:64:ee:6f:29:4b:78:3f:9b:75:e0:ce:c4:
         81:f5:58:cd:19:26:f3:4b:90:0a:93:01:19:75:1c:f7:a0:d6:
         42:86:7c:a6:f8:11:35:cd:bc:6a:77:87:22:88:6e:5f:cf:b0:
         74:84:d9:2e:c1:b0:dd:74:8d:be:e6:0f:c7:04:52:16:32:cb:
         6a:69:b0:04:6a:2e:11:a5:f4:56:07:95:a2:7f:ae:d4:2a:4e:
         dd:eb:65:61:c1:fc:eb:b7:e1:1f:74:b4:2e:0c:d3:f1:0e:d1:
         aa:52:9a:e6:cc:dc:c9:c1:13:44:c9:85:2e:f3:e6:8d:b1:fa:
         bc:a3:6f:3d:22:01:ea:11:fd:9b:42:a7:11:b2:fe:da:56:a0:
         17:fe:75:fe:0e:31:ee:05:4b:3d:db:de:22:f5:50:47:e0:5c:
         d7:3d:b8:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeIbxckif05OIIqUQCKXwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NDJiNzY2ZWY1N2Q2OWNmNGZiZGU0YmNiNmYwYWYwNmEz
YjIyMDYwHhcNMjQwNjE1MjMwMDQ1WhcNMjQwNjE2MjMwMDQ1WjAzMTEwLwYDVQQD
EyhjMmRkODZiZjc5Mjg1M2NmYTYwNzQ4ZWU3YTI0N2QyODg1MzFmOGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYxIcEfmWgho6O0rq37HYB7KjcOU
3jctjpfcLCDe9+033xB1U5+o7o702IY2z4Gj4PJ2vA3IBnRhyQQ8kFpEZepv3iPA
ie2gIYH3VPeMxsbkQ8begKXV+IgF3GWrlz3RxdbddkA+uwQGOI+KK4syzGWjRXCY
tN9d91OBsTeqcYNo89g5QXBZ6Q9zXihyH9N40Q6SKwu8TVvRVhEvV1A7RhX7Vqa7
xmaCwWa7+Mz2FeES40WvvgEnND9GpyIGLoXH3g0Cn1E8mS2jFafgwB7FGFB2SVz8
wvdNbp1cMhdWdho7aQveTWK5vvwO8laEvk7RrvHExj4QqE2uo5uTHSAKWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLdhr95KFPPpgdI7nokfSiFMfixMB8GA1UdIwQY
MBaAFFVCt2bvV9ac9PveS8tvCvBqOyIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMt
NzgzMDhiMmY1MjM0LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMtNzgzMDhiMmY1MjM0
LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYRCdj2m
/xf0ThA+b1LgKDIXPp0mn3NnoifuUysNOIWxqM1FEr5xTvSV0F1MpHBxPJg4hAeM
4CLxGO9moa3vdJUfS1Bsps9VuO+AjtPC9DRF2RVhYbly4m06P8GrykR5ZO5vKUt4
P5t14M7EgfVYzRkm80uQCpMBGXUc96DWQoZ8pvgRNc28aneHIohuX8+wdITZLsGw
3XSNvuYPxwRSFjLLammwBGouEaX0VgeVon+u1CpO3etlYcH867fhH3S0LgzT8Q7R
qlKa5szcycETRMmFLvPmjbH6vKNvPSIB6hH9m0KnEbL+2lagF/51/g4x7gVLPdve
IvVQR+Bc1z24ow==
-----END CERTIFICATE-----
Generated at Sun Jun 16 01:00:49 2024 by rpki-client on console-ams.rpki-client.org