Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
File:                     KqJOWBL8wxBrnrCusA5ie6I10FY.mft (raw, json)
Hash identifier:          jcXdJ2G/2WEMyELY50MhvlRDQJuvFFlGqLXp+2zQAt8=
Subject key identifier:   E5:EB:C7:7E:F6:2E:DF:07:7A:E1:37:00:73:D7:E1:A4:0C:1E:46:3A
Authority key identifier: 2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
Certificate issuer:       /CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Certificate serial:       0190486761ADB610C70BCCBEC0D82129318C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
Manifest number:          046F
Signing time:             Mon 24 Jun 2024 04:00:52 +0000
Manifest this update:     Mon 24 Jun 2024 04:00:52 +0000
Manifest next update:     Tue 25 Jun 2024 04:00:52 +0000
Files and hashes:         1: KqJOWBL8wxBrnrCusA5ie6I10FY.crl (hash: ZSd017RvePhuKSo4g2f4XY0pIscqU+wCV0m9DG+ciLM=)
                          2: MFAat1nHEjtaN7CsttvgEI8qlFg.roa (hash: IA2F6I5e0i7ae56bjvpt5AQS+9x2T2H3EjKfvY2U4Vc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:67:61:ad:b6:10:c7:0b:cc:be:c0:d8:21:29:31:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
        Validity
            Not Before: Jun 24 04:00:52 2024 GMT
            Not After : Jun 25 04:00:52 2024 GMT
        Subject: CN=e5ebc77ef62edf077ae1370073d7e1a40c1e463a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:7d:17:f7:fd:57:28:94:56:5b:58:f5:e6:
                    a3:a4:cb:48:17:aa:c8:59:bb:43:14:64:a3:27:ea:
                    03:fe:f5:ae:9d:63:97:f8:2d:eb:cd:81:0b:ff:92:
                    56:6c:6a:fe:07:b6:a9:3d:6d:62:e9:e6:9e:1a:50:
                    cb:ff:42:29:b3:9b:8a:cf:ea:50:f6:d7:08:23:2a:
                    1b:05:25:03:c9:17:70:d8:d2:b5:82:83:42:dd:43:
                    7f:d3:0a:80:0e:dc:51:3f:8f:00:b6:a6:b0:23:6c:
                    25:a3:c4:17:16:69:1b:6f:ae:39:62:d0:ff:b7:88:
                    f3:b0:f2:06:9c:ab:eb:b3:3c:6a:49:6e:d4:de:e2:
                    a2:cb:81:27:9d:f8:07:45:55:f7:d6:1c:8b:cf:7b:
                    bb:86:16:2f:02:45:1c:4a:70:1a:66:d2:79:e1:f1:
                    f7:b4:27:fc:4d:9c:54:be:a2:34:60:21:05:98:09:
                    6c:7d:9a:b1:ce:4d:b0:fc:41:0f:45:4b:46:64:12:
                    c2:aa:63:7d:4e:36:f7:6c:3e:3c:6d:55:02:17:dc:
                    65:25:1d:3f:86:7e:7e:97:ed:cf:50:be:bf:52:32:
                    e8:b0:9c:d0:b9:17:21:e1:84:4f:48:72:f1:88:bc:
                    66:f3:eb:9a:ab:c8:97:e0:13:9d:3e:e3:ad:7c:18:
                    a1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EB:C7:7E:F6:2E:DF:07:7A:E1:37:00:73:D7:E1:A4:0C:1E:46:3A
            X509v3 Authority Key Identifier:
                keyid:2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1a:9c:5a:98:fc:bc:7d:9e:8c:f4:16:a9:c7:dc:be:5f:f5:
         76:b2:9a:31:3c:12:6a:d7:ec:59:2a:3e:1b:7e:42:9e:61:1b:
         1e:1c:e9:14:10:d0:0e:9b:7c:8a:85:1b:67:7f:f1:e4:7b:b4:
         cf:1a:bc:a9:ad:f0:4a:28:ec:d5:33:21:1e:55:82:d3:6f:0d:
         c0:cd:96:ee:f4:cf:f8:01:1f:15:76:c4:d8:36:28:4b:bf:d7:
         7e:bd:e0:5c:33:13:40:47:f0:e4:1c:dd:e6:03:4a:e1:ee:5b:
         30:81:56:d5:4f:91:e6:59:01:c9:d9:92:89:08:0a:f9:2a:d8:
         ba:8a:fe:e3:13:49:e2:7f:26:e2:e3:f3:b1:5f:d3:a6:6b:0b:
         82:b2:41:e5:53:6c:e0:7a:fb:5e:64:ed:bd:0a:21:35:15:ba:
         93:a6:26:c4:db:ce:b9:e9:80:0a:e0:30:b1:d7:44:c9:0a:5f:
         d8:43:8e:d0:1b:59:cc:ed:bd:2d:ee:48:76:e5:21:b0:62:44:
         9d:00:18:f8:f8:8a:32:23:89:d7:3d:f8:81:63:55:76:b7:a8:
         61:b1:50:d9:dd:fc:63:97:db:4c:1b:6d:00:b6:a8:07:d4:84:
         1a:1e:f8:95:51:9e:3c:6b:3b:dc:e3:cc:f9:dd:fc:28:2e:f5:
         cf:b7:81:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBIZ2GtthDHC8y+wNghKTGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTI0ZTU4MTJmY2MzMTA2YjllYjBhZWIwMGU2MjdiYTIz
NWQwNTYwHhcNMjQwNjI0MDQwMDUyWhcNMjQwNjI1MDQwMDUyWjAzMTEwLwYDVQQD
EyhlNWViYzc3ZWY2MmVkZjA3N2FlMTM3MDA3M2Q3ZTFhNDBjMWU0NjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3J9F/f9VyiUVltY9eajpMtIF6rI
WbtDFGSjJ+oD/vWunWOX+C3rzYEL/5JWbGr+B7apPW1i6eaeGlDL/0Ips5uKz+pQ
9tcIIyobBSUDyRdw2NK1goNC3UN/0wqADtxRP48AtqawI2wlo8QXFmkbb645YtD/
t4jzsPIGnKvrszxqSW7U3uKiy4EnnfgHRVX31hyLz3u7hhYvAkUcSnAaZtJ54fH3
tCf8TZxUvqI0YCEFmAlsfZqxzk2w/EEPRUtGZBLCqmN9Tjb3bD48bVUCF9xlJR0/
hn5+l+3PUL6/UjLosJzQuRch4YRPSHLxiLxm8+uaq8iX4BOdPuOtfBihHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXrx372Lt8HeuE3AHPX4aQMHkY6MB8GA1UdIwQY
MBaAFCqiTlgS/MMQa56wrrAOYnuiNdBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FKT1dCTDh3eEJybnJDdXNBNWllNkkxMEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xMDM0NmUtMTUwNC00M2RkLWFiMjgt
NjY4NThiYzhlYjc3LzEvS3FKT1dCTDh3eEJybnJDdXNBNWllNkkxMEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xMDM0NmUtMTUwNC00M2RkLWFiMjgtNjY4NThiYzhlYjc3
LzEvS3FKT1dCTDh3eEJybnJDdXNBNWllNkkxMEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxqcWpj8
vH2ejPQWqcfcvl/1drKaMTwSatfsWSo+G35CnmEbHhzpFBDQDpt8ioUbZ3/x5Hu0
zxq8qa3wSijs1TMhHlWC028NwM2W7vTP+AEfFXbE2DYoS7/Xfr3gXDMTQEfw5Bzd
5gNK4e5bMIFW1U+R5lkBydmSiQgK+SrYuor+4xNJ4n8m4uPzsV/TpmsLgrJB5VNs
4Hr7XmTtvQohNRW6k6YmxNvOuemACuAwsddEyQpf2EOO0BtZzO29Le5IduUhsGJE
nQAY+PiKMiOJ1z34gWNVdreoYbFQ2d38Y5fbTBttALaoB9SEGh74lVGePGs73OPM
+d38KC71z7eBIg==
-----END CERTIFICATE-----
Generated at Mon Jun 24 12:04:51 2024 by rpki-client on console-fra.rpki-client.org