Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
File:                     2SuKXtRqwwRtRQFHI6C5L6zypJs.mft (raw, json)
Hash identifier:          60bppst5LuSGsFpneURIaHMynhIasJA5JWlnnKbnYwE=
Subject key identifier:   E9:9D:DD:42:84:9A:82:1F:2E:95:82:1A:EE:4C:D4:7E:34:66:E7:71
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Certificate issuer:       /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial:       019073515D21D934EF4E3A2BE1DD8915FCAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
Manifest number:          01A0
Signing time:             Tue 02 Jul 2024 12:00:30 +0000
Manifest this update:     Tue 02 Jul 2024 12:00:30 +0000
Manifest next update:     Wed 03 Jul 2024 12:00:30 +0000
Files and hashes:         1: 2SuKXtRqwwRtRQFHI6C5L6zypJs.crl (hash: bqrhaMr+4Qp4+/p07MlmHNhs3IX9cWQ0Fz+Pv77KkFw=)
                          2: azp0uAfBmmVnGohayAng7lNeRlk.roa (hash: d1/7xm3gwIWgDYFDDvnij00O6f13vrUjzAeUxnSELm0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:73:51:5d:21:d9:34:ef:4e:3a:2b:e1:dd:89:15:fc:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
        Validity
            Not Before: Jul  2 12:00:30 2024 GMT
            Not After : Jul  3 12:00:30 2024 GMT
        Subject: CN=e99ddd42849a821f2e95821aee4cd47e3466e771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:3d:68:80:73:48:4b:11:d6:98:07:cd:b9:
                    ee:5d:75:e9:d1:09:22:2a:5e:9a:a0:67:7d:bd:0d:
                    ae:4c:32:f2:31:11:17:fd:f9:87:40:b8:bd:1e:e6:
                    c0:a5:f3:25:93:7c:b2:09:99:cd:c7:de:d3:ec:5f:
                    35:cd:a2:ce:37:db:35:37:35:ad:31:ca:5b:b3:09:
                    bb:4f:e9:53:09:23:82:de:f5:49:21:7d:44:08:b4:
                    3a:c6:ee:38:f2:cc:81:3d:55:b8:60:90:42:48:dc:
                    f0:51:71:aa:6c:84:d2:8e:02:58:d4:6c:30:ff:8b:
                    c8:eb:d6:e4:30:c2:f9:7c:bb:2e:65:01:3e:ab:92:
                    bb:c0:d8:32:60:8e:61:0a:10:c4:1b:b8:d1:be:bf:
                    ed:0e:01:51:86:d0:cd:7f:d8:38:6b:75:54:29:6d:
                    aa:4d:a7:f6:7e:74:0b:79:53:9f:04:4e:af:50:90:
                    03:01:55:6d:42:aa:31:d7:09:14:8e:5c:e4:88:bc:
                    0f:ea:3b:67:68:37:02:ba:d2:f1:49:5f:d0:37:65:
                    97:48:73:ee:2c:0e:d9:f0:22:ba:03:e0:10:d6:e1:
                    18:ed:4c:24:c5:12:91:3a:9a:de:ce:33:a3:3b:0c:
                    76:9e:c4:90:c6:cd:1d:9e:ba:8a:04:f7:db:9f:97:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9D:DD:42:84:9A:82:1F:2E:95:82:1A:EE:4C:D4:7E:34:66:E7:71
