Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File:                     33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier:          yGdXt+0jKHmUxQ6Wa+DNkKOigNFSwPANyeYTPAfOZ6M=
Subject key identifier:   16:48:BC:A6:E4:73:22:9A:62:F1:D8:9F:3B:0D:A4:6B:11:35:17:F1
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer:       /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial:       0190478BC4A053DDA525A220EE4B9758D01A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number:          1032
Signing time:             Mon 24 Jun 2024 00:01:00 +0000
Manifest this update:     Mon 24 Jun 2024 00:01:00 +0000
Manifest next update:     Tue 25 Jun 2024 00:01:00 +0000
Files and hashes:         1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: QOXNwOaWQEuFcC86qmFmm+5kfEP0vOfbqq17pEFg25M=)
                          2: qykKvERMmfIg52Y5LtZ0vyhSIys.roa (hash: CTZKKpvBuWEKeDSog62ZiMeCklF0hPp3LTisX6uGYwI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:47:8b:c4:a0:53:dd:a5:25:a2:20:ee:4b:97:58:d0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
        Validity
            Not Before: Jun 24 00:01:00 2024 GMT
            Not After : Jun 25 00:01:00 2024 GMT
        Subject: CN=1648bca6e473229a62f1d89f3b0da46b113517f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:57:85:8c:41:f7:28:1d:4e:01:a6:bb:8b:88:
                    01:b4:b6:de:d5:52:b9:9f:98:04:62:8f:8f:ae:09:
                    f2:47:57:a1:67:76:47:38:c8:ad:f9:b7:ad:31:ba:
                    42:a1:80:70:53:93:bd:18:15:00:1d:64:20:13:fd:
                    dd:11:f0:c1:2e:0b:ed:f7:e0:e2:2d:08:e6:e0:06:
                    29:50:1e:15:3c:91:a6:39:a5:e7:25:6f:df:60:44:
                    17:be:92:dc:49:58:d9:b0:d3:34:fc:cd:8d:cd:d4:
                    04:d3:d8:41:ff:9e:65:79:24:51:21:bc:51:16:3b:
                    dd:3d:89:e8:a2:1c:f8:75:9c:2b:6c:70:a1:c4:0c:
                    55:47:e8:bb:65:22:c7:d6:99:e7:c6:11:b3:24:c4:
                    a9:fd:ee:20:e2:bf:1f:55:3f:d5:f3:66:db:01:cf:
                    47:12:64:bf:97:7b:ee:98:14:3f:f6:34:71:2c:ec:
                    62:03:08:51:60:80:85:29:d5:98:92:75:69:c6:31:
                    70:7d:1a:b3:cd:8b:02:f6:c3:9d:a5:71:27:c2:95:
                    85:82:26:05:ee:84:4a:5a:77:5e:43:9d:4c:bb:98:
                    1e:f8:91:e8:62:07:fd:8f:4a:44:25:61:e2:61:0e:
                    70:19:32:cb:9e:59:60:90:0a:a2:99:97:9d:33:db:
                    29:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:48:BC:A6:E4:73:22:9A:62:F1:D8:9F:3B:0D:A4:6B:11:35:17:F1
            X509v3 Authority Key Identifier:
                keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3d:be:a5:ca:62:3d:e1:26:0a:97:7c:36:24:d1:18:84:a9:
         79:54:be:d2:b7:73:b3:88:35:73:ca:9e:c8:75:1e:a1:80:06:
         87:43:7a:f1:c7:a1:ca:f9:a2:43:1f:f1:1e:72:1f:35:81:6b:
         c3:ac:31:4b:88:07:97:8b:48:5f:ad:74:f8:3b:72:f1:3a:ed:
         63:1c:d8:d5:ba:62:f6:77:72:41:17:f3:1e:4e:4b:1e:6b:31:
         e9:3d:89:49:1f:c9:4d:4d:74:66:fc:67:7b:b5:4a:e5:1e:b2:
         d4:7c:3b:9e:bc:71:ae:2e:7c:95:41:e1:21:97:4f:bc:f7:80:
         a1:75:51:7f:4c:0d:86:9c:71:f6:8f:72:d8:e5:e6:71:28:8b:
         56:63:13:69:6f:e9:0e:58:60:aa:aa:ea:51:17:d0:43:1f:ac:
         a8:b0:50:ce:84:a3:8d:10:a0:6d:5e:6d:25:9f:a3:e9:ca:4a:
         3c:b6:1d:1b:16:a2:09:40:16:c4:b3:d0:0e:38:30:96:84:fa:
         50:22:14:ad:86:35:06:7a:8f:6b:f2:c1:92:b5:7d:5d:f7:88:
         18:7e:d1:5e:56:fb:a2:dc:2f:54:ff:1f:4c:a2:c8:94:5c:8d:
         50:22:c6:e1:f8:9d:50:23:be:c9:de:b9:47:c7:65:9e:24:1c:
         65:3d:3d:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBHi8SgU92lJaIg7kuXWNAaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNzc2NjJmNjBiNWM0MTAzMmUwNTM1ZWU3MjcxODRlM2Fk
YjdiNzcwHhcNMjQwNjI0MDAwMTAwWhcNMjQwNjI1MDAwMTAwWjAzMTEwLwYDVQQD
EygxNjQ4YmNhNmU0NzMyMjlhNjJmMWQ4OWYzYjBkYTQ2YjExMzUxN2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21eFjEH3KB1OAaa7i4gBtLbe1VK5
n5gEYo+PrgnyR1ehZ3ZHOMit+betMbpCoYBwU5O9GBUAHWQgE/3dEfDBLgvt9+Di
LQjm4AYpUB4VPJGmOaXnJW/fYEQXvpLcSVjZsNM0/M2NzdQE09hB/55leSRRIbxR
FjvdPYnoohz4dZwrbHChxAxVR+i7ZSLH1pnnxhGzJMSp/e4g4r8fVT/V82bbAc9H
EmS/l3vumBQ/9jRxLOxiAwhRYICFKdWYknVpxjFwfRqzzYsC9sOdpXEnwpWFgiYF
7oRKWndeQ51Mu5ge+JHoYgf9j0pEJWHiYQ5wGTLLnllgkAqimZedM9spoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZIvKbkcyKaYvHYnzsNpGsRNRfxMB8GA1UdIwQY
MBaAFN93Zi9gtcQQMuBTXucnGE4623t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2Yt
NDEwNWY4YTNiYjljLzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2YtNDEwNWY4YTNiYjlj
LzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASj2+pcpi
PeEmCpd8NiTRGISpeVS+0rdzs4g1c8qeyHUeoYAGh0N68cehyvmiQx/xHnIfNYFr
w6wxS4gHl4tIX610+Dty8TrtYxzY1bpi9ndyQRfzHk5LHmsx6T2JSR/JTU10Zvxn
e7VK5R6y1Hw7nrxxri58lUHhIZdPvPeAoXVRf0wNhpxx9o9y2OXmcSiLVmMTaW/p
DlhgqqrqURfQQx+sqLBQzoSjjRCgbV5tJZ+j6cpKPLYdGxaiCUAWxLPQDjgwloT6
UCIUrYY1BnqPa/LBkrV9XfeIGH7RXlb7otwvVP8fTKLIlFyNUCLG4fidUCO+yd65
R8dlniQcZT09Kg==
-----END CERTIFICATE-----
Generated at Mon Jun 24 09:37:37 2024 by rpki-client on console-fra.rpki-client.org