Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
File:                     n7edKYEQtvsxkwHrwivxgOcFR5Y.mft (raw, json)
Hash identifier:          s5WTjT5ucUOjO9Wn+I/qtZOu9N5QyLrdrazbd/XjnsQ=
Subject key identifier:   0C:BF:97:EE:77:C9:1D:B5:2C:D0:30:03:61:F9:AF:17:3B:CF:B5:5C
Authority key identifier: 9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
Certificate issuer:       /CN=9fb79d298110b6fb319301ebc22bf180e7054796
Certificate serial:       01904868FD7A92C28CE0408597DC839F68F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
Manifest number:          11DB
Signing time:             Mon 24 Jun 2024 04:02:38 +0000
Manifest this update:     Mon 24 Jun 2024 04:02:38 +0000
Manifest next update:     Tue 25 Jun 2024 04:02:38 +0000
Files and hashes:         1: n7edKYEQtvsxkwHrwivxgOcFR5Y.crl (hash: tYaRiSi9HbdLfhqqspnnklGm6HDdgss8xsgoUzidDJY=)
                          2: vXjLRncvyNJJ_xlMr6_DUsnn5Hw.roa (hash: 3JzBnDR7XCTCWkPoIOh1YyVtu7gXSUa+tOBYVAqA5KM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:fd:7a:92:c2:8c:e0:40:85:97:dc:83:9f:68:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb79d298110b6fb319301ebc22bf180e7054796
        Validity
            Not Before: Jun 24 04:02:38 2024 GMT
            Not After : Jun 25 04:02:38 2024 GMT
        Subject: CN=0cbf97ee77c91db52cd0300361f9af173bcfb55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:02:5e:65:41:ad:72:cf:48:bc:84:be:43:59:
                    7c:7d:bf:47:d3:d0:83:15:b8:40:ec:6a:ff:01:63:
                    56:19:0d:8f:ca:9f:91:ce:3f:2d:a1:f0:72:20:bd:
                    bd:4e:37:8e:b5:75:55:6b:27:96:4e:5c:03:50:41:
                    b8:18:a3:9c:a6:3f:0b:2e:5a:04:72:9d:ff:cd:c5:
                    44:9e:35:26:f0:9d:32:10:bc:2e:63:54:f7:f1:ae:
                    5f:fc:02:80:00:ce:8e:ad:a0:00:6f:0c:fe:2d:f5:
                    99:c6:83:76:da:4a:35:7e:5a:e4:6f:d1:c5:e8:52:
                    96:0d:0c:45:c8:49:d0:06:96:13:e1:cc:55:f3:81:
                    9a:2a:a7:e4:ee:b8:f5:a5:50:03:69:bd:66:0f:4e:
                    e1:09:cc:3a:c9:85:02:6e:ee:23:19:b3:66:14:5f:
                    1d:c8:db:64:cc:02:f3:19:d4:b9:83:b1:70:86:00:
                    3b:07:fb:b9:c8:7e:08:a0:a8:1a:0c:99:3a:01:20:
                    cc:23:40:09:29:d8:b7:58:79:86:3b:bf:3b:05:4a:
                    24:2e:7c:c9:58:4e:ce:77:8f:b8:76:12:66:66:c7:
                    51:79:2b:54:c2:23:52:55:38:8f:31:d5:60:83:57:
                    83:2f:e4:19:da:82:a8:2e:dd:08:06:d4:1f:a2:ab:
                    aa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BF:97:EE:77:C9:1D:B5:2C:D0:30:03:61:F9:AF:17:3B:CF:B5:5C
