Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
File:                     iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json)
Hash identifier:          2iWZ3EVoNX6iP8Wo/MzSjs+zj1CqepE0r3LmMYcvqX0=
Subject key identifier:   03:8D:58:09:19:A9:4A:AB:EC:39:59:73:FC:34:D3:FC:09:87:C4:04
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Certificate issuer:       /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial:       01901DEBAED325891EA88A39B640A9BF8A65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:01:43 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:43 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:43 +0000
Files and hashes:         1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: URXvR71EbyQmwUbCOeDT9qBSQIoJ2kaKr5y7hAyl29c=)
                          2: n6Cb5zAJsvtaP1u_ayxP1crqwO0.roa (hash: yq2zR/+Pia1XfEdBSUcaXWm1F2xRicF2Mh0hZgt1ccQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:ae:d3:25:89:1e:a8:8a:39:b6:40:a9:bf:8a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
        Validity
            Not Before: Jun 15 22:01:43 2024 GMT
            Not After : Jun 16 22:01:43 2024 GMT
        Subject: CN=038d580919a94aabec395973fc34d3fc0987c404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:97:82:61:fe:a0:1d:0e:f4:5f:3c:2d:0f:52:
                    aa:72:e1:d4:3a:f3:45:6b:15:b1:bd:c4:30:8e:06:
                    8c:0d:30:2e:a0:38:dc:11:9b:ab:3d:1a:e6:eb:be:
                    7b:e1:7d:a8:a8:6f:3a:72:12:2d:a0:90:52:00:72:
                    31:b9:a7:44:d5:89:99:f1:b8:d0:0a:49:44:a4:4c:
                    2f:9e:47:ed:42:6b:99:6f:13:b3:8f:62:49:8d:51:
                    70:bc:23:38:80:44:ba:7d:b3:b2:d8:f3:de:69:a1:
                    6c:da:ca:b4:52:7d:73:1f:ad:a4:b3:d1:19:f4:95:
                    28:04:6a:ac:8a:e0:f6:c3:fb:6e:73:21:34:90:85:
                    f4:f8:1f:66:5e:6b:e7:27:66:07:c9:d7:11:1e:da:
                    22:ee:40:1e:31:33:c4:51:99:e4:a5:c5:b6:ab:8d:
                    ae:b1:cf:7b:06:eb:51:29:e3:2f:22:43:0d:3c:b4:
                    9c:c2:8b:8f:70:76:6c:44:02:6d:6d:c9:7f:b1:57:
                    f9:ae:1e:4a:5d:71:0e:94:56:99:f9:a0:ac:d4:ff:
                    43:08:e3:64:bf:c2:02:98:cf:0f:51:c7:f8:25:4d:
                    b5:c8:30:ac:0c:3f:de:0a:18:02:ad:90:f2:4f:77:
                    9a:98:6e:93:15:bb:df:f8:c7:84:24:93:76:33:59:
                    44:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8D:58:09:19:A9:4A:AB:EC:39:59:73:FC:34:D3:FC:09:87:C4:04
            X509v3 Authority Key Identifier:
                keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:3d:5d:5f:56:0f:27:2a:a9:1a:02:f4:b9:37:42:c3:a4:67:
         2f:85:75:5e:7b:fa:24:ca:72:d1:23:1a:70:55:9a:3d:ff:7d:
         eb:75:9f:28:42:b4:7c:f2:6b:d0:f4:fb:dd:8a:33:08:3d:f5:
         72:b2:7e:76:ce:96:4c:0b:3c:a8:29:91:f7:e4:24:f6:4a:51:
         85:bb:b2:5d:d8:f8:77:a8:32:3f:a2:e8:a5:26:a8:80:b1:2e:
         2a:61:2c:1d:86:6a:62:60:1b:7a:9c:47:7d:22:42:61:8f:37:
         80:cf:ad:34:82:89:e0:fd:e8:ae:29:f4:6e:be:a9:2e:63:64:
         4d:71:85:68:2e:38:b5:e4:4b:1d:f5:d1:44:5e:8e:f5:e7:67:
         4d:7f:42:d1:90:15:52:b2:fe:3f:f6:9d:27:0c:50:4b:94:c1:
         ef:9b:54:ca:97:d2:00:24:7b:59:2d:cc:4c:7e:a7:c9:14:29:
         42:8c:95:da:33:51:b9:8b:eb:3c:46:89:a3:04:38:d5:59:bd:
         b4:fb:11:f0:60:ff:13:b5:5e:26:98:85:36:0e:97:c9:6a:fe:
         dc:5c:34:2e:90:d9:12:54:0e:df:72:6b:2b:1e:a4:08:5c:4f:
         0c:0c:77:ce:14:41:7a:81:da:13:67:73:39:4a:21:72:27:e7:
         e1:ef:c4:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd667TJYkeqIo5tkCpv4plMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NTlhZTNmNDE3N2EzY2RkOTY2OGQwYzViOGE4OWY5MTg2
YjViZmMwHhcNMjQwNjE1MjIwMTQzWhcNMjQwNjE2MjIwMTQzWjAzMTEwLwYDVQQD
EygwMzhkNTgwOTE5YTk0YWFiZWMzOTU5NzNmYzM0ZDNmYzA5ODdjNDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35eCYf6gHQ70XzwtD1KqcuHUOvNF
axWxvcQwjgaMDTAuoDjcEZurPRrm67574X2oqG86chItoJBSAHIxuadE1YmZ8bjQ
CklEpEwvnkftQmuZbxOzj2JJjVFwvCM4gES6fbOy2PPeaaFs2sq0Un1zH62ks9EZ
9JUoBGqsiuD2w/tucyE0kIX0+B9mXmvnJ2YHydcRHtoi7kAeMTPEUZnkpcW2q42u
sc97ButRKeMvIkMNPLScwouPcHZsRAJtbcl/sVf5rh5KXXEOlFaZ+aCs1P9DCONk
v8ICmM8PUcf4JU21yDCsDD/eChgCrZDyT3eamG6TFbvf+MeEJJN2M1lELwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAONWAkZqUqr7DlZc/w00/wJh8QEMB8GA1UdIwQY
MBaAFIlZrj9Bd6PN2WaNDFuKifkYa1v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNGJhMjYtZjFiOS00Mjg1LWI3ZmEt
ZWU5ODJhNTEyZjQzLzEvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wNGJhMjYtZjFiOS00Mjg1LWI3ZmEtZWU5ODJhNTEyZjQz
LzEvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOj1dX1YP
JyqpGgL0uTdCw6RnL4V1Xnv6JMpy0SMacFWaPf9963WfKEK0fPJr0PT73YozCD31
crJ+ds6WTAs8qCmR9+Qk9kpRhbuyXdj4d6gyP6LopSaogLEuKmEsHYZqYmAbepxH
fSJCYY83gM+tNIKJ4P3orin0br6pLmNkTXGFaC44teRLHfXRRF6O9ednTX9C0ZAV
UrL+P/adJwxQS5TB75tUypfSACR7WS3MTH6nyRQpQoyV2jNRuYvrPEaJowQ41Vm9
tPsR8GD/E7VeJpiFNg6XyWr+3Fw0LpDZElQO33JrKx6kCFxPDAx3zhRBeoHaE2dz
OUohcifn4e/E3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:55:52 2024 by rpki-client on console-fra.rpki-client.org