Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
File:                     cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft (raw, json)
Hash identifier:          Z32J/td4AmyaXz5IV7q6VJQ6ypb6jKZTlWkW6ro4TCM=
Subject key identifier:   2E:30:90:7E:3B:2D:07:5E:88:33:34:60:7A:C1:A9:66:77:8E:95:9E
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Certificate issuer:       /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial:       01901F3482863F487CADDF3D269CAE32114D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
Manifest number:          11CB
Signing time:             Sun 16 Jun 2024 04:00:53 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:53 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:53 +0000
Files and hashes:         1: 1-pwiJ07OCSLpkXrLleDm-jkQqCY.roa (hash: HEnUlkEkRtS0K77fRjqmp07xZjGWsFTl1dVsszYghK0=)
                          2: cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl (hash: nUQ+tjn2zIn35bXc/dSqOQFVxMjNssr7SPHCvQyOaUI=)
                          3: jfmMlPqFOdf8CqytGu5LKyPRsY8.roa (hash: d/BME/oHNQOQEKJzlhOBrDYyCFn4Gnp2rp6jyoPGXoU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:82:86:3f:48:7c:ad:df:3d:26:9c:ae:32:11:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
        Validity
            Not Before: Jun 16 04:00:53 2024 GMT
            Not After : Jun 17 04:00:53 2024 GMT
        Subject: CN=2e30907e3b2d075e883334607ac1a966778e959e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:23:d2:01:50:e2:b4:7c:41:a6:d2:f5:ef:aa:
                    be:c8:dc:20:91:49:a7:a5:a8:c7:e0:34:4a:50:96:
                    99:e1:d1:50:68:13:a9:f6:02:80:09:33:10:b7:b6:
                    ec:f8:81:3c:b9:c7:d2:d1:e4:93:cb:92:61:54:ab:
                    82:de:3a:ef:76:0c:74:86:c3:fe:d1:e7:43:5f:47:
                    da:b7:09:0e:31:f1:03:0c:cf:53:ff:6e:db:68:0d:
                    6d:7f:62:6d:52:44:b1:2f:da:f0:5d:0b:74:5e:88:
                    ac:40:1c:29:d0:92:c1:5f:ff:4a:06:bd:89:25:71:
                    4e:ee:d4:93:0f:b1:00:7b:ed:5c:3e:52:66:f7:7b:
                    2e:c4:67:7a:dc:ad:38:bf:15:54:eb:9e:b2:5d:4b:
                    a4:a3:2a:0a:19:23:21:81:36:bf:9f:01:b2:24:ec:
                    ff:6d:a0:ee:08:69:f8:72:65:1f:a4:3d:5a:46:4d:
                    f1:1c:06:43:53:6c:b9:f6:62:2e:67:52:52:b3:34:
                    50:82:a1:a1:bc:72:47:e0:32:c6:ff:a3:be:19:32:
                    6a:99:90:ef:f4:ca:82:37:38:06:f3:45:d6:d9:ff:
                    94:c1:95:a5:a0:22:e4:76:56:b1:e3:35:8a:d2:9b:
                    0a:33:22:7c:5f:ab:67:41:32:94:db:da:43:57:51:
                    26:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:30:90:7E:3B:2D:07:5E:88:33:34:60:7A:C1:A9:66:77:8E:95:9E
            X509v3 Authority Key Identifier:
                keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:26:14:da:35:87:7b:14:05:83:fc:fa:69:6e:1e:bb:6f:78:
         79:dc:18:73:83:c3:77:55:a7:ad:95:98:c3:b1:38:a7:b1:88:
         87:73:7b:3f:98:fb:72:a2:e0:c9:d1:5b:4a:3a:8f:af:8b:90:
         c9:f3:e6:9c:29:6e:2c:55:36:4c:ea:56:9f:33:aa:d5:53:ba:
         06:27:9f:b3:e6:d4:17:80:1e:e9:14:65:70:61:0f:ea:d9:a8:
         78:4c:c0:66:97:28:92:44:96:76:e8:c9:34:f5:4f:55:31:b7:
         81:ec:58:4c:94:5c:ea:da:eb:10:ad:d4:da:94:cf:20:f7:9d:
         a1:73:43:90:e3:39:1a:a6:73:0c:d8:29:7e:10:74:08:69:00:
         1c:ee:e5:30:06:24:87:ef:d2:04:8b:79:96:02:32:84:b4:cf:
         a6:43:ba:8c:8b:fb:14:22:e1:f7:3a:df:ed:9f:9c:8d:b1:72:
         eb:60:bc:08:4c:52:ed:8a:2d:dc:77:6e:8d:93:9f:ee:e9:4c:
         37:e7:0f:17:ed:d2:eb:f2:c9:8c:9f:e5:9f:7b:08:46:d8:20:
         d9:e0:40:9c:7a:42:5b:19:47:b1:40:fa:3f:74:e7:cc:d2:11:
         e2:16:22:29:0b:4a:bc:59:10:19:5b:7f:c1:de:57:2c:81:61:
         13:39:81:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfNIKGP0h8rd89JpyuMhFNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzY5ZDZlNGEwZmMyYzk4MDEzYjcyMmViMmJlYjllNmU4
NzFmYzYwHhcNMjQwNjE2MDQwMDUzWhcNMjQwNjE3MDQwMDUzWjAzMTEwLwYDVQQD
EygyZTMwOTA3ZTNiMmQwNzVlODgzMzM0NjA3YWMxYTk2Njc3OGU5NTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCPSAVDitHxBptL176q+yNwgkUmn
pajH4DRKUJaZ4dFQaBOp9gKACTMQt7bs+IE8ucfS0eSTy5JhVKuC3jrvdgx0hsP+
0edDX0fatwkOMfEDDM9T/27baA1tf2JtUkSxL9rwXQt0XoisQBwp0JLBX/9KBr2J
JXFO7tSTD7EAe+1cPlJm93suxGd63K04vxVU656yXUukoyoKGSMhgTa/nwGyJOz/
baDuCGn4cmUfpD1aRk3xHAZDU2y59mIuZ1JSszRQgqGhvHJH4DLG/6O+GTJqmZDv
9MqCNzgG80XW2f+UwZWloCLkdlax4zWK0psKMyJ8X6tnQTKU29pDV1Em8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4wkH47LQdeiDM0YHrBqWZ3jpWeMB8GA1UdIwQY
MBaAFHJ2nW5KD8LJgBO3Iusr655uhx/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGIt
NjkzM2E5MGM1M2ZhLzEvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jNjc1MjItNzFjNS00MDYxLWExOGItNjkzM2E5MGM1M2Zh
LzEvY25hZGJrb1B3c21BRTdjaTZ5dnJubTZISDhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSYU2jWH
exQFg/z6aW4eu294edwYc4PDd1WnrZWYw7E4p7GIh3N7P5j7cqLgydFbSjqPr4uQ
yfPmnCluLFU2TOpWnzOq1VO6Biefs+bUF4Ae6RRlcGEP6tmoeEzAZpcokkSWdujJ
NPVPVTG3gexYTJRc6trrEK3U2pTPIPedoXNDkOM5GqZzDNgpfhB0CGkAHO7lMAYk
h+/SBIt5lgIyhLTPpkO6jIv7FCLh9zrf7Z+cjbFy62C8CExS7Yot3HdujZOf7ulM
N+cPF+3S6/LJjJ/ln3sIRtgg2eBAnHpCWxlHsUD6P3TnzNIR4hYiKQtKvFkQGVt/
wd5XLIFhEzmBpw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:59 2024 by rpki-client on console-fra.rpki-client.org