Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
File:                     tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft (raw, json)
Hash identifier:          taFTy0s8ncZKiMQietCe6XCr0QCqMYx3RIVJv9iOEx8=
Subject key identifier:   92:25:16:91:52:D5:F1:65:8E:7C:D4:86:AD:E2:3A:C0:C3:22:33:E3
Authority key identifier: B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47
Certificate issuer:       /CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
Certificate serial:       01901E59370FFC35730AB40F1D72C50F6718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
Manifest number:          055E
Signing time:             Sun 16 Jun 2024 00:01:21 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:21 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:21 +0000
Files and hashes:         1: pxuoe7Zdm8ZlOm-tW9ChRYIk55U.roa (hash: +1USPd1VSVtWckgk0tAbETPmFBHWI+GlUEMJbTckV/c=)
                          2: tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl (hash: 7TkER0MD1ZNY3PXgwzc/rKLfSGf4phT0zbbhSV2Q9wU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:37:0f:fc:35:73:0a:b4:0f:1d:72:c5:0f:67:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b40d849cc43b732dab6641fc6fd5a4db3a2db947
        Validity
            Not Before: Jun 16 00:01:21 2024 GMT
            Not After : Jun 17 00:01:21 2024 GMT
        Subject: CN=9225169152d5f1658e7cd486ade23ac0c32233e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:85:95:1f:8a:e0:1c:30:da:9b:5b:95:38:1d:
                    93:6e:e1:d4:60:fe:7e:cc:54:7c:b1:1f:53:a3:1a:
                    9f:40:11:1d:2c:98:5b:f1:97:99:c8:a6:37:8c:ac:
                    c9:10:ac:13:c7:57:95:f9:bf:ef:95:c1:af:f0:f4:
                    c5:4b:37:ce:d4:9b:e6:b0:fb:84:4c:86:b0:b1:25:
                    cd:29:67:ac:b6:c9:f2:8d:68:02:7c:c6:f2:05:b3:
                    fe:2f:6d:ac:93:e1:e5:a5:2a:7b:42:b1:ce:48:f9:
                    e7:ba:30:e1:f4:34:ef:c9:11:41:3e:a2:85:63:e4:
                    11:e9:3b:61:c7:49:61:1d:0d:d8:5b:83:85:ab:cc:
                    3f:88:1e:71:f4:f2:7f:e2:09:bc:2e:64:c8:1f:9c:
                    00:79:8c:0c:25:91:3e:61:0d:ea:63:2c:7e:c0:1c:
                    e0:f4:0c:e8:f6:30:60:0c:1f:85:f2:2c:f6:aa:0d:
                    15:e0:c4:24:fa:f6:a1:3a:20:e1:9c:eb:c0:0c:19:
                    7f:df:6a:f3:cc:9d:79:35:1a:11:d4:6b:dc:72:9f:
                    05:b0:cb:21:08:d7:40:4e:c1:08:86:cf:95:55:1a:
                    d0:27:21:4e:d6:f8:ca:87:82:6a:f9:6c:72:ee:26:
                    3c:43:e5:1c:c3:38:72:f2:7e:8f:39:84:17:d2:75:
                    8c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:25:16:91:52:D5:F1:65:8E:7C:D4:86:AD:E2:3A:C0:C3:22:33:E3
            X509v3 Authority Key Identifier:
