Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File:                     rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier:          CJeONXXP1EWBrTkM2kLt2m28yUjRK//hdZ8eRg1rx/0=
Subject key identifier:   40:A0:88:D6:CA:56:8D:1A:FE:D3:3A:5A:2C:B0:F8:81:2A:47:AF:80
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer:       /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial:       0190411C04C14F75B8DF8AA5516317F8776E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number:          A6
Signing time:             Sat 22 Jun 2024 18:01:13 +0000
Manifest this update:     Sat 22 Jun 2024 18:01:13 +0000
Manifest next update:     Sun 23 Jun 2024 18:01:13 +0000
Files and hashes:         1: njrPzHkkLBmMlt60_Kr5OZb6Z2M.roa (hash: d1lIhG6Tocs/fsQdlXpziTOmmKEWwmZ0mqeWTx3mCEg=)
                          2: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: STjdT+fRKum+3G7egRCh705YzvjtRy7JRzjEgQej8Z8=)
                          3: upwZyaRxqIu-L0hTJk8d0UH1Xgg.roa (hash: t3jy10mSQ3KxyPRxnE+rHU/bldcrJucFCzgQESCOvzo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 18:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:1c:04:c1:4f:75:b8:df:8a:a5:51:63:17:f8:77:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
        Validity
            Not Before: Jun 22 18:01:13 2024 GMT
            Not After : Jun 23 18:01:13 2024 GMT
        Subject: CN=40a088d6ca568d1afed33a5a2cb0f8812a47af80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:b2:b7:7a:c4:58:6c:2b:ce:e3:8a:91:c2:
                    cd:d0:a7:f3:1e:ca:af:9c:c7:15:79:09:4e:36:cd:
                    2e:fa:9f:fe:92:06:82:99:f3:c7:2b:12:b8:09:55:
                    08:0f:14:7d:b4:7f:8e:d8:61:99:df:11:33:6e:ae:
                    a5:36:4b:92:73:50:39:bb:cd:e2:6f:bb:36:83:73:
                    f1:0e:88:41:3f:07:cd:00:13:7f:5e:51:04:e2:07:
                    a3:68:9f:70:c4:44:64:6e:88:aa:5d:c9:85:82:96:
                    5b:98:20:06:00:7f:d1:d0:02:83:7c:9b:5c:b1:ef:
                    ea:96:8e:f6:a6:48:ca:a1:fc:b0:50:2d:41:92:d1:
                    63:05:1a:21:4c:c3:15:ef:c8:5b:f6:5f:07:94:1e:
                    49:22:0b:56:07:e3:be:bf:9f:eb:25:89:b3:ee:06:
                    85:0a:c0:de:6c:60:89:21:16:01:96:f0:a1:4b:e6:
                    cb:c8:b0:8c:42:9a:7a:21:ed:7d:93:75:c5:68:b3:
                    6f:b9:9b:a8:13:0e:90:c0:7d:8f:b7:26:40:d5:4a:
                    4f:a3:ca:11:a9:08:5a:14:b4:ad:99:a5:d7:70:02:
                    e8:cd:9a:31:51:e9:7d:a9:fd:fa:fa:56:2a:c9:8a:
                    a4:60:9e:fe:95:96:40:b0:19:08:3b:43:66:fd:73:
                    55:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A0:88:D6:CA:56:8D:1A:FE:D3:3A:5A:2C:B0:F8:81:2A:47:AF:80
            X509v3 Authority Key Identifier:
                keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:0f:98:0a:93:35:6b:7b:43:18:f5:bf:6c:db:89:55:26:38:
         7f:93:eb:67:c8:93:b4:37:5f:d2:93:0e:32:c2:4f:6c:fa:cd:
         3e:24:62:e4:73:a1:f2:25:21:9c:ab:9b:30:ed:b0:9f:eb:ea:
         ce:df:40:ae:da:47:d6:f8:57:66:9f:bb:65:94:c0:38:94:02:
         8f:1d:e6:e9:6f:07:be:85:0d:fe:4b:4c:e6:b3:00:b2:36:e6:
         57:77:8f:c6:c7:6c:f0:65:86:28:0c:03:7e:a9:6b:b3:6a:f4:
         e3:e6:2e:f9:13:d8:a4:12:91:5b:33:cb:f4:24:27:85:30:01:
         7b:da:e0:bc:1f:05:1c:c6:ab:17:ae:ae:c5:59:8c:d5:75:3a:
         45:77:6e:ad:30:99:af:67:c7:3d:d7:82:2f:93:9d:79:5b:45:
         d6:5f:14:53:3a:f6:26:ad:46:4f:91:06:ec:0c:3e:2f:c7:c0:
         1a:56:dc:12:4f:c1:68:ae:ae:b6:8d:73:1f:7f:22:46:39:13:
         6d:58:e1:f8:7d:22:f6:3a:2b:55:72:ca:11:56:0b:30:91:59:
         eb:e0:ee:fe:76:1b:08:21:53:02:c4:2f:03:a8:b5:e7:70:99:
         fc:62:25:64:ac:4d:ff:b4:a9:5e:74:ea:c0:97:10:30:ad:a1:
         9e:6c:0b:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBBHATBT3W434qlUWMX+HduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMzdjZjRiMWZkNGNlNTY3ODhlZDgwYjdhMmUxMWM2MWI0
NTZhYjQwHhcNMjQwNjIyMTgwMTEzWhcNMjQwNjIzMTgwMTEzWjAzMTEwLwYDVQQD
Eyg0MGEwODhkNmNhNTY4ZDFhZmVkMzNhNWEyY2IwZjg4MTJhNDdhZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1ayt3rEWGwrzuOKkcLN0KfzHsqv
nMcVeQlONs0u+p/+kgaCmfPHKxK4CVUIDxR9tH+O2GGZ3xEzbq6lNkuSc1A5u83i
b7s2g3PxDohBPwfNABN/XlEE4gejaJ9wxERkboiqXcmFgpZbmCAGAH/R0AKDfJtc
se/qlo72pkjKofywUC1BktFjBRohTMMV78hb9l8HlB5JIgtWB+O+v5/rJYmz7gaF
CsDebGCJIRYBlvChS+bLyLCMQpp6Ie19k3XFaLNvuZuoEw6QwH2PtyZA1UpPo8oR
qQhaFLStmaXXcALozZoxUel9qf36+lYqyYqkYJ7+lZZAsBkIO0Nm/XNVTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECgiNbKVo0a/tM6Wiyw+IEqR6+AMB8GA1UdIwQY
MBaAFK43z0sf1M5WeI7YC3ouEcYbRWq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAt
MWVhMmE4ZWExNTQzLzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAtMWVhMmE4ZWExNTQz
LzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1g+YCpM1
a3tDGPW/bNuJVSY4f5PrZ8iTtDdf0pMOMsJPbPrNPiRi5HOh8iUhnKubMO2wn+vq
zt9ArtpH1vhXZp+7ZZTAOJQCjx3m6W8HvoUN/ktM5rMAsjbmV3ePxsds8GWGKAwD
fqlrs2r04+Yu+RPYpBKRWzPL9CQnhTABe9rgvB8FHMarF66uxVmM1XU6RXdurTCZ
r2fHPdeCL5OdeVtF1l8UUzr2Jq1GT5EG7Aw+L8fAGlbcEk/BaK6uto1zH38iRjkT
bVjh+H0i9jorVXLKEVYLMJFZ6+Du/nYbCCFTAsQvA6i153CZ/GIlZKxN/7SpXnTq
wJcQMK2hnmwLsg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:34:59 2024 by rpki-client on console-ams.rpki-client.org