Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
File:                     x02iHagDioIFQrOvr76qqmZreyc.mft (raw, json)
Hash identifier:          8cSBNb7wdtRyDgyTSoaFfFhqJJGfHRGnxrABOEdyfw8=
Subject key identifier:   35:D0:19:CC:64:3F:84:AC:72:EA:05:9D:42:B6:A5:92:15:76:4E:B9
Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
Certificate issuer:       /CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Certificate serial:       0190448BF73A648D9CBF0621E1DD3F1F2564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
Manifest number:          116D
Signing time:             Sun 23 Jun 2024 10:02:21 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:21 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:21 +0000
Files and hashes:         1: GQrdkxCu8VAJvKWuR7jKOI8uXsw.roa (hash: Z6qm3aQmcT+hiytkD/Jsar7vvCj2QBXq8W256Wc9GFo=)
                          2: x02iHagDioIFQrOvr76qqmZreyc.crl (hash: nP5Sjx87c+B8OB1F4la4fGAWxjO5pYExzcTMNLRdpio=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:f7:3a:64:8d:9c:bf:06:21:e1:dd:3f:1f:25:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27
        Validity
            Not Before: Jun 23 10:02:21 2024 GMT
            Not After : Jun 24 10:02:21 2024 GMT
        Subject: CN=35d019cc643f84ac72ea059d42b6a59215764eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:30:38:68:c0:e3:e5:cf:3f:df:30:72:38:60:
                    59:47:3e:d9:34:cc:c6:b3:61:c9:74:45:37:7b:49:
                    14:dc:4a:93:5a:48:0d:36:cf:ee:59:80:86:6a:1a:
                    0f:83:cd:ff:b0:68:25:d4:9d:c4:18:a8:54:1e:18:
                    3c:53:5e:a0:8e:67:f4:9d:92:77:f6:85:f3:52:29:
                    ce:a4:bf:73:84:ad:ff:32:40:48:7a:89:c4:3e:84:
                    aa:b6:bc:06:74:59:18:6c:6b:c0:4e:e6:36:4b:5c:
                    c6:fb:6b:49:38:30:a4:4b:71:8a:9a:6e:39:ba:b9:
                    fb:f2:c7:e2:52:9e:c8:16:46:e3:20:ec:0b:e7:b9:
                    10:92:9b:cd:7b:7a:c9:b1:a6:66:d2:c0:0b:f3:e5:
                    9a:dd:b9:13:7c:d9:1d:30:f1:25:6d:5c:4c:59:97:
                    fc:ab:31:b5:90:71:55:2e:55:f3:81:7b:96:4c:d0:
                    19:bb:b4:00:a9:fb:96:d8:f2:28:43:43:b2:76:e8:
                    55:d9:61:37:cb:73:17:70:a4:25:cc:09:b3:f1:68:
                    e7:41:22:67:d2:4f:67:c1:bd:eb:42:e3:02:cb:98:
                    74:9d:25:2d:0f:5e:85:7a:f2:67:01:5f:80:ee:4c:
                    5e:24:e4:ea:d6:78:51:6b:67:c5:10:1d:24:52:4b:
                    f3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D0:19:CC:64:3F:84:AC:72:EA:05:9D:42:B6:A5:92:15:76:4E:B9
            X509v3 Authority Key Identifier:
                keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:77:eb:d9:17:54:5d:df:6e:d4:78:97:2c:05:17:15:85:dd:
         b7:10:1e:74:fb:87:ea:1d:29:0f:8e:8f:11:f1:57:30:52:98:
         32:c5:38:7a:ca:df:06:96:88:c3:5a:3c:80:8d:9d:51:ca:21:
         58:62:f8:58:f3:23:7a:3b:d8:f5:21:19:66:85:ec:73:f9:ac:
         e1:3d:4c:32:a5:e5:79:2e:7e:a2:6f:30:83:39:08:f1:c1:81:
         f2:c9:da:37:86:3e:24:8c:88:6a:e9:a5:4f:c8:84:52:68:c2:
         d1:27:83:7b:f3:56:fb:bd:bd:73:ce:c0:7f:69:12:78:17:a0:
         f2:48:46:07:c8:f8:db:13:05:12:c7:4f:64:3a:f7:67:b5:8c:
         3f:02:e5:68:9a:3b:5f:80:da:e7:26:1b:20:35:29:17:0b:59:
         09:84:6f:ec:2c:93:b3:6d:1c:44:0a:cc:78:86:0e:37:5c:aa:
         c4:7f:5d:b8:43:16:48:e4:1c:ce:9a:50:61:51:35:af:1c:d3:
         b1:81:0e:eb:8a:61:14:a2:6d:cc:4a:eb:d1:7b:a5:78:8e:55:
         23:27:4c:b8:22:e7:75:05:11:b8:b1:70:bb:55:e7:ab:50:02:
         0b:37:c7:57:00:5d:66:c6:22:2a:49:81:c3:7d:11:3e:e2:c2:
         9d:83:15:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEi/c6ZI2cvwYh4d0/HyVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGRhMjFkYTgwMzhhODIwNTQyYjNhZmFmYmVhYWFhNjY2
YjdiMjcwHhcNMjQwNjIzMTAwMjIxWhcNMjQwNjI0MTAwMjIxWjAzMTEwLwYDVQQD
EygzNWQwMTljYzY0M2Y4NGFjNzJlYTA1OWQ0MmI2YTU5MjE1NzY0ZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzA4aMDj5c8/3zByOGBZRz7ZNMzG
s2HJdEU3e0kU3EqTWkgNNs/uWYCGahoPg83/sGgl1J3EGKhUHhg8U16gjmf0nZJ3
9oXzUinOpL9zhK3/MkBIeonEPoSqtrwGdFkYbGvATuY2S1zG+2tJODCkS3GKmm45
urn78sfiUp7IFkbjIOwL57kQkpvNe3rJsaZm0sAL8+Wa3bkTfNkdMPElbVxMWZf8
qzG1kHFVLlXzgXuWTNAZu7QAqfuW2PIoQ0OyduhV2WE3y3MXcKQlzAmz8WjnQSJn
0k9nwb3rQuMCy5h0nSUtD16FevJnAV+A7kxeJOTq1nhRa2fFEB0kUkvzdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXQGcxkP4SscuoFnUK2pZIVdk65MB8GA1UdIwQY
MBaAFMdNoh2oA4qCBUKzr6++qqpma3snMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Zjg0NDQtMmMzZC00NTkyLTk0NTgt
ODAxZDg5ZDczNjZkLzEveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80Zjg0NDQtMmMzZC00NTkyLTk0NTgtODAxZDg5ZDczNjZk
LzEveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHfr2RdU
Xd9u1HiXLAUXFYXdtxAedPuH6h0pD46PEfFXMFKYMsU4esrfBpaIw1o8gI2dUcoh
WGL4WPMjejvY9SEZZoXsc/ms4T1MMqXleS5+om8wgzkI8cGB8snaN4Y+JIyIauml
T8iEUmjC0SeDe/NW+729c87Af2kSeBeg8khGB8j42xMFEsdPZDr3Z7WMPwLlaJo7
X4Da5yYbIDUpFwtZCYRv7CyTs20cRArMeIYON1yqxH9duEMWSOQczppQYVE1rxzT
sYEO64phFKJtzErr0XuleI5VIydMuCLndQURuLFwu1Xnq1ACCzfHVwBdZsYiKkmB
w30RPuLCnYMVqA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 16:16:53 2024 by rpki-client on console-fra.rpki-client.org