Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft
File:                     fgX1rbuaqxB5slJG4ju71qF-Ptg.mft (raw, json)
Hash identifier:          xBekkKo76VAT5D//FGp3omZUKo5bJv3Ucofyee10GL8=
Subject key identifier:   2A:30:FB:DF:05:FA:4B:08:FA:5C:70:78:69:A5:AF:BE:76:50:B1:34
Authority key identifier: 7E:05:F5:AD:BB:9A:AB:10:79:B2:52:46:E2:3B:BB:D6:A1:7E:3E:D8
Certificate issuer:       /CN=7e05f5adbb9aab1079b25246e23bbbd6a17e3ed8
Certificate serial:       01905BEDD02C85F77AF9613AA4D1A9BFB63E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft
Manifest number:          11E4
Signing time:             Thu 27 Jun 2024 23:00:29 +0000
Manifest this update:     Thu 27 Jun 2024 23:00:29 +0000
Manifest next update:     Fri 28 Jun 2024 23:00:29 +0000
Files and hashes:         1: fgX1rbuaqxB5slJG4ju71qF-Ptg.crl (hash: TBQUXN5WbHb24JXNHJGXF/fAFPJHWjhr95CaUSRK+8I=)
                          2: tVDvv1PeOgPYGWdM2qNgb2h2GAQ.roa (hash: DOIM9+Ux2XOn4iSGkSASmD+hqW69pVr2FhiDf4AduQA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Jun 2024 20:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5b:ed:d0:2c:85:f7:7a:f9:61:3a:a4:d1:a9:bf:b6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e05f5adbb9aab1079b25246e23bbbd6a17e3ed8
        Validity
            Not Before: Jun 27 23:00:29 2024 GMT
            Not After : Jun 28 23:00:29 2024 GMT
        Subject: CN=2a30fbdf05fa4b08fa5c707869a5afbe7650b134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:64:4a:8c:1a:eb:14:72:a2:e0:c9:84:61:
                    bc:8e:b7:78:ce:cb:a4:84:33:df:bc:56:f9:85:2c:
                    b5:18:06:44:3f:c2:bb:76:de:b7:9f:c4:de:dc:1a:
                    72:17:f2:57:80:64:d6:be:7a:d5:21:9d:8a:49:06:
                    2d:0b:70:8c:7d:6b:72:c2:c7:2a:46:6d:19:78:a8:
                    6b:1c:84:76:8f:db:b8:20:76:d3:5e:7e:be:ce:e5:
                    93:bd:26:10:d3:9a:d5:fd:99:b5:8a:55:be:29:63:
                    e9:e5:15:3a:be:47:09:94:cc:88:7d:3e:75:c2:57:
                    80:d9:42:57:2c:e5:17:ee:1a:d2:aa:27:24:2c:b6:
                    c3:e2:a5:05:fe:8e:01:86:c4:d1:14:73:32:c3:71:
                    14:8e:aa:78:cf:10:64:cb:e5:fc:4f:de:b6:65:a7:
                    3b:b5:4d:c4:21:13:ea:c8:1a:c5:44:96:cc:02:26:
                    45:f2:53:80:3e:8c:77:38:c8:31:b9:7c:02:41:c5:
                    36:4e:62:b4:16:45:5b:28:10:8a:bd:37:b3:89:0d:
                    7c:6f:6b:0b:8e:4c:a5:23:46:93:45:fb:63:31:50:
                    4a:5f:1c:59:a7:0d:4d:bf:fb:37:83:ba:7a:71:6f:
                    88:b0:71:d1:85:21:f8:ef:f6:40:c7:a8:3d:56:13:
                    a3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:30:FB:DF:05:FA:4B:08:FA:5C:70:78:69:A5:AF:BE:76:50:B1:34
            X509v3 Authority Key Identifier:
