Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
File:                     qEkgTKTw605W4I4Jn-N4XOBv_qo.mft (raw, json)
Hash identifier:          uMIMt4fPbEkopm0iV8F33Syhc0yI1bP7uBsftPGmOQ0=
Subject key identifier:   01:64:95:6A:D7:55:EA:29:49:EE:B0:DD:82:A5:A6:63:48:77:4D:93
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Certificate issuer:       /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial:       01901E90172E7347F385B4ED66A6E91F01F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
Manifest number:          11F2
Signing time:             Sun 16 Jun 2024 01:01:17 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:17 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:17 +0000
Files and hashes:         1: Cy-8WRK7YZO2QsNFsrvphPiRlt4.roa (hash: vIGy0z8pJSFLUXODlugdQso1wyanFzfyvZMynlpzPng=)
                          2: PUTpnKDEPs55Qpi7jMDGver3e_8.roa (hash: GyN7Qxzxjl57af1HwgoJ8J1StKInZYL2l0mSHj+sdrI=)
                          3: TOZEauddtNHBY_uGc-b48v5eA5w.roa (hash: I15vGIK6PKC5esveCFxvsvReA+eHtjyzBdSZ7aWwvq8=)
                          4: hO_nI-0mjGBNZ5X5wOaTQWcqDiQ.roa (hash: 0cqrMQ3Nsy2bYiAYR5wkU5Y1bmfQAGQ+chDRY2PzN8Y=)
                          5: qEkgTKTw605W4I4Jn-N4XOBv_qo.crl (hash: +MMEoYLolfh9TqfO/M+GyCGqFjaf7PjaNXjzR/y88Os=)
                          6: zU1xXkUz1FIoPofbU1uq56EnLnE.roa (hash: jTUpbKlDLG+mBAUECt/53wUspIeu5RGngcVYhAJKggE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:17:2e:73:47:f3:85:b4:ed:66:a6:e9:1f:01:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
        Validity
            Not Before: Jun 16 01:01:17 2024 GMT
            Not After : Jun 17 01:01:17 2024 GMT
        Subject: CN=0164956ad755ea2949eeb0dd82a5a66348774d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:5d:18:c9:69:b8:4a:82:2c:e4:be:e6:4c:
                    15:02:a0:f3:d2:68:e1:8b:30:60:e9:5a:66:12:73:
                    2a:2c:e5:b9:30:dd:2c:3b:9b:c7:01:26:ca:f2:36:
                    04:34:12:eb:27:1c:3a:09:95:60:bf:dd:ed:7c:a5:
                    55:7e:29:7c:55:20:4e:75:e8:e3:be:21:3e:1b:6e:
                    b3:2a:aa:77:0c:07:ca:b6:52:60:5a:b6:5e:71:bd:
                    20:40:d6:bf:59:e3:4d:f5:38:fb:c9:6b:58:b5:d0:
                    f9:ff:33:c9:d0:c2:b4:de:e1:84:cb:82:95:26:38:
                    cc:05:68:96:2c:c7:05:b9:ec:88:8d:16:51:27:53:
                    d3:cc:e9:48:15:36:6b:16:38:f9:16:09:d9:23:36:
                    87:ab:eb:e5:de:47:a9:9f:29:c6:a2:7d:9f:56:7b:
                    11:b6:0e:7c:f9:44:21:c9:a7:ea:92:e6:51:bf:8b:
                    66:df:29:6c:14:a1:fd:58:51:c7:24:de:9f:8b:9c:
                    5b:b7:0c:d5:31:79:10:50:61:48:27:b9:4b:db:26:
                    53:2c:97:2d:8f:0b:34:6a:23:9e:03:73:f0:23:de:
