Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
File:                     Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json)
Hash identifier:          g+ji82uVW3fYPJwR9L5VVnOq2w+mMpeJiTLcms7Fp/4=
Subject key identifier:   D7:CD:DA:F6:57:FB:AB:AE:53:B5:BF:9E:C2:2E:E8:BE:E6:B1:E2:FD
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Certificate issuer:       /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial:       01901EFDBCCEB82D76B0A2DD37FA5447F0AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 03:01:03 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:03 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:03 +0000
Files and hashes:         1: CL9ZB_a21bMKDSEh8ddI2x6Y7ns.roa (hash: VHPOBG5iXR9yXyXkTFoH5zsie3yZYG880vinlCDqsJY=)
                          2: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: UzhfZzvtGf8JOpab9igGsZOSnBbB3AOZzz3B8p9dc9o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:bc:ce:b8:2d:76:b0:a2:dd:37:fa:54:47:f0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
        Validity
            Not Before: Jun 16 03:01:03 2024 GMT
            Not After : Jun 17 03:01:03 2024 GMT
        Subject: CN=d7cddaf657fbabae53b5bf9ec22ee8bee6b1e2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2a:a0:7c:c7:50:59:b8:ae:62:20:d1:58:73:
                    b1:7d:9e:95:61:95:ea:b8:fb:69:80:ea:89:64:93:
                    2d:35:d1:ef:17:30:84:c3:8b:41:b4:4e:87:9f:4b:
                    aa:f7:1d:b8:dc:79:d5:36:ab:33:08:17:78:02:9a:
                    f1:64:d5:59:58:58:64:2f:c9:ec:3e:8c:4f:d8:d4:
                    a2:fa:29:39:76:87:19:48:04:38:7a:37:37:cb:04:
                    33:50:f6:08:1a:d2:4e:bc:39:86:b2:4f:2a:38:52:
                    60:ab:3e:9d:44:c7:63:2f:79:07:49:79:84:b5:fb:
                    c6:91:6c:e1:12:c6:d2:fc:18:8e:c1:29:d1:ac:c5:
                    be:32:fa:19:a3:f9:e8:9e:87:e1:57:00:2f:c0:2f:
                    82:a6:71:36:e5:38:4d:1d:5e:67:be:97:4e:34:38:
                    db:7d:f6:6a:88:0d:67:cf:fe:5d:83:f6:a3:65:3e:
                    8e:4b:a8:e3:dc:e1:98:3e:21:77:c2:15:93:e7:d4:
                    99:94:b3:51:29:bf:58:c5:b7:75:d4:2c:49:57:9f:
                    ba:e2:61:50:b8:3b:12:27:fa:72:50:fe:35:12:60:
                    5d:4e:35:13:44:3d:b8:69:c8:c9:cb:e2:b1:e9:b7:
                    6b:2c:9d:08:eb:42:5b:28:d9:63:20:50:12:d2:07:
                    bd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CD:DA:F6:57:FB:AB:AE:53:B5:BF:9E:C2:2E:E8:BE:E6:B1:E2:FD
            X509v3 Authority Key Identifier:
                keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:39:50:0e:33:b3:5a:17:d3:df:33:7e:01:03:ce:b3:a7:53:
         8f:12:94:15:20:19:40:8c:00:92:92:5a:60:db:17:d3:1a:71:
         a1:96:c9:cf:d4:00:20:25:47:6b:3f:06:66:4f:cd:e9:e7:aa:
         2d:72:a7:bc:f8:20:c4:ea:d4:fb:50:62:9c:12:b7:82:bf:21:
         6b:b4:25:9a:df:cf:8b:ce:59:67:c3:6f:f3:ae:80:0d:2b:35:
         a1:6d:37:cd:98:15:c5:30:4c:8d:e2:4c:18:90:e4:be:6e:4f:
         fb:50:ea:fa:39:90:7f:90:4b:0e:e9:39:17:7b:a2:27:af:8b:
         16:1c:b9:1e:00:4a:39:c9:d3:13:cc:12:c8:36:16:4f:5c:05:
         a2:78:f3:2b:30:e1:41:fe:5a:8c:4e:c6:78:3d:60:22:49:9f:
         cf:c6:ca:10:0a:1f:c8:8e:ac:6b:97:97:52:d5:22:d8:0b:29:
         7a:4d:8c:15:d5:c0:75:a0:58:c9:8a:fc:51:d3:18:eb:ae:64:
         05:6f:c1:e2:eb:fa:44:1f:6c:76:73:ab:f8:f3:41:05:d0:61:
         1e:14:8e:40:ad:65:43:c3:c9:c6:df:50:05:52:90:25:1a:b2:
         e6:e8:58:5b:5c:0f:60:7c:42:db:6c:63:e8:e2:ba:a8:a9:f3:
         78:4c:20:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAe/bzOuC12sKLdN/pUR/CrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZGQxMDg3NWU5ZTRjOWU3ZTg3ZTcwMWJiNTE2YWE2ZTFi
OTUyYjAwHhcNMjQwNjE2MDMwMTAzWhcNMjQwNjE3MDMwMTAzWjAzMTEwLwYDVQQD
EyhkN2NkZGFmNjU3ZmJhYmFlNTNiNWJmOWVjMjJlZThiZWU2YjFlMmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+CqgfMdQWbiuYiDRWHOxfZ6VYZXq
uPtpgOqJZJMtNdHvFzCEw4tBtE6Hn0uq9x243HnVNqszCBd4AprxZNVZWFhkL8ns
PoxP2NSi+ik5docZSAQ4ejc3ywQzUPYIGtJOvDmGsk8qOFJgqz6dRMdjL3kHSXmE
tfvGkWzhEsbS/BiOwSnRrMW+MvoZo/nonofhVwAvwC+CpnE25ThNHV5nvpdONDjb
ffZqiA1nz/5dg/ajZT6OS6jj3OGYPiF3whWT59SZlLNRKb9Yxbd11CxJV5+64mFQ
uDsSJ/pyUP41EmBdTjUTRD24acjJy+Kx6bdrLJ0I60JbKNljIFAS0ge9dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfN2vZX+6uuU7W/nsIu6L7mseL9MB8GA1UdIwQY
MBaAFA3dEIdenkyefofnAbtRaqbhuVKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80ZjYzYTQtZDU3Yi00YzljLThjZWIt
OTgzYzcxZmY3MDUzLzEvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80ZjYzYTQtZDU3Yi00YzljLThjZWItOTgzYzcxZmY3MDUz
LzEvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDlQDjOz
WhfT3zN+AQPOs6dTjxKUFSAZQIwAkpJaYNsX0xpxoZbJz9QAICVHaz8GZk/N6eeq
LXKnvPggxOrU+1BinBK3gr8ha7Qlmt/Pi85ZZ8Nv866ADSs1oW03zZgVxTBMjeJM
GJDkvm5P+1Dq+jmQf5BLDuk5F3uiJ6+LFhy5HgBKOcnTE8wSyDYWT1wFonjzKzDh
Qf5ajE7GeD1gIkmfz8bKEAofyI6sa5eXUtUi2Aspek2MFdXAdaBYyYr8UdMY665k
BW/B4uv6RB9sdnOr+PNBBdBhHhSOQK1lQ8PJxt9QBVKQJRqy5uhYW1wPYHxC22xj
6OK6qKnzeEwgRQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:16 2024 by rpki-client on console-fra.rpki-client.org