Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File:                     XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier:          OhiQBeVxPhAedBrumKyeLNu4CZQd9U5nouOevdyA+pQ=
Subject key identifier:   0B:31:A7:E3:80:4D:0B:AB:40:18:B9:0B:86:6C:98:13:4A:C5:28:36
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer:       /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial:       01901CA124706D5CD38CB111A19D5EBEAF96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number:          0ED5
Signing time:             Sat 15 Jun 2024 16:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:40 +0000
Files and hashes:         1: 3MlAnYNYmpnnucH0i9X2-d_jBwM.roa (hash: UsXEbfTw/yVkUEMUAXPUAC5D2jht3sHEf3hrfVk9eCA=)
                          2: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: Bq80zuF3NNGL2qV3peynzoDVxkBLPJ1ojp8VA5J4DCc=)
                          3: XlZV0JGoC61-cMHTHreM1RkVfGY.roa (hash: V/7Is+IIQlrls2gwUa06ty07/dwo5arO9KSPyPc0cbQ=)
                          4: cTCd_dVfi9yiX1yVcaBRxBLQsfU.roa (hash: LeUyNi/s483VZAd8BYjHy9P0YaXgxID01PlkVQav/EU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:24:70:6d:5c:d3:8c:b1:11:a1:9d:5e:be:af:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
        Validity
            Not Before: Jun 15 16:00:40 2024 GMT
            Not After : Jun 16 16:00:40 2024 GMT
        Subject: CN=0b31a7e3804d0bab4018b90b866c98134ac52836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:97:5f:e0:9a:76:65:e3:db:05:b5:e5:18:
                    5c:3f:aa:5c:7d:7a:8a:12:87:19:08:79:60:1f:e1:
                    25:1a:c8:49:85:80:1c:b6:c4:5c:2e:89:67:5b:d9:
                    9a:23:30:38:71:62:60:a7:af:50:be:82:a3:67:da:
                    ff:60:cc:32:3c:89:c4:03:07:2b:d3:ea:03:75:02:
                    05:cd:91:f3:f2:96:4a:9b:78:a6:59:f8:a1:fc:56:
                    2e:53:c6:42:b4:49:90:1c:51:ad:21:42:a5:25:46:
                    b4:0f:e3:08:62:8a:cf:22:dc:c9:a1:a1:e5:1e:f9:
                    38:7a:22:72:7c:7b:eb:a2:38:9a:85:a8:cb:c9:8d:
                    b5:67:fb:aa:8f:37:52:58:d0:10:1a:18:2b:cf:49:
                    d2:fd:31:cd:e9:7d:5c:66:d3:e5:e2:c5:c9:b9:e5:
                    e1:d8:5c:f0:35:4e:72:86:31:5f:54:ba:62:b9:02:
                    05:a6:70:9d:ee:b3:a6:24:6d:8c:ba:01:48:88:2d:
                    c3:ae:5e:07:84:b5:e0:ce:94:84:d1:1d:41:2e:35:
                    b5:57:ff:58:91:46:58:7f:5e:8e:c0:f3:9c:b1:bb:
                    51:4f:f9:67:b4:10:d7:05:28:b7:4e:35:d5:11:f5:
                    3d:bf:c2:f0:af:65:d9:27:33:26:35:85:f1:bf:13:
                    a3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:31:A7:E3:80:4D:0B:AB:40:18:B9:0B:86:6C:98:13:4A:C5:28:36
            X509v3 Authority Key Identifier:
                keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:90:eb:22:2f:8a:9d:17:4b:e9:61:fa:91:d8:73:ea:c8:bf:
         f0:a5:76:75:8d:02:b3:e3:e6:69:f2:1a:2e:66:b5:f7:97:ba:
         19:c1:91:1e:53:3b:06:0b:b5:ea:af:d0:14:ad:e7:5a:fa:c0:
         1d:b6:13:2f:12:0f:06:8f:9a:c2:ca:70:42:8b:a2:f5:ea:2a:
         b2:05:53:15:06:44:c3:b2:fc:49:a9:15:04:4c:ad:59:4c:7b:
         bf:74:4b:42:17:a3:b9:51:06:40:53:6e:54:05:37:7f:ce:37:
         84:d7:3b:ad:79:5f:06:99:16:43:3f:e5:5f:4f:2a:a0:ec:59:
         46:71:de:a6:66:fc:d4:d9:96:49:20:bd:7b:95:13:9c:19:41:
         63:d6:76:a2:46:21:a2:c0:21:8e:cc:13:ba:a8:4b:1e:ef:c1:
         aa:e8:52:cb:8a:a7:84:bb:22:e0:0a:a4:58:bb:84:01:32:91:
         ee:2b:93:aa:3d:d6:eb:df:88:60:ee:02:51:f0:4c:50:72:cc:
         d8:e1:f3:f5:b6:09:70:d0:9f:1d:c8:e6:57:00:5f:9e:f3:34:
         dd:06:a0:a2:90:f7:24:30:f9:96:c6:36:ef:3d:3d:98:a4:3c:
         fd:8b:83:70:ac:c1:a0:02:bf:d1:5e:bb:03:1c:ed:67:b2:d3:
         e5:1d:d6:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcoSRwbVzTjLERoZ1evq+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm
YTJmYWMwHhcNMjQwNjE1MTYwMDQwWhcNMjQwNjE2MTYwMDQwWjAzMTEwLwYDVQQD
EygwYjMxYTdlMzgwNGQwYmFiNDAxOGI5MGI4NjZjOTgxMzRhYzUyODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zCXX+CadmXj2wW15RhcP6pcfXqK
EocZCHlgH+ElGshJhYActsRcLolnW9maIzA4cWJgp69QvoKjZ9r/YMwyPInEAwcr
0+oDdQIFzZHz8pZKm3imWfih/FYuU8ZCtEmQHFGtIUKlJUa0D+MIYorPItzJoaHl
Hvk4eiJyfHvrojiahajLyY21Z/uqjzdSWNAQGhgrz0nS/THN6X1cZtPl4sXJueXh
2FzwNU5yhjFfVLpiuQIFpnCd7rOmJG2MugFIiC3Drl4HhLXgzpSE0R1BLjW1V/9Y
kUZYf16OwPOcsbtRT/lntBDXBSi3TjXVEfU9v8Lwr2XZJzMmNYXxvxOjHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsxp+OATQurQBi5C4ZsmBNKxSg2MB8GA1UdIwQY
MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt
ODQzZTI2MmRkOGRjLzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj
LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipDrIi+K
nRdL6WH6kdhz6si/8KV2dY0Cs+PmafIaLma195e6GcGRHlM7Bgu16q/QFK3nWvrA
HbYTLxIPBo+awspwQoui9eoqsgVTFQZEw7L8SakVBEytWUx7v3RLQhejuVEGQFNu
VAU3f843hNc7rXlfBpkWQz/lX08qoOxZRnHepmb81NmWSSC9e5UTnBlBY9Z2okYh
osAhjswTuqhLHu/BquhSy4qnhLsi4AqkWLuEATKR7iuTqj3W69+IYO4CUfBMUHLM
2OHz9bYJcNCfHcjmVwBfnvM03QagopD3JDD5lsY27z09mKQ8/YuDcKzBoAK/0V67
AxztZ7LT5R3Wqg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:56:09 2024 by rpki-client on console-fra.rpki-client.org