Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File:                     nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier:          9D0VxcK3vOCaSfsgb93p0HYqAg3ScfsanCCpvM7Nbwc=
Subject key identifier:   24:04:78:A6:DA:E1:C8:6A:F6:8F:B1:7A:6B:66:FF:3D:CE:63:46:4F
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer:       /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial:       01901DEC6523FEC5505A68AB29A661333A8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number:          04DF
Signing time:             Sat 15 Jun 2024 22:02:29 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:29 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:29 +0000
Files and hashes:         1: 189SBiDiQmkkYB7PsaGish2aMXg.roa (hash: 6nM83JyY4NVKOGXZhs88d0F8UgPrOopxyc6NSok6zA0=)
                          2: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: gXu4/LR4H/wUxz9303h5wPj3VnHfntYoviEmU/ypaqE=)
                          3: qvGLp0H_EijjouOgk-b1feUfccA.roa (hash: qc5VuGVAcEkYd8huv58Weu0+ginrtq6C5VpR6nghSq0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:65:23:fe:c5:50:5a:68:ab:29:a6:61:33:3a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
        Validity
            Not Before: Jun 15 22:02:29 2024 GMT
            Not After : Jun 16 22:02:29 2024 GMT
        Subject: CN=240478a6dae1c86af68fb17a6b66ff3dce63464f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:5d:a8:41:f6:81:dc:0e:ec:73:e9:1c:c8:
                    b3:ff:61:e9:d4:ea:9b:9f:62:a5:1c:f9:87:e5:99:
                    3d:61:54:d4:9f:32:1c:70:dc:e4:57:6c:6a:62:45:
                    08:bb:30:e6:0c:75:f2:23:e8:8f:8e:a4:30:ee:ed:
                    7d:20:f6:3f:42:f0:05:38:39:32:bb:3b:9c:da:e3:
                    80:91:5c:8b:85:ef:b9:65:0a:24:c8:b3:c1:76:05:
                    1e:7b:01:e1:d9:95:4a:0d:c0:1b:92:53:54:e1:55:
                    52:26:dd:21:83:36:06:4e:da:42:c5:50:06:74:54:
                    8a:ec:d0:f4:3e:27:76:11:f0:6e:56:9e:b4:76:88:
                    9e:ef:d3:00:9d:c0:8f:ef:32:47:44:01:7a:c2:d8:
                    a2:18:67:45:c7:6b:95:09:3a:6c:06:8e:6b:ec:bd:
                    54:ef:51:26:4e:9f:c9:ff:41:62:d9:96:8b:ee:35:
                    ff:eb:63:11:aa:f5:a1:60:3c:5a:e5:e8:40:2d:ee:
                    c8:e8:28:28:96:cf:1d:b2:fd:ba:24:d6:f8:3d:ea:
                    37:a0:30:3f:0e:e4:63:fc:81:77:35:77:ce:3a:46:
                    c7:93:da:19:a4:6a:59:d0:08:ee:5b:85:3a:ac:6e:
                    a9:22:79:71:57:54:09:47:b4:c1:9d:c5:70:38:60:
                    46:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:04:78:A6:DA:E1:C8:6A:F6:8F:B1:7A:6B:66:FF:3D:CE:63:46:4F
            X509v3 Authority Key Identifier:
                keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:dd:c8:c2:d5:76:67:4a:a8:90:d9:6b:32:9a:07:a4:7d:7c:
         db:9f:b0:bf:c7:4e:03:1c:84:d1:6e:89:83:c1:95:d9:dd:81:
         22:ac:3a:60:8e:36:13:e7:cc:e8:41:be:44:c8:88:ac:33:40:
         68:8f:6c:11:5f:6d:32:05:8d:2e:3a:f0:bb:a8:c9:ec:ee:46:
         17:c9:60:6f:5b:81:ca:10:90:eb:50:90:72:98:4d:fb:6e:f2:
         ea:d6:1f:3d:50:5d:ab:08:e9:47:7e:73:9a:4b:4f:9c:85:f6:
         12:48:6e:ca:40:7b:78:ce:4e:8c:66:91:34:05:ff:3b:24:44:
         0d:43:34:fe:56:0c:c8:a2:96:d7:6c:f5:c5:99:40:70:94:a4:
         1f:93:3f:7d:ab:ea:6f:8b:0e:b4:f7:19:68:38:b9:0d:cc:67:
         b9:9a:d2:d7:76:82:31:45:26:fa:93:e7:57:34:c7:3f:17:36:
         78:01:b8:34:f0:6e:d8:50:40:c0:4a:ee:3d:40:bb:92:cf:bc:
         f8:6b:bc:e8:40:31:56:17:a2:60:48:78:40:60:fe:e1:29:99:
         dd:6b:3a:1a:54:bf:21:0c:d7:5d:9b:a4:4c:b8:fb:0f:ef:0e:
         96:80:3a:4e:c8:83:8b:47:f8:9a:be:31:0a:19:92:0f:b8:d5:
         16:cd:e8:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7GUj/sVQWmirKaZhMzqPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjllODU1NDAyMGJkZWZhMTdjNTU2MTQzOGZiNGJhZjU4
MzFmNTIwHhcNMjQwNjE1MjIwMjI5WhcNMjQwNjE2MjIwMjI5WjAzMTEwLwYDVQQD
EygyNDA0NzhhNmRhZTFjODZhZjY4ZmIxN2E2YjY2ZmYzZGNlNjM0NjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxJdqEH2gdwO7HPpHMiz/2Hp1Oqb
n2KlHPmH5Zk9YVTUnzIccNzkV2xqYkUIuzDmDHXyI+iPjqQw7u19IPY/QvAFODky
uzuc2uOAkVyLhe+5ZQokyLPBdgUeewHh2ZVKDcAbklNU4VVSJt0hgzYGTtpCxVAG
dFSK7ND0Pid2EfBuVp60doie79MAncCP7zJHRAF6wtiiGGdFx2uVCTpsBo5r7L1U
71EmTp/J/0Fi2ZaL7jX/62MRqvWhYDxa5ehALe7I6Cgols8dsv26JNb4Peo3oDA/
DuRj/IF3NXfOOkbHk9oZpGpZ0AjuW4U6rG6pInlxV1QJR7TBncVwOGBGFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQEeKba4chq9o+xemtm/z3OY0ZPMB8GA1UdIwQY
MBaAFJ8p6FVAIL3voXxVYUOPtLr1gx9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYt
M2ZlOGY4OTZlNTUxLzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYtM2ZlOGY4OTZlNTUx
LzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ93IwtV2
Z0qokNlrMpoHpH1825+wv8dOAxyE0W6Jg8GV2d2BIqw6YI42E+fM6EG+RMiIrDNA
aI9sEV9tMgWNLjrwu6jJ7O5GF8lgb1uByhCQ61CQcphN+27y6tYfPVBdqwjpR35z
mktPnIX2EkhuykB7eM5OjGaRNAX/OyREDUM0/lYMyKKW12z1xZlAcJSkH5M/favq
b4sOtPcZaDi5DcxnuZrS13aCMUUm+pPnVzTHPxc2eAG4NPBu2FBAwEruPUC7ks+8
+Gu86EAxVheiYEh4QGD+4SmZ3Ws6GlS/IQzXXZukTLj7D+8OloA6TsiDi0f4mr4x
ChmSD7jVFs3otg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:04:56 2024 by rpki-client on console-fra.rpki-client.org