Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File:                     cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier:          KSdy0K9sOfjm57fjxGzijXa4j3keqZA0RC9Hf6HKS3c=
Subject key identifier:   48:A0:8E:77:C8:C3:D0:0C:BE:2F:1C:D5:46:E5:E7:DC:DA:FE:C6:98
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer:       /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial:       01901DEDB5CA8BB69DB774A26354D5B3CB14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number:          0ACF
Signing time:             Sat 15 Jun 2024 22:03:56 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:56 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:56 +0000
Files and hashes:         1: 3oXFekC71dbYiTujxurKx-YHWso.roa (hash: VWPXv+GIQeVUCi3IpMlwA7/vni0dBxNp6LVyRBmZC24=)
                          2: CygjlYjt9JDZOuRGT_RW5T-u-IQ.roa (hash: 1gIXFNGqnDblnsQWYsTHHAg1nmft3BPAnbK2GrMenc8=)
                          3: VQxI2rYTwnOJsNLPubbk-LDSca0.roa (hash: rOyUrfkJrgZALueMHmreZ4qlAVmnzC4iSOnbiuXLrS0=)
                          4: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: ngK8CY+O7YJqksXZUZcMH9QXKIyumqu3b7yjseElGSc=)
                          5: cvamCBm6JqcMNVV1TxW0n3T6jpg.roa (hash: 2Or52RcfV0O9MIEcz9CEHu1LrZ7bUYGVzj5Xd8zl2Nw=)
                          6: grO34-sNuSdYZ9HGbEUyM-DIa00.roa (hash: JJRK8DYW6SJjWKDjcgxEy1LLF/pDzWgJbXqEqhaV3bM=)
                          7: xbB6ucyKhW1_i_JcmupxaHGhuak.roa (hash: 9nOdxX9jju16uBCzR9UKDRIUXKh6RreqwnTB8OB6Ieo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:b5:ca:8b:b6:9d:b7:74:a2:63:54:d5:b3:cb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
        Validity
            Not Before: Jun 15 22:03:56 2024 GMT
            Not After : Jun 16 22:03:56 2024 GMT
        Subject: CN=48a08e77c8c3d00cbe2f1cd546e5e7dcdafec698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e1:9d:bc:b3:52:03:35:b7:3b:48:24:3c:9c:
                    ce:7f:46:f1:d9:3e:71:68:01:eb:44:b9:14:0c:8d:
                    21:90:97:ba:a1:f9:87:28:7e:d2:91:9d:02:1e:5c:
                    e9:f8:a6:4b:cb:d0:87:49:8f:90:91:f5:f6:8a:e0:
                    e4:e7:bb:8f:5b:92:5e:6f:87:05:91:34:3e:d0:a6:
                    5b:ae:81:f3:b0:74:a9:49:ea:db:a8:ff:d1:62:81:
                    70:f7:d2:d7:27:8f:d9:52:16:71:35:b2:a2:98:69:
                    83:4e:d2:6e:ca:ae:0e:e9:c8:0a:1f:41:de:c5:be:
                    1d:cc:27:a1:99:58:17:cf:ab:ea:fd:56:eb:99:a8:
                    95:45:64:f8:59:5f:09:76:f5:e8:de:50:d1:3c:6d:
                    a9:3b:b3:ed:c4:44:83:55:f2:13:fa:bd:8e:41:7e:
                    00:fc:35:4d:1a:bd:a0:8c:0d:79:e0:c4:10:5f:d9:
                    ee:64:1d:28:48:9b:20:28:6c:77:79:7b:fa:c4:a9:
                    20:fa:a0:be:30:01:04:91:1b:55:9b:f5:e6:fa:18:
                    55:f5:4b:7a:b7:dc:61:dd:c0:de:c8:33:bc:07:c4:
                    78:26:6f:57:39:8b:c7:c2:77:57:54:44:21:8f:19:
                    8d:c5:65:6e:92:f4:6e:c5:2e:64:e3:49:f2:9e:0b:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A0:8E:77:C8:C3:D0:0C:BE:2F:1C:D5:46:E5:E7:DC:DA:FE:C6:98
            X509v3 Authority Key Identifier:
                keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:60:0f:82:21:8c:29:06:1e:2b:03:d0:4f:ef:b5:64:69:99:
         a2:7b:d2:ec:03:56:d2:d1:b5:c8:44:cd:b4:68:eb:55:17:9e:
         a2:2f:8b:0d:94:38:c9:7b:85:e1:5b:e6:a1:5c:c6:72:57:0c:
         ec:88:bc:c9:12:0e:e1:f8:c3:a5:25:4f:72:97:00:48:d2:29:
         dd:8b:6a:7d:eb:b3:75:43:e2:3c:3b:d9:8c:ba:98:a0:a8:6e:
         50:ae:5d:9f:91:dc:40:b8:5a:45:78:55:8f:3e:6a:2d:90:43:
         52:e2:a8:04:fd:c9:b0:82:7d:9c:f2:f2:46:1c:42:f1:2e:ff:
         0b:45:a7:93:69:76:43:5b:85:24:79:f0:bf:7c:60:9e:f1:a9:
         c6:dc:04:7d:1a:79:e0:5c:ec:a7:ed:ba:06:3c:f0:7f:45:34:
         4a:b3:03:e2:31:84:99:42:76:9b:cf:0d:ff:a0:9a:56:07:1b:
         21:59:f7:9d:bf:55:6b:0f:e3:33:cd:67:1b:eb:f4:d9:4d:5d:
         78:56:8b:94:ca:01:75:db:59:52:59:ad:ea:21:3d:61:d5:00:
         c4:dd:58:d5:ae:60:03:59:68:60:49:00:fb:d4:ad:25:53:fc:
         6f:5b:30:ab:16:c9:47:2c:e2:7c:ce:59:12:f6:87:1d:81:b4:
         70:e6:bb:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7bXKi7adt3SiY1TVs8sUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODQ3ZjgyMjE4OTdkNmU5NTJlODZlYTJjMzM5YWJhYWNj
MTMxZjUwHhcNMjQwNjE1MjIwMzU2WhcNMjQwNjE2MjIwMzU2WjAzMTEwLwYDVQQD
Eyg0OGEwOGU3N2M4YzNkMDBjYmUyZjFjZDU0NmU1ZTdkY2RhZmVjNjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOGdvLNSAzW3O0gkPJzOf0bx2T5x
aAHrRLkUDI0hkJe6ofmHKH7SkZ0CHlzp+KZLy9CHSY+QkfX2iuDk57uPW5Jeb4cF
kTQ+0KZbroHzsHSpSerbqP/RYoFw99LXJ4/ZUhZxNbKimGmDTtJuyq4O6cgKH0He
xb4dzCehmVgXz6vq/VbrmaiVRWT4WV8JdvXo3lDRPG2pO7PtxESDVfIT+r2OQX4A
/DVNGr2gjA154MQQX9nuZB0oSJsgKGx3eXv6xKkg+qC+MAEEkRtVm/Xm+hhV9Ut6
t9xh3cDeyDO8B8R4Jm9XOYvHwndXVEQhjxmNxWVukvRuxS5k40nyngvFpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEigjnfIw9AMvi8c1Ubl59za/saYMB8GA1UdIwQY
MBaAFHCEf4IhiX1ulS6G6iwzmrqswTH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgt
NmU4Nzg0YTdhZDA5LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgtNmU4Nzg0YTdhZDA5
LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2APgiGM
KQYeKwPQT++1ZGmZonvS7ANW0tG1yETNtGjrVReeoi+LDZQ4yXuF4VvmoVzGclcM
7Ii8yRIO4fjDpSVPcpcASNIp3YtqfeuzdUPiPDvZjLqYoKhuUK5dn5HcQLhaRXhV
jz5qLZBDUuKoBP3JsIJ9nPLyRhxC8S7/C0Wnk2l2Q1uFJHnwv3xgnvGpxtwEfRp5
4Fzsp+26Bjzwf0U0SrMD4jGEmUJ2m88N/6CaVgcbIVn3nb9Vaw/jM81nG+v02U1d
eFaLlMoBddtZUlmt6iE9YdUAxN1Y1a5gA1loYEkA+9StJVP8b1swqxbJRyzifM5Z
EvaHHYG0cOa7KQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:57:49 2024 by rpki-client on console-fra.rpki-client.org