Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
File:                     SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft (raw, json)
Hash identifier:          7UfXSmLnEpnc2yvluGFgXYpkLFnbXnqt77RXg30ijF4=
Subject key identifier:   35:AF:C3:BC:39:46:1F:D7:D5:3F:C8:EA:C8:A1:73:73:0D:33:E7:21
Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
Certificate issuer:       /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Certificate serial:       01901E8FB2107D9BABA7FEADECB7C339C771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
Manifest number:          0687
Signing time:             Sun 16 Jun 2024 01:00:51 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:51 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:51 +0000
Files and hashes:         1: IqQlAgsSTMl6A2f6ljqbGC1VYSY.roa (hash: t5MeZ5vLq1wpdpveGwvPM8YTPFkMI8GRNZaF3JxotL4=)
                          2: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl (hash: j+S6K4BJJTFA6nJRhuL+hJe8HFUV040FzXscOWYLyyo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:b2:10:7d:9b:ab:a7:fe:ad:ec:b7:c3:39:c7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
        Validity
            Not Before: Jun 16 01:00:51 2024 GMT
            Not After : Jun 17 01:00:51 2024 GMT
        Subject: CN=35afc3bc39461fd7d53fc8eac8a173730d33e721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:1b:2e:67:59:63:a7:38:88:93:97:39:6a:
                    bf:da:96:4c:6c:c6:c8:a2:7e:3e:36:db:9d:46:d8:
                    4b:1d:3e:62:9e:27:8e:3c:bd:90:01:e1:05:a4:eb:
                    c3:82:7e:29:b8:43:4f:19:d8:fa:e9:eb:7e:4c:4c:
                    21:23:2e:d8:af:32:2e:9c:8d:f0:1f:24:a2:90:ba:
                    f0:09:21:68:96:93:95:bd:3c:7c:79:58:90:7b:2a:
                    e6:a9:71:d4:10:5c:c1:3d:62:dd:f1:8e:21:ae:71:
                    c3:e1:b2:a5:87:ab:a6:90:75:46:b6:1a:ab:4c:4d:
                    c5:cd:76:bc:c0:8a:07:b5:bd:e0:b6:86:5b:37:27:
                    d6:fa:15:9c:6d:73:ff:20:1d:6a:af:c0:5d:7a:4e:
                    28:79:69:83:82:31:ed:c6:8a:7b:dc:fb:8c:7c:ab:
                    3b:96:9d:9d:ff:e2:49:f1:b7:04:54:fc:cf:44:cc:
                    72:0b:f4:f9:51:db:d2:95:77:d5:29:93:ff:4f:d4:
                    91:2a:d8:34:1d:ca:d6:47:b6:93:23:5b:19:d5:75:
                    36:69:64:c9:8b:af:88:18:14:e6:9d:38:6e:cb:1a:
                    8a:f5:de:6f:e9:79:e2:01:d6:02:1a:8d:60:04:39:
                    2f:67:ff:6d:cf:c7:15:a1:ba:dd:93:92:f2:02:41:
                    d7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AF:C3:BC:39:46:1F:D7:D5:3F:C8:EA:C8:A1:73:73:0D:33:E7:21
            X509v3 Authority Key Identifier:
                keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:97:86:4b:69:d0:83:f5:a5:63:cb:a6:6f:70:1c:aa:cb:ef:
         03:16:ce:cf:9f:a1:c2:43:43:88:36:80:46:c9:2a:aa:fd:6f:
         15:44:bb:34:4e:0c:62:e7:ba:01:e6:c7:f4:fa:9e:c8:08:b3:
         0d:27:a0:76:c5:20:f9:42:76:a6:b2:00:7a:fc:f2:f2:80:00:
         bc:65:7e:6c:ab:2a:fc:1d:ad:9b:95:d0:84:f0:c1:e9:67:98:
         3c:df:34:9a:80:b9:36:83:90:72:88:39:ff:2c:6c:a2:e3:fc:
         d1:90:40:fe:e8:da:ed:80:cd:20:ba:20:ea:0e:83:b6:17:32:
         aa:bc:1d:90:3b:af:56:44:68:9a:a5:cd:c9:7e:39:e0:e9:91:
         6c:d1:ed:09:d9:8f:ba:c6:77:9b:4b:b4:53:e0:7d:d6:41:4d:
         01:53:88:e0:fa:4b:a2:2f:a1:9c:c1:bf:04:e2:81:92:4a:b7:
         96:5a:5b:dc:e2:29:89:56:d5:9c:b1:a8:86:da:f3:27:3d:e6:
         9b:e8:27:e6:db:50:bd:1e:7f:97:ff:8a:c5:81:1e:eb:be:30:
         55:ac:9c:62:09:2c:c5:ae:22:96:ad:ea:03:03:a3:a0:b5:5b:
         f5:19:40:55:f4:64:89:f5:52:7f:e5:3e:d4:79:8d:9c:94:0c:
         48:a4:9c:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej7IQfZurp/6t7LfDOcdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjNkYzY3NTNhOGNiZDc0Yjc0NDUyYzE1MzZmMzdkOWM0
ZGM3MGMwHhcNMjQwNjE2MDEwMDUxWhcNMjQwNjE3MDEwMDUxWjAzMTEwLwYDVQQD
EygzNWFmYzNiYzM5NDYxZmQ3ZDUzZmM4ZWFjOGExNzM3MzBkMzNlNzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJkbLmdZY6c4iJOXOWq/2pZMbMbI
on4+NtudRthLHT5inieOPL2QAeEFpOvDgn4puENPGdj66et+TEwhIy7YrzIunI3w
HySikLrwCSFolpOVvTx8eViQeyrmqXHUEFzBPWLd8Y4hrnHD4bKlh6umkHVGthqr
TE3FzXa8wIoHtb3gtoZbNyfW+hWcbXP/IB1qr8Bdek4oeWmDgjHtxop73PuMfKs7
lp2d/+JJ8bcEVPzPRMxyC/T5UdvSlXfVKZP/T9SRKtg0HcrWR7aTI1sZ1XU2aWTJ
i6+IGBTmnThuyxqK9d5v6XniAdYCGo1gBDkvZ/9tz8cVobrdk5LyAkHXIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWvw7w5Rh/X1T/I6sihc3MNM+chMB8GA1UdIwQY
MBaAFEpj3GdTqMvXS3RFLBU2832cTccMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZjAzMzUtZTg2MC00NjE5LTkzODAt
ZTM0MWIwZjkxNWQzLzEvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80ZjAzMzUtZTg2MC00NjE5LTkzODAtZTM0MWIwZjkxNWQz
LzEvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3ZeGS2nQ
g/WlY8umb3AcqsvvAxbOz5+hwkNDiDaARskqqv1vFUS7NE4MYue6AebH9PqeyAiz
DSegdsUg+UJ2prIAevzy8oAAvGV+bKsq/B2tm5XQhPDB6WeYPN80moC5NoOQcog5
/yxsouP80ZBA/uja7YDNILog6g6DthcyqrwdkDuvVkRomqXNyX454OmRbNHtCdmP
usZ3m0u0U+B91kFNAVOI4PpLoi+hnMG/BOKBkkq3llpb3OIpiVbVnLGohtrzJz3m
m+gn5ttQvR5/l/+KxYEe674wVaycYgksxa4ilq3qAwOjoLVb9RlAVfRkifVSf+U+
1HmNnJQMSKScfw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:10:04 2024 by rpki-client on console-fra.rpki-client.org