Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
File:                     U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft (raw, json)
Hash identifier:          I3lcRA48Ruhts5FtTa3TUK9uXZer44VO7t7kQdX4Eko=
Subject key identifier:   31:A0:9C:BE:33:98:89:24:88:33:00:34:3D:9A:90:CD:1F:6F:1A:9D
Authority key identifier: 53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE
Certificate issuer:       /CN=53799560453dcf4af31f9b2a40cd238b8457c5de
Certificate serial:       01901E8F8C57A23BF1C7BD6BE9906362EAFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
Manifest number:          05FA
Signing time:             Sun 16 Jun 2024 01:00:42 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:42 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:42 +0000
Files and hashes:         1: SLB_YBeyg-w7MmP6Zye2DxwxZi4.roa (hash: b/h9CxWKP8ZneboUqdpH7av0Iuah8zn6NPGe+RGTU8A=)
                          2: U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl (hash: by3wGRQaXQ5elqlBS6vMImanb5xTPA3GO2MwSDduM+0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:8c:57:a2:3b:f1:c7:bd:6b:e9:90:63:62:ea:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53799560453dcf4af31f9b2a40cd238b8457c5de
        Validity
            Not Before: Jun 16 01:00:42 2024 GMT
            Not After : Jun 17 01:00:42 2024 GMT
        Subject: CN=31a09cbe33988924883300343d9a90cd1f6f1a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:07:88:fb:97:de:ea:1c:2f:1b:4d:2a:06:f9:
                    f7:ca:ed:01:42:47:7a:6d:04:4b:35:2b:d3:06:77:
                    2a:40:45:93:6f:74:5e:41:dd:31:08:8b:00:f4:b7:
                    0e:79:1f:d1:ec:05:f0:8d:61:8f:8f:5b:f6:28:93:
                    60:4d:17:76:c6:bc:2f:07:90:c6:bd:0c:b0:81:72:
                    50:f4:2a:e6:68:f1:fc:d5:04:01:44:e7:49:1a:b9:
                    07:b4:0d:36:8f:40:08:af:84:e8:6a:62:6c:ad:72:
                    7f:d5:2f:d3:15:ce:b9:98:34:3f:06:8f:c0:71:38:
                    79:6d:e0:5a:68:1a:47:d7:f9:19:72:4c:9e:56:e7:
                    bd:68:4f:07:8e:84:ba:20:0f:27:96:65:36:9a:1f:
                    ea:73:0b:3f:4f:68:7a:da:82:13:44:da:22:54:b3:
                    95:f8:8a:70:25:01:77:f3:12:8c:b2:e3:55:f9:7a:
                    69:33:e3:c8:e7:d4:47:df:76:0d:ea:07:8b:87:c8:
                    dd:cd:81:d0:fc:0a:25:8a:f7:47:79:2d:f1:6b:df:
                    b8:f3:c8:5d:8c:5a:c0:84:19:32:44:bc:12:91:a9:
                    4f:bd:8b:ac:8b:86:bf:34:98:22:53:38:93:aa:a0:
                    b4:cf:9c:bf:4a:83:52:df:ba:1d:ba:1c:89:b4:0b:
                    27:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A0:9C:BE:33:98:89:24:88:33:00:34:3D:9A:90:CD:1F:6F:1A:9D
