Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
File:                     1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json)
Hash identifier:          H3bRo/iQ+GtQ1P4BDDQqFOtDCXSbLpEYZfL4etumJC0=
Subject key identifier:   A1:DC:CD:06:B7:54:66:26:F4:81:D9:83:44:CC:6C:03:39:9D:C5:4D
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Certificate issuer:       /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial:       01901CD87EF46FE9A17BED59E72DB28F0B55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
Manifest number:          0D96
Signing time:             Sat 15 Jun 2024 17:01:08 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:08 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:08 +0000
Files and hashes:         1: 0AbbJ9iFdNVeZK44K9UADNLHetQ.roa (hash: 7rqKyESIyvvpj20vbYseLFDGL4sFYb7f8jyYda6YIcI=)
                          2: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: wKH0F3CISYFcGUBfq+mOrlcmVfnIv+BDvOyPyN6hzUo=)
                          3: rZVc5_3K_1-jGrhdm9YkbN63AsM.roa (hash: gVFfmk3tu5vaxJnLtzUpqcTmymQLUqZSyLTw56IirNc=)
                          4: vapu5C4V0tmAwvLONdAgp6O8e3c.roa (hash: Tnzubylrjm2ap5KcX4R3tELnV5BO1WVvmEhMK3nKlmk=)
                          5: yV9drke-h1uIjboH88NUXVHY4Bo.roa (hash: fZOpqsTt4fGdRAb7/U5hRZPCKjKIF+PcrH+P0L033DI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:7e:f4:6f:e9:a1:7b:ed:59:e7:2d:b2:8f:0b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
        Validity
            Not Before: Jun 15 17:01:08 2024 GMT
            Not After : Jun 16 17:01:08 2024 GMT
        Subject: CN=a1dccd06b7546626f481d98344cc6c03399dc54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:f4:8d:86:06:4c:8e:cc:ac:f2:f9:b1:70:
                    ad:ab:8d:5e:82:07:1a:06:2b:ae:d1:8c:da:dc:29:
                    6b:4e:b3:2d:fa:39:84:43:4f:d2:3e:b7:65:53:9d:
                    b7:c4:7e:ec:d1:2f:74:4c:51:ac:15:4b:10:6d:0a:
                    ee:7d:a0:cc:02:57:46:52:4c:cb:e3:42:43:b3:be:
                    64:2b:6b:6b:75:c2:a5:37:35:1f:21:06:93:46:6d:
                    69:44:17:18:4f:32:b8:d8:24:d2:f9:67:19:cc:c0:
                    f3:24:d9:4a:73:67:47:37:4e:6b:c5:f5:e1:f6:24:
                    ad:8f:82:f5:22:27:0d:91:f7:d1:c1:c6:6d:ff:06:
                    cc:82:b5:51:09:66:55:a4:eb:05:3e:dd:f6:11:01:
                    a0:28:5c:2a:06:aa:bd:51:16:74:68:39:cf:ed:cf:
                    11:37:3b:e0:f8:01:0b:c3:76:60:c8:92:d9:ee:b3:
                    42:39:9e:bd:7d:4f:8f:e1:06:1b:7b:fc:9c:ca:e6:
                    6b:34:26:4f:09:89:19:e4:2d:09:15:66:b8:0f:0e:
                    0d:47:f3:28:78:10:41:ea:1a:e2:5b:5d:77:ac:2b:
                    bb:2c:ff:d4:16:c5:a3:39:8f:4b:ae:c7:25:6f:0e:
                    a7:c4:74:fb:f1:cd:3f:7d:43:be:ac:de:45:bb:7f:
                    5f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DC:CD:06:B7:54:66:26:F4:81:D9:83:44:CC:6C:03:39:9D:C5:4D
            X509v3 Authority Key Identifier:
                keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:56:14:78:1f:b3:5b:c8:4c:87:85:7d:7a:f7:69:a7:0c:c0:
         1f:a9:4c:e3:90:77:1c:7c:42:9c:a2:e6:36:2e:33:61:24:4b:
         8c:4a:17:40:57:fd:79:38:d8:b5:6e:db:f5:0d:cf:cf:f4:76:
         27:7f:d6:62:ca:5d:26:2e:3e:6d:56:86:66:c4:3e:3c:40:ec:
         58:e7:ac:fd:52:96:c9:c7:4e:26:56:4e:f9:ed:05:dd:5c:38:
         b3:f4:6a:f7:13:bb:61:47:04:c6:4f:57:41:e6:af:02:0b:e2:
         9d:a8:91:3d:60:1f:54:5d:d9:2b:b7:f9:53:c8:55:7c:f7:d1:
         f4:9b:1c:c6:3b:92:93:29:4d:cf:25:35:cd:2f:a7:dd:bb:b6:
         3a:5e:21:6c:a2:c6:40:ae:58:e7:cb:58:b0:f5:d0:66:ba:76:
         fb:1a:aa:99:17:6a:b8:15:86:82:32:00:c4:2a:d8:18:b1:e1:
         58:2b:cc:ed:3c:bb:34:3c:ae:67:e3:cb:8b:50:78:4d:e4:d2:
         57:b6:dc:e8:50:46:2f:8b:5d:58:9c:4e:aa:07:03:74:ac:2c:
         77:02:de:bf:0a:64:0b:60:db:7b:d0:82:f4:24:2b:48:3b:7d:
         f1:a7:d1:aa:5f:d2:68:80:a1:cb:38:ad:0f:a2:e6:91:57:cc:
         8b:e4:89:4e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZAc2H70b+mhe+1Z5y2yjwtVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MGUwMTdjZjE3MTE1MTliMGZmOWY2NTg1OGM0OTFiMmZh
NWQ0MGIwHhcNMjQwNjE1MTcwMTA4WhcNMjQwNjE2MTcwMTA4WjAzMTEwLwYDVQQD
EyhhMWRjY2QwNmI3NTQ2NjI2ZjQ4MWQ5ODM0NGNjNmMwMzM5OWRjNTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugH0jYYGTI7MrPL5sXCtq41eggca
Biuu0Yza3ClrTrMt+jmEQ0/SPrdlU523xH7s0S90TFGsFUsQbQrufaDMAldGUkzL
40JDs75kK2trdcKlNzUfIQaTRm1pRBcYTzK42CTS+WcZzMDzJNlKc2dHN05rxfXh
9iStj4L1IicNkffRwcZt/wbMgrVRCWZVpOsFPt32EQGgKFwqBqq9URZ0aDnP7c8R
Nzvg+AELw3ZgyJLZ7rNCOZ69fU+P4QYbe/ycyuZrNCZPCYkZ5C0JFWa4Dw4NR/Mo
eBBB6hriW113rCu7LP/UFsWjOY9Lrsclbw6nxHT78c0/fUO+rN5Fu39fnwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKHczQa3VGYm9IHZg0TMbAM5ncVNMB8GA1UdIwQY
MBaAFPgOAXzxcRUZsP+fZYWMSRsvpdQLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1BNEJmUEZ4RlJtd181OWxoWXhKR3ktbDFBcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2
LThjZTYwYTVjOGIxZi8xLzEtQTRCZlBGeEZSbXdfNTlsaFl4Skd5LWwxQXMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg3LzJkYzEzNi00MDBkLTQwZTctYWQ4Ni04Y2U2MGE1Yzhi
MWYvMS8xLUE0QmZQRnhGUm13XzU5bGhZeEpHeS1sMUFzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVYU
eB+zW8hMh4V9evdppwzAH6lM45B3HHxCnKLmNi4zYSRLjEoXQFf9eTjYtW7b9Q3P
z/R2J3/WYspdJi4+bVaGZsQ+PEDsWOes/VKWycdOJlZO+e0F3Vw4s/Rq9xO7YUcE
xk9XQeavAgvinaiRPWAfVF3ZK7f5U8hVfPfR9JscxjuSkylNzyU1zS+n3bu2Ol4h
bKLGQK5Y58tYsPXQZrp2+xqqmRdquBWGgjIAxCrYGLHhWCvM7Ty7NDyuZ+PLi1B4
TeTSV7bc6FBGL4tdWJxOqgcDdKwsdwLevwpkC2Dbe9CC9CQrSDt98afRql/SaICh
yzitD6LmkVfMi+SJTg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 21:25:22 2024 by rpki-client on console-ams.rpki-client.org