Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
File:                     z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json)
Hash identifier:          TKpIA/yw05lZnakxrBCfPgRKDJQEjqXlV1jz0o3IWOw=
Subject key identifier:   D8:08:76:83:89:FD:A5:BC:0D:E9:DB:8F:66:4B:15:BD:5A:7D:26:17
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Certificate issuer:       /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial:       01901DEBE2193E8569E1BAA2CCF0BDD0332E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
Manifest number:          0975
Signing time:             Sat 15 Jun 2024 22:01:56 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:56 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:56 +0000
Files and hashes:         1: C-nUdNwj2tk44oXG0HnlL84BUow.roa (hash: /8DkYI83MeWX+uVUnpcdCdW7iEHSL/JDZvDpDZzxNec=)
                          2: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: E/dww2HoakkSl/5guuOGML3k7G/g+Pl9Akgpqrg5boM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:e2:19:3e:85:69:e1:ba:a2:cc:f0:bd:d0:33:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
        Validity
            Not Before: Jun 15 22:01:56 2024 GMT
            Not After : Jun 16 22:01:56 2024 GMT
        Subject: CN=d808768389fda5bc0de9db8f664b15bd5a7d2617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f7:eb:f2:17:09:97:d4:d1:df:8a:1f:11:c2:
                    79:f2:8d:b1:89:7f:8f:0c:5d:1e:6d:00:02:fa:8e:
                    87:a1:f6:dc:34:f1:7c:af:4e:b7:3e:57:0d:c8:3b:
                    2c:df:19:ee:46:7b:ee:b5:ec:8a:cc:4a:0a:e6:7b:
                    75:a4:93:be:2a:fc:56:16:d4:f9:23:5c:2c:22:ae:
                    7a:4a:d6:23:37:05:0b:a3:2f:d8:65:68:58:1e:b2:
                    9f:ed:9a:f4:9a:b1:55:f7:63:6f:2d:81:cc:be:49:
                    54:3f:20:e3:41:a9:e1:15:37:13:dc:c7:2b:48:24:
                    ef:37:7e:51:69:58:07:59:36:86:e0:41:4a:87:ef:
                    e7:62:ea:93:ec:87:c7:64:76:c5:80:c0:1c:6a:7c:
                    76:61:4f:1d:cb:8c:a2:d4:86:7a:a8:b4:be:7d:46:
                    e6:ef:9c:d1:9d:3b:53:fc:81:37:dc:99:97:75:6b:
                    5a:92:05:22:ea:6d:32:9e:c4:79:df:83:e6:a5:67:
                    30:8f:da:11:df:d2:fa:d5:dc:1e:d9:7b:fb:bb:ff:
                    34:c3:b4:71:5b:f6:c1:55:b1:b8:b1:34:fa:de:7a:
                    2b:ca:f6:f6:b5:18:62:90:f3:d8:24:fe:1c:f4:5b:
                    c0:7f:bb:c9:c5:37:80:8b:81:37:df:ed:e6:e7:08:
                    54:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:08:76:83:89:FD:A5:BC:0D:E9:DB:8F:66:4B:15:BD:5A:7D:26:17
            X509v3 Authority Key Identifier:
                keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:00:7c:12:5e:18:8e:a4:03:a0:d7:7b:a2:b4:72:d3:5d:0e:
         81:93:cf:2a:48:7c:ba:b9:05:d5:60:03:94:5b:bb:a5:b6:b7:
         88:ae:75:d1:1c:64:11:fa:e8:4a:9c:13:75:f9:08:d0:b4:d8:
         bd:e7:a4:54:27:5b:35:f3:65:bd:79:7f:42:f6:af:db:98:9f:
         2e:7f:ac:a3:97:71:8d:ca:96:67:07:b4:e2:21:01:b4:69:2b:
         23:6f:e8:53:64:97:70:dd:a7:4f:2e:26:5f:ad:90:2d:d9:f3:
         88:5e:b5:07:4c:3c:51:dc:7c:62:5d:1c:d3:68:7c:7e:dc:e8:
         ee:6c:54:16:97:45:f0:0d:62:c1:c9:eb:b5:df:54:2c:57:a1:
         7a:c2:fd:1c:27:44:ca:83:71:25:e4:40:7f:f0:ad:42:c9:92:
         4e:a9:e7:7d:67:b6:b9:43:9f:7e:4d:22:4c:15:61:10:4a:f3:
         17:3a:34:bc:20:c0:9c:07:db:f6:cb:17:97:29:0a:43:6e:bb:
         8f:32:04:d2:71:b5:b2:e2:5e:68:c5:ff:06:12:63:ad:2c:d6:
         d8:57:ce:0e:dc:2f:56:80:00:86:49:a2:e5:f5:5c:ed:64:84:
         b8:90:ed:13:db:30:e7:32:bc:12:1e:b7:3d:08:7a:c0:9e:a0:
         22:9b:e6:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6+IZPoVp4bqizPC90DMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOWNjMzMxODJlNDRkODk3ZjRlYWNmMTQyMTM0NjdlZjg4
NzExZDQwHhcNMjQwNjE1MjIwMTU2WhcNMjQwNjE2MjIwMTU2WjAzMTEwLwYDVQQD
EyhkODA4NzY4Mzg5ZmRhNWJjMGRlOWRiOGY2NjRiMTViZDVhN2QyNjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyffr8hcJl9TR34ofEcJ58o2xiX+P
DF0ebQAC+o6HofbcNPF8r063PlcNyDss3xnuRnvuteyKzEoK5nt1pJO+KvxWFtT5
I1wsIq56StYjNwULoy/YZWhYHrKf7Zr0mrFV92NvLYHMvklUPyDjQanhFTcT3Mcr
SCTvN35RaVgHWTaG4EFKh+/nYuqT7IfHZHbFgMAcanx2YU8dy4yi1IZ6qLS+fUbm
75zRnTtT/IE33JmXdWtakgUi6m0ynsR534PmpWcwj9oR39L61dwe2Xv7u/80w7Rx
W/bBVbG4sTT63noryvb2tRhikPPYJP4c9FvAf7vJxTeAi4E33+3m5whUZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgIdoOJ/aW8Denbj2ZLFb1afSYXMB8GA1UdIwQY
MBaAFM+cwzGC5E2Jf06s8UITRn74hxHUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmIt
MjRhMGQ4MmNlYTllLzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmItMjRhMGQ4MmNlYTll
LzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwB8El4Y
jqQDoNd7orRy010OgZPPKkh8urkF1WADlFu7pba3iK510RxkEfroSpwTdfkI0LTY
veekVCdbNfNlvXl/Qvav25ifLn+so5dxjcqWZwe04iEBtGkrI2/oU2SXcN2nTy4m
X62QLdnziF61B0w8Udx8Yl0c02h8ftzo7mxUFpdF8A1iwcnrtd9ULFehesL9HCdE
yoNxJeRAf/CtQsmSTqnnfWe2uUOffk0iTBVhEErzFzo0vCDAnAfb9ssXlykKQ267
jzIE0nG1suJeaMX/BhJjrSzW2FfODtwvVoAAhkmi5fVc7WSEuJDtE9sw5zK8Eh63
PQh6wJ6gIpvmXA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:05:29 2024 by rpki-client on console-ams.rpki-client.org