Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
File:                     NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json)
Hash identifier:          b4MBxhxWZbzBDpKKb9qMckfC9M+fcMX39EM82X5tjPM=
Subject key identifier:   DD:AD:A7:04:04:C0:DB:16:72:B9:0C:C0:1F:7E:7F:56:2F:03:4D:1D
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Certificate issuer:       /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial:       01901D7CDE975AAA98785F6E5C9762458096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
Manifest number:          93
Signing time:             Sat 15 Jun 2024 20:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 20:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 20:00:41 +0000
Files and hashes:         1: 6roECsc1zcAG1PJxPjMYfJdK-sY.roa (hash: CUx9YKrN0Xx3/Jbp0wBKt4isRQCcmQivjtIjdwlcl3s=)
                          2: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: ib15kF89qypbeGYCEoBxpxrh/lPqgXsJDt4isOv3s3w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 20:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:7c:de:97:5a:aa:98:78:5f:6e:5c:97:62:45:80:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
        Validity
            Not Before: Jun 15 20:00:41 2024 GMT
            Not After : Jun 16 20:00:41 2024 GMT
        Subject: CN=ddada70404c0db1672b90cc01f7e7f562f034d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:4f:7e:66:d4:90:13:b6:f8:8f:06:73:d0:
                    2b:f5:9b:6a:65:54:d9:c3:51:9c:44:7e:d6:65:30:
                    8a:3b:e9:4a:86:1b:0b:21:1e:71:de:5c:6a:7f:0d:
                    52:a3:c9:6f:99:47:4b:cc:52:b4:a8:73:c3:71:3f:
                    3e:29:cb:cb:a7:36:3e:9c:32:f7:40:ac:22:95:2b:
                    87:6d:ee:29:83:43:eb:ce:f9:06:76:b2:dc:84:b2:
                    42:bf:56:6d:af:17:43:94:2d:76:e3:a3:7a:71:0c:
                    ba:3d:d4:4e:20:63:11:1a:a7:08:20:3b:5b:c0:ba:
                    a4:e8:4c:01:83:71:a0:2d:a1:59:64:c1:74:60:70:
                    43:bf:fd:bd:79:36:11:30:11:af:14:04:0c:41:86:
                    a2:5e:c4:fa:98:bc:00:79:31:bb:ed:cd:de:a4:df:
                    6a:d2:57:5b:be:fa:26:9d:c9:7a:23:96:84:19:ff:
                    1a:29:06:6c:f3:82:e4:a3:de:74:76:aa:60:71:75:
                    40:69:38:4c:e8:f8:3d:54:fa:c8:ea:de:e0:a7:cb:
                    1a:bf:de:e2:73:dc:47:9d:31:0f:7e:bd:05:53:b8:
                    ed:d1:68:ad:65:b9:d5:c1:52:98:2d:6a:69:7a:0c:
                    f8:0a:49:43:bd:83:57:3c:eb:dd:d6:2c:e6:49:53:
                    73:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AD:A7:04:04:C0:DB:16:72:B9:0C:C0:1F:7E:7F:56:2F:03:4D:1D
            X509v3 Authority Key Identifier:
                keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:22:e2:a7:55:23:d4:6f:e7:4a:88:97:4d:f5:52:cc:62:1a:
         7e:68:4e:8e:99:fd:23:5a:a9:f9:bd:38:70:d2:17:cc:b6:57:
         b4:c6:0a:a0:60:90:b3:32:88:15:15:c0:ed:db:71:99:20:c2:
         60:5d:48:d9:73:62:2d:22:67:37:57:09:57:3d:64:db:43:64:
         29:d4:35:80:ea:5c:a1:b6:89:a6:b1:4c:cf:1c:7e:64:eb:20:
         88:a9:3d:e9:73:5f:2f:60:d4:d6:0e:71:59:4f:ec:33:23:0e:
         39:b7:bf:55:d8:2a:36:6e:99:f4:3e:40:b3:a6:9b:33:8b:40:
         bb:02:40:fa:42:d6:79:31:6a:a0:4f:c0:ae:e9:8b:e3:d0:a3:
         8f:e1:31:1f:43:fc:7a:9f:07:3f:50:f8:57:43:c2:c0:a3:f0:
         09:82:d8:ef:d4:5d:b1:88:c8:3d:2d:54:8c:91:ac:33:33:b2:
         df:76:8f:9f:78:39:cc:85:9a:ed:ef:e0:71:37:ae:66:da:c5:
         3e:88:b8:43:25:e1:cc:4f:ad:9b:d4:ef:db:3d:bf:0a:0c:06:
         e0:63:a9:90:a5:64:d6:cf:f3:33:7a:43:95:73:a2:09:13:c7:
         48:9a:f0:d0:00:57:e5:fc:f9:1e:c7:81:64:91:9d:89:da:d7:
         5e:40:7a:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdfN6XWqqYeF9uXJdiRYCWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ODgzYWI3OTlmMTQwMjhlNWI1Mzc1MDZlMmFmODc4NDQ5
MDQxYzUwHhcNMjQwNjE1MjAwMDQxWhcNMjQwNjE2MjAwMDQxWjAzMTEwLwYDVQQD
EyhkZGFkYTcwNDA0YzBkYjE2NzJiOTBjYzAxZjdlN2Y1NjJmMDM0ZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvZPfmbUkBO2+I8Gc9Ar9ZtqZVTZ
w1GcRH7WZTCKO+lKhhsLIR5x3lxqfw1So8lvmUdLzFK0qHPDcT8+KcvLpzY+nDL3
QKwilSuHbe4pg0PrzvkGdrLchLJCv1ZtrxdDlC1246N6cQy6PdROIGMRGqcIIDtb
wLqk6EwBg3GgLaFZZMF0YHBDv/29eTYRMBGvFAQMQYaiXsT6mLwAeTG77c3epN9q
0ldbvvomncl6I5aEGf8aKQZs84Lko950dqpgcXVAaThM6Pg9VPrI6t7gp8sav97i
c9xHnTEPfr0FU7jt0WitZbnVwVKYLWppegz4CklDvYNXPOvd1izmSVNzoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2tpwQEwNsWcrkMwB9+f1YvA00dMB8GA1UdIwQY
MBaAFDSIOreZ8UAo5bU3UG4q+HhEkEHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTklnNnQ1bnhRQ2psdFRkUWJpcjRlRVNRUWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mNGRlMTEtNTIzOS00ZWM1LTgxZTYt
MjY0OGZlOWNjMDIwLzEvTklnNnQ1bnhRQ2psdFRkUWJpcjRlRVNRUWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mNGRlMTEtNTIzOS00ZWM1LTgxZTYtMjY0OGZlOWNjMDIw
LzEvTklnNnQ1bnhRQ2psdFRkUWJpcjRlRVNRUWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACLip1Uj
1G/nSoiXTfVSzGIafmhOjpn9I1qp+b04cNIXzLZXtMYKoGCQszKIFRXA7dtxmSDC
YF1I2XNiLSJnN1cJVz1k20NkKdQ1gOpcobaJprFMzxx+ZOsgiKk96XNfL2DU1g5x
WU/sMyMOObe/VdgqNm6Z9D5As6abM4tAuwJA+kLWeTFqoE/ArumL49Cjj+ExH0P8
ep8HP1D4V0PCwKPwCYLY79RdsYjIPS1UjJGsMzOy33aPn3g5zIWa7e/gcTeuZtrF
Poi4QyXhzE+tm9Tv2z2/CgwG4GOpkKVk1s/zM3pDlXOiCRPHSJrw0ABX5fz5HseB
ZJGdidrXXkB6jA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:13:31 2024 by rpki-client on console-fra.rpki-client.org