Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
File:                     cFo7sRdTjbbbnFz9WnlL899pfCc.mft (raw, json)
Hash identifier:          wIdfzYTNmCsraHHu1zo/kzp8ZzknOFC2nZW04mK29B8=
Subject key identifier:   41:17:51:9B:F2:AB:46:1C:73:43:8C:5F:88:E8:89:C6:C0:7C:01:3C
Authority key identifier: 70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
Certificate issuer:       /CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Certificate serial:       0190452F7457C5FB6D0D8C30AB5C79E46E12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
Manifest number:          11DD
Signing time:             Sun 23 Jun 2024 13:00:56 +0000
Manifest this update:     Sun 23 Jun 2024 13:00:56 +0000
Manifest next update:     Mon 24 Jun 2024 13:00:56 +0000
Files and hashes:         1: L57TXR7i2dvwTWm3WnO_yvRegMc.roa (hash: RKBdKSNmUyHATc6qlKI2C2pZKqLUwriWls6EXRqZThY=)
                          2: cFo7sRdTjbbbnFz9WnlL899pfCc.crl (hash: zvmOjEuRN4Bwr0KxMxrxVGD4Wv2VLpTHikBkNVUJwYU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:74:57:c5:fb:6d:0d:8c:30:ab:5c:79:e4:6e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
        Validity
            Not Before: Jun 23 13:00:56 2024 GMT
            Not After : Jun 24 13:00:56 2024 GMT
        Subject: CN=4117519bf2ab461c73438c5f88e889c6c07c013c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:7d:ef:bf:fc:d8:ad:f5:a0:cf:48:0b:a0:
                    a8:2b:47:13:e8:d0:6a:ba:0c:f2:c0:15:70:f6:f0:
                    c8:ed:91:46:76:14:a2:fe:14:e5:d4:5c:3d:5d:de:
                    d5:ae:34:27:70:c3:e3:6a:3a:12:5e:62:04:79:e4:
                    59:5e:e4:21:cb:4a:ef:8a:5b:18:59:2d:ef:43:93:
                    84:7a:be:a6:d9:a2:5b:0d:a9:82:b8:e3:ba:88:d5:
                    10:a3:9f:1f:87:f3:d0:3f:6e:53:31:06:17:ab:78:
                    71:3e:bf:5f:0d:4f:0c:74:88:f7:1d:9b:42:f3:b1:
                    99:58:18:80:b4:a0:dc:12:81:6a:64:14:09:dd:e5:
                    e4:80:1c:62:38:da:d9:ad:7b:d4:7e:c0:41:c0:db:
                    12:1d:ae:cc:27:8a:3d:5c:23:cd:65:74:36:5a:28:
                    bc:9d:24:9b:1a:1e:43:52:45:34:a8:50:4f:24:38:
                    b7:7f:3d:2e:e8:06:fb:ba:18:8c:42:09:32:7c:5e:
                    01:2a:e2:33:51:06:5e:86:fa:14:7d:23:53:db:b8:
                    90:fa:2a:4b:fa:69:a4:46:6a:c4:28:02:2b:74:71:
                    8a:05:86:27:7c:c5:e0:23:3f:79:d2:9d:88:62:3e:
                    02:ac:aa:44:4e:8e:6d:11:52:dd:90:bd:21:e2:49:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:17:51:9B:F2:AB:46:1C:73:43:8C:5F:88:E8:89:C6:C0:7C:01:3C
            X509v3 Authority Key Identifier:
                keyid:70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a7:99:55:22:5a:90:ed:f6:ae:24:c5:64:84:8f:21:d9:36:
         53:df:d8:e0:ff:eb:e3:bf:72:2e:ac:ce:d8:88:65:23:38:a2:
         1e:43:a8:c4:19:a1:bf:fb:9b:42:29:ed:bf:a2:13:7a:c3:c6:
         a8:90:37:a4:6d:56:1d:d4:9e:14:28:c6:46:63:84:c9:f7:37:
         f6:18:7e:fb:56:0a:c7:7c:d3:17:9c:4e:c2:20:35:e8:0d:bd:
         7c:7e:a3:20:11:18:9f:a6:53:59:45:43:7a:b5:4a:9a:4f:99:
         2c:73:1d:55:64:3e:e1:4d:2d:c5:dc:7c:46:34:16:d2:08:ed:
         26:bf:b6:e3:17:b3:13:34:ee:b4:8b:02:e8:65:ce:1a:4b:eb:
         59:47:57:4c:96:f9:da:22:d3:0f:cd:a9:ae:02:c9:2f:40:1e:
         d8:f0:12:eb:32:47:5a:8d:1c:92:6f:cd:82:7d:6e:73:ea:f9:
         cc:5a:c1:f7:40:d3:aa:fb:26:b9:b9:3e:d1:eb:3c:c6:59:c3:
         67:67:af:12:f9:21:3e:47:b6:3e:87:3a:c9:a1:c4:9e:9b:e4:
         1a:91:9f:e4:5e:1a:73:6b:b6:a9:28:ba:7d:33:23:bf:6f:30:
         f2:df:c2:e6:00:5f:b2:8c:ad:a6:6e:7c:b6:d9:7b:5a:f2:d7:
         87:22:5f:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFL3RXxfttDYwwq1x55G4SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNWEzYmIxMTc1MzhkYjZkYjljNWNmZDVhNzk0YmYzZGY2
OTdjMjcwHhcNMjQwNjIzMTMwMDU2WhcNMjQwNjI0MTMwMDU2WjAzMTEwLwYDVQQD
Eyg0MTE3NTE5YmYyYWI0NjFjNzM0MzhjNWY4OGU4ODljNmMwN2MwMTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdt977/82K31oM9IC6CoK0cT6NBq
ugzywBVw9vDI7ZFGdhSi/hTl1Fw9Xd7VrjQncMPjajoSXmIEeeRZXuQhy0rvilsY
WS3vQ5OEer6m2aJbDamCuOO6iNUQo58fh/PQP25TMQYXq3hxPr9fDU8MdIj3HZtC
87GZWBiAtKDcEoFqZBQJ3eXkgBxiONrZrXvUfsBBwNsSHa7MJ4o9XCPNZXQ2Wii8
nSSbGh5DUkU0qFBPJDi3fz0u6Ab7uhiMQgkyfF4BKuIzUQZehvoUfSNT27iQ+ipL
+mmkRmrEKAIrdHGKBYYnfMXgIz950p2IYj4CrKpETo5tEVLdkL0h4knaNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEXUZvyq0Ycc0OMX4joicbAfAE8MB8GA1UdIwQY
MBaAFHBaO7EXU42225xc/Vp5S/PfaXwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0ZvN3NSZFRqYmJibkZ6OVdubEw4OTlwZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zZjdhYjgtNmIzOS00MzYyLWEyN2Ut
Nzc2NjAzNzFhMWVjLzEvY0ZvN3NSZFRqYmJibkZ6OVdubEw4OTlwZkNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zZjdhYjgtNmIzOS00MzYyLWEyN2UtNzc2NjAzNzFhMWVj
LzEvY0ZvN3NSZFRqYmJibkZ6OVdubEw4OTlwZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqeZVSJa
kO32riTFZISPIdk2U9/Y4P/r479yLqzO2IhlIziiHkOoxBmhv/ubQintv6ITesPG
qJA3pG1WHdSeFCjGRmOEyfc39hh++1YKx3zTF5xOwiA16A29fH6jIBEYn6ZTWUVD
erVKmk+ZLHMdVWQ+4U0txdx8RjQW0gjtJr+24xezEzTutIsC6GXOGkvrWUdXTJb5
2iLTD82prgLJL0Ae2PAS6zJHWo0ckm/Ngn1uc+r5zFrB90DTqvsmubk+0es8xlnD
Z2evEvkhPke2Poc6yaHEnpvkGpGf5F4ac2u2qSi6fTMjv28w8t/C5gBfsoytpm58
ttl7WvLXhyJfqw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:09:06 2024 by rpki-client on console-ams.rpki-client.org