            X509v3 Authority Key Identifier:
                keyid:9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0a:e0:82:1a:1c:a1:38:77:12:a4:d0:a8:62:a7:0e:89:45:
         c8:f3:b7:03:4a:ea:5e:89:64:3c:0c:01:d3:f6:ef:f5:92:3b:
         03:b0:47:16:00:61:ef:b8:dc:0d:e8:50:6d:a5:b3:dd:73:c2:
         c6:03:d3:34:ee:9c:f9:b3:9e:94:43:81:ec:9f:ab:c9:85:21:
         f0:4a:da:4b:c8:e1:6f:7c:8e:97:2d:59:c0:cb:18:b4:48:38:
         f9:4c:52:17:d7:fd:fb:d9:d1:6d:27:e1:09:6a:63:33:8c:b0:
         a7:dc:7d:04:e5:a0:5b:5d:1d:12:4b:8a:25:9a:b9:cb:2e:e3:
         37:b4:bc:3c:de:18:44:ad:3c:fa:cd:64:84:f5:7f:75:98:49:
         87:e5:25:92:6f:c3:1a:9e:6e:97:5a:76:f2:59:9d:c0:eb:64:
         b0:26:78:46:77:1d:81:7e:fe:f9:70:85:5c:de:3f:0b:c7:f4:
         03:39:e5:0f:3a:c5:ac:60:06:21:30:c0:cd:ef:7e:62:03:76:
         a4:df:c5:1f:c6:cd:85:7c:44:cf:63:3b:15:2d:2a:5d:fd:dd:
         0c:87:92:7c:be:7c:1e:98:e2:19:8c:6d:6a:06:2d:96:3a:8c:
         68:41:a8:43:7a:93:c7:fb:bf:b5:bd:ed:29:46:5c:b8:83:30:
         46:2c:a2:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBIaP16ksKM4ECFl9yDn2jzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYjc5ZDI5ODExMGI2ZmIzMTkzMDFlYmMyMmJmMTgwZTcw
NTQ3OTYwHhcNMjQwNjI0MDQwMjM4WhcNMjQwNjI1MDQwMjM4WjAzMTEwLwYDVQQD
EygwY2JmOTdlZTc3YzkxZGI1MmNkMDMwMDM2MWY5YWYxNzNiY2ZiNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QJeZUGtcs9IvIS+Q1l8fb9H09CD
FbhA7Gr/AWNWGQ2Pyp+Rzj8tofByIL29TjeOtXVVayeWTlwDUEG4GKOcpj8LLloE
cp3/zcVEnjUm8J0yELwuY1T38a5f/AKAAM6OraAAbwz+LfWZxoN22ko1flrkb9HF
6FKWDQxFyEnQBpYT4cxV84GaKqfk7rj1pVADab1mD07hCcw6yYUCbu4jGbNmFF8d
yNtkzALzGdS5g7FwhgA7B/u5yH4IoKgaDJk6ASDMI0AJKdi3WHmGO787BUokLnzJ
WE7Od4+4dhJmZsdReStUwiNSVTiPMdVgg1eDL+QZ2oKoLt0IBtQfoquqxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAy/l+53yR21LNAwA2H5rxc7z7VcMB8GA1UdIwQY
MBaAFJ+3nSmBELb7MZMB68Ir8YDnBUeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lODVhNDEtYjNmZi00ZmNkLTgwYjIt
NGFhYmVjMGQzMGEzLzEvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lODVhNDEtYjNmZi00ZmNkLTgwYjItNGFhYmVjMGQzMGEz
LzEvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwrgghoc
oTh3EqTQqGKnDolFyPO3A0rqXolkPAwB0/bv9ZI7A7BHFgBh77jcDehQbaWz3XPC
xgPTNO6c+bOelEOB7J+ryYUh8EraS8jhb3yOly1ZwMsYtEg4+UxSF9f9+9nRbSfh
CWpjM4ywp9x9BOWgW10dEkuKJZq5yy7jN7S8PN4YRK08+s1khPV/dZhJh+Ulkm/D
Gp5ul1p28lmdwOtksCZ4RncdgX7++XCFXN4/C8f0AznlDzrFrGAGITDAze9+YgN2
pN/FH8bNhXxEz2M7FS0qXf3dDIeSfL58HpjiGYxtagYtljqMaEGoQ3qTx/u/tb3t
KUZcuIMwRiyiEA==
-----END CERTIFICATE-----
Generated at Mon Jun 24 08:58:38 2024 by rpki-client on console-ams.rpki-client.org