Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.mft
File:                     cW2obFNsYhV0g7YzwYU2K6f30fI.mft (raw, json)
Hash identifier:          OntYmAaBeo1vNoRaSrA/WBp1yc3i4uX7xVZMBd6RvV8=
Subject key identifier:   03:4A:77:45:D4:DE:03:1C:1B:CC:BB:67:5B:8A:17:67:FA:DC:E4:E0
Authority key identifier: 71:6D:A8:6C:53:6C:62:15:74:83:B6:33:C1:85:36:2B:A7:F7:D1:F2
Certificate issuer:       /CN=716da86c536c62157483b633c185362ba7f7d1f2
Certificate serial:       01901D0F64FC3C39BA1E6A020E2FCF950408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cW2obFNsYhV0g7YzwYU2K6f30fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.mft
Manifest number:          05B5
Signing time:             Sat 15 Jun 2024 18:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:06 +0000
Files and hashes:         1: ZVYRbJJDnIOABqPsvgBAHqspQAc.roa (hash: Aq1yloicDjE/I9POAvmPmzTGnCe1EwgfH9FRhHqLVw4=)
                          2: cW2obFNsYhV0g7YzwYU2K6f30fI.crl (hash: ctZZyedDd+h31McqyxqRYdMi4rM1pPSgaVnjstsBHE0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cW2obFNsYhV0g7YzwYU2K6f30fI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:64:fc:3c:39:ba:1e:6a:02:0e:2f:cf:95:04:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716da86c536c62157483b633c185362ba7f7d1f2
        Validity
            Not Before: Jun 15 18:01:06 2024 GMT
            Not After : Jun 16 18:01:06 2024 GMT
        Subject: CN=034a7745d4de031c1bccbb675b8a1767fadce4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:72:cf:1f:90:c8:5a:e1:8c:87:29:45:bf:a9:
                    9c:03:6d:79:2c:f3:af:1e:37:e8:00:65:99:43:fc:
                    53:7d:9f:f0:45:cf:fb:91:4e:a8:8f:b7:0f:1b:ec:
                    cb:70:d8:7f:54:62:92:f8:e7:8b:c0:48:e4:00:09:
                    77:02:04:0d:b3:e3:ff:35:76:e9:bd:ff:d6:68:5e:
                    df:0d:09:40:bc:89:84:7d:db:2d:19:45:ef:8b:87:
                    43:84:df:9c:d3:d5:69:64:4a:f4:54:e1:69:0c:b7:
                    01:2e:71:52:c7:21:1b:cf:d9:62:fe:68:76:be:e0:
                    7c:c7:d0:dd:5b:59:07:07:ad:44:dd:c3:21:b7:07:
                    ae:9d:45:ee:ac:57:67:2c:b5:8d:98:c8:b6:31:ed:
                    52:31:79:55:b1:77:07:96:fb:66:e0:4c:ec:c9:e6:
                    da:b0:e1:bf:87:d3:d4:d9:7d:b9:3b:06:11:8a:e7:
                    5d:ca:3e:f2:9a:98:b7:2d:d0:ae:9c:11:66:8d:37:
                    73:f6:87:d8:cb:ea:f3:a8:fa:2a:bb:bd:95:89:34:
                    7d:fc:5c:d4:2d:2e:71:da:90:03:e0:bc:a9:bf:03:
                    c8:af:2f:42:a8:3d:05:43:07:9e:06:bb:67:b7:33:
                    74:84:6a:e8:44:5e:08:61:a1:99:01:c1:4a:a1:3a:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4A:77:45:D4:DE:03:1C:1B:CC:BB:67:5B:8A:17:67:FA:DC:E4:E0
            X509v3 Authority Key Identifier:
