Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
File:                     1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json)
Hash identifier:          H8R9RgA6YP89a45VdOdoSF9+D+NgZiTgaomD0Cp3zY4=
Subject key identifier:   2E:39:F9:3C:9C:BE:3E:10:57:7B:82:F9:48:6E:E4:EC:9A:E5:5D:99
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Certificate issuer:       /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial:       0190429ED218A7CF711B06D5B4926E094DD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
Manifest number:          0AC6
Signing time:             Sun 23 Jun 2024 01:03:42 +0000
Manifest this update:     Sun 23 Jun 2024 01:03:42 +0000
Manifest next update:     Mon 24 Jun 2024 01:03:42 +0000
Files and hashes:         1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: LTixfz1TMeEe6Pt3ptCGqK/vQpGoOyDcREviMShSU10=)
                          2: 81ylH-O7KLWUdVd7yS8koEItzEU.roa (hash: R7tCrutm39jLQu2A3vYgcNsR+0gzeV2cG36GgM03OTE=)
                          3: ZByCPc5o8JoJmsit6KSvf6eHtjk.roa (hash: l2B/jOEK0WsvS4QaH0rgKMfFdSBW4c6aiEyc3WK5gsI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:42:9e:d2:18:a7:cf:71:1b:06:d5:b4:92:6e:09:4d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
        Validity
            Not Before: Jun 23 01:03:42 2024 GMT
            Not After : Jun 24 01:03:42 2024 GMT
        Subject: CN=2e39f93c9cbe3e10577b82f9486ee4ec9ae55d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:85:dc:07:b2:14:14:e4:e8:9f:6a:34:98:84:
                    f0:48:72:b0:18:e9:c6:a9:90:0f:64:b8:31:d2:33:
                    8f:dc:f3:cd:4f:38:87:f2:e2:ba:3f:6f:54:4f:b0:
                    99:79:8c:13:e4:91:05:c9:b6:22:72:f8:af:17:8e:
                    33:70:dc:49:9e:db:80:b3:6c:cd:ac:1d:15:68:23:
                    38:8f:00:16:21:10:ae:56:d9:88:e6:9b:22:12:5d:
                    7f:ca:8a:14:7b:82:35:6f:04:0e:35:f1:25:75:f3:
                    b2:b4:3f:ec:d7:f8:0d:5e:b3:e7:22:49:9b:2e:e2:
                    48:e5:68:07:5c:91:d2:5a:ab:c9:f9:70:8d:31:2f:
                    f4:98:a1:30:2b:eb:1a:49:dd:c6:60:71:9c:93:7c:
                    ba:f9:68:a3:c6:49:e1:57:7e:53:7d:d9:82:fe:63:
                    10:f2:5e:49:f8:61:e1:63:1f:cb:31:26:ee:d4:b8:
                    c2:ae:46:b1:62:35:95:31:ff:db:50:ed:d7:62:65:
                    3e:a7:93:e3:4a:ef:8f:6f:00:3d:df:bb:10:d2:1c:
                    5b:69:18:47:98:60:50:b9:54:65:16:06:92:0a:d1:
                    19:b7:61:3c:b4:2d:12:01:54:5e:2f:17:26:23:85:
                    aa:54:0b:6a:9a:1b:f3:76:02:3e:0e:21:60:57:8b:
