Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
File:                     acZ5acPJ2Prbyac-P_VjYdAgO3E.mft (raw, json)
Hash identifier:          a69wvX2taHasdyowO4HCr+nZ8WqncxqsKNPqZSMUucs=
Subject key identifier:   7F:03:20:03:A3:B2:64:0F:CB:38:47:54:0D:F2:90:BA:5C:5E:9F:11
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Certificate issuer:       /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial:       01901D46589DFED30E3515D7431EB9713804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
Manifest number:          11CA
Signing time:             Sat 15 Jun 2024 19:01:07 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:07 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:07 +0000
Files and hashes:         1: KFmbJp3uTvWuxW7j-sfdGY82dI0.roa (hash: 4Taido7YnSnE8ptGNlulqQhU3707Naq9U8lJFc4mPpg=)
                          2: L50vcIX8cmfVpGj7NRCT5nxWaOs.roa (hash: ZJvD7P+XiLQzdUR91U+KouUXZYl5WMjyc7f9jzC3sqI=)
                          3: _ltumtGbuvDxruj6CMtt2dpV1DA.roa (hash: cquo19gprFLA4I88XzIt+/QKnqK8/RClwdpoz85OpKM=)
                          4: acZ5acPJ2Prbyac-P_VjYdAgO3E.crl (hash: N56ZAYVDKhmgE5oX7MjoFqLBydqI/JiLiw5v9Sr18Cw=)
                          5: jbTacOWHv2y8BsdApy8lFdHVmSc.roa (hash: wVv38r6D8/w7PC8m4piQHXjISmaJJaRwCZsZNPKcVXU=)
                          6: yFsW7MxfMpXqiWJgqxpu0cQseTM.roa (hash: Cwcnxmg2FlAmmYhV4/fF/kq95MJtcRKQrOWfP+oRrOo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:58:9d:fe:d3:0e:35:15:d7:43:1e:b9:71:38:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
        Validity
            Not Before: Jun 15 19:01:07 2024 GMT
            Not After : Jun 16 19:01:07 2024 GMT
        Subject: CN=7f032003a3b2640fcb3847540df290ba5c5e9f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:3d:b6:84:42:d1:6e:69:ce:79:a4:36:9f:
                    8c:aa:d0:7a:0f:41:7d:18:3d:62:86:a7:2d:75:35:
                    c2:38:16:53:3c:ca:6f:aa:0d:72:81:9c:e4:cf:fd:
                    5c:21:b3:22:7a:fd:10:07:15:7e:5e:0b:99:cb:e8:
                    de:d5:60:88:9c:72:52:bf:89:f0:14:30:b0:43:79:
                    91:bb:bd:4d:d3:c5:ac:39:1b:33:76:10:4d:74:0d:
                    58:21:9c:f4:3a:d6:b7:b3:d9:04:66:1a:46:4f:35:
                    5a:9e:b5:76:49:c5:55:24:91:3f:7c:ad:47:6b:49:
                    f2:6d:a6:7a:3c:41:0c:52:ba:1d:ef:16:75:4f:40:
                    75:34:0b:a9:40:65:3c:a2:3d:5f:f1:e6:7e:69:58:
                    c0:9a:08:76:95:31:64:c5:71:a5:20:a3:77:38:69:
                    85:81:17:c0:21:8a:7f:2f:9a:05:e8:52:7a:07:ab:
                    85:77:f4:da:54:5d:84:50:68:00:e0:1a:75:36:3e:
                    7b:97:93:02:88:a7:53:e9:33:d4:c8:9c:2d:a1:bd:
                    da:02:6b:31:71:c1:e0:aa:1f:ed:8b:ff:b4:81:01:
