Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
File:                     acZ5acPJ2Prbyac-P_VjYdAgO3E.mft (raw, json)
Hash identifier:          ETSxparOVGToNojkcrOvBa4BSngQI0q+SQQJNeWbOsQ=
Subject key identifier:   B5:D1:95:1E:44:9B:20:2C:A0:59:21:3D:34:2A:4C:5D:4D:F6:65:69
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Certificate issuer:       /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial:       019045D4963F285C43DC3C669F63D388D275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
Manifest number:          11DF
Signing time:             Sun 23 Jun 2024 16:01:17 +0000
Manifest this update:     Sun 23 Jun 2024 16:01:17 +0000
Manifest next update:     Mon 24 Jun 2024 16:01:17 +0000
Files and hashes:         1: KFmbJp3uTvWuxW7j-sfdGY82dI0.roa (hash: 4Taido7YnSnE8ptGNlulqQhU3707Naq9U8lJFc4mPpg=)
                          2: L50vcIX8cmfVpGj7NRCT5nxWaOs.roa (hash: ZJvD7P+XiLQzdUR91U+KouUXZYl5WMjyc7f9jzC3sqI=)
                          3: _ltumtGbuvDxruj6CMtt2dpV1DA.roa (hash: cquo19gprFLA4I88XzIt+/QKnqK8/RClwdpoz85OpKM=)
                          4: acZ5acPJ2Prbyac-P_VjYdAgO3E.crl (hash: 0AoymWYBBVVZZYd+TB8E4/WAyEW1sm6wuPcYcFtCQ8Y=)
                          5: jbTacOWHv2y8BsdApy8lFdHVmSc.roa (hash: wVv38r6D8/w7PC8m4piQHXjISmaJJaRwCZsZNPKcVXU=)
                          6: yFsW7MxfMpXqiWJgqxpu0cQseTM.roa (hash: Cwcnxmg2FlAmmYhV4/fF/kq95MJtcRKQrOWfP+oRrOo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:96:3f:28:5c:43:dc:3c:66:9f:63:d3:88:d2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
        Validity
            Not Before: Jun 23 16:01:17 2024 GMT
            Not After : Jun 24 16:01:17 2024 GMT
        Subject: CN=b5d1951e449b202ca059213d342a4c5d4df66569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:d5:83:dc:f7:5d:52:e6:69:a8:da:4c:31:
                    b2:dd:2d:49:00:34:13:ed:d8:b8:f4:f6:20:c0:df:
                    99:40:46:24:d2:d5:87:77:8a:57:2e:f7:83:db:99:
                    4b:b5:b5:1a:34:c1:96:33:93:d8:b4:a1:bb:b6:e3:
                    21:4b:16:5a:56:10:90:ff:5c:d7:77:28:84:a2:f1:
                    07:f0:1f:81:f6:5c:6a:b9:1a:10:29:05:96:8c:92:
                    cc:8e:f7:e8:2d:e0:9b:d3:39:93:ac:c5:95:cb:22:
                    b2:c0:59:53:47:e9:ef:17:19:44:7c:94:e4:1a:81:
                    4e:b3:6d:0d:71:cd:71:ea:fd:b6:49:dd:23:98:07:
                    27:ae:51:c8:9e:29:a0:8b:98:b0:b5:26:02:10:f7:
                    5d:50:4e:9a:5f:8c:06:17:95:c9:53:e3:b1:60:06:
                    d4:b6:12:a4:f4:6d:89:ea:b4:2b:d6:38:83:ea:fe:
                    6d:33:e1:9f:14:20:4b:f4:21:a3:63:a7:49:b2:2d:
                    38:bb:51:85:eb:2f:cb:74:f3:23:38:d2:e1:a0:5e:
                    e4:97:20:f0:7f:3c:a7:16:e6:84:61:90:e1:b1:8a:
                    94:d6:e2:cf:cf:51:b7:23:a7:0f:3d:f9:49:33:c7:
                    c7:84:49:f2:50:28:ee:b5:f7:43:f1:5e:2e:2b:ce:
                    a3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D1:95:1E:44:9B:20:2C:A0:59:21:3D:34:2A:4C:5D:4D:F6:65:69
            X509v3 Authority Key Identifier:
                keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:07:c9:8b:19:c2:f2:17:eb:38:6a:2f:07:71:37:31:07:6a:
         8d:83:de:78:b5:6a:22:ab:4a:4d:6f:b9:90:90:36:3a:fb:ca:
         dd:9d:1a:86:e4:7b:57:44:cd:b5:d0:9d:49:43:95:7d:f4:e4:
         ab:f7:08:73:36:9c:1c:bc:9c:7e:50:20:4a:d1:4f:d4:19:96:
         33:97:17:10:d0:5f:ed:2c:27:8e:90:79:bf:92:4b:b2:12:71:
         f0:2a:0b:1b:6c:11:b0:23:1a:08:b3:3f:17:65:89:66:0b:e3:
         73:3f:73:5c:0c:53:94:0b:7f:9b:c4:80:38:5f:08:ad:a9:08:
         61:26:07:b7:7e:1f:dc:7d:81:ba:30:f6:45:f5:4d:2a:ed:89:
         90:93:ef:bc:ea:2c:db:18:96:bd:24:4b:e5:7f:ab:4c:6f:c2:
         ce:62:3c:8e:cc:90:42:4b:27:99:90:76:8d:11:45:eb:a4:e5:
         50:ec:b9:1d:18:6d:73:f8:5f:43:c9:9b:f2:1a:ce:92:05:12:
         78:ef:42:13:ef:3e:fe:3c:48:7a:5e:b4:cc:92:96:f5:11:fc:
         18:77:3a:1e:67:3f:8d:7a:44:e2:35:3f:55:41:51:37:55:c8:
         46:50:14:56:0e:20:3b:cd:c9:58:94:a8:35:9a:7e:49:69:a1:
         18:74:ce:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBF1JY/KFxD3Dxmn2PTiNJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YzY3OTY5YzNjOWQ4ZmFkYmM5YTczZTNmZjU2MzYxZDAy
MDNiNzEwHhcNMjQwNjIzMTYwMTE3WhcNMjQwNjI0MTYwMTE3WjAzMTEwLwYDVQQD
EyhiNWQxOTUxZTQ0OWIyMDJjYTA1OTIxM2QzNDJhNGM1ZDRkZjY2NTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpfVg9z3XVLmaajaTDGy3S1JADQT
7di49PYgwN+ZQEYk0tWHd4pXLveD25lLtbUaNMGWM5PYtKG7tuMhSxZaVhCQ/1zX
dyiEovEH8B+B9lxquRoQKQWWjJLMjvfoLeCb0zmTrMWVyyKywFlTR+nvFxlEfJTk
GoFOs20Ncc1x6v22Sd0jmAcnrlHInimgi5iwtSYCEPddUE6aX4wGF5XJU+OxYAbU
thKk9G2J6rQr1jiD6v5tM+GfFCBL9CGjY6dJsi04u1GF6y/LdPMjONLhoF7klyDw
fzynFuaEYZDhsYqU1uLPz1G3I6cPPflJM8fHhEnyUCjutfdD8V4uK86jcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXRlR5EmyAsoFkhPTQqTF1N9mVpMB8GA1UdIwQY
MBaAFGnGeWnDydj628mnPj/1Y2HQIDtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgt
NDhlZjhlMTExNGU0LzEvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jZGJmOGYtNmU2Ny00YWIxLWJmMTgtNDhlZjhlMTExNGU0
LzEvYWNaNWFjUEoyUHJieWFjLVBfVmpZZEFnTzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwfJixnC
8hfrOGovB3E3MQdqjYPeeLVqIqtKTW+5kJA2OvvK3Z0ahuR7V0TNtdCdSUOVffTk
q/cIczacHLycflAgStFP1BmWM5cXENBf7SwnjpB5v5JLshJx8CoLG2wRsCMaCLM/
F2WJZgvjcz9zXAxTlAt/m8SAOF8IrakIYSYHt34f3H2BujD2RfVNKu2JkJPvvOos
2xiWvSRL5X+rTG/CzmI8jsyQQksnmZB2jRFF66TlUOy5HRhtc/hfQ8mb8hrOkgUS
eO9CE+8+/jxIel60zJKW9RH8GHc6Hmc/jXpE4jU/VUFRN1XIRlAUVg4gO83JWJSo
NZp+SWmhGHTO7A==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:50:46 2024 by rpki-client on console-ams.rpki-client.org