                keyid:7E:05:F5:AD:BB:9A:AB:10:79:B2:52:46:E2:3B:BB:D6:A1:7E:3E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:5c:ab:2d:2f:ae:5f:33:85:9d:85:a6:f9:fa:8f:0e:c5:53:
         44:ea:e5:1c:0e:fd:6b:dd:2f:09:c1:33:ca:1a:f0:d7:0a:f3:
         4e:ec:33:8d:15:99:56:8b:77:06:49:52:7b:39:cd:4d:86:a6:
         4e:83:24:ef:cd:78:24:f3:e5:7c:a3:13:67:2a:bf:c9:5c:7e:
         0e:8c:ec:fc:42:00:53:7f:c1:7e:54:ad:ff:85:8c:fb:1d:e1:
         a4:3f:d0:11:bb:51:9b:4f:02:30:8e:cf:a4:da:ba:a2:62:0e:
         74:a5:ad:43:f6:a8:7a:3d:d2:a8:f4:f5:6f:6b:44:d4:c7:ea:
         d6:1b:a4:7a:c5:84:60:32:c5:b8:6a:11:a6:5a:30:af:55:93:
         f3:f0:2a:64:66:81:b3:3e:8b:a1:99:c6:87:4f:07:8b:70:d5:
         6e:4c:19:a9:01:65:18:0c:dc:45:1e:e6:53:a7:d9:63:ef:91:
         85:3f:de:73:d8:d6:a6:19:f4:97:3e:ea:cb:3b:d8:e8:4d:bc:
         a9:dc:07:2c:05:fa:57:df:79:65:b0:88:3b:1b:34:75:cb:b5:
         85:d9:7b:04:26:5d:5c:d8:86:c2:e8:6c:80:09:88:e5:0b:c7:
         ff:a3:eb:a5:b6:7d:98:f7:ce:79:02:2d:8f:e7:46:ed:75:1f:
         eb:a9:c1:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBb7dAshfd6+WE6pNGpv7Y+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDVmNWFkYmI5YWFiMTA3OWIyNTI0NmUyM2JiYmQ2YTE3
ZTNlZDgwHhcNMjQwNjI3MjMwMDI5WhcNMjQwNjI4MjMwMDI5WjAzMTEwLwYDVQQD
EygyYTMwZmJkZjA1ZmE0YjA4ZmE1YzcwNzg2OWE1YWZiZTc2NTBiMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjhkSowa6xRyouDJhGG8jrd4zsuk
hDPfvFb5hSy1GAZEP8K7dt63n8Te3BpyF/JXgGTWvnrVIZ2KSQYtC3CMfWtywscq
Rm0ZeKhrHIR2j9u4IHbTXn6+zuWTvSYQ05rV/Zm1ilW+KWPp5RU6vkcJlMyIfT51
wleA2UJXLOUX7hrSqickLLbD4qUF/o4BhsTRFHMyw3EUjqp4zxBky+X8T962Zac7
tU3EIRPqyBrFRJbMAiZF8lOAPox3OMgxuXwCQcU2TmK0FkVbKBCKvTeziQ18b2sL
jkylI0aTRftjMVBKXxxZpw1Nv/s3g7p6cW+IsHHRhSH47/ZAx6g9VhOj2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCow+98F+ksI+lxweGmlr752ULE0MB8GA1UdIwQY
MBaAFH4F9a27mqsQebJSRuI7u9ahfj7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdYMXJidWFxeEI1c2xKRzRqdTcxcUYtUHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xODQ1MDAtMzMzNi00Y2RkLTk0M2It
NGY2Yzg1ZmQ1MGYxLzEvZmdYMXJidWFxeEI1c2xKRzRqdTcxcUYtUHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8xODQ1MDAtMzMzNi00Y2RkLTk0M2ItNGY2Yzg1ZmQ1MGYx
LzEvZmdYMXJidWFxeEI1c2xKRzRqdTcxcUYtUHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1yrLS+u
XzOFnYWm+fqPDsVTROrlHA79a90vCcEzyhrw1wrzTuwzjRWZVot3BklSeznNTYam
ToMk7814JPPlfKMTZyq/yVx+Dozs/EIAU3/BflSt/4WM+x3hpD/QEbtRm08CMI7P
pNq6omIOdKWtQ/aoej3SqPT1b2tE1Mfq1hukesWEYDLFuGoRplowr1WT8/AqZGaB
sz6LoZnGh08Hi3DVbkwZqQFlGAzcRR7mU6fZY++RhT/ec9jWphn0lz7qyzvY6E28
qdwHLAX6V995ZbCIOxs0dcu1hdl7BCZdXNiGwuhsgAmI5QvH/6PrpbZ9mPfOeQIt
j+dG7XUf66nBwQ==
-----END CERTIFICATE-----
Generated at Fri Jun 28 01:50:36 2024 by rpki-client on console-fra.rpki-client.org