Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
File:                     qexXvIRk_sLpobCY_840whqvnKY.mft (raw, json)
Hash identifier:          2nJUfhSR4nBKlTxD/WarNoFotX1Yx9De6oJ+p11J40E=
Subject key identifier:   C1:09:39:B9:AB:5A:F6:6A:7D:9E:C6:41:CF:8F:04:6F:06:AF:0A:DC
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Certificate issuer:       /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial:       01901E900E643DF1BDEA391810D85081E6AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
Manifest number:          11CA
Signing time:             Sun 16 Jun 2024 01:01:15 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:15 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:15 +0000
Files and hashes:         1: AvX0VH2eKLcaFb8br_UqZavPGyQ.roa (hash: PbQRRKnXo9gFfubt1ZmPsfg7jFepZHmJTJ2DTV8PnZs=)
                          2: pdeX3UTRJYihda8ucxvyOvEBlEg.roa (hash: nt1CXZ5oduz7ro4Qx0MTGK9Gk6hfpb37Qgi5PeyvT1s=)
                          3: qEMDGPH0rbaT5wdIIXRwbHQRsRE.roa (hash: xOPdyDIOiAVGZocEaTutEY0vyiydaUQPKgkFPNuY5WA=)
                          4: qexXvIRk_sLpobCY_840whqvnKY.crl (hash: k/2x3mKAWc8dtrkLR6wHbaaoez80Lz+f/PGhAyXKMEk=)
                          5: tp5CnE7seLBnK2P8uYvYxeOLfcQ.roa (hash: QXV7959LB9Ph1leJkJnEs0ypKmjIP7PsdPmL/ofEugo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:0e:64:3d:f1:bd:ea:39:18:10:d8:50:81:e6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
        Validity
            Not Before: Jun 16 01:01:15 2024 GMT
            Not After : Jun 17 01:01:15 2024 GMT
        Subject: CN=c10939b9ab5af66a7d9ec641cf8f046f06af0adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:88:b7:b4:35:15:44:5a:f0:63:50:84:88:83:
                    f0:90:e7:b8:f8:0b:ee:6a:2b:57:50:e7:6e:d2:a6:
                    99:28:d8:18:38:0a:54:cf:29:9e:67:42:46:1e:f2:
                    79:f2:20:86:fd:3f:02:24:58:1a:3f:6c:77:e4:13:
                    92:ce:11:b4:ea:ef:91:1b:1d:0f:f2:b5:44:b2:bc:
                    a8:a4:25:25:56:a0:ae:8a:13:f9:06:66:3c:51:da:
                    8d:9d:30:19:ca:6c:6e:67:d9:be:5a:fd:9f:b4:cb:
                    cb:03:3e:a0:08:91:a6:4a:0c:07:e7:5b:f2:f6:f2:
                    10:6f:2f:44:47:29:36:cf:90:99:42:5f:40:c3:fe:
                    fc:5a:f9:3a:6d:87:6f:f0:13:6c:69:da:4a:d9:71:
                    c8:96:27:88:ff:fd:ac:e6:7b:f5:2c:a4:2e:d2:a6:
                    87:e6:64:7b:61:8b:05:e9:6e:74:c8:28:47:0f:76:
                    ba:10:bf:b2:d6:02:43:53:4d:48:60:8e:b4:fb:e7:
                    50:6d:ee:ba:81:d3:10:27:20:e6:8a:15:cd:40:09:
                    ce:c1:45:33:a2:e4:17:a8:e6:f5:04:d9:ad:a7:8f:
                    42:80:36:26:95:d8:d5:77:96:15:c5:6e:d8:0e:25:
