Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.mft
File:                     NTcZltxVWphATH7nEu4pP_YEU4M.mft (raw, json)
Hash identifier:          17S15+miumXi0RUlBwe2AEgjVb2lk4LSOfxA0e1WT/U=
Subject key identifier:   B7:52:CB:AA:CC:AB:E1:47:33:F4:42:46:8D:00:AE:5E:A2:B4:45:A5
Authority key identifier: 35:37:19:96:DC:55:5A:98:40:4C:7E:E7:12:EE:29:3F:F6:04:53:83
Certificate issuer:       /CN=35371996dc555a98404c7ee712ee293ff6045383
Certificate serial:       01901E8F8E528DCE00C45615F7822DA80441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NTcZltxVWphATH7nEu4pP_YEU4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.mft
Manifest number:          0EC6
Signing time:             Sun 16 Jun 2024 01:00:42 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:42 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:42 +0000
Files and hashes:         1: NTcZltxVWphATH7nEu4pP_YEU4M.crl (hash: DfHPbpOa4z/UHQ1rXfEMDYaRJDLyvNDddDfZLEEPGc0=)
                          2: kF7j53zNQa0IJw6u_2sizpqFCRY.roa (hash: RHk/rCmLKZGoNXjvf7LSkqs21Q8ovx/Nalh8TpS/fH8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NTcZltxVWphATH7nEu4pP_YEU4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:8e:52:8d:ce:00:c4:56:15:f7:82:2d:a8:04:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35371996dc555a98404c7ee712ee293ff6045383
        Validity
            Not Before: Jun 16 01:00:42 2024 GMT
            Not After : Jun 17 01:00:42 2024 GMT
        Subject: CN=b752cbaaccabe14733f442468d00ae5ea2b445a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:f2:ec:38:39:02:62:b5:3a:51:e7:3b:e8:
                    f7:ae:75:91:02:e8:45:5b:21:b7:a4:af:a4:cb:2f:
                    f1:44:a1:21:44:b9:df:db:2d:8a:98:36:a8:56:01:
                    98:fb:3c:fe:b7:7f:d9:e6:44:ae:2b:03:55:5c:39:
                    64:2d:5e:d9:46:cc:94:ee:8c:5a:a2:c3:39:64:72:
                    b8:da:b4:3b:05:6e:f7:32:7a:ab:03:2b:ee:cb:bf:
                    4c:ba:7b:d8:b1:0a:bc:15:21:80:92:ff:e3:53:31:
                    a5:5a:f1:8b:1e:51:4f:cb:50:76:2b:f2:c0:0c:b2:
                    da:25:6b:da:89:41:ad:90:3e:b1:af:62:7a:39:68:
                    26:7a:65:29:2e:49:42:c0:87:fe:15:aa:a0:74:18:
                    5e:2d:7c:2e:a1:ab:85:9d:d4:27:95:76:19:10:18:
                    d9:46:45:db:67:a1:cf:cf:e3:98:26:6f:1a:1d:ee:
                    17:77:b0:92:34:94:c4:89:f8:b3:56:9e:00:fe:e8:
                    2a:00:b5:cc:dc:d4:b8:b6:a1:c8:46:d6:4d:d2:6d:
                    6d:8b:8d:1d:e4:5c:46:a2:54:ca:69:4e:c1:95:46:
                    bb:ba:75:01:b8:2a:24:0d:cb:cd:cb:70:45:fe:1b:
                    aa:2e:46:30:18:b3:97:43:d6:7b:6d:ee:cb:cc:c9:
                    d5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:52:CB:AA:CC:AB:E1:47:33:F4:42:46:8D:00:AE:5E:A2:B4:45:A5
            X509v3 Authority Key Identifier:
                keyid:35:37:19:96:DC:55:5A:98:40:4C:7E:E7:12:EE:29:3F:F6:04:53:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTcZltxVWphATH7nEu4pP_YEU4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce9aa9-8793-4863-a059-5a284064fdb6/1/NTcZltxVWphATH7nEu4pP_YEU4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:df:5a:76:df:19:5f:5e:d4:3e:e1:23:09:6f:ca:76:2d:86:
         65:58:ec:72:cc:27:72:aa:7e:f7:86:05:94:f6:e0:68:60:71:
         0c:76:38:49:e2:4d:ed:b0:e6:fa:77:7a:42:17:7c:09:cf:47:
         9f:da:c1:aa:c8:11:69:61:49:63:af:0b:5f:11:7e:d8:6b:9a:
         c3:99:0a:ad:5c:2b:a0:9b:4b:a6:49:1a:cb:0c:b4:91:e8:b4:
         33:f1:97:dc:cf:95:1a:00:0a:d8:d5:b2:f5:8e:27:ea:f0:79:
         11:7f:fb:0e:28:13:5e:a1:7f:2a:11:3f:ba:61:c7:88:ee:7a:
         e2:d8:fd:84:82:bc:44:1d:a1:83:52:e3:41:73:62:52:8a:95:
         ab:b4:54:3d:59:0c:60:4b:9b:27:08:47:4e:de:07:d5:ef:58:
         d2:9d:38:70:3e:6e:41:05:39:ad:ca:97:b1:76:4e:24:02:59:
         58:87:56:6f:c4:ed:01:39:c3:fc:0f:91:1e:b6:87:6a:2f:d0:
         ab:d5:32:8e:5d:ea:c6:8f:00:43:b9:85:d5:06:6d:d9:ff:5c:
         2f:d3:fd:11:03:b8:d1:e9:83:e8:f9:d7:c0:ef:fa:7f:a8:92:
         f0:31:c0:24:ad:ef:60:d8:a8:ef:2a:3b:3d:32:e7:4c:7a:3c:
         74:38:16:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej45Sjc4AxFYV94ItqARBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MzcxOTk2ZGM1NTVhOTg0MDRjN2VlNzEyZWUyOTNmZjYw
NDUzODMwHhcNMjQwNjE2MDEwMDQyWhcNMjQwNjE3MDEwMDQyWjAzMTEwLwYDVQQD
EyhiNzUyY2JhYWNjYWJlMTQ3MzNmNDQyNDY4ZDAwYWU1ZWEyYjQ0NWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkDy7Dg5AmK1OlHnO+j3rnWRAuhF
WyG3pK+kyy/xRKEhRLnf2y2KmDaoVgGY+zz+t3/Z5kSuKwNVXDlkLV7ZRsyU7oxa
osM5ZHK42rQ7BW73MnqrAyvuy79MunvYsQq8FSGAkv/jUzGlWvGLHlFPy1B2K/LA
DLLaJWvaiUGtkD6xr2J6OWgmemUpLklCwIf+FaqgdBheLXwuoauFndQnlXYZEBjZ
RkXbZ6HPz+OYJm8aHe4Xd7CSNJTEifizVp4A/ugqALXM3NS4tqHIRtZN0m1ti40d
5FxGolTKaU7BlUa7unUBuCokDcvNy3BF/huqLkYwGLOXQ9Z7be7LzMnVSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdSy6rMq+FHM/RCRo0Arl6itEWlMB8GA1UdIwQY
MBaAFDU3GZbcVVqYQEx+5xLuKT/2BFODMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlRjWmx0eFZXcGhBVEg3bkV1NHBQX1lFVTRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jZTlhYTktODc5My00ODYzLWEwNTkt
NWEyODQwNjRmZGI2LzEvTlRjWmx0eFZXcGhBVEg3bkV1NHBQX1lFVTRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jZTlhYTktODc5My00ODYzLWEwNTktNWEyODQwNjRmZGI2
LzEvTlRjWmx0eFZXcGhBVEg3bkV1NHBQX1lFVTRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKd9adt8Z
X17UPuEjCW/Kdi2GZVjscswncqp+94YFlPbgaGBxDHY4SeJN7bDm+nd6Qhd8Cc9H
n9rBqsgRaWFJY68LXxF+2Guaw5kKrVwroJtLpkkaywy0kei0M/GX3M+VGgAK2NWy
9Y4n6vB5EX/7DigTXqF/KhE/umHHiO564tj9hIK8RB2hg1LjQXNiUoqVq7RUPVkM
YEubJwhHTt4H1e9Y0p04cD5uQQU5rcqXsXZOJAJZWIdWb8TtATnD/A+RHraHai/Q
q9Uyjl3qxo8AQ7mF1QZt2f9cL9P9EQO40emD6PnXwO/6f6iS8DHAJK3vYNio7yo7
PTLnTHo8dDgWsA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:19:13 2024 by rpki-client on console-ams.rpki-client.org