Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
File:                     ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft (raw, json)
Hash identifier:          Or3a43HA0o4gT9HV9MyWM6ARc5jxBfLs/flj1uh3OGM=
Subject key identifier:   85:5F:75:81:14:8A:37:FC:1B:87:82:18:8E:30:44:CB:73:48:5F:8E
Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
Certificate issuer:       /CN=66ba8d64e901b39b501ed3693ec27430713886e3
Certificate serial:       01901F34F5F7CC9591D60E0539F644FC2A83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
Manifest number:          0B34
Signing time:             Sun 16 Jun 2024 04:01:22 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:22 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:22 +0000
Files and hashes:         1: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl (hash: Dx//UTRLj4tMKQYb7RlpH/0HoVrqomKq+wWM6+YNvrw=)
                          2: qooFeYPW9NIpsBzDxpayc9VB83U.roa (hash: WG3L5FGGgqZiuy85O6Yu+7FL0841/FK5aJB3KolcH/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:f5:f7:cc:95:91:d6:0e:05:39:f6:44:fc:2a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3
        Validity
            Not Before: Jun 16 04:01:22 2024 GMT
            Not After : Jun 17 04:01:22 2024 GMT
        Subject: CN=855f7581148a37fc1b8782188e3044cb73485f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:40:6a:3d:ac:ea:f4:56:2e:a6:4b:2c:d5:e1:
                    34:33:ba:cc:a2:54:51:d4:ab:2d:7f:48:66:47:a8:
                    20:ee:7b:c4:c4:c1:f1:c3:e9:a5:2e:66:f9:a3:4f:
                    10:8d:fe:af:ac:04:9e:5d:2f:5d:3b:9e:40:64:ff:
                    91:d0:ab:41:39:52:8b:74:40:c3:88:77:0c:36:83:
                    15:f3:65:54:6e:87:68:c9:1c:95:ba:a1:ef:19:08:
                    6f:37:fb:a4:a4:71:9a:32:6a:d0:d8:5a:59:f6:15:
                    cc:1b:b7:98:50:47:09:5d:fc:59:de:7c:2d:1d:ee:
                    dd:b0:0d:22:ea:23:fa:e0:69:0c:61:7f:b6:2f:d7:
                    72:bf:e4:2e:87:6f:7d:22:74:8c:a1:fd:f3:3d:be:
                    b3:81:37:27:3b:3a:7a:8e:32:3a:8b:c8:9d:f5:0b:
                    d5:e3:e5:ba:c2:d8:c5:b8:ad:81:fb:06:a6:de:80:
                    c4:e1:df:8c:72:cf:93:9d:ec:e2:5d:88:93:1d:44:
                    03:77:b8:e5:56:4e:10:d0:71:9f:ce:f2:bf:02:12:
                    33:ea:41:23:7d:99:57:01:e4:e8:ce:82:db:2c:6f:
                    db:08:d4:92:a3:60:c3:95:e9:1e:1d:b6:8d:0b:6e:
                    80:d9:aa:97:73:fc:85:5f:8e:00:0e:58:50:e6:1b:
                    af:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5F:75:81:14:8A:37:FC:1B:87:82:18:8E:30:44:CB:73:48:5F:8E
            X509v3 Authority Key Identifier:
                keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b7:2f:d3:d5:b5:3c:d7:bc:46:ce:49:6b:10:22:e6:80:f1:
         9e:04:af:3f:79:09:17:e5:28:21:9d:d6:cf:a3:e5:8f:1a:ff:
         18:92:b7:92:d9:5e:3d:81:5c:91:88:9c:e8:0a:62:6e:7b:78:
         89:cd:38:de:c8:63:3c:21:66:92:8c:74:22:4a:f7:d8:2a:4d:
         56:4a:0b:fa:3f:42:c0:73:f7:1d:ba:af:2d:c0:72:25:1e:5f:
         f4:2e:4d:12:e7:13:d4:c9:46:b6:d7:a0:d9:db:a7:ff:f9:67:
         8a:4b:ff:3e:4b:ea:fe:25:31:1f:93:a3:7e:4e:79:8a:9a:8d:
         a9:0f:ea:93:10:0c:53:50:9e:2f:bf:fd:28:f8:36:6d:f6:43:
         54:ea:29:9c:9a:e6:3b:da:ae:ee:8a:cb:be:2b:28:88:01:78:
         c2:08:0f:22:37:c3:f8:79:3e:69:78:79:b9:8a:75:1e:90:8a:
         ae:1d:9a:8b:b0:c9:b6:d3:78:d3:32:ef:06:38:1d:b4:ab:91:
         e9:d2:99:93:8d:c5:b0:70:f1:45:d2:d1:60:52:3e:9c:d0:0d:
         e8:3b:4c:ae:3d:78:f4:3a:0c:32:3d:c1:fe:31:77:4d:a5:06:
         48:d0:d3:60:23:1e:e4:28:bb:d8:65:2e:4d:ef:c1:5f:fb:26:
         3f:7e:20:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfNPX3zJWR1g4FOfZE/CqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YmE4ZDY0ZTkwMWIzOWI1MDFlZDM2OTNlYzI3NDMwNzEz
ODg2ZTMwHhcNMjQwNjE2MDQwMTIyWhcNMjQwNjE3MDQwMTIyWjAzMTEwLwYDVQQD
Eyg4NTVmNzU4MTE0OGEzN2ZjMWI4NzgyMTg4ZTMwNDRjYjczNDg1ZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0BqPazq9FYupkss1eE0M7rMolRR
1Kstf0hmR6gg7nvExMHxw+mlLmb5o08Qjf6vrASeXS9dO55AZP+R0KtBOVKLdEDD
iHcMNoMV82VUbodoyRyVuqHvGQhvN/ukpHGaMmrQ2FpZ9hXMG7eYUEcJXfxZ3nwt
He7dsA0i6iP64GkMYX+2L9dyv+Quh299InSMof3zPb6zgTcnOzp6jjI6i8id9QvV
4+W6wtjFuK2B+wam3oDE4d+Mcs+TneziXYiTHUQDd7jlVk4Q0HGfzvK/AhIz6kEj
fZlXAeTozoLbLG/bCNSSo2DDlekeHbaNC26A2aqXc/yFX44ADlhQ5huvTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVfdYEUijf8G4eCGI4wRMtzSF+OMB8GA1UdIwQY
MBaAFGa6jWTpAbObUB7TaT7CdDBxOIbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnJxTlpPa0JzNXRRSHROcFBzSjBNSEU0aHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hYTdlNTMtNDkwZi00MTc3LThiMTEt
MGIzZTdlYmU0YWMyLzEvWnJxTlpPa0JzNXRRSHROcFBzSjBNSEU0aHVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hYTdlNTMtNDkwZi00MTc3LThiMTEtMGIzZTdlYmU0YWMy
LzEvWnJxTlpPa0JzNXRRSHROcFBzSjBNSEU0aHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7cv09W1
PNe8Rs5JaxAi5oDxngSvP3kJF+UoIZ3Wz6Pljxr/GJK3ktlePYFckYic6Apibnt4
ic043shjPCFmkox0Ikr32CpNVkoL+j9CwHP3HbqvLcByJR5f9C5NEucT1MlGtteg
2dun//lnikv/Pkvq/iUxH5Ojfk55ipqNqQ/qkxAMU1CeL7/9KPg2bfZDVOopnJrm
O9qu7orLvisoiAF4wggPIjfD+Hk+aXh5uYp1HpCKrh2ai7DJttN40zLvBjgdtKuR
6dKZk43FsHDxRdLRYFI+nNAN6DtMrj149DoMMj3B/jF3TaUGSNDTYCMe5Ci72GUu
Te/BX/smP34gAQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:30 2024 by rpki-client on console-fra.rpki-client.org