Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
File:                     N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json)
Hash identifier:          VQe3ONbbZXUqP3AFMw57L5PcLLYW+pHizTQ7PNns1Zk=
Subject key identifier:   2B:43:AE:DB:20:C3:14:3C:21:F5:9E:4E:36:01:0F:F3:5C:64:11:CE
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Certificate issuer:       /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial:       01901E58DB3FA3C086E2591EBE6FC9D089C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
Manifest number:          065D
Signing time:             Sun 16 Jun 2024 00:00:57 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:57 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:57 +0000
Files and hashes:         1: GoWMvrIOIlwHmiS3ZVFBpou8Hxk.roa (hash: l/U7efswEQvY4KFgC/jYpJndStS5jOg5ueC9D2ehZsM=)
                          2: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: SgMpNBQpXh7XURnpNqiE/rHx5ZpkrFoKNEZy19TaaM0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:db:3f:a3:c0:86:e2:59:1e:be:6f:c9:d0:89:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
        Validity
            Not Before: Jun 16 00:00:57 2024 GMT
            Not After : Jun 17 00:00:57 2024 GMT
        Subject: CN=2b43aedb20c3143c21f59e4e36010ff35c6411ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:47:11:1b:c8:54:1f:29:96:8b:f5:ef:db:bb:
                    21:04:fb:9b:e3:90:8a:7b:42:e2:30:f1:fa:36:ec:
                    f4:34:6a:9c:6f:0a:fc:c9:5c:0d:b6:ea:37:eb:70:
                    8a:a2:fe:5c:f4:1b:44:3b:e7:b8:57:10:f7:94:44:
                    ef:6e:57:6a:56:f3:2e:b1:8d:7b:ea:59:a6:ce:78:
                    ce:c1:92:22:7f:f8:d5:6a:a8:50:91:61:f0:8a:fb:
                    a4:7e:af:4d:68:41:56:f0:a4:c0:a1:ac:36:c6:a1:
                    24:d0:cc:e2:42:dc:a1:c9:7b:73:fa:d7:c3:fb:52:
                    1d:43:63:c5:3c:6e:cb:e8:3a:be:4c:81:29:b5:2c:
                    b5:9d:88:b7:a4:5c:ca:25:83:a1:a6:e2:6b:2f:08:
                    8f:1b:4d:30:c0:77:b7:c2:76:72:5d:15:c0:a8:ab:
                    da:5d:a5:8e:e3:12:fa:be:94:8a:88:44:96:a8:94:
                    77:82:4b:51:16:03:a0:21:a7:fd:cc:33:17:11:0f:
                    b1:df:07:57:5c:a7:d5:4c:77:88:3f:c3:21:33:73:
                    f0:da:02:ca:e0:c6:53:b8:7d:fa:f8:4d:0d:3b:16:
                    f7:79:b5:d1:c8:29:47:b2:6b:18:84:af:0c:d5:4c:
                    c5:7c:75:e0:28:3d:a7:b9:4e:a9:aa:b0:d8:53:01:
                    1d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:43:AE:DB:20:C3:14:3C:21:F5:9E:4E:36:01:0F:F3:5C:64:11:CE
            X509v3 Authority Key Identifier:
                keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:84:ff:40:68:be:cb:c6:54:7f:1e:6b:23:76:7c:fd:c7:77:
         e4:d2:f9:69:bd:f4:bb:1a:c5:38:d9:8c:48:8b:20:4e:c0:84:
         fe:9d:1e:07:b6:46:7c:30:00:dd:51:7a:64:d4:be:9f:6b:bd:
         36:7a:6b:71:7b:f1:0f:1f:33:bd:f3:ff:6b:a7:e2:2d:a2:84:
         1e:14:2e:b4:82:d0:6a:bd:a1:97:2c:26:09:13:c2:50:c5:c3:
         87:06:2c:c9:de:78:bd:e5:98:97:15:05:90:8c:4c:5d:97:62:
         e2:28:1a:b9:43:bc:db:fa:b8:59:dc:90:56:bf:12:dd:80:42:
         60:c9:d4:09:61:91:b7:80:a1:ae:af:95:c8:a3:65:64:51:31:
         dd:0c:2b:01:32:41:67:2c:0d:43:68:87:a5:49:6f:9c:72:ed:
         38:af:dd:a5:88:c7:06:c4:b4:8d:f4:f9:f6:24:78:d4:64:b8:
         89:50:31:12:d8:94:1a:bf:f8:c0:1d:8b:78:26:1a:cd:5e:7c:
         21:2f:98:65:46:d1:89:95:ea:c2:59:82:67:3f:70:b9:46:0c:
         17:00:ff:9c:82:f7:52:83:38:1b:98:26:06:aa:33:2f:3e:da:
         17:41:d5:64:57:4e:23:f9:1f:7f:27:55:0b:4d:76:a5:ba:11:
         4e:be:fb:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWNs/o8CG4lkevm/J0InGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YzQ4Yjc4OWNjN2ZmZTdiZTA5NDQ0NjQzZmRiODZiZGI1
NzNmN2QwHhcNMjQwNjE2MDAwMDU3WhcNMjQwNjE3MDAwMDU3WjAzMTEwLwYDVQQD
EygyYjQzYWVkYjIwYzMxNDNjMjFmNTllNGUzNjAxMGZmMzVjNjQxMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EcRG8hUHymWi/Xv27shBPub45CK
e0LiMPH6Nuz0NGqcbwr8yVwNtuo363CKov5c9BtEO+e4VxD3lETvbldqVvMusY17
6lmmznjOwZIif/jVaqhQkWHwivukfq9NaEFW8KTAoaw2xqEk0MziQtyhyXtz+tfD
+1IdQ2PFPG7L6Dq+TIEptSy1nYi3pFzKJYOhpuJrLwiPG00wwHe3wnZyXRXAqKva
XaWO4xL6vpSKiESWqJR3gktRFgOgIaf9zDMXEQ+x3wdXXKfVTHeIP8MhM3Pw2gLK
4MZTuH36+E0NOxb3ebXRyClHsmsYhK8M1UzFfHXgKD2nuU6pqrDYUwEdywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtDrtsgwxQ8IfWeTjYBD/NcZBHOMB8GA1UdIwQY
MBaAFDfEi3icx//nvglERkP9uGvbVz99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2Ut
OGExMzZjYjBkZDVjLzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2UtOGExMzZjYjBkZDVj
LzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIT/QGi+
y8ZUfx5rI3Z8/cd35NL5ab30uxrFONmMSIsgTsCE/p0eB7ZGfDAA3VF6ZNS+n2u9
NnprcXvxDx8zvfP/a6fiLaKEHhQutILQar2hlywmCRPCUMXDhwYsyd54veWYlxUF
kIxMXZdi4igauUO82/q4WdyQVr8S3YBCYMnUCWGRt4Chrq+VyKNlZFEx3QwrATJB
ZywNQ2iHpUlvnHLtOK/dpYjHBsS0jfT59iR41GS4iVAxEtiUGr/4wB2LeCYazV58
IS+YZUbRiZXqwlmCZz9wuUYMFwD/nIL3UoM4G5gmBqozLz7aF0HVZFdOI/kffydV
C012pboRTr77zA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:03:35 2024 by rpki-client on console-fra.rpki-client.org