                    93:e4:53:a7:60:74:ac:5d:a8:1e:ce:73:46:5c:2f:
                    ef:e1:4b:02:48:1f:c7:41:34:bd:a8:0a:29:42:c6:
                    6f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:64:95:6A:D7:55:EA:29:49:EE:B0:DD:82:A5:A6:63:48:77:4D:93
            X509v3 Authority Key Identifier:
                keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:49:ba:95:1c:f7:5a:e1:81:9a:aa:43:1b:36:73:35:b1:28:
         da:b0:70:71:b0:ba:b3:e9:40:cb:85:86:c5:4b:5a:a5:49:5b:
         37:01:57:55:65:2d:57:8c:fe:32:53:dc:2e:01:22:85:eb:1b:
         f6:e0:1a:79:21:6b:b6:60:20:7e:aa:1a:93:36:d8:b8:6e:59:
         91:46:8e:6d:9a:ee:fc:58:88:9f:cd:3c:06:ac:84:15:03:b6:
         9f:32:5f:73:9b:6d:c8:d8:2c:61:78:a9:3e:39:f9:0b:4a:bc:
         1a:2e:db:51:eb:ba:60:24:26:96:f8:d4:16:a5:15:ad:35:20:
         23:f0:50:ff:f9:e7:63:f2:54:7e:19:b8:c7:9d:5e:33:00:42:
         46:c9:a7:f1:7f:83:20:ce:a2:e1:97:01:d3:5b:2c:7b:96:a4:
         15:e5:5d:71:e9:94:5c:58:d0:82:8b:b0:d7:e0:4c:85:98:0a:
         d0:a6:62:83:09:8c:d5:ed:ae:91:cd:84:c0:33:14:d3:8d:90:
         d6:a7:0a:1f:6d:93:c2:8b:2b:7a:c4:62:62:35:e1:1a:e5:8d:
         60:c9:96:ca:fe:5a:0b:e8:b7:23:a5:3b:0d:10:60:48:1c:42:
         f9:e6:14:1d:65:7a:dd:c7:37:55:0c:e8:7f:90:f5:e0:2d:7c:
         07:8e:33:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAekBcuc0fzhbTtZqbpHwHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDkyMDRjYTRmMGViNGU1NmUwOGUwOTlmZTM3ODVjZTA2
ZmZlYWEwHhcNMjQwNjE2MDEwMTE3WhcNMjQwNjE3MDEwMTE3WjAzMTEwLwYDVQQD
EygwMTY0OTU2YWQ3NTVlYTI5NDllZWIwZGQ4MmE1YTY2MzQ4Nzc0ZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7ZdGMlpuEqCLOS+5kwVAqDz0mjh
izBg6VpmEnMqLOW5MN0sO5vHASbK8jYENBLrJxw6CZVgv93tfKVVfil8VSBOdejj
viE+G26zKqp3DAfKtlJgWrZecb0gQNa/WeNN9Tj7yWtYtdD5/zPJ0MK03uGEy4KV
JjjMBWiWLMcFueyIjRZRJ1PTzOlIFTZrFjj5FgnZIzaHq+vl3kepnynGon2fVnsR
tg58+UQhyafqkuZRv4tm3ylsFKH9WFHHJN6fi5xbtwzVMXkQUGFIJ7lL2yZTLJct
jws0aiOeA3PwI96T5FOnYHSsXageznNGXC/v4UsCSB/HQTS9qAopQsZv0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFklWrXVeopSe6w3YKlpmNId02TMB8GA1UdIwQY
MBaAFKhJIEyk8OtOVuCOCZ/jeFzgb/6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYt
OWNjYmIwODQyOGZhLzEvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYtOWNjYmIwODQyOGZh
LzEvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0m6lRz3
WuGBmqpDGzZzNbEo2rBwcbC6s+lAy4WGxUtapUlbNwFXVWUtV4z+MlPcLgEihesb
9uAaeSFrtmAgfqoakzbYuG5ZkUaObZru/FiIn808BqyEFQO2nzJfc5ttyNgsYXip
Pjn5C0q8Gi7bUeu6YCQmlvjUFqUVrTUgI/BQ//nnY/JUfhm4x51eMwBCRsmn8X+D
IM6i4ZcB01sse5akFeVdcemUXFjQgouw1+BMhZgK0KZigwmM1e2ukc2EwDMU042Q
1qcKH22TwosresRiYjXhGuWNYMmWyv5aC+i3I6U7DRBgSBxC+eYUHWV63cc3VQzo
f5D14C18B44zVA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:32:04 2024 by rpki-client on console-ams.rpki-client.org