Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
File:                     ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft (raw, json)
Hash identifier:          gOT6b8Gk2cM+n/tdtCAKRoi5RsT8IOSVsYlPgl10k5s=
Subject key identifier:   F6:5F:18:21:BF:5C:1F:2A:85:F4:AB:3F:74:DC:BA:4E:76:C8:38:C1
Authority key identifier: 64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
Certificate issuer:       /CN=6431e960cd061039b3b27fd25d4160771c498bab
Certificate serial:       019045D49FAF2C3D2316C2CD8F461EFA1502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
Manifest number:          0E2D
Signing time:             Sun 23 Jun 2024 16:01:20 +0000
Manifest this update:     Sun 23 Jun 2024 16:01:20 +0000
Manifest next update:     Mon 24 Jun 2024 16:01:20 +0000
Files and hashes:         1: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl (hash: 7fAtmWrBPyWoNiUaxRtQerT3ALaLF6DgloAsI0LMBGI=)
                          2: qgmT6giBQNedAqq1X3QTUXXuqU8.roa (hash: m6t1v6ysaNmdguDi6/I/aYd3UL4zuCQ5xfdNdkezv4I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:9f:af:2c:3d:23:16:c2:cd:8f:46:1e:fa:15:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6431e960cd061039b3b27fd25d4160771c498bab
        Validity
            Not Before: Jun 23 16:01:20 2024 GMT
            Not After : Jun 24 16:01:20 2024 GMT
        Subject: CN=f65f1821bf5c1f2a85f4ab3f74dcba4e76c838c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7d:c8:41:3a:0e:36:3b:91:d5:7a:62:6c:62:
                    fa:08:14:f5:4f:d7:09:65:4f:20:b4:2f:aa:46:80:
                    89:ed:99:65:dc:82:6c:c7:78:25:50:a4:8c:c7:e3:
                    63:c7:ee:51:0f:b2:d8:0d:27:4f:49:e8:6a:e5:96:
                    6c:02:39:72:57:f5:50:0b:a0:23:da:ba:bb:14:7a:
                    b5:0c:d4:30:8d:a5:4f:4c:58:ab:9e:5d:ee:59:a9:
                    70:49:b0:dd:cc:bf:99:18:50:45:72:5c:77:ff:2b:
                    c5:96:32:fc:f9:62:3f:26:e5:68:38:1f:be:01:1b:
                    0b:d0:26:11:ec:61:e6:eb:b5:20:06:6c:fc:76:7b:
                    b5:aa:a5:b5:4c:cb:34:58:28:a6:59:33:4e:8e:41:
                    d0:07:93:c8:50:83:1e:2e:45:01:37:2c:d4:0c:03:
                    ea:ae:9a:80:23:17:62:be:40:4f:80:71:22:bd:cc:
                    e6:37:2f:b7:ce:c0:2a:43:f1:20:07:e9:9a:49:88:
                    34:af:a2:c4:d8:dc:b5:ec:21:e5:20:1e:05:2f:e0:
                    a6:51:52:0d:ff:60:74:1a:3c:5e:6e:d9:dd:ac:ea:
                    d4:1c:12:9d:07:8e:63:0a:e0:d3:58:e9:c2:2e:cd:
                    15:ac:2f:a5:0d:1f:df:65:71:4c:00:c9:52:ab:b8:
                    4b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5F:18:21:BF:5C:1F:2A:85:F4:AB:3F:74:DC:BA:4E:76:C8:38:C1