                    8c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:39:F9:3C:9C:BE:3E:10:57:7B:82:F9:48:6E:E4:EC:9A:E5:5D:99
            X509v3 Authority Key Identifier:
                keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:fe:84:ec:23:37:de:c2:67:7f:2d:20:3c:d3:78:c0:68:39:
         87:2f:9b:15:7e:89:c9:51:e6:2e:23:29:f1:6d:3e:e4:33:f3:
         d3:b7:da:d4:32:53:b5:62:6d:8f:f9:d3:f3:42:fa:5f:f0:60:
         f3:f0:d8:ce:b2:7f:d9:73:71:c0:c7:54:3b:4a:4b:0a:a4:07:
         a9:07:20:91:8a:21:2f:d1:cf:9c:53:21:43:99:d0:97:21:61:
         4f:fb:87:b8:ee:ee:91:53:1e:d8:61:6e:3a:4a:47:5b:c2:a8:
         ec:f8:d1:6e:21:60:9a:eb:a2:1d:d2:8c:11:aa:a3:0f:c0:b5:
         8c:8b:71:9a:35:27:7d:4b:55:e4:79:5a:6f:05:31:7a:86:c2:
         e9:37:a6:fe:06:8e:45:f1:93:33:7b:c4:92:fd:43:de:fb:5a:
         4d:5e:9b:72:7d:5e:d7:13:21:22:50:8a:b4:5d:76:a0:08:3e:
         ad:92:c3:2f:24:b2:48:fd:3e:e7:0e:91:ba:f9:5c:cb:dc:88:
         ba:ca:df:81:3d:9b:88:e9:c2:a2:8c:81:ba:73:18:63:61:48:
         f8:39:d6:ce:f2:05:db:51:3b:c2:cc:0f:69:04:be:23:f1:64:
         67:da:0c:ee:14:c5:02:53:e5:8c:f5:8f:77:be:4b:c0:70:c2:
         ef:32:7c:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBCntIYp89xGwbVtJJuCU3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzQ5MmU0ZDI1YzNiYmQwYzVlMjBjNWE4NWVjYjIyZWM5
NzM2MGEwHhcNMjQwNjIzMDEwMzQyWhcNMjQwNjI0MDEwMzQyWjAzMTEwLwYDVQQD
EygyZTM5ZjkzYzljYmUzZTEwNTc3YjgyZjk0ODZlZTRlYzlhZTU1ZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44XcB7IUFOTon2o0mITwSHKwGOnG
qZAPZLgx0jOP3PPNTziH8uK6P29UT7CZeYwT5JEFybYicvivF44zcNxJntuAs2zN
rB0VaCM4jwAWIRCuVtmI5psiEl1/yooUe4I1bwQONfEldfOytD/s1/gNXrPnIkmb
LuJI5WgHXJHSWqvJ+XCNMS/0mKEwK+saSd3GYHGck3y6+WijxknhV35TfdmC/mMQ
8l5J+GHhYx/LMSbu1LjCrkaxYjWVMf/bUO3XYmU+p5PjSu+PbwA937sQ0hxbaRhH
mGBQuVRlFgaSCtEZt2E8tC0SAVReLxcmI4WqVAtqmhvzdgI+DiFgV4uMQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC45+Tycvj4QV3uC+Uhu5Oya5V2ZMB8GA1UdIwQY
MBaAFNc0kuTSXDu9DF4gxaheyyLslzYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgt
ZGVjMjFlZWZhMzhiLzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgtZGVjMjFlZWZhMzhi
LzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyf6E7CM3
3sJnfy0gPNN4wGg5hy+bFX6JyVHmLiMp8W0+5DPz07fa1DJTtWJtj/nT80L6X/Bg
8/DYzrJ/2XNxwMdUO0pLCqQHqQcgkYohL9HPnFMhQ5nQlyFhT/uHuO7ukVMe2GFu
OkpHW8Ko7PjRbiFgmuuiHdKMEaqjD8C1jItxmjUnfUtV5HlabwUxeobC6Tem/gaO
RfGTM3vEkv1D3vtaTV6bcn1e1xMhIlCKtF12oAg+rZLDLySySP0+5w6Ruvlcy9yI
usrfgT2biOnCooyBunMYY2FI+DnWzvIF21E7wswPaQS+I/FkZ9oM7hTFAlPljPWP
d75LwHDC7zJ8oA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 03:15:07 2024 by rpki-client on console-fra.rpki-client.org