Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
File:                     _FNNTENDzYmRiWnVbaGFZ0sWY1U.mft (raw, json)
Hash identifier:          rqQDZe5Y5AaFhC9tAvlDcEieK4TBh3NdW7yHUigCVeY=
Subject key identifier:   DC:6F:C3:8C:3A:39:EF:C3:C6:9B:9A:5F:C8:8F:61:27:F0:33:13:0C
Authority key identifier: FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
Certificate issuer:       /CN=fc534d4c4343cd89918969d56da185674b166355
Certificate serial:       01901F3440348A8D4A1318ACFD549510727D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
Manifest number:          0BC1
Signing time:             Sun 16 Jun 2024 04:00:36 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:36 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:36 +0000
Files and hashes:         1: CRMq_fCyIrn7QWVMmoKovh0DB7w.roa (hash: CXNsnToGHbe9oG4qdrr4m1cDhpU76zY91AkSG+A9oHM=)
                          2: _FNNTENDzYmRiWnVbaGFZ0sWY1U.crl (hash: SqwxJCF0dNdmtzGUnD5XWYI+ZyvSgAjElZQrHbImtlY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:40:34:8a:8d:4a:13:18:ac:fd:54:95:10:72:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc534d4c4343cd89918969d56da185674b166355
        Validity
            Not Before: Jun 16 04:00:36 2024 GMT
            Not After : Jun 17 04:00:36 2024 GMT
        Subject: CN=dc6fc38c3a39efc3c69b9a5fc88f6127f033130c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b9:e8:7d:79:15:8a:06:8a:14:b0:f5:b2:38:
                    51:43:bb:bf:23:23:43:92:69:b2:4c:f1:6d:b8:21:
                    c7:be:ed:42:68:d4:00:d7:4a:21:9d:77:00:90:ed:
                    3a:ea:75:ea:03:17:fb:dd:76:09:6c:eb:c5:81:5b:
                    4d:c1:7f:f4:41:d0:8a:53:90:1b:53:5f:1d:9e:a4:
                    8c:e9:cf:d8:5d:d9:5f:96:a7:c8:b8:df:27:fe:eb:
                    03:ba:bf:92:19:a1:6f:04:53:70:21:2d:16:43:48:
                    db:17:ca:6f:28:22:c5:0b:f4:bb:46:30:63:1e:e3:
                    55:be:43:f0:91:64:7e:f0:07:c3:69:8d:76:6b:bc:
                    a5:b0:9d:a2:58:08:bc:df:ef:4f:ba:29:1e:d0:b1:
                    55:00:23:34:a6:08:88:44:f2:f8:14:9e:b5:97:11:
                    01:17:36:32:e5:cf:51:57:53:ea:07:d3:c8:82:4e:
                    1e:26:3f:54:8d:de:d8:5c:46:5b:ac:f8:35:02:dd:
                    1c:b3:b8:8a:96:a8:a7:05:d8:93:b3:ac:58:40:f3:
                    1c:9a:71:54:58:14:7c:f8:75:62:ee:f6:72:39:31:
                    95:f9:46:07:e1:08:ea:ec:4a:3a:33:dd:07:f7:65:
                    b9:ef:e1:e5:70:ba:13:57:2c:26:94:c7:4a:26:16:
                    b6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6F:C3:8C:3A:39:EF:C3:C6:9B:9A:5F:C8:8F:61:27:F0:33:13:0C
            X509v3 Authority Key Identifier:
                keyid:FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0d:b4:cb:f1:12:fe:74:2f:e2:aa:64:ea:37:44:12:4a:07:
         aa:ce:5d:2a:b3:7d:bd:e7:22:df:f9:0c:04:23:79:d7:00:b2:
         49:78:be:63:70:7f:3f:79:88:06:71:80:50:49:48:34:ab:41:
         08:46:92:37:4c:15:ed:4d:ae:aa:15:a9:4d:81:e0:28:53:75:
         1b:b0:1f:34:27:20:c3:41:26:c8:7d:a8:20:ee:ee:39:dd:5c:
         cf:a5:07:48:9b:4e:cf:5e:5f:94:1d:e2:68:5e:65:2c:54:e4:
         5c:be:5c:c5:8d:31:df:71:56:e6:9a:59:ad:a9:0c:d4:c5:70:
         d4:01:c7:c8:33:62:68:d8:85:7f:4b:0e:ba:a6:0f:39:2f:03:
         8f:e9:ea:3a:85:8a:92:78:d4:90:4e:2d:e0:93:82:1c:65:d4:
         ce:22:19:7f:7d:69:40:01:66:be:a2:43:27:45:1d:4a:c9:3e:
         47:52:d4:bc:5e:ed:52:63:9c:f6:6c:7d:f1:ff:94:c5:65:0c:
         19:76:59:5b:53:75:b8:b1:3f:1f:ba:7e:1e:54:d8:c7:d8:c8:
         ac:53:15:74:21:8a:98:12:cd:a6:bf:18:0a:b6:6d:94:03:b0:
         12:52:b7:37:c7:c6:61:c6:99:77:f0:51:64:93:d0:8d:33:cd:
         ef:49:ff:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfNEA0io1KExis/VSVEHJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNTM0ZDRjNDM0M2NkODk5MTg5NjlkNTZkYTE4NTY3NGIx
NjYzNTUwHhcNMjQwNjE2MDQwMDM2WhcNMjQwNjE3MDQwMDM2WjAzMTEwLwYDVQQD
EyhkYzZmYzM4YzNhMzllZmMzYzY5YjlhNWZjODhmNjEyN2YwMzMxMzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrnofXkVigaKFLD1sjhRQ7u/IyND
kmmyTPFtuCHHvu1CaNQA10ohnXcAkO066nXqAxf73XYJbOvFgVtNwX/0QdCKU5Ab
U18dnqSM6c/YXdlflqfIuN8n/usDur+SGaFvBFNwIS0WQ0jbF8pvKCLFC/S7RjBj
HuNVvkPwkWR+8AfDaY12a7ylsJ2iWAi83+9Puike0LFVACM0pgiIRPL4FJ61lxEB
FzYy5c9RV1PqB9PIgk4eJj9Ujd7YXEZbrPg1At0cs7iKlqinBdiTs6xYQPMcmnFU
WBR8+HVi7vZyOTGV+UYH4Qjq7Eo6M90H92W57+HlcLoTVywmlMdKJha2RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxvw4w6Oe/DxpuaX8iPYSfwMxMMMB8GA1UdIwQY
MBaAFPxTTUxDQ82JkYlp1W2hhWdLFmNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ZOTlRFTkR6WW1SaVduVmJhR0ZaMHNXWTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82MGI2MmItOGUyYy00NDNlLWExNjIt
YjRjMmRjYTU5M2IzLzEvX0ZOTlRFTkR6WW1SaVduVmJhR0ZaMHNXWTFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82MGI2MmItOGUyYy00NDNlLWExNjItYjRjMmRjYTU5M2Iz
LzEvX0ZOTlRFTkR6WW1SaVduVmJhR0ZaMHNXWTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQ20y/ES
/nQv4qpk6jdEEkoHqs5dKrN9veci3/kMBCN51wCySXi+Y3B/P3mIBnGAUElINKtB
CEaSN0wV7U2uqhWpTYHgKFN1G7AfNCcgw0EmyH2oIO7uOd1cz6UHSJtOz15flB3i
aF5lLFTkXL5cxY0x33FW5ppZrakM1MVw1AHHyDNiaNiFf0sOuqYPOS8Dj+nqOoWK
knjUkE4t4JOCHGXUziIZf31pQAFmvqJDJ0UdSsk+R1LUvF7tUmOc9mx98f+UxWUM
GXZZW1N1uLE/H7p+HlTYx9jIrFMVdCGKmBLNpr8YCrZtlAOwElK3N8fGYcaZd/BR
ZJPQjTPN70n/Uw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:09 2024 by rpki-client on console-fra.rpki-client.org