                keyid:B4:0D:84:9C:C4:3B:73:2D:AB:66:41:FC:6F:D5:A4:DB:3A:2D:B9:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/134ccb-b0ab-446b-8172-62e27cd1e975/1/tA2EnMQ7cy2rZkH8b9Wk2zotuUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:b9:0c:92:3b:94:bf:2e:5f:38:8e:a2:d9:9e:74:7f:e5:b0:
         87:51:0e:a7:cd:6e:0e:bd:ea:a6:af:4c:96:d5:bc:a5:0a:6d:
         b4:b7:ab:4d:67:96:2d:74:21:2f:92:31:96:df:46:49:45:ee:
         a3:4f:91:3a:28:e4:c8:6b:12:a2:8e:30:09:2e:34:3c:35:92:
         3a:d9:06:63:2d:ed:4f:ea:17:b4:49:85:d0:57:d8:d2:43:e1:
         eb:75:b7:22:95:fa:ca:e3:66:79:c3:20:4e:0a:0d:52:b0:9c:
         cb:9e:52:fe:bc:6a:96:e7:74:09:af:34:4e:ed:96:cd:c4:8b:
         8d:b5:f8:60:51:21:dd:fc:c7:62:99:7a:3b:94:ad:61:89:bb:
         50:3d:ad:75:b5:cc:36:ab:0f:49:71:2a:7f:f8:bb:2a:ad:ff:
         eb:95:d6:36:e7:86:ad:ab:c6:1f:a6:6d:57:f8:9e:d7:12:be:
         34:b7:50:35:8d:da:87:e7:30:d5:60:a5:49:42:30:a8:b9:cf:
         dd:45:ae:97:cc:5a:23:7b:b1:4c:b2:8f:94:16:87:76:99:b6:
         10:4e:f0:6e:28:b6:31:f5:42:15:0a:31:27:ba:9c:c0:ae:38:
         93:f6:f3:85:5a:76:b4:b3:ad:3f:93:8f:c4:ba:c1:be:7c:bc:
         09:2a:6d:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWTcP/DVzCrQPHXLFD2cYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MGQ4NDljYzQzYjczMmRhYjY2NDFmYzZmZDVhNGRiM2Ey
ZGI5NDcwHhcNMjQwNjE2MDAwMTIxWhcNMjQwNjE3MDAwMTIxWjAzMTEwLwYDVQQD
Eyg5MjI1MTY5MTUyZDVmMTY1OGU3Y2Q0ODZhZGUyM2FjMGMzMjIzM2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oWVH4rgHDDam1uVOB2TbuHUYP5+
zFR8sR9ToxqfQBEdLJhb8ZeZyKY3jKzJEKwTx1eV+b/vlcGv8PTFSzfO1JvmsPuE
TIawsSXNKWestsnyjWgCfMbyBbP+L22sk+HlpSp7QrHOSPnnujDh9DTvyRFBPqKF
Y+QR6Tthx0lhHQ3YW4OFq8w/iB5x9PJ/4gm8LmTIH5wAeYwMJZE+YQ3qYyx+wBzg
9Azo9jBgDB+F8iz2qg0V4MQk+vahOiDhnOvADBl/32rzzJ15NRoR1Gvccp8FsMsh
CNdATsEIhs+VVRrQJyFO1vjKh4Jq+Wxy7iY8Q+Ucwzhy8n6POYQX0nWMtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIlFpFS1fFljnzUhq3iOsDDIjPjMB8GA1UdIwQY
MBaAFLQNhJzEO3Mtq2ZB/G/VpNs6LblHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEEyRW5NUTdjeTJyWmtIOGI5V2syem90dVVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xMzRjY2ItYjBhYi00NDZiLTgxNzIt
NjJlMjdjZDFlOTc1LzEvdEEyRW5NUTdjeTJyWmtIOGI5V2syem90dVVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xMzRjY2ItYjBhYi00NDZiLTgxNzItNjJlMjdjZDFlOTc1
LzEvdEEyRW5NUTdjeTJyWmtIOGI5V2syem90dVVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA07kMkjuU
vy5fOI6i2Z50f+Wwh1EOp81uDr3qpq9MltW8pQpttLerTWeWLXQhL5Ixlt9GSUXu
o0+ROijkyGsSoo4wCS40PDWSOtkGYy3tT+oXtEmF0FfY0kPh63W3IpX6yuNmecMg
TgoNUrCcy55S/rxqlud0Ca80Tu2WzcSLjbX4YFEh3fzHYpl6O5StYYm7UD2tdbXM
NqsPSXEqf/i7Kq3/65XWNueGravGH6ZtV/ie1xK+NLdQNY3ah+cw1WClSUIwqLnP
3UWul8xaI3uxTLKPlBaHdpm2EE7wbii2MfVCFQoxJ7qcwK44k/bzhVp2tLOtP5OP
xLrBvny8CSptiA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:11:32 2024 by rpki-client on console-ams.rpki-client.org