Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
File:                     vqse58Ta0p0SfVZdG5N5RlwoiTc.mft (raw, json)
Hash identifier:          m+aVYixvBtD7oOnKEoBrpzcBq+pSgsrXqP3RVqovWvE=
Subject key identifier:   9A:9F:DA:4B:75:FF:DE:53:C6:A3:AD:7A:F9:B9:7D:6C:BF:A3:63:1A
Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
Certificate issuer:       /CN=beab1ee7c4dad29d127d565d1b9379465c288937
Certificate serial:       01901EFD62A683D7F289599E07E0581E629B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 03:00:40 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:40 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:40 +0000
Files and hashes:         1: Y1fSWggqA8AMMM58Ab-VrAQZu5Y.roa (hash: 3m7wZH74M8ZomeBHik+rWNGF4NEVg62Kr8mQAWszhKs=)
                          2: vqse58Ta0p0SfVZdG5N5RlwoiTc.crl (hash: uftR0NBBJWsaPyZnpM2G8Na5JPfTyMoJwwhwLRkUAIg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:62:a6:83:d7:f2:89:59:9e:07:e0:58:1e:62:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937
        Validity
            Not Before: Jun 16 03:00:40 2024 GMT
            Not After : Jun 17 03:00:40 2024 GMT
        Subject: CN=9a9fda4b75ffde53c6a3ad7af9b97d6cbfa3631a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:96:36:6d:9d:79:3b:8f:ed:40:4e:06:62:
                    01:d2:52:b7:e5:73:04:33:a0:b3:64:4e:2b:01:b2:
                    41:6d:f0:39:69:55:47:af:a0:b7:62:9c:94:af:fa:
                    b7:73:88:b7:06:31:40:fe:71:c2:98:93:ce:b0:39:
                    08:4f:dc:b6:de:9e:18:38:e2:2e:7f:c4:ed:b5:33:
                    6e:ef:51:8f:5f:ff:27:bc:ae:8f:0b:6b:20:e5:10:
                    49:85:f2:f4:f6:c1:da:0a:41:90:99:bd:ad:47:54:
                    b1:2e:af:33:07:ed:74:af:c6:7c:67:56:b2:ed:de:
                    ca:c0:9e:0d:70:83:58:8f:fc:bc:aa:5a:b2:c6:5f:
                    13:e3:a9:92:c4:46:ea:0e:31:b6:be:d5:d5:76:a9:
                    ec:fc:16:63:ef:7a:a5:ff:0e:e4:f3:fa:44:78:85:
                    2f:5e:9f:5b:79:d3:5d:7d:9a:df:d8:54:fb:7f:71:
                    ec:d9:2d:95:f6:21:38:f8:5e:07:ae:23:f3:5c:a5:
                    24:87:c4:67:54:2a:92:6b:b3:1b:4e:d6:d2:6c:ec:
                    5e:1f:b9:9c:bb:a9:f7:bd:23:a4:e8:a2:2e:18:f7:
                    76:41:c3:e3:48:73:e9:a3:0c:b8:b7:8a:2a:19:d1:
                    2c:fc:79:07:cc:6e:c6:96:ba:51:8d:2c:45:ae:7a:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9F:DA:4B:75:FF:DE:53:C6:A3:AD:7A:F9:B9:7D:6C:BF:A3:63:1A
            X509v3 Authority Key Identifier:
                keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5e:16:9e:9d:b6:5a:5c:f5:09:d8:32:3f:00:47:7a:92:07:
         bb:a7:1c:5b:fe:41:df:ae:5c:0a:77:b9:2d:8f:34:25:50:9b:
         eb:2e:0d:f0:1d:de:78:d3:68:7d:b0:26:e2:f9:ee:5a:f4:70:
         66:7b:9a:a4:63:fc:cb:8c:97:a7:35:b4:fc:9a:c2:a6:88:71:
         05:a0:aa:ab:51:1a:43:55:5f:11:3c:76:bb:2f:ef:20:d6:82:
         4f:e2:f1:69:b6:04:29:44:73:52:e1:c9:65:0f:38:22:50:84:
         d1:96:d1:9e:2c:00:1d:98:f1:35:5b:d8:7e:58:35:0e:13:12:
         51:e4:e2:86:d0:ac:a0:cb:1e:f4:1c:15:ca:49:63:94:39:cf:
         ca:2d:76:e9:49:99:e8:aa:8d:db:ee:0f:39:e9:a8:b2:e4:5c:
         96:0b:70:27:47:d6:a5:4c:3e:f6:a2:cc:3a:86:b1:23:ee:17:
         e4:f4:2f:83:e9:1a:13:b6:9f:9e:1f:d1:a9:a4:5c:f2:5d:15:
         70:99:b0:20:c2:aa:8a:8c:f8:a0:16:5b:b5:27:ce:7d:90:04:
         2c:d0:fa:43:bc:fb:a2:c6:66:bd:aa:4f:13:12:c4:21:b2:12:
         ac:78:c0:79:94:6f:e8:db:5d:23:a9:d4:e5:8d:59:bf:04:2e:
         f6:29:be:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAe/WKmg9fyiVmeB+BYHmKbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYWIxZWU3YzRkYWQyOWQxMjdkNTY1ZDFiOTM3OTQ2NWMy
ODg5MzcwHhcNMjQwNjE2MDMwMDQwWhcNMjQwNjE3MDMwMDQwWjAzMTEwLwYDVQQD
Eyg5YTlmZGE0Yjc1ZmZkZTUzYzZhM2FkN2FmOWI5N2Q2Y2JmYTM2MzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7GWNm2deTuP7UBOBmIB0lK35XME
M6CzZE4rAbJBbfA5aVVHr6C3YpyUr/q3c4i3BjFA/nHCmJPOsDkIT9y23p4YOOIu
f8TttTNu71GPX/8nvK6PC2sg5RBJhfL09sHaCkGQmb2tR1SxLq8zB+10r8Z8Z1ay
7d7KwJ4NcINYj/y8qlqyxl8T46mSxEbqDjG2vtXVdqns/BZj73ql/w7k8/pEeIUv
Xp9bedNdfZrf2FT7f3Hs2S2V9iE4+F4HriPzXKUkh8RnVCqSa7MbTtbSbOxeH7mc
u6n3vSOk6KIuGPd2QcPjSHPpowy4t4oqGdEs/HkHzG7GlrpRjSxFrnoqQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqf2kt1/95TxqOtevm5fWy/o2MaMB8GA1UdIwQY
MBaAFL6rHufE2tKdEn1WXRuTeUZcKIk3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MWE2OTMtODM2YS00MTIyLWI5Mjkt
ZTJhOTIwNWE5ZDJhLzEvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82MWE2OTMtODM2YS00MTIyLWI5MjktZTJhOTIwNWE5ZDJh
LzEvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeF4Wnp22
Wlz1CdgyPwBHepIHu6ccW/5B365cCne5LY80JVCb6y4N8B3eeNNofbAm4vnuWvRw
ZnuapGP8y4yXpzW0/JrCpohxBaCqq1EaQ1VfETx2uy/vINaCT+LxabYEKURzUuHJ
ZQ84IlCE0ZbRniwAHZjxNVvYflg1DhMSUeTihtCsoMse9BwVykljlDnPyi126UmZ
6KqN2+4POemosuRclgtwJ0fWpUw+9qLMOoaxI+4X5PQvg+kaE7afnh/RqaRc8l0V
cJmwIMKqioz4oBZbtSfOfZAELND6Q7z7osZmvapPExLEIbISrHjAeZRv6NtdI6nU
5Y1ZvwQu9im+vQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:47:41 2024 by rpki-client on console-fra.rpki-client.org