            X509v3 Authority Key Identifier:
                keyid:53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b5:3b:8f:dc:8b:a2:46:92:1d:9b:5d:8f:5e:53:d0:c8:61:
         0d:0e:23:8f:c6:07:13:c2:f9:32:90:ad:f7:78:8b:6c:98:5a:
         1b:87:8e:f3:9e:dc:87:60:76:ed:91:28:64:5e:64:2b:03:79:
         e1:4f:e7:cc:2d:5c:80:f5:c4:f8:b3:32:22:21:df:19:46:cb:
         16:7e:7c:29:80:8b:71:c8:55:ed:c2:52:fa:db:af:2d:73:dd:
         30:4f:a3:3d:35:05:33:61:a3:59:75:a2:a7:20:ba:9e:c8:0c:
         02:89:41:9c:6f:06:57:3d:a9:9f:3a:eb:0a:31:ee:b1:fa:bb:
         5c:49:2f:6c:bf:00:da:48:9e:58:c5:3f:5b:db:a4:cd:07:ca:
         13:f0:e3:3c:13:9f:19:21:16:41:8c:b5:3f:1f:19:dc:a2:d7:
         c3:15:44:13:34:67:05:31:21:ae:08:60:11:a4:9b:45:83:5b:
         db:0b:e7:5b:18:72:8c:52:33:0f:3d:da:8e:81:81:5e:19:10:
         b1:c5:16:f7:91:78:6b:c0:9f:73:bc:f6:06:9f:5a:59:d8:dd:
         ba:a4:fc:83:c7:ba:e9:ea:aa:0e:e4:60:26:c9:ea:2b:44:8a:
         2d:0c:a9:ed:bb:88:74:7e:6b:53:ac:68:89:01:fe:da:56:65:
         92:e6:12:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej4xXojvxx71r6ZBjYur8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzk5NTYwNDUzZGNmNGFmMzFmOWIyYTQwY2QyMzhiODQ1
N2M1ZGUwHhcNMjQwNjE2MDEwMDQyWhcNMjQwNjE3MDEwMDQyWjAzMTEwLwYDVQQD
EygzMWEwOWNiZTMzOTg4OTI0ODgzMzAwMzQzZDlhOTBjZDFmNmYxYTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQeI+5fe6hwvG00qBvn3yu0BQkd6
bQRLNSvTBncqQEWTb3ReQd0xCIsA9LcOeR/R7AXwjWGPj1v2KJNgTRd2xrwvB5DG
vQywgXJQ9CrmaPH81QQBROdJGrkHtA02j0AIr4ToamJsrXJ/1S/TFc65mDQ/Bo/A
cTh5beBaaBpH1/kZckyeVue9aE8HjoS6IA8nlmU2mh/qcws/T2h62oITRNoiVLOV
+IpwJQF38xKMsuNV+XppM+PI59RH33YN6geLh8jdzYHQ/AolivdHeS3xa9+488hd
jFrAhBkyRLwSkalPvYusi4a/NJgiUziTqqC0z5y/SoNS37oduhyJtAsniQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGgnL4zmIkkiDMAND2akM0fbxqdMB8GA1UdIwQY
MBaAFFN5lWBFPc9K8x+bKkDNI4uEV8XeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNtVllFVTl6MHJ6SDVzcVFNMGppNFJYeGQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9kODc3MWEtZTc1My00MDZjLWExZDgt
MzlhYjc3YjgzM2VhLzEvVTNtVllFVTl6MHJ6SDVzcVFNMGppNFJYeGQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9kODc3MWEtZTc1My00MDZjLWExZDgtMzlhYjc3YjgzM2Vh
LzEvVTNtVllFVTl6MHJ6SDVzcVFNMGppNFJYeGQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibU7j9yL
okaSHZtdj15T0MhhDQ4jj8YHE8L5MpCt93iLbJhaG4eO857ch2B27ZEoZF5kKwN5
4U/nzC1cgPXE+LMyIiHfGUbLFn58KYCLcchV7cJS+tuvLXPdME+jPTUFM2GjWXWi
pyC6nsgMAolBnG8GVz2pnzrrCjHusfq7XEkvbL8A2kieWMU/W9ukzQfKE/DjPBOf
GSEWQYy1Px8Z3KLXwxVEEzRnBTEhrghgEaSbRYNb2wvnWxhyjFIzDz3ajoGBXhkQ
scUW95F4a8Cfc7z2Bp9aWdjduqT8g8e66eqqDuRgJsnqK0SKLQyp7buIdH5rU6xo
iQH+2lZlkuYSFw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:11:24 2024 by rpki-client on console-fra.rpki-client.org