Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File:                     20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier:          fdrlcbENa2WBxzNll8wkrEFDXrqwmm+a5tUuWkQI6gk=
Subject key identifier:   8D:1F:09:55:E5:BF:94:BA:0E:B2:F0:E7:37:9C:3D:9D:C7:3B:64:7A
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer:       /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial:       01901DED2932826934C9D317089813D979D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:03:20 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:20 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:20 +0000
Files and hashes:         1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: uCOCfMHWMaTFbY814C5mtJJ2vfa09mJLM1PBYrmwN0s=)
                          2: 4Jo91k0Wf4KG5UqL4eI7iinWrLg.roa (hash: ClqMRuYCbruqmgad7CYiZk1I6wffjCiR5odxvh+olsQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:29:32:82:69:34:c9:d3:17:08:98:13:d9:79:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
        Validity
            Not Before: Jun 15 22:03:20 2024 GMT
            Not After : Jun 16 22:03:20 2024 GMT
        Subject: CN=8d1f0955e5bf94ba0eb2f0e7379c3d9dc73b647a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:27:68:f7:66:41:96:3a:50:31:87:e7:68:91:
                    bf:1e:c1:5e:a6:79:c8:01:60:dd:08:92:c7:6f:b9:
                    8b:25:3d:14:e1:6d:65:e6:49:ca:14:52:ba:d7:af:
                    79:b6:11:e3:a4:e8:cd:9a:79:32:34:31:3d:5c:11:
                    91:f2:d4:bb:5c:9c:1a:46:55:cd:2d:93:92:1d:f6:
                    02:24:dd:fb:24:0b:c3:1b:7c:fb:5b:d8:af:05:13:
                    0d:1e:c4:2e:81:08:44:4d:9e:78:18:7a:de:8f:ac:
                    e3:4b:96:0e:f2:ed:17:17:c8:5b:a6:4c:bc:76:e9:
                    6a:28:24:37:46:1d:3a:d3:d1:61:17:18:47:be:0a:
                    6a:3c:20:c0:85:4e:02:cc:d3:59:6b:fb:e6:72:6f:
                    8c:40:41:4c:9f:8c:66:11:3b:f6:0d:d6:29:61:fb:
                    c7:02:45:68:91:a1:12:3a:ff:2a:02:46:46:dd:58:
                    78:2f:cd:b0:30:b0:dd:a9:fe:be:53:e6:a8:b9:39:
                    16:2d:0a:bc:1f:d2:00:10:5e:46:4f:a9:9c:fa:f0:
                    64:8b:2d:c5:47:73:50:9d:29:37:4a:ad:78:22:1e:
                    97:e7:e4:ec:78:14:35:a0:5d:86:11:e2:bd:97:0b:
                    20:88:41:1d:ef:31:18:67:58:30:90:5c:c9:94:ac:
                    d0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1F:09:55:E5:BF:94:BA:0E:B2:F0:E7:37:9C:3D:9D:C7:3B:64:7A
            X509v3 Authority Key Identifier:
                keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:91:76:cd:fb:15:31:2a:de:74:c7:16:bd:75:ec:50:c1:12:
         77:10:88:9d:b6:14:57:21:6a:c3:f7:85:a0:c5:f3:a5:2c:0e:
         65:36:c8:30:42:09:1c:83:b8:32:a0:10:4e:b7:76:fb:44:6c:
         93:09:8d:71:f8:99:63:a6:31:4f:f5:95:67:97:eb:1e:57:0f:
         de:2a:d0:50:df:68:d0:b7:e2:90:e9:fd:f6:a9:c4:d8:45:2a:
         fe:8b:25:1a:c9:a9:c1:c3:07:c5:ec:a6:94:84:d2:7b:a6:50:
         cf:9d:00:55:54:27:55:10:f8:bf:76:bd:69:44:af:02:b6:d7:
         30:65:e8:0b:56:db:20:ac:86:6b:6c:49:b7:17:d8:dd:60:cd:
         5f:89:8b:e8:95:20:df:2d:96:b7:42:17:b8:52:b7:b8:ab:df:
         94:54:e1:b5:ac:61:8a:6b:12:48:f5:e3:a9:a7:84:fd:c5:da:
         94:6b:39:a9:37:21:2f:68:70:61:01:2d:df:3f:25:a2:5b:1c:
         e3:f0:3e:4f:8d:64:e6:97:61:42:ec:69:01:e9:d9:cc:ee:7c:
         7a:f9:01:b3:d8:74:b7:47:3f:44:fe:b5:13:b5:c6:75:77:a0:
         18:0f:cb:bc:2d:b5:b3:5f:6b:c9:92:02:f5:a3:de:3b:fa:f9:
         d6:64:a4:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7Skygmk0ydMXCJgT2XnXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDE4YmNmMzE5NDMxN2I5YzI4ODExOTMxOTZmZWI1OThm
ZDllZWUwHhcNMjQwNjE1MjIwMzIwWhcNMjQwNjE2MjIwMzIwWjAzMTEwLwYDVQQD
Eyg4ZDFmMDk1NWU1YmY5NGJhMGViMmYwZTczNzljM2Q5ZGM3M2I2NDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSdo92ZBljpQMYfnaJG/HsFepnnI
AWDdCJLHb7mLJT0U4W1l5knKFFK61695thHjpOjNmnkyNDE9XBGR8tS7XJwaRlXN
LZOSHfYCJN37JAvDG3z7W9ivBRMNHsQugQhETZ54GHrej6zjS5YO8u0XF8hbpky8
dulqKCQ3Rh0609FhFxhHvgpqPCDAhU4CzNNZa/vmcm+MQEFMn4xmETv2DdYpYfvH
AkVokaESOv8qAkZG3Vh4L82wMLDdqf6+U+aouTkWLQq8H9IAEF5GT6mc+vBkiy3F
R3NQnSk3Sq14Ih6X5+TseBQ1oF2GEeK9lwsgiEEd7zEYZ1gwkFzJlKzQJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0fCVXlv5S6DrLw5zecPZ3HO2R6MB8GA1UdIwQY
MBaAFNtBi88xlDF7nCiBGTGW/rWY/Z7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iODk3YWQtNWQ0MS00MGEyLTkwYzMt
ZTI5ZWUzZDkxMzk1LzEvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iODk3YWQtNWQ0MS00MGEyLTkwYzMtZTI5ZWUzZDkxMzk1
LzEvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5F2zfsV
MSredMcWvXXsUMESdxCInbYUVyFqw/eFoMXzpSwOZTbIMEIJHIO4MqAQTrd2+0Rs
kwmNcfiZY6YxT/WVZ5frHlcP3irQUN9o0LfikOn99qnE2EUq/oslGsmpwcMHxeym
lITSe6ZQz50AVVQnVRD4v3a9aUSvArbXMGXoC1bbIKyGa2xJtxfY3WDNX4mL6JUg
3y2Wt0IXuFK3uKvflFThtaxhimsSSPXjqaeE/cXalGs5qTchL2hwYQEt3z8lolsc
4/A+T41k5pdhQuxpAenZzO58evkBs9h0t0c/RP61E7XGdXegGA/LvC21s19ryZIC
9aPeO/r51mSkqQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:41:10 2024 by rpki-client on console-ams.rpki-client.org