Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
File:                     tFBrzj9-GuOn4sua0gXEzfsC3bU.mft (raw, json)
Hash identifier:          irBZUVj+4GaCzbxgbuVKvCb0yKo1gCIWpT+LUww0IS0=
Subject key identifier:   57:C1:C3:D9:AD:63:EF:93:28:94:D4:16:84:70:44:9C:40:87:5E:C6
Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
Certificate issuer:       /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Certificate serial:       01901BFE3195579E8CEE2B766AF48DE29E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
Manifest number:          10D2
Signing time:             Sat 15 Jun 2024 13:02:41 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:41 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:41 +0000
Files and hashes:         1: FhhIDdpOqwKdad3o2DVtibE_WEE.roa (hash: 5X8NWChazB0LjuiSmm1hG+HThK/w6qkv6c6MJ7O+pf4=)
                          2: Yo5pp72qDNuHvjACPZ4XUZ42rcI.roa (hash: +NZPWKrzCjwc9xUbcnkUrhDbqHaCk16twO1G47NHIOM=)
                          3: tFBrzj9-GuOn4sua0gXEzfsC3bU.crl (hash: y1qpT72VTk8KBMhuvDLrBQck6H/myq4kcL61i/Z1dcs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:31:95:57:9e:8c:ee:2b:76:6a:f4:8d:e2:9e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
        Validity
            Not Before: Jun 15 13:02:41 2024 GMT
            Not After : Jun 16 13:02:41 2024 GMT
        Subject: CN=57c1c3d9ad63ef932894d4168470449c40875ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:89:63:0f:b2:69:a2:75:02:1e:1e:52:7f:
                    45:e2:13:6d:53:ce:ab:e2:81:c5:d5:6f:3f:b0:5c:
                    22:38:20:94:5e:84:bd:9a:f5:0d:8c:ab:6f:cd:1f:
                    c7:82:89:dc:70:b4:89:d6:06:d7:52:e4:58:85:b4:
                    f7:f4:e0:e8:d4:88:91:b9:f6:8a:19:bb:cd:4d:08:
                    c6:d2:b0:27:13:cd:6f:c6:16:9b:72:95:4e:3e:a6:
                    79:d3:89:be:52:21:10:78:bc:5f:1c:e7:9a:f3:81:
                    b6:81:ac:2a:53:4c:78:96:41:03:a8:8c:3b:96:7d:
                    c6:18:ba:e4:c2:b9:a8:0b:c6:49:37:21:a8:e6:00:
                    c9:08:79:3b:42:a3:1d:b0:c9:7e:67:a9:96:98:73:
                    7f:18:df:2a:d6:84:50:fd:c2:31:d1:59:e4:73:fd:
                    ff:2c:2a:1a:7b:d7:c4:03:e4:1b:56:3b:2e:e7:df:
                    3d:51:62:5e:56:3a:bc:ef:6c:ce:5e:b5:04:37:97:
                    8c:3e:61:e9:ac:f3:cf:de:e4:d1:94:54:20:8d:b5:
                    af:c7:8a:d0:12:bb:39:98:b4:3e:38:b5:d6:77:eb:
                    13:aa:9d:26:c6:62:1c:3b:f4:b4:73:da:b4:16:52:
                    c8:b2:3f:93:fb:de:be:3a:79:f7:e9:84:e6:0b:86:
                    c7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C1:C3:D9:AD:63:EF:93:28:94:D4:16:84:70:44:9C:40:87:5E:C6
