Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
File:                     ZN7YXZoFsd9omotsMT-BKMegC2c.mft (raw, json)
Hash identifier:          ZnhyFnjl+xuEY3PknIbyiGXITl3MYPetc5Iy/VoF/pU=
Subject key identifier:   87:E8:01:D7:7D:58:9D:D6:08:F4:D3:94:77:08:B8:52:C8:D1:70:14
Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
Certificate issuer:       /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Certificate serial:       01901DEB0EEFE437EE7C59239990BC3C2FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
Manifest number:          11C8
Signing time:             Sat 15 Jun 2024 22:01:02 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:02 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:02 +0000
Files and hashes:         1: HI7Y1XqfS7OAXw-WPJel-4kfVas.roa (hash: 1r4VLFFk0Yd+e70UsyWMkgZmDsNx+RY8GWUBEuiU/6Q=)
                          2: ZN7YXZoFsd9omotsMT-BKMegC2c.crl (hash: TcmwMzp7uaCsgoQzcAD+/J5l4w2bVbCEM+dHl/RHd7s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:0e:ef:e4:37:ee:7c:59:23:99:90:bc:3c:2f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
        Validity
            Not Before: Jun 15 22:01:02 2024 GMT
            Not After : Jun 16 22:01:02 2024 GMT
        Subject: CN=87e801d77d589dd608f4d3947708b852c8d17014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:43:0a:ef:9a:0a:30:e6:4d:b5:81:c3:c5:ae:
                    95:44:13:16:d6:94:fe:cc:1e:ad:3c:95:ed:5c:9e:
                    f7:8f:fd:3a:b6:6c:3b:1d:dc:e6:70:41:71:18:d1:
                    2f:0e:8d:c1:b6:5c:d3:45:85:92:3e:f3:14:23:1f:
                    5d:7f:d3:4d:04:67:5c:57:e8:3f:ee:53:65:d4:71:
                    6d:4a:6e:3e:7b:71:09:8c:5d:4c:22:8a:f6:d7:89:
                    23:0b:2b:92:3e:7a:e1:c5:31:b1:16:ca:50:71:c9:
                    95:e2:99:a9:8f:90:c9:49:95:a7:5e:e3:15:b9:3b:
                    af:f4:6e:b4:08:bd:dd:24:2a:55:6b:86:fe:ef:a4:
                    5a:4e:93:4a:df:26:ec:ff:02:40:d2:eb:ff:89:78:
                    7f:12:8b:86:64:78:45:59:ca:9c:ef:27:c7:6a:67:
                    d0:c5:e8:23:16:80:ed:74:35:50:0a:7b:9d:5c:50:
                    75:6f:8a:ae:d6:99:e7:9b:90:b1:32:6d:b4:14:d5:
                    06:46:50:6d:67:21:00:04:37:07:91:57:bb:67:bf:
                    3e:a4:b4:34:d3:8e:77:4b:36:ca:e6:88:b6:5b:94:
                    29:b8:52:d1:52:18:a3:33:e2:b9:52:95:16:c4:32:
                    ee:76:84:b6:22:16:d7:ab:3c:ee:78:81:1b:70:ca:
                    d2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E8:01:D7:7D:58:9D:D6:08:F4:D3:94:77:08:B8:52:C8:D1:70:14
            X509v3 Authority Key Identifier:
                keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8c:2f:b5:bf:01:00:4f:11:7c:8b:be:de:d1:5b:1d:96:79:
         63:3b:ee:3f:8e:17:ec:ae:b9:90:48:fc:60:d8:99:4b:ba:24:
         09:ad:75:4b:9d:9e:37:3a:07:1e:f3:d8:f2:4a:ff:77:44:ba:
         ef:81:e3:0f:fa:6b:f7:b9:01:8c:47:80:71:57:e6:35:60:3f:
         29:c3:f8:a5:ab:25:e7:43:80:0e:6b:fb:cc:97:b7:64:9b:e8:
         c0:a9:d5:b9:fa:4c:b4:1e:70:cd:db:73:6f:06:a3:46:48:cc:
         95:86:9e:82:28:73:4c:8d:ea:25:8f:39:a2:51:20:ce:08:ec:
         22:b6:98:3a:4b:df:20:55:42:bd:a9:af:c6:5e:18:72:e3:33:
         ad:9a:4d:e8:99:cf:28:b8:b1:2c:0f:81:b1:30:a8:b3:2f:d6:
         da:0f:d1:06:76:d1:a0:29:ee:fa:cc:f2:41:9f:61:9a:5a:a5:
         9f:c0:80:fc:bf:81:d7:f4:ff:1b:1b:96:5b:ec:a7:d8:2f:5d:
         57:e6:fb:04:c0:d6:2e:c8:0a:69:31:41:07:b4:0e:9f:8e:70:
         09:e1:fb:54:b5:27:1f:66:02:78:0a:11:43:5f:40:47:31:fc:
         f0:24:ad:35:28:a3:c6:ee:a1:25:67:83:88:03:92:eb:78:33:
         dc:05:09:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6w7v5DfufFkjmZC8PC/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZGVkODVkOWEwNWIxZGY2ODlhOGI2YzMxM2Y4MTI4Yzdh
MDBiNjcwHhcNMjQwNjE1MjIwMTAyWhcNMjQwNjE2MjIwMTAyWjAzMTEwLwYDVQQD
Eyg4N2U4MDFkNzdkNTg5ZGQ2MDhmNGQzOTQ3NzA4Yjg1MmM4ZDE3MDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUMK75oKMOZNtYHDxa6VRBMW1pT+
zB6tPJXtXJ73j/06tmw7HdzmcEFxGNEvDo3BtlzTRYWSPvMUIx9df9NNBGdcV+g/
7lNl1HFtSm4+e3EJjF1MIor214kjCyuSPnrhxTGxFspQccmV4pmpj5DJSZWnXuMV
uTuv9G60CL3dJCpVa4b+76RaTpNK3ybs/wJA0uv/iXh/EouGZHhFWcqc7yfHamfQ
xegjFoDtdDVQCnudXFB1b4qu1pnnm5CxMm20FNUGRlBtZyEABDcHkVe7Z78+pLQ0
0453SzbK5oi2W5QpuFLRUhijM+K5UpUWxDLudoS2IhbXqzzueIEbcMrSWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfoAdd9WJ3WCPTTlHcIuFLI0XAUMB8GA1UdIwQY
MBaAFGTe2F2aBbHfaJqLbDE/gSjHoAtnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUt
YjllYjg3MWY2ZDk2LzEvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUtYjllYjg3MWY2ZDk2
LzEvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYwvtb8B
AE8RfIu+3tFbHZZ5YzvuP44X7K65kEj8YNiZS7okCa11S52eNzoHHvPY8kr/d0S6
74HjD/pr97kBjEeAcVfmNWA/KcP4pasl50OADmv7zJe3ZJvowKnVufpMtB5wzdtz
bwajRkjMlYaegihzTI3qJY85olEgzgjsIraYOkvfIFVCvamvxl4YcuMzrZpN6JnP
KLixLA+BsTCosy/W2g/RBnbRoCnu+szyQZ9hmlqln8CA/L+B1/T/GxuWW+yn2C9d
V+b7BMDWLsgKaTFBB7QOn45wCeH7VLUnH2YCeAoRQ19ARzH88CStNSijxu6hJWeD
iAOS63gz3AUJGg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:37:20 2024 by rpki-client on console-ams.rpki-client.org