            X509v3 Authority Key Identifier:
                keyid:64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b7:41:00:0d:29:9c:b1:35:60:53:3f:bd:3c:a7:a4:1d:cd:
         51:45:ae:38:4f:ee:14:41:03:60:fb:bc:ac:16:89:6a:4c:ca:
         16:43:96:c7:da:68:66:79:86:b4:08:fd:54:68:e8:27:bf:87:
         26:99:24:e5:c1:2f:dd:7f:4a:d4:c8:91:e5:1e:c0:b9:7e:cc:
         37:a1:41:43:1c:d6:26:74:d6:c6:13:77:71:92:ba:b4:35:9f:
         47:e5:b8:41:d3:b8:f4:29:88:cd:54:e5:50:f6:05:56:18:61:
         6b:25:d0:e8:37:78:ce:16:08:52:3d:1f:8c:e7:dc:03:84:a6:
         52:64:56:dd:6d:86:df:ec:70:d4:10:f9:24:9d:d7:b1:dd:de:
         95:c3:cd:7f:af:69:ba:2b:01:5a:ac:0f:df:4c:61:b5:a5:ee:
         59:d3:24:37:f4:bf:d9:dc:7d:38:65:d5:f1:fb:71:33:2e:65:
         d4:6b:15:d9:1b:2a:10:f0:dc:d3:50:18:44:25:2e:c9:12:2b:
         75:fa:67:64:25:d4:03:b4:1f:ee:2e:84:3a:1c:ce:39:fe:ea:
         03:c0:0c:44:f5:1a:f8:f2:b1:24:ad:6b:1d:12:23:c0:43:68:
         ac:65:1b:33:e6:f2:55:ea:be:d2:e6:05:c4:a5:c7:34:8a:d3:
         ec:b5:b7:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBF1J+vLD0jFsLNj0Ye+hUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MzFlOTYwY2QwNjEwMzliM2IyN2ZkMjVkNDE2MDc3MWM0
OThiYWIwHhcNMjQwNjIzMTYwMTIwWhcNMjQwNjI0MTYwMTIwWjAzMTEwLwYDVQQD
EyhmNjVmMTgyMWJmNWMxZjJhODVmNGFiM2Y3NGRjYmE0ZTc2YzgzOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n3IQToONjuR1XpibGL6CBT1T9cJ
ZU8gtC+qRoCJ7Zll3IJsx3glUKSMx+Njx+5RD7LYDSdPSehq5ZZsAjlyV/VQC6Aj
2rq7FHq1DNQwjaVPTFirnl3uWalwSbDdzL+ZGFBFclx3/yvFljL8+WI/JuVoOB++
ARsL0CYR7GHm67UgBmz8dnu1qqW1TMs0WCimWTNOjkHQB5PIUIMeLkUBNyzUDAPq
rpqAIxdivkBPgHEivczmNy+3zsAqQ/EgB+maSYg0r6LE2Ny17CHlIB4FL+CmUVIN
/2B0GjxebtndrOrUHBKdB45jCuDTWOnCLs0VrC+lDR/fZXFMAMlSq7hLswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZfGCG/XB8qhfSrP3Tcuk52yDjBMB8GA1UdIwQY
MBaAFGQx6WDNBhA5s7J/0l1BYHccSYurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZmQ5MzEtOWYyMi00OWYzLWJlNTct
ZTlkYWY3OWViNzVlLzEvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80ZmQ5MzEtOWYyMi00OWYzLWJlNTctZTlkYWY3OWViNzVl
LzEvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7dBAA0p
nLE1YFM/vTynpB3NUUWuOE/uFEEDYPu8rBaJakzKFkOWx9poZnmGtAj9VGjoJ7+H
Jpkk5cEv3X9K1MiR5R7AuX7MN6FBQxzWJnTWxhN3cZK6tDWfR+W4QdO49CmIzVTl
UPYFVhhhayXQ6Dd4zhYIUj0fjOfcA4SmUmRW3W2G3+xw1BD5JJ3Xsd3elcPNf69p
uisBWqwP30xhtaXuWdMkN/S/2dx9OGXV8ftxMy5l1GsV2RsqEPDc01AYRCUuyRIr
dfpnZCXUA7Qf7i6EOhzOOf7qA8AMRPUa+PKxJK1rHRIjwENorGUbM+byVeq+0uYF
xKXHNIrT7LW3ig==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:57:06 2024 by rpki-client on console-ams.rpki-client.org