Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
File:                     ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json)
Hash identifier:          bH1gs/uu6JUlDS1HEGPX5wWZsZLKHB7cP36CbRHyFlY=
Subject key identifier:   75:A8:A6:28:6F:D9:5B:FB:A5:E8:5F:38:1F:D6:1E:EF:9F:14:26:EA
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Certificate issuer:       /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial:       0190486994780519CC5A19B4D7C23BA315ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
Manifest number:          0E96
Signing time:             Mon 24 Jun 2024 04:03:17 +0000
Manifest this update:     Mon 24 Jun 2024 04:03:17 +0000
Manifest next update:     Tue 25 Jun 2024 04:03:17 +0000
Files and hashes:         1: PHVH9ILKPGSGqfsnO69OUUJmvTo.roa (hash: aWyK9PNp7Y95UymM6kwrHLKb/M00YL3CN6Anp04d+Is=)
                          2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: Oc/43eUwez1DlS0WL0he5ZVfty3wpwpQemFUN3srke0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:69:94:78:05:19:cc:5a:19:b4:d7:c2:3b:a3:15:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
        Validity
            Not Before: Jun 24 04:03:17 2024 GMT
            Not After : Jun 25 04:03:17 2024 GMT
        Subject: CN=75a8a6286fd95bfba5e85f381fd61eef9f1426ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2a:fd:9f:c5:a2:ec:d4:cd:e8:ed:fa:b4:7c:
                    65:4e:32:c8:50:38:46:30:4c:98:17:7e:cb:b3:df:
                    c8:2f:80:70:7a:47:a1:ff:a5:0a:99:66:5c:a0:78:
                    6e:c8:0b:08:66:34:e7:50:1b:b1:8c:1b:10:32:f3:
                    0e:df:7c:18:c6:16:77:49:01:64:0d:bf:26:95:75:
                    78:c2:6e:4e:3a:19:f5:bc:ed:7e:a1:26:40:fd:af:
                    5d:ea:5b:d1:49:91:57:da:7c:46:b1:c3:5f:c3:29:
                    75:be:90:53:2d:b5:a3:14:58:1b:28:85:dc:c4:8e:
                    6b:98:5c:a2:65:3a:80:3c:3d:46:02:57:3f:e7:86:
                    1c:6d:4e:af:7c:5e:4e:eb:af:5a:96:0d:ac:b1:84:
                    f3:94:46:1d:c2:d2:ee:c8:1e:f9:c2:0f:46:35:ab:
                    f4:1a:47:15:a5:98:96:57:04:d1:93:1f:eb:ac:94:
                    18:10:69:a9:91:e8:ba:f7:8d:4a:f1:33:45:9b:8e:
                    dd:bc:fa:04:c4:a3:9a:25:ff:b8:db:6b:a9:43:aa:
                    6e:86:1d:80:d9:bc:d0:96:01:87:ea:67:5b:75:ff:
                    10:d3:83:9c:19:85:bf:e4:e8:67:50:8b:87:1c:7c:
                    8d:07:a6:64:ec:f3:10:c2:8f:1a:8a:05:aa:8b:33:
                    40:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A8:A6:28:6F:D9:5B:FB:A5:E8:5F:38:1F:D6:1E:EF:9F:14:26:EA
            X509v3 Authority Key Identifier:
                keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:39:0e:2c:58:8f:f7:93:bc:8a:ce:0b:d9:ec:53:78:e9:d2:
         a4:a5:03:9f:61:64:8c:c5:ca:ef:39:86:95:84:38:4f:0a:c2:
         03:96:8d:48:6d:78:a9:cc:25:72:3c:d5:dd:1e:a4:b1:a5:40:
         27:af:ae:06:34:57:43:a2:b1:31:d3:d6:7d:6e:df:2f:e8:ea:
         9f:38:45:96:53:a6:a1:6f:41:68:d2:a1:d5:60:3e:5b:3b:77:
         3b:7c:36:90:2c:ea:aa:ed:3e:e6:3d:0b:0d:7f:2b:c2:a7:1a:
         bc:2a:3f:84:d2:63:00:c1:51:83:e4:0a:e3:7a:a0:98:d9:45:
         24:7c:6e:62:b7:06:ad:66:ee:1f:c4:93:7e:ee:88:fb:61:d0:
         5f:ac:9f:dc:df:00:0b:66:4d:7a:77:ee:92:c4:56:49:c5:70:
         35:f3:54:8c:bf:fb:88:59:c7:af:f8:16:f2:57:95:9d:06:fd:
         87:f5:fb:33:08:d5:6b:c0:a0:27:54:b3:8d:7e:18:86:c6:e4:
         6b:ba:81:bf:4a:2f:f6:c0:68:88:63:41:03:e2:e4:5c:fd:d7:
         4f:92:06:f2:8c:1a:53:9f:b8:99:68:4a:a6:60:05:83:74:f0:
         52:a4:a0:3e:58:70:09:37:22:2e:d4:af:49:9a:47:c6:d2:2a:
         02:eb:b9:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBIaZR4BRnMWhm018I7oxXtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjVlY2Q2MTVmM2E2YzU2MzljNTFlOWUzMTk3NjczMTUy
MDc4YjgwHhcNMjQwNjI0MDQwMzE3WhcNMjQwNjI1MDQwMzE3WjAzMTEwLwYDVQQD
Eyg3NWE4YTYyODZmZDk1YmZiYTVlODVmMzgxZmQ2MWVlZjlmMTQyNmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCr9n8Wi7NTN6O36tHxlTjLIUDhG
MEyYF37Ls9/IL4Bwekeh/6UKmWZcoHhuyAsIZjTnUBuxjBsQMvMO33wYxhZ3SQFk
Db8mlXV4wm5OOhn1vO1+oSZA/a9d6lvRSZFX2nxGscNfwyl1vpBTLbWjFFgbKIXc
xI5rmFyiZTqAPD1GAlc/54YcbU6vfF5O669alg2ssYTzlEYdwtLuyB75wg9GNav0
GkcVpZiWVwTRkx/rrJQYEGmpkei6941K8TNFm47dvPoExKOaJf+422upQ6puhh2A
2bzQlgGH6mdbdf8Q04OcGYW/5OhnUIuHHHyNB6Zk7PMQwo8aigWqizNANwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWopihv2Vv7pehfOB/WHu+fFCbqMB8GA1UdIwQY
MBaAFGRl7NYV86bFY5xR6eMZdnMVIHi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85NjA0MDQtYjY2NC00MGNjLTljYWMt
NTRjN2M0ZWU1YmI1LzEvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85NjA0MDQtYjY2NC00MGNjLTljYWMtNTRjN2M0ZWU1YmI1
LzEvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzkOLFiP
95O8is4L2exTeOnSpKUDn2FkjMXK7zmGlYQ4TwrCA5aNSG14qcwlcjzV3R6ksaVA
J6+uBjRXQ6KxMdPWfW7fL+jqnzhFllOmoW9BaNKh1WA+Wzt3O3w2kCzqqu0+5j0L
DX8rwqcavCo/hNJjAMFRg+QK43qgmNlFJHxuYrcGrWbuH8STfu6I+2HQX6yf3N8A
C2ZNenfuksRWScVwNfNUjL/7iFnHr/gW8leVnQb9h/X7MwjVa8CgJ1SzjX4Yhsbk
a7qBv0ov9sBoiGNBA+LkXP3XT5IG8owaU5+4mWhKpmAFg3TwUqSgPlhwCTciLtSv
SZpHxtIqAuu5nA==
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:34:41 2024 by rpki-client on console-ams.rpki-client.org