            X509v3 Authority Key Identifier:
                keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:83:0f:56:32:32:53:b1:72:75:31:d3:6d:3c:66:ed:af:09:
         00:d9:49:70:29:f0:79:f1:37:6b:da:7e:36:ac:34:4b:da:08:
         c4:c7:2c:79:35:7e:06:1c:61:7a:82:1a:3d:6f:91:d5:cd:02:
         a5:50:98:cd:24:88:91:cd:13:87:63:0a:40:0c:d8:d1:49:ba:
         cd:96:9a:ca:b8:e3:61:f8:ee:e2:fc:f9:cd:ab:aa:cd:23:7f:
         2f:0d:9f:ea:21:e0:db:82:b6:d8:90:18:04:c0:2a:82:09:d0:
         5b:aa:86:da:bc:e8:f5:1b:4b:e5:44:bd:31:45:06:06:dd:ea:
         00:64:22:5e:69:b8:98:6c:e7:d2:d0:1d:7e:5d:41:4f:93:8b:
         06:26:71:1e:22:cf:37:5d:08:3f:f9:93:18:f9:4a:79:89:34:
         68:7b:b1:32:a5:75:2c:a1:fa:fb:16:37:f0:eb:94:39:16:71:
         52:4b:d1:f4:b5:89:72:fb:58:d8:cf:9d:96:06:59:96:2f:91:
         e5:50:77:c4:5c:10:57:26:fa:11:5d:f0:8b:93:b3:2d:ea:69:
         b1:93:1c:b9:8c:74:bc:b0:4f:4d:af:bb:2e:35:66:2f:81:21:
         8e:ef:ec:d6:02:2e:bf:4f:17:e5:62:38:da:5f:15:ed:23:1c:
         31:73:94:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBzUV0h2TTvTjor4d2JFfysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmI4YTVlZDQ2YWMzMDQ2ZDQ1MDE0NzIzYTBiOTJmYWNm
MmE0OWIwHhcNMjQwNzAyMTIwMDMwWhcNMjQwNzAzMTIwMDMwWjAzMTEwLwYDVQQD
EyhlOTlkZGQ0Mjg0OWE4MjFmMmU5NTgyMWFlZTRjZDQ3ZTM0NjZlNzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7s9aIBzSEsR1pgHzbnuXXXp0Qki
Kl6aoGd9vQ2uTDLyMREX/fmHQLi9HubApfMlk3yyCZnNx97T7F81zaLON9s1NzWt
Mcpbswm7T+lTCSOC3vVJIX1ECLQ6xu448syBPVW4YJBCSNzwUXGqbITSjgJY1Gww
/4vI69bkMML5fLsuZQE+q5K7wNgyYI5hChDEG7jRvr/tDgFRhtDNf9g4a3VUKW2q
Taf2fnQLeVOfBE6vUJADAVVtQqox1wkUjlzkiLwP6jtnaDcCutLxSV/QN2WXSHPu
LA7Z8CK6A+AQ1uEY7UwkxRKROprezjOjOwx2nsSQxs0dnrqKBPfbn5c2iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmd3UKEmoIfLpWCGu5M1H40ZudxMB8GA1UdIwQY
MBaAFNkril7UasMEbUUBRyOguS+s8qSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82OTllZmEtOTRmNy00MTI1LWI2MmYt
NDE1NjlhYmMzN2NjLzEvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82OTllZmEtOTRmNy00MTI1LWI2MmYtNDE1NjlhYmMzN2Nj
LzEvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4MPVjIy
U7FydTHTbTxm7a8JANlJcCnwefE3a9p+Nqw0S9oIxMcseTV+BhxheoIaPW+R1c0C
pVCYzSSIkc0Th2MKQAzY0Um6zZaayrjjYfju4vz5zauqzSN/Lw2f6iHg24K22JAY
BMAqggnQW6qG2rzo9RtL5US9MUUGBt3qAGQiXmm4mGzn0tAdfl1BT5OLBiZxHiLP
N10IP/mTGPlKeYk0aHuxMqV1LKH6+xY38OuUORZxUkvR9LWJcvtY2M+dlgZZli+R
5VB3xFwQVyb6EV3wi5OzLeppsZMcuYx0vLBPTa+7LjVmL4Ehju/s1gIuv08X5WI4
2l8V7SMcMXOUuA==
-----END CERTIFICATE-----
Generated at Tue Jul 2 16:01:48 2024 by rpki-client on console-fra.rpki-client.org