                    ad:67:f7:a5:ef:98:13:ec:75:9a:75:6d:42:44:42:
                    6f:67:e7:55:e5:94:4d:03:33:b6:d3:6c:e7:c7:73:
                    42:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:03:20:03:A3:B2:64:0F:CB:38:47:54:0D:F2:90:BA:5C:5E:9F:11
            X509v3 Authority Key Identifier:
                keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:27:e9:fc:76:e7:1a:90:f0:24:1b:ba:de:d8:b1:33:47:c1:
         e0:7b:3d:e9:76:90:33:3c:12:e1:04:fa:b7:41:c5:93:a1:33:
         6d:b7:fa:8e:f8:bb:8a:3f:2d:a6:5c:d7:93:8d:5f:f1:b7:7f:
         cb:11:32:4b:c6:9e:f0:a2:a6:b3:df:aa:c6:3c:a8:9b:cd:6a:
         16:09:b4:cb:9f:15:38:ab:7d:22:88:cb:61:e7:f9:41:1a:ff:
         7e:a4:1f:f3:55:5c:e9:5c:72:6a:58:95:f9:a0:36:e2:9c:a8:
         ee:e5:1e:f3:82:91:e9:77:49:90:14:8e:d3:13:ed:5e:39:92:
         b1:04:bc:46:18:9d:36:30:b1:e1:5a:51:c1:c1:18:81:e0:28:
         fc:fb:fe:93:d5:68:01:39:40:30:d1:9f:dd:ca:fd:b3:ce:77:
         c0:6c:fd:bc:70:d3:cc:13:26:6a:68:e0:58:dc:0b:99:13:78:
         8f:c0:89:bf:3c:fe:9f:c8:5b:1e:b8:41:00:97:e0:3a:e0:57:
         32:52:63:fe:5a:bf:07:96:6e:2a:56:b7:81:bc:d1:40:c2:92:
         8d:c6:2b:f6:92:6c:e0:c8:32:e5:3a:a7:1d:d2:15:6b:25:87:
         1b:9b:6d:d1:7d:c7:68:6c:0a:06:ac:ab:75:30:23:db:9c:bf:
         d4:ff:98:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRlid/tMONRXXQx65cTgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YzY3OTY5YzNjOWQ4ZmFkYmM5YTczZTNmZjU2MzYxZDAy
MDNiNzEwHhcNMjQwNjE1MTkwMTA3WhcNMjQwNjE2MTkwMTA3WjAzMTEwLwYDVQQD
Eyg3ZjAzMjAwM2EzYjI2NDBmY2IzODQ3NTQwZGYyOTBiYTVjNWU5ZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviw9toRC0W5pznmkNp+MqtB6D0F9
GD1ihqctdTXCOBZTPMpvqg1ygZzkz/1cIbMiev0QBxV+XguZy+je1WCInHJSv4nw
FDCwQ3mRu71N08WsORszdhBNdA1YIZz0Ota3s9kEZhpGTzVanrV2ScVVJJE/fK1H
a0nybaZ6PEEMUrod7xZ1T0B1NAupQGU8oj1f8eZ+aVjAmgh2lTFkxXGlIKN3OGmF
gRfAIYp/L5oF6FJ6B6uFd/TaVF2EUGgA4Bp1Nj57l5MCiKdT6TPUyJwtob3aAmsx
ccHgqh/ti/+0gQGtZ/el75gT7HWadW1CREJvZ+dV5ZRNAzO202znx3NCcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8DIAOjsmQPyzhHVA3ykLpcXp8RMB8GA1UdIwQY
MBaAFGnGeWnDydj628mnPj/1Y2HQIDtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgt
NDhlZjhlMTExNGU0LzEvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgtNDhlZjhlMTExNGU0
LzEvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyfp/Hbn
GpDwJBu63tixM0fB4Hs96XaQMzwS4QT6t0HFk6Ezbbf6jvi7ij8tplzXk41f8bd/
yxEyS8ae8KKms9+qxjyom81qFgm0y58VOKt9IojLYef5QRr/fqQf81Vc6VxyaliV
+aA24pyo7uUe84KR6XdJkBSO0xPtXjmSsQS8RhidNjCx4VpRwcEYgeAo/Pv+k9Vo
ATlAMNGf3cr9s853wGz9vHDTzBMmamjgWNwLmRN4j8CJvzz+n8hbHrhBAJfgOuBX
MlJj/lq/B5ZuKla3gbzRQMKSjcYr9pJs4Mgy5TqnHdIVayWHG5tt0X3HaGwKBqyr
dTAj25y/1P+YvQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:02:12 2024 by rpki-client on console-ams.rpki-client.org