Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
File:                     Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft (raw, json)
Hash identifier:          fPyRDD86pDrv669ml8Rs8HjsM9XlselTvMCgWTDTPyY=
Subject key identifier:   A9:88:B4:1F:B0:AD:46:CA:6A:C9:E7:E0:10:1D:50:1D:0E:AC:CA:85
Authority key identifier: 5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
Certificate issuer:       /CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Certificate serial:       01901D0F61E38A01C3C28B6924F628A69997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 18:01:05 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:05 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:05 +0000
Files and hashes:         1: 5GytBfL9Rzs5dSGcARGUZhGXF64.roa (hash: ZXTx5/fcgVIxoRnIGaO9oXmWQ4xuDTIfC5IvL5WbI2w=)
                          2: Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl (hash: GP4f/YG9tUyrQukc6ORELfexVQrByQGHUU0osFNcAJQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:61:e3:8a:01:c3:c2:8b:69:24:f6:28:a6:99:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
        Validity
            Not Before: Jun 15 18:01:05 2024 GMT
            Not After : Jun 16 18:01:05 2024 GMT
        Subject: CN=a988b41fb0ad46ca6ac9e7e0101d501d0eacca85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e0:e3:a1:a1:fc:9e:94:f8:e6:7b:3d:49:19:
                    33:48:1f:8b:3c:c4:bf:26:41:10:bc:63:26:53:c9:
                    85:b5:64:f3:13:b2:95:92:f6:39:f4:71:d1:7c:0b:
                    29:cf:55:6c:11:0d:49:da:f4:8e:d8:77:3a:e8:d5:
                    80:75:53:63:6c:20:9e:80:e0:d0:c0:e8:7a:d3:15:
                    47:c1:2b:85:54:27:21:e0:66:46:02:ce:5e:a7:b3:
                    03:f7:2a:51:20:e7:19:dc:d6:a7:3b:5d:4b:39:23:
                    3f:af:f2:82:62:42:63:73:3f:1a:15:e5:e7:f8:f4:
                    9c:2c:7a:a8:08:ce:50:16:2e:21:a3:fa:1a:8d:0b:
                    e5:b0:cd:43:d5:23:98:e1:a2:58:34:4d:19:f1:a3:
                    8b:fd:8d:ec:c7:42:f8:1c:6d:de:82:5a:42:e5:fd:
                    d0:74:76:29:ca:50:ab:89:fa:45:ab:94:58:45:b1:
                    14:d8:ad:75:76:f7:ba:7d:88:58:c2:57:84:76:cd:
                    54:c7:15:64:03:1d:1b:87:07:66:7f:bb:2e:15:bc:
                    45:c1:cf:1e:ee:4d:dd:46:ba:67:88:de:61:e4:ec:
                    37:a7:9b:9f:c3:de:e2:e6:ca:a0:b2:37:d1:f8:d3:
                    c8:8d:0e:df:60:44:63:ce:e6:7a:cd:85:37:05:b8:
                    9f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:88:B4:1F:B0:AD:46:CA:6A:C9:E7:E0:10:1D:50:1D:0E:AC:CA:85
            X509v3 Authority Key Identifier:
                keyid:5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3d:3a:2c:02:4b:f3:63:97:f5:29:9d:8b:93:09:40:51:38:
         92:9a:69:a8:a0:c1:49:c7:71:3e:d9:8e:e7:a6:be:62:66:15:
         05:c1:a9:81:22:c2:af:e4:11:37:fd:e4:6d:60:5a:04:25:02:
         34:59:91:0c:7b:01:de:ff:1c:f3:a3:a2:77:73:8b:05:e7:74:
         b3:7c:04:26:85:f1:39:54:ab:03:94:5f:24:05:e1:84:96:7b:
         b6:b3:39:73:98:5f:70:74:a0:16:07:ae:86:34:d3:e7:b9:da:
         17:c0:9d:a4:0b:99:a2:01:05:fc:58:85:d9:fd:8b:cb:6b:f1:
         56:c7:59:80:22:58:88:26:10:d6:18:aa:ed:2b:cd:9a:71:8e:
         18:5c:c5:d6:35:7a:ea:f7:d9:cc:ad:a9:d9:34:a6:0e:d6:20:
         e9:e5:d8:c7:d4:9b:08:b7:a6:d1:d4:76:ae:a2:80:89:c0:f5:
         20:4f:06:2f:53:8a:a7:f4:0d:d8:95:a6:c3:bf:20:9a:91:54:
         fa:81:f9:80:1a:5c:5d:3e:5a:ab:0f:91:36:1d:93:86:4f:6f:
         63:c4:49:ae:f6:cd:ec:e3:8f:cd:f9:ff:9e:de:7b:6a:07:3f:
         de:5c:4a:6e:f0:74:6a:07:9f:11:70:a3:eb:86:7f:77:b7:c5:
         9a:dd:20:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdD2HjigHDwotpJPYoppmXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZmZmMjU3OGEwZTYyMTVkYzYwZTJkYTk0NmYzMGQyNWM2
M2NkNmEwHhcNMjQwNjE1MTgwMTA1WhcNMjQwNjE2MTgwMTA1WjAzMTEwLwYDVQQD
EyhhOTg4YjQxZmIwYWQ0NmNhNmFjOWU3ZTAxMDFkNTAxZDBlYWNjYTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+DjoaH8npT45ns9SRkzSB+LPMS/
JkEQvGMmU8mFtWTzE7KVkvY59HHRfAspz1VsEQ1J2vSO2Hc66NWAdVNjbCCegODQ
wOh60xVHwSuFVCch4GZGAs5ep7MD9ypRIOcZ3NanO11LOSM/r/KCYkJjcz8aFeXn
+PScLHqoCM5QFi4ho/oajQvlsM1D1SOY4aJYNE0Z8aOL/Y3sx0L4HG3eglpC5f3Q
dHYpylCrifpFq5RYRbEU2K11dve6fYhYwleEds1UxxVkAx0bhwdmf7suFbxFwc8e
7k3dRrpniN5h5Ow3p5ufw97i5sqgsjfR+NPIjQ7fYERjzuZ6zYU3BbifoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmItB+wrUbKasnn4BAdUB0OrMqFMB8GA1UdIwQY
MBaAFF7/8leKDmIV3GDi2pRvMNJcY81qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83OWQxYTEtMDkxYy00MDM5LTg3Nzgt
YjY5NzkwN2ZmZGM4LzEvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC83OWQxYTEtMDkxYy00MDM5LTg3NzgtYjY5NzkwN2ZmZGM4
LzEvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANz06LAJL
82OX9Smdi5MJQFE4kpppqKDBScdxPtmO56a+YmYVBcGpgSLCr+QRN/3kbWBaBCUC
NFmRDHsB3v8c86Oid3OLBed0s3wEJoXxOVSrA5RfJAXhhJZ7trM5c5hfcHSgFgeu
hjTT57naF8CdpAuZogEF/FiF2f2Ly2vxVsdZgCJYiCYQ1hiq7SvNmnGOGFzF1jV6
6vfZzK2p2TSmDtYg6eXYx9SbCLem0dR2rqKAicD1IE8GL1OKp/QN2JWmw78gmpFU
+oH5gBpcXT5aqw+RNh2Thk9vY8RJrvbN7OOPzfn/nt57agc/3lxKbvB0agefEXCj
64Z/d7fFmt0gbQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:02:52 2024 by rpki-client on console-fra.rpki-client.org