                keyid:71:6D:A8:6C:53:6C:62:15:74:83:B6:33:C1:85:36:2B:A7:F7:D1:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW2obFNsYhV0g7YzwYU2K6f30fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:20:33:88:4f:de:ba:df:a9:c4:7a:60:88:d0:df:1e:fe:39:
         97:88:e8:8a:8a:f8:a5:76:02:fb:1d:ef:04:0c:3f:6b:dc:f6:
         a5:11:ad:e1:27:cd:6a:4b:8c:d4:da:ec:3b:4f:3d:34:ee:27:
         66:ff:85:c9:b8:c4:6e:56:09:0d:4a:3f:d8:f3:b3:37:bf:32:
         f1:44:5c:55:96:6b:e7:f0:ff:6d:bd:47:fb:b9:0a:aa:ca:df:
         c1:18:e4:3d:b2:ba:64:bd:a4:5a:55:7e:77:df:14:ea:35:c1:
         95:02:ec:3c:af:d4:c6:c4:3b:15:d3:1b:f3:a3:43:85:21:cd:
         5f:6b:58:4d:c6:d9:c4:4c:b3:38:c7:6e:61:4d:a3:99:86:8d:
         44:69:15:28:02:07:38:15:8e:43:03:62:67:d6:3a:f8:a3:70:
         b3:cf:b5:52:15:25:1a:a5:c9:84:82:b6:43:59:17:78:7d:63:
         8a:ee:5c:a5:4b:f3:3c:a8:eb:82:9a:48:7a:14:22:fc:91:26:
         84:05:aa:6b:39:b4:1f:dd:1e:93:c5:cb:da:38:78:bd:45:30:
         74:d6:c7:aa:d7:7e:a3:d2:8d:98:e1:d6:7d:3c:d9:ab:95:55:
         62:f2:37:47:14:84:b9:0b:38:71:4e:07:52:be:d3:34:c7:a6:
         08:99:f8:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdD2T8PDm6HmoCDi/PlQQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNmRhODZjNTM2YzYyMTU3NDgzYjYzM2MxODUzNjJiYTdm
N2QxZjIwHhcNMjQwNjE1MTgwMTA2WhcNMjQwNjE2MTgwMTA2WjAzMTEwLwYDVQQD
EygwMzRhNzc0NWQ0ZGUwMzFjMWJjY2JiNjc1YjhhMTc2N2ZhZGNlNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHLPH5DIWuGMhylFv6mcA215LPOv
HjfoAGWZQ/xTfZ/wRc/7kU6oj7cPG+zLcNh/VGKS+OeLwEjkAAl3AgQNs+P/NXbp
vf/WaF7fDQlAvImEfdstGUXvi4dDhN+c09VpZEr0VOFpDLcBLnFSxyEbz9li/mh2
vuB8x9DdW1kHB61E3cMhtweunUXurFdnLLWNmMi2Me1SMXlVsXcHlvtm4Ezsyeba
sOG/h9PU2X25OwYRiuddyj7ympi3LdCunBFmjTdz9ofYy+rzqPoqu72ViTR9/FzU
LS5x2pAD4LypvwPIry9CqD0FQweeBrtntzN0hGroRF4IYaGZAcFKoTonewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANKd0XU3gMcG8y7Z1uKF2f63OTgMB8GA1UdIwQY
MBaAFHFtqGxTbGIVdIO2M8GFNiun99HyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1cyb2JGTnNZaFYwZzdZendZVTJLNmYzMGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wZjZkZGMtMjFiNy00NGQ3LWI5ODQt
NzNhZWE2ZWFjYTg1LzEvY1cyb2JGTnNZaFYwZzdZendZVTJLNmYzMGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8wZjZkZGMtMjFiNy00NGQ3LWI5ODQtNzNhZWE2ZWFjYTg1
LzEvY1cyb2JGTnNZaFYwZzdZendZVTJLNmYzMGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyAziE/e
ut+pxHpgiNDfHv45l4joior4pXYC+x3vBAw/a9z2pRGt4SfNakuM1NrsO089NO4n
Zv+FybjEblYJDUo/2POzN78y8URcVZZr5/D/bb1H+7kKqsrfwRjkPbK6ZL2kWlV+
d98U6jXBlQLsPK/UxsQ7FdMb86NDhSHNX2tYTcbZxEyzOMduYU2jmYaNRGkVKAIH
OBWOQwNiZ9Y6+KNws8+1UhUlGqXJhIK2Q1kXeH1jiu5cpUvzPKjrgppIehQi/JEm
hAWqazm0H90ek8XL2jh4vUUwdNbHqtd+o9KNmOHWfTzZq5VVYvI3RxSEuQs4cU4H
Ur7TNMemCJn4ig==
-----END CERTIFICATE-----