            X509v3 Authority Key Identifier:
                keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:34:9a:b5:74:95:22:a4:a0:f2:09:c4:69:9b:c1:48:87:bb:
         cd:74:3c:43:68:0f:24:18:15:07:4c:d2:22:d9:ff:00:7f:b0:
         5a:98:98:2f:bf:9c:10:8d:c8:d8:f5:1d:ba:b4:18:20:3e:e5:
         85:55:5e:e5:c7:d7:29:17:0f:83:cd:92:71:e7:e5:fc:50:17:
         01:49:b4:55:0a:bb:af:32:0f:dd:ad:85:e0:89:38:a2:80:25:
         31:84:30:2a:08:a5:d0:9b:e9:fc:19:d7:8b:15:9c:66:75:70:
         9b:83:46:c8:69:96:df:ff:0d:33:29:d1:13:cd:4b:e7:ee:1f:
         05:9c:48:92:12:6f:82:4c:e4:68:eb:07:7a:6f:78:3b:11:c1:
         b8:7b:d6:ad:50:22:92:38:52:fd:59:99:c5:9c:97:f7:ae:5f:
         39:0c:1a:2f:27:40:a3:36:3f:ba:ba:d3:77:38:98:da:c3:b6:
         10:94:cb:51:75:a0:24:54:3d:10:e9:18:f3:ff:2a:cd:c2:ea:
         f5:6b:bb:30:0f:8c:24:ff:ea:94:88:c8:f7:77:77:46:b4:6b:
         4f:46:be:1c:d0:53:e4:d0:24:87:86:f3:31:34:9a:de:49:5a:
         3a:88:ff:c6:49:e6:cb:ae:3f:2f:b7:75:42:6b:ac:b4:b4:28:
         c8:69:e0:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/jGVV56M7it2avSN4p5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTA2YmNlM2Y3ZTFhZTNhN2UyY2I5YWQyMDVjNGNkZmIw
MmRkYjUwHhcNMjQwNjE1MTMwMjQxWhcNMjQwNjE2MTMwMjQxWjAzMTEwLwYDVQQD
Eyg1N2MxYzNkOWFkNjNlZjkzMjg5NGQ0MTY4NDcwNDQ5YzQwODc1ZWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0mJYw+yaaJ1Ah4eUn9F4hNtU86r
4oHF1W8/sFwiOCCUXoS9mvUNjKtvzR/HgonccLSJ1gbXUuRYhbT39ODo1IiRufaK
GbvNTQjG0rAnE81vxhabcpVOPqZ504m+UiEQeLxfHOea84G2gawqU0x4lkEDqIw7
ln3GGLrkwrmoC8ZJNyGo5gDJCHk7QqMdsMl+Z6mWmHN/GN8q1oRQ/cIx0Vnkc/3/
LCoae9fEA+QbVjsu5989UWJeVjq872zOXrUEN5eMPmHprPPP3uTRlFQgjbWvx4rQ
Ers5mLQ+OLXWd+sTqp0mxmIcO/S0c9q0FlLIsj+T+96+Onn36YTmC4bH+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfBw9mtY++TKJTUFoRwRJxAh17GMB8GA1UdIwQY
MBaAFLRQa84/fhrjp+LLmtIFxM37At21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kYjU5ODktMTlmNi00NjhkLTlmYzMt
ZjhhMzc4MGMzNDhlLzEvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9kYjU5ODktMTlmNi00NjhkLTlmYzMtZjhhMzc4MGMzNDhl
LzEvdEZCcnpqOS1HdU9uNHN1YTBnWEV6ZnNDM2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjSatXSV
IqSg8gnEaZvBSIe7zXQ8Q2gPJBgVB0zSItn/AH+wWpiYL7+cEI3I2PUdurQYID7l
hVVe5cfXKRcPg82Scefl/FAXAUm0VQq7rzIP3a2F4Ik4ooAlMYQwKgil0Jvp/BnX
ixWcZnVwm4NGyGmW3/8NMynRE81L5+4fBZxIkhJvgkzkaOsHem94OxHBuHvWrVAi
kjhS/VmZxZyX965fOQwaLydAozY/urrTdziY2sO2EJTLUXWgJFQ9EOkY8/8qzcLq
9Wu7MA+MJP/qlIjI93d3RrRrT0a+HNBT5NAkh4bzMTSa3klaOoj/xknmy64/L7d1
QmustLQoyGngpQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:00:19 2024 by rpki-client on console-fra.rpki-client.org