                    4b:f8:02:63:a2:e2:f2:3c:42:c0:87:f0:2d:ff:15:
                    1b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:09:39:B9:AB:5A:F6:6A:7D:9E:C6:41:CF:8F:04:6F:06:AF:0A:DC
            X509v3 Authority Key Identifier:
                keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5f:9a:1f:05:b4:3b:e3:92:01:47:b3:7b:05:71:81:12:ad:
         8a:ec:d2:01:80:bb:07:fc:b6:b0:11:28:8e:f1:de:3d:fe:b6:
         41:15:85:4d:6e:85:74:3f:9c:bf:1b:9f:82:b9:f0:36:e0:c4:
         0e:0c:7c:44:c5:b1:f9:4b:96:cc:74:e2:eb:a6:d5:f3:18:e1:
         f9:33:cd:91:d3:af:d1:e7:c5:9c:81:7a:e4:22:bd:07:48:9e:
         e6:84:04:24:43:ff:76:d3:05:a0:de:95:dc:7c:13:82:92:2b:
         85:8c:56:0b:57:9a:14:ff:0a:a9:aa:3b:db:27:6b:55:f2:69:
         7d:49:16:e8:70:29:0d:fa:9a:64:0a:98:72:41:07:6b:da:d1:
         ad:a1:d0:8d:84:7b:3f:ab:e4:08:3d:c6:04:55:66:fb:06:8e:
         4a:2c:fb:fd:39:40:de:5c:1b:37:e1:32:29:3a:94:07:cd:30:
         16:32:12:bf:c4:b6:38:79:15:20:8d:e1:41:a3:43:10:bb:c3:
         d1:0d:3c:76:46:40:94:3c:5b:ec:55:28:ff:66:64:b8:64:54:
         ad:27:ae:dc:4c:a4:fc:e6:92:f0:57:4f:aa:cd:ae:b0:e2:7f:
         1e:1f:14:ff:41:cc:62:67:46:6c:c8:f1:29:48:a0:64:4a:da:
         2a:4f:4e:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAekA5kPfG96jkYENhQgeavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZWM1N2JjODQ2NGZlYzJlOWExYjA5OGZmY2UzNGMyMWFh
ZjljYTYwHhcNMjQwNjE2MDEwMTE1WhcNMjQwNjE3MDEwMTE1WjAzMTEwLwYDVQQD
EyhjMTA5MzliOWFiNWFmNjZhN2Q5ZWM2NDFjZjhmMDQ2ZjA2YWYwYWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ii3tDUVRFrwY1CEiIPwkOe4+Avu
aitXUOdu0qaZKNgYOApUzymeZ0JGHvJ58iCG/T8CJFgaP2x35BOSzhG06u+RGx0P
8rVEsryopCUlVqCuihP5BmY8UdqNnTAZymxuZ9m+Wv2ftMvLAz6gCJGmSgwH51vy
9vIQby9ERyk2z5CZQl9Aw/78Wvk6bYdv8BNsadpK2XHIlieI//2s5nv1LKQu0qaH
5mR7YYsF6W50yChHD3a6EL+y1gJDU01IYI60++dQbe66gdMQJyDmihXNQAnOwUUz
ouQXqOb1BNmtp49CgDYmldjVd5YVxW7YDiVL+AJjouLyPELAh/At/xUbbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEJObmrWvZqfZ7GQc+PBG8GrwrcMB8GA1UdIwQY
MBaAFKnsV7yEZP7C6aGwmP/ONMIar5ymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMt
MTlhM2M1NjQ5YjU3LzEvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMtMTlhM2M1NjQ5YjU3
LzEvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHl+aHwW0
O+OSAUezewVxgRKtiuzSAYC7B/y2sBEojvHePf62QRWFTW6FdD+cvxufgrnwNuDE
Dgx8RMWx+UuWzHTi66bV8xjh+TPNkdOv0efFnIF65CK9B0ie5oQEJEP/dtMFoN6V
3HwTgpIrhYxWC1eaFP8Kqao72ydrVfJpfUkW6HApDfqaZAqYckEHa9rRraHQjYR7
P6vkCD3GBFVm+waOSiz7/TlA3lwbN+EyKTqUB80wFjISv8S2OHkVII3hQaNDELvD
0Q08dkZAlDxb7FUo/2ZkuGRUrSeu3Eyk/OaS8FdPqs2usOJ/Hh8U/0HMYmdGbMjx
KUigZEraKk9Ohw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:20:26 2024 by rpki-client on console-ams.rpki-client.org