Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File:                     ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier:          G9pIhW4mXON2y5eehCquIqFSm0/OOMFB6kVxReeCeAc=
Subject key identifier:   6D:15:AD:83:3F:56:1C:32:A8:94:00:9B:13:EE:B9:FC:91:D3:58:2A
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer:       /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial:       019044F8736C60A12FC23D034CF74A76F0F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number:          11DD
Signing time:             Sun 23 Jun 2024 12:00:51 +0000
Manifest this update:     Sun 23 Jun 2024 12:00:51 +0000
Manifest next update:     Mon 24 Jun 2024 12:00:51 +0000
Files and hashes:         1: HQcznznXUAmZBidUeprmLtJyrIc.roa (hash: 8lvKh7D4ubgkg8m263wG6vlR4etXqta/88nVf/PB+xw=)
                          2: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: /qw9cv/79O+7VXkNgWjwaVmV9RXJ7/9YbF3TxinMiMk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:73:6c:60:a1:2f:c2:3d:03:4c:f7:4a:76:f0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
        Validity
            Not Before: Jun 23 12:00:51 2024 GMT
            Not After : Jun 24 12:00:51 2024 GMT
        Subject: CN=6d15ad833f561c32a894009b13eeb9fc91d3582a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:24:ac:26:5b:a0:1a:d4:f0:12:8b:5c:86:
                    43:90:3b:a8:1c:8f:2e:f6:ab:c9:22:d6:c7:2e:1c:
                    4c:95:53:42:43:7c:2d:36:c2:4b:71:01:c6:20:51:
                    6a:d9:21:25:a2:08:cb:f0:ff:cf:62:7d:25:c5:f3:
                    7c:9e:d2:f6:27:d7:03:4e:7f:1c:fb:f5:fc:b9:10:
                    60:b7:3c:e4:77:0b:1f:84:97:3b:50:11:73:1f:11:
                    a4:62:d9:c4:84:60:35:5f:c7:d3:cf:6e:d2:0a:4f:
                    78:aa:cf:43:59:01:a3:05:63:22:ef:19:19:48:d7:
                    c7:2e:aa:4b:9d:99:e1:c0:2b:6e:15:f1:95:6f:31:
                    11:99:6f:0a:41:5e:de:50:6f:6b:8d:09:5c:49:7e:
                    bd:a3:ef:2c:3a:0a:bd:53:01:87:ff:85:c3:5f:5d:
                    23:4f:fc:95:71:26:87:8a:42:2d:9f:79:86:75:bc:
                    f5:13:01:54:9c:83:a3:ce:2e:42:a3:37:ce:58:65:
                    7c:3e:db:8c:c5:c3:c6:45:7e:77:25:b0:98:13:e3:
                    78:df:69:02:54:4f:25:12:1b:98:f7:26:34:c6:cf:
                    e8:ba:1a:6d:7e:81:68:e1:ec:2e:b7:1e:86:23:06:
                    98:b2:d9:92:e0:32:8c:41:1e:92:ba:e9:d3:c4:e9:
                    9e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:15:AD:83:3F:56:1C:32:A8:94:00:9B:13:EE:B9:FC:91:D3:58:2A
            X509v3 Authority Key Identifier:
                keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0d:1d:2e:e2:ea:c7:70:c7:e7:d2:07:3d:c4:cd:67:3d:a0:
         ed:23:45:47:8b:1a:45:48:09:5f:54:9a:f4:64:96:8b:32:76:
         12:91:ee:06:49:27:d3:3b:b6:be:38:ea:2d:09:90:c4:40:e7:
         7f:8d:c5:f7:25:95:2d:07:ff:ba:0d:bd:66:e3:28:65:0b:13:
         e1:f6:d3:a4:7d:6f:25:23:d6:ba:61:57:96:ae:2c:ee:fe:7d:
         e1:87:8d:7f:7f:23:67:0a:b3:85:e3:03:4f:c2:eb:86:7b:2f:
         0e:39:a5:54:72:4e:58:d1:86:84:29:85:c8:93:ac:a0:9d:30:
         4e:cb:b8:85:1d:68:e7:b9:a4:cd:ce:05:f6:75:a1:4b:39:01:
         24:c1:f3:ce:b6:57:2c:59:23:39:90:3a:e5:36:15:9e:e7:b7:
         11:aa:9b:6f:e6:e3:33:2e:7f:b2:a9:b3:80:34:1e:11:34:1a:
         3a:5a:33:05:70:72:b1:db:e0:40:dc:62:1a:bf:c6:df:8a:5b:
         71:e8:ba:92:18:e8:28:1d:55:80:a3:2c:6d:be:1e:e8:b5:75:
         1f:e2:cd:af:00:1e:0b:b8:f6:1c:93:fb:7d:6c:98:83:fb:c5:
         24:ff:09:c6:7d:fe:1a:0e:1b:89:10:0c:c4:bd:2a:28:f4:5b:
         1d:f5:31:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBE+HNsYKEvwj0DTPdKdvD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OGYyMDMwOTk2MmY3YzZlMWMzMjY3ZjA4M2UxMjRkODNk
ZDc2ZmMwHhcNMjQwNjIzMTIwMDUxWhcNMjQwNjI0MTIwMDUxWjAzMTEwLwYDVQQD
Eyg2ZDE1YWQ4MzNmNTYxYzMyYTg5NDAwOWIxM2VlYjlmYzkxZDM1ODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn0krCZboBrU8BKLXIZDkDuoHI8u
9qvJItbHLhxMlVNCQ3wtNsJLcQHGIFFq2SElogjL8P/PYn0lxfN8ntL2J9cDTn8c
+/X8uRBgtzzkdwsfhJc7UBFzHxGkYtnEhGA1X8fTz27SCk94qs9DWQGjBWMi7xkZ
SNfHLqpLnZnhwCtuFfGVbzERmW8KQV7eUG9rjQlcSX69o+8sOgq9UwGH/4XDX10j
T/yVcSaHikItn3mGdbz1EwFUnIOjzi5CozfOWGV8PtuMxcPGRX53JbCYE+N432kC
VE8lEhuY9yY0xs/ouhptfoFo4ewutx6GIwaYstmS4DKMQR6SuunTxOme3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0VrYM/VhwyqJQAmxPuufyR01gqMB8GA1UdIwQY
MBaAFIaPIDCZYvfG4cMmfwg+Ek2D3Xb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMjZjZWUtZjE2Yy00NWE4LTk3YjIt
NjIzMzg0ZjNlMTI1LzEvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xMjZjZWUtZjE2Yy00NWE4LTk3YjItNjIzMzg0ZjNlMTI1
LzEvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWg0dLuLq
x3DH59IHPcTNZz2g7SNFR4saRUgJX1Sa9GSWizJ2EpHuBkkn0zu2vjjqLQmQxEDn
f43F9yWVLQf/ug29ZuMoZQsT4fbTpH1vJSPWumFXlq4s7v594YeNf38jZwqzheMD
T8LrhnsvDjmlVHJOWNGGhCmFyJOsoJ0wTsu4hR1o57mkzc4F9nWhSzkBJMHzzrZX
LFkjOZA65TYVnue3Eaqbb+bjMy5/sqmzgDQeETQaOlozBXBysdvgQNxiGr/G34pb
cei6khjoKB1VgKMsbb4e6LV1H+LNrwAeC7j2HJP7fWyYg/vFJP8Jxn3+Gg4biRAM
xL0qKPRbHfUxYg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:25:38 2024 by rpki-client on console-fra.rpki-client.org