Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
File:                     tuD-D69oRJiK8vdE1RbtucXf5xw.mft (raw, json)
Hash identifier:          nNUWAOVTvxIMxr4lieYHAXXw7ZmlVe9rNO+e4LqTJvQ=
Subject key identifier:   86:B8:DB:AD:36:A0:7C:73:50:03:99:4C:7B:D1:66:2F:F8:78:05:C0
Authority key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
Certificate issuer:       /CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Certificate serial:       01901E900DD2786D265F908189E74C9C9551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
Manifest number:          094D
Signing time:             Sun 16 Jun 2024 01:01:15 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:15 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:15 +0000
Files and hashes:         1: OV_DDDujN202WhAqDfa0rwafbIo.roa (hash: X01oKi3hOCXUBA3nASmnFJEIW67AKGyT1BxjHqKsUL0=)
                          2: tuD-D69oRJiK8vdE1RbtucXf5xw.crl (hash: ZHla/XPFp2RXndtxFpSJ8PuHxZd+yAPnrgd+g1LpbeM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:0d:d2:78:6d:26:5f:90:81:89:e7:4c:9c:95:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
        Validity
            Not Before: Jun 16 01:01:15 2024 GMT
            Not After : Jun 17 01:01:15 2024 GMT
        Subject: CN=86b8dbad36a07c735003994c7bd1662ff87805c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:77:94:5f:b2:8e:e2:65:1c:1c:94:5f:19:
                    58:0f:9a:87:70:88:8c:d1:4e:f3:ff:e2:8e:6e:e8:
                    0f:bc:ac:09:2c:68:98:88:47:8e:b9:aa:47:9b:c3:
                    6c:71:3f:db:43:c4:91:31:c5:88:b2:b5:5e:fe:56:
                    eb:83:3b:86:2d:9f:11:db:65:67:98:6d:ad:d8:a2:
                    b0:4f:41:8e:29:1b:08:b0:36:4e:95:1b:11:db:5d:
                    bd:c3:4f:43:a4:80:34:0a:bd:51:03:31:0b:bf:07:
                    00:05:96:5b:26:68:49:3a:ce:43:00:2d:14:43:8f:
                    b7:e7:38:cf:8c:d4:52:d7:82:e2:f1:1d:60:63:da:
                    8a:f1:6f:2b:26:8a:52:35:ad:10:e8:1a:64:aa:01:
                    d4:21:25:0d:d2:b4:4d:00:6c:11:f7:80:e6:b3:42:
                    cd:55:7f:6f:1b:1b:92:71:cf:92:62:07:59:1b:75:
                    3e:80:fd:be:3f:54:0a:ce:3a:90:3b:6a:73:48:9c:
                    5b:e1:d9:e4:e0:cd:ee:3d:6a:4d:5f:62:70:37:26:
                    5c:35:2b:f7:f9:bc:a5:99:07:35:1d:c9:6b:ef:11:
                    3b:ee:7c:af:a3:5a:b5:0d:83:fa:e8:16:0f:70:9e:
                    56:bb:2f:d2:1a:1f:6c:62:2f:99:01:37:07:b3:cb:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B8:DB:AD:36:A0:7C:73:50:03:99:4C:7B:D1:66:2F:F8:78:05:C0
            X509v3 Authority Key Identifier:
                keyid:B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d9:97:3f:ba:98:ad:98:4c:1a:a0:43:ff:a9:d9:dc:af:29:
         30:6e:e0:dd:d0:d1:b7:6c:a5:48:74:e3:2e:35:bf:4f:30:35:
         68:7c:5a:c4:f2:25:f4:71:0e:00:a5:fb:bd:c8:a2:95:09:99:
         09:84:ce:47:c8:41:4a:26:f7:58:c3:bf:c8:04:51:27:2f:4a:
         a1:50:d9:c4:d2:16:1c:53:5b:2c:6f:e8:eb:92:e8:bb:37:b5:
         28:07:4b:2c:e8:55:c0:d5:26:f7:b1:9b:d1:48:23:f3:6a:b8:
         50:ed:eb:da:8c:87:ff:b3:f7:56:d6:9d:5a:64:b7:d8:05:4d:
         cb:87:f2:d5:e4:f0:28:db:19:d0:28:48:14:71:b8:7e:47:08:
         60:09:ae:34:d3:fd:d5:6e:58:0f:d2:fb:71:7d:7b:8e:6f:e3:
         47:c1:a3:92:b0:46:4e:61:5f:c3:8e:cc:a6:fa:31:27:6d:a9:
         b5:f2:95:b6:84:ba:bc:18:18:ef:a2:9b:9d:7f:1f:6a:ec:37:
         90:7e:a6:52:e9:39:a2:6f:55:e3:cd:8a:53:1a:2e:65:37:c8:
         46:4d:f9:40:c3:d7:aa:8c:b0:01:53:a2:61:9a:4c:44:4c:a7:
         50:fc:ce:5b:b9:47:31:ef:2e:a1:b4:db:13:42:46:fd:97:1a:
         b5:b7:78:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAekA3SeG0mX5CBiedMnJVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZTBmZTBmYWY2ODQ0OTg4YWYyZjc0NGQ1MTZlZGI5YzVk
ZmU3MWMwHhcNMjQwNjE2MDEwMTE1WhcNMjQwNjE3MDEwMTE1WjAzMTEwLwYDVQQD
Eyg4NmI4ZGJhZDM2YTA3YzczNTAwMzk5NGM3YmQxNjYyZmY4NzgwNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYR3lF+yjuJlHByUXxlYD5qHcIiM
0U7z/+KObugPvKwJLGiYiEeOuapHm8NscT/bQ8SRMcWIsrVe/lbrgzuGLZ8R22Vn
mG2t2KKwT0GOKRsIsDZOlRsR2129w09DpIA0Cr1RAzELvwcABZZbJmhJOs5DAC0U
Q4+35zjPjNRS14Li8R1gY9qK8W8rJopSNa0Q6BpkqgHUISUN0rRNAGwR94Dms0LN
VX9vGxuScc+SYgdZG3U+gP2+P1QKzjqQO2pzSJxb4dnk4M3uPWpNX2JwNyZcNSv3
+bylmQc1Hclr7xE77nyvo1q1DYP66BYPcJ5Wuy/SGh9sYi+ZATcHs8sXUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIa42602oHxzUAOZTHvRZi/4eAXAMB8GA1UdIwQY
MBaAFLbg/g+vaESYivL3RNUW7bnF3+ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHVELUQ2OW9SSmlLOHZkRTFSYnR1Y1hmNXh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kMmE5YmMtMTNiMS00YjMwLWI1NjMt
MjA5ZTFmODQyMjRlLzEvdHVELUQ2OW9SSmlLOHZkRTFSYnR1Y1hmNXh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kMmE5YmMtMTNiMS00YjMwLWI1NjMtMjA5ZTFmODQyMjRl
LzEvdHVELUQ2OW9SSmlLOHZkRTFSYnR1Y1hmNXh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuNmXP7qY
rZhMGqBD/6nZ3K8pMG7g3dDRt2ylSHTjLjW/TzA1aHxaxPIl9HEOAKX7vciilQmZ
CYTOR8hBSib3WMO/yARRJy9KoVDZxNIWHFNbLG/o65Louze1KAdLLOhVwNUm97Gb
0Ugj82q4UO3r2oyH/7P3VtadWmS32AVNy4fy1eTwKNsZ0ChIFHG4fkcIYAmuNNP9
1W5YD9L7cX17jm/jR8GjkrBGTmFfw47MpvoxJ22ptfKVtoS6vBgY76KbnX8fauw3
kH6mUuk5om9V482KUxouZTfIRk35QMPXqoywAVOiYZpMREynUPzOW7lHMe8uobTb
E0JG/Zcatbd40Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:13:48 2024 by rpki-client on console-ams.rpki-client.org