Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
File:                     AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft (raw, json)
Hash identifier:          NfGfhiIGdxGivWjZ5yTfhvNjzE8F5+kR32q1UhkE1CM=
Subject key identifier:   C7:F8:74:CA:E0:CB:A9:E6:30:B8:E0:48:E2:25:10:7F:2A:16:01:69
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Certificate issuer:       /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial:       01901EC6D49BDF55DBB2FD33C4A10A39DD36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
Manifest number:          11C9
Signing time:             Sun 16 Jun 2024 02:01:05 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:05 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:05 +0000
Files and hashes:         1: AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl (hash: xK7ZtKCHqPbyThN3IGxtsguQzOLLNO3E2a8oDi/y9io=)
                          2: YpI--ysZ3BmqfcOwurm7ZdA4Fhw.roa (hash: +AlpjmCl5waBWjQxBiozJ0ALHXJR+A+Hbcq5wLKrbiA=)
                          3: nFVbRZ2KPbpA-SGN6Czb1PtlGeo.roa (hash: kIup5CK1ywjRmemwzBqc2bdIEHBwVqA4RNHA25TDBL0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:d4:9b:df:55:db:b2:fd:33:c4:a1:0a:39:dd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
        Validity
            Not Before: Jun 16 02:01:05 2024 GMT
            Not After : Jun 17 02:01:05 2024 GMT
        Subject: CN=c7f874cae0cba9e630b8e048e225107f2a160169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1c:29:60:92:c4:34:c4:81:dc:51:1f:45:c9:
                    23:31:95:35:9c:be:5d:a8:ea:3e:b4:a7:06:45:a7:
                    5d:c5:93:16:ed:cc:da:ab:e9:03:e2:5d:80:33:7e:
                    57:72:4d:db:a5:43:a9:32:40:d9:ba:85:64:2a:2e:
                    37:3e:02:bd:2c:9f:0d:c6:27:f7:bb:50:bc:d8:c6:
                    25:a6:17:b5:c0:e2:13:e0:b1:46:7d:49:23:77:46:
                    5e:d1:ab:d0:e1:77:1e:5e:c2:fd:35:4c:46:21:ae:
                    8c:ce:b1:4d:a7:9b:2d:f3:55:f0:e3:4d:34:14:95:
                    3c:86:e4:55:97:d1:82:f9:95:85:0d:b1:dc:fe:e6:
                    45:9b:ae:1f:eb:65:f1:12:ba:35:15:43:d2:09:1e:
                    97:38:49:e6:6f:1a:04:7b:37:18:2a:08:79:50:71:
                    84:7c:4f:7f:85:66:d2:5a:6f:6b:6b:be:36:a9:c7:
                    79:09:af:ca:ff:26:8e:c3:72:11:37:92:6b:3a:2b:
                    33:fb:61:28:a1:18:89:38:e8:0a:2e:4a:a9:fe:fc:
                    c8:2f:a0:ab:9e:98:a3:0d:aa:52:b5:a4:6c:b5:27:
                    17:bc:36:e7:26:27:6a:2d:bc:43:67:32:a1:bc:30:
                    f8:4e:8b:2d:69:e5:00:5e:7a:1d:d5:66:15:a5:75:
                    46:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F8:74:CA:E0:CB:A9:E6:30:B8:E0:48:E2:25:10:7F:2A:16:01:69
            X509v3 Authority Key Identifier:
                keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:41:a5:d2:36:67:5b:98:ac:9d:7e:11:4b:e1:d5:dd:24:02:
         74:9d:69:21:56:11:9f:fc:e0:43:82:74:c0:8b:c7:c3:c6:19:
         f6:b5:e7:d0:b4:f9:9a:38:b8:cc:ca:1a:62:15:dd:b2:f5:d5:
         e5:81:1d:28:84:a7:df:ec:24:5e:3f:2a:67:e6:62:44:83:01:
         66:ee:ed:99:09:32:05:6b:3d:bf:04:10:1e:e2:65:10:6c:51:
         b0:24:73:1e:7e:81:39:49:9d:6e:a1:c1:1b:ff:c4:ac:cc:47:
         3e:80:e7:91:15:25:42:88:c9:cd:63:62:2f:85:44:e3:0c:25:
         37:bc:6d:6e:0f:3f:56:b6:c5:4b:9b:e4:f4:ae:96:77:87:f1:
         0e:89:fb:aa:74:39:c8:52:0f:1b:04:cb:4c:2b:94:fa:10:82:
         61:c6:82:9d:c5:30:0a:70:94:af:80:2e:01:54:03:1a:26:6d:
         9e:b1:95:c7:95:8b:82:64:27:7a:f6:2a:f4:2b:2d:fb:96:00:
         71:30:98:06:24:6a:45:46:95:48:e1:1e:80:bb:bf:e1:6c:a6:
         fc:d4:dc:54:f5:0b:e4:47:2f:7f:e5:2b:74:73:e8:fb:5a:41:
         b9:1b:dd:97:d4:b6:3f:50:2a:db:e9:38:ff:24:15:e1:8a:8b:
         2e:b4:52:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAextSb31Xbsv0zxKEKOd02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzM5NDAyYzQyYjNmODQ5OTVjNGQ1OGVmNjcwZThkMTZj
MmFmZTIwHhcNMjQwNjE2MDIwMTA1WhcNMjQwNjE3MDIwMTA1WjAzMTEwLwYDVQQD
EyhjN2Y4NzRjYWUwY2JhOWU2MzBiOGUwNDhlMjI1MTA3ZjJhMTYwMTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBwpYJLENMSB3FEfRckjMZU1nL5d
qOo+tKcGRaddxZMW7czaq+kD4l2AM35Xck3bpUOpMkDZuoVkKi43PgK9LJ8Nxif3
u1C82MYlphe1wOIT4LFGfUkjd0Ze0avQ4XceXsL9NUxGIa6MzrFNp5st81Xw4000
FJU8huRVl9GC+ZWFDbHc/uZFm64f62XxEro1FUPSCR6XOEnmbxoEezcYKgh5UHGE
fE9/hWbSWm9ra742qcd5Ca/K/yaOw3IRN5JrOisz+2EooRiJOOgKLkqp/vzIL6Cr
npijDapStaRstScXvDbnJidqLbxDZzKhvDD4TostaeUAXnod1WYVpXVGiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMf4dMrgy6nmMLjgSOIlEH8qFgFpMB8GA1UdIwQY
MBaAFAIzlALEKz+EmVxNWO9nDo0Wwq/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2It
ZmM2NGJmYzNkMmY5LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2ItZmM2NGJmYzNkMmY5
LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0Gl0jZn
W5isnX4RS+HV3SQCdJ1pIVYRn/zgQ4J0wIvHw8YZ9rXn0LT5mji4zMoaYhXdsvXV
5YEdKISn3+wkXj8qZ+ZiRIMBZu7tmQkyBWs9vwQQHuJlEGxRsCRzHn6BOUmdbqHB
G//ErMxHPoDnkRUlQojJzWNiL4VE4wwlN7xtbg8/VrbFS5vk9K6Wd4fxDon7qnQ5
yFIPGwTLTCuU+hCCYcaCncUwCnCUr4AuAVQDGiZtnrGVx5WLgmQnevYq9Cst+5YA
cTCYBiRqRUaVSOEegLu/4Wym/NTcVPUL5Ecvf+UrdHPo+1pBuRvdl9S2P1Aq2+k4
/yQV4YqLLrRSLw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:10:19 2024 by rpki-client on console-fra.rpki-client.org