Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File:                     xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier:          YoUGxu2cyiNXUv4MYJ3SCpfwyebbfvfZEF87rxzSe3s=
Subject key identifier:   9B:46:FA:7F:E2:95:B3:37:6A:85:51:2B:D4:95:D5:DF:DB:72:74:14
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer:       /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial:       01901E592055B6F41A662110A6214372BCB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number:          0A4C
Signing time:             Sun 16 Jun 2024 00:01:15 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:15 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:15 +0000
Files and hashes:         1: 7ZFsYZFbe0cnijOSWcniGtb8QI0.roa (hash: RtsQu4mmc72MHXjy9ZMdAd+AnBIJb9fsOY+w7kPyjsU=)
                          2: RuJOsA9B2jGQcCmOGcCT6SfLgY0.roa (hash: 7EzuJsM6uuwc1hwP2klZTrCKeYh/VFJZZ8nqoeZQkp0=)
                          3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: NhSn4OUu0Uf9WjjntAxhzR4KQ0nGFys5Kn++DQImJyI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:20:55:b6:f4:1a:66:21:10:a6:21:43:72:bc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
        Validity
            Not Before: Jun 16 00:01:15 2024 GMT
            Not After : Jun 17 00:01:15 2024 GMT
        Subject: CN=9b46fa7fe295b3376a85512bd495d5dfdb727414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:cf:f5:e9:3e:57:5b:3e:81:7c:00:8e:1d:
                    d5:7f:fc:8a:03:48:3e:27:09:87:34:f2:96:59:ff:
                    0a:60:a3:eb:11:62:c8:f5:1e:e9:ef:09:6f:46:a3:
                    f4:de:6e:dd:fc:0e:9f:fe:35:e0:63:32:7c:41:c8:
                    67:d2:26:f6:ec:20:67:25:94:7c:38:ed:2d:53:29:
                    11:50:48:20:7c:da:de:30:9c:16:58:b3:b4:08:f2:
                    86:be:4d:f6:4d:9b:0e:f0:d2:f5:ca:1e:97:e4:52:
                    2f:f5:91:8f:58:24:75:97:1b:b4:6a:64:1d:90:84:
                    cf:87:6f:69:68:20:af:06:3c:bc:f5:97:8d:ea:2c:
                    b8:91:ed:31:cd:cf:9f:96:80:6c:fa:58:bb:8e:b8:
                    14:57:a8:62:01:25:c2:58:9f:5f:cb:1d:91:89:57:
                    c1:78:cc:df:27:25:38:79:21:2b:c1:83:0b:a7:d8:
                    f2:9c:43:e3:63:b5:70:3f:c0:73:08:74:e2:32:8e:
                    cf:9a:08:c7:90:b8:cb:6d:f8:76:af:7c:68:8f:a4:
                    9d:f6:ff:85:ba:fc:49:0f:02:a3:9c:56:e9:79:de:
                    b5:53:de:06:eb:9f:e2:af:02:11:3c:fd:a3:b7:1b:
                    6a:f2:cd:97:17:1d:6d:b7:e9:38:e1:8b:4f:9c:44:
                    a6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:46:FA:7F:E2:95:B3:37:6A:85:51:2B:D4:95:D5:DF:DB:72:74:14
            X509v3 Authority Key Identifier:
                keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:0b:61:78:45:c3:f4:ae:35:84:ec:3d:85:2e:f3:f2:9b:ab:
         91:5f:53:ad:a1:1d:79:0c:5f:ba:85:b9:0f:4e:be:3b:83:c7:
         0b:bb:12:36:0a:e9:56:39:67:de:96:b0:57:ce:22:73:0a:03:
         c6:cb:57:80:f1:68:57:e3:76:84:6d:9b:5e:bf:bc:10:0e:51:
         80:82:3d:e4:bb:c5:f3:77:68:d0:d8:ac:ba:2d:72:d6:ad:14:
         1c:c2:96:92:e2:f5:71:27:f4:2e:14:a6:41:26:b0:ad:08:54:
         01:10:35:23:1e:7e:b4:6d:40:2f:8b:a5:e9:20:8d:df:8b:62:
         82:7f:d3:57:92:20:78:7f:03:9b:dd:5e:b2:39:b0:6c:c3:a7:
         ae:0e:49:e1:1d:ad:59:21:3b:a3:a2:5e:9e:07:b0:54:08:2d:
         c3:f5:19:41:7d:8d:b3:65:bd:ec:d8:80:74:b0:fc:dc:c8:66:
         8d:6a:47:60:af:7a:1a:d1:a5:e1:5e:44:f2:c4:a1:18:e4:04:
         45:56:d2:4a:38:2b:0f:58:38:bb:e1:e9:a0:64:99:7f:6c:5f:
         96:13:39:71:eb:9c:48:a2:33:22:b0:9e:39:fb:e7:b7:cc:08:
         6f:6a:b7:98:f8:e5:20:1d:15:00:72:b8:87:6a:ca:da:19:94:
         db:84:c6:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWSBVtvQaZiEQpiFDcry0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZDExYjY0ZmZlMThlZmE0MmY0M2E2Yzc2NTYzOWRlZTM4
ZDAyN2UwHhcNMjQwNjE2MDAwMTE1WhcNMjQwNjE3MDAwMTE1WjAzMTEwLwYDVQQD
Eyg5YjQ2ZmE3ZmUyOTViMzM3NmE4NTUxMmJkNDk1ZDVkZmRiNzI3NDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5fP9ek+V1s+gXwAjh3Vf/yKA0g+
JwmHNPKWWf8KYKPrEWLI9R7p7wlvRqP03m7d/A6f/jXgYzJ8Qchn0ib27CBnJZR8
OO0tUykRUEggfNreMJwWWLO0CPKGvk32TZsO8NL1yh6X5FIv9ZGPWCR1lxu0amQd
kITPh29paCCvBjy89ZeN6iy4ke0xzc+floBs+li7jrgUV6hiASXCWJ9fyx2RiVfB
eMzfJyU4eSErwYMLp9jynEPjY7VwP8BzCHTiMo7PmgjHkLjLbfh2r3xoj6Sd9v+F
uvxJDwKjnFbped61U94G65/irwIRPP2jtxtq8s2XFx1tt+k44YtPnESmwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtG+n/ilbM3aoVRK9SV1d/bcnQUMB8GA1UdIwQY
MBaAFMbRG2T/4Y76QvQ6bHZWOd7jjQJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80Y2FjNmItOGUwNS00NDhhLTgzZjct
NjgzNTg1MjE1OGQ4LzEveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80Y2FjNmItOGUwNS00NDhhLTgzZjctNjgzNTg1MjE1OGQ4
LzEveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwtheEXD
9K41hOw9hS7z8purkV9TraEdeQxfuoW5D06+O4PHC7sSNgrpVjln3pawV84icwoD
xstXgPFoV+N2hG2bXr+8EA5RgII95LvF83do0Nisui1y1q0UHMKWkuL1cSf0LhSm
QSawrQhUARA1Ix5+tG1AL4ul6SCN34tign/TV5IgeH8Dm91esjmwbMOnrg5J4R2t
WSE7o6JengewVAgtw/UZQX2Ns2W97NiAdLD83MhmjWpHYK96GtGl4V5E8sShGOQE
RVbSSjgrD1g4u+HpoGSZf2xflhM5ceucSKIzIrCeOfvnt8wIb2q3mPjlIB0VAHK4
h2rK2hmU24TGzw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:59 2024 by rpki-client on console-ams.rpki-client.org