Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
File:                     0YHQxAlRpPkA5NndnCDkhWNQkg4.mft (raw, json)
Hash identifier:          3xAH6lCWB71dhetQa0hywi2I2NzKQlnlpyxl+lxIfnU=
Subject key identifier:   F7:9D:2D:CB:06:79:0D:B2:58:39:07:5F:71:67:7D:E8:E9:0F:81:70
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Certificate issuer:       /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial:       01901DED8BC748C6A2B0CFF0A57D2D9ABF3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
Manifest number:          11CA
Signing time:             Sat 15 Jun 2024 22:03:45 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:45 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:45 +0000
Files and hashes:         1: 0YHQxAlRpPkA5NndnCDkhWNQkg4.crl (hash: lpeGcdyx2RGg60vMEVWJwFmJAJfNnfKI4ncn1gV4e8w=)
                          2: 4fsGpH_h8wYJOx6l5_grPI0_eE0.roa (hash: l6CZks1I+PSrl7hZlmaeb2OkDkhqL0TCEi6qwQxV4Vo=)
                          3: 6EVtfxOnIlFOnha5IuorjOTy4KA.roa (hash: nFlGUiIl7eXftZfqYHFq9VWjwxevh1UBiT1G1C0iJR8=)
                          4: Ls5rX7vO8-9E_z4JXlBXzt4266Y.roa (hash: HR2RX3vjvfnB9VBO1iJlgMckOBxmJ56csKsDKO06nhw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:8b:c7:48:c6:a2:b0:cf:f0:a5:7d:2d:9a:bf:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
        Validity
            Not Before: Jun 15 22:03:45 2024 GMT
            Not After : Jun 16 22:03:45 2024 GMT
        Subject: CN=f79d2dcb06790db25839075f71677de8e90f8170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f0:15:6c:65:0c:f4:a6:7e:a7:4a:67:7a:d5:
                    51:1d:e5:d8:1d:62:6b:74:bc:53:22:0b:c1:5a:46:
                    29:a2:30:a9:74:4c:d0:16:92:a6:0d:c9:b9:23:14:
                    94:72:6e:f7:51:31:fd:5c:ed:63:20:6c:3d:66:b9:
                    ca:cc:2c:b4:d4:95:83:1b:99:d4:57:5d:59:2d:e6:
                    25:16:27:38:8e:52:ad:c4:8a:a2:0e:00:b2:05:05:
                    25:91:c9:13:0b:98:c1:3d:f6:c5:ec:8d:7a:4b:76:
                    8b:33:6b:7e:55:65:ae:d2:05:59:e3:02:91:0f:f6:
                    3d:e3:14:53:ed:2f:f4:71:be:39:85:4e:e7:46:0f:
                    5e:6a:58:1c:37:ff:aa:09:15:e9:11:34:38:00:be:
                    ae:ae:e2:87:7d:19:1f:5e:20:6f:9d:bd:f8:83:b9:
                    57:0f:ad:4a:e7:95:77:fb:91:f3:cd:ae:57:80:b3:
                    ef:d7:30:7f:fc:36:ca:15:36:80:68:33:ab:ea:9c:
                    77:47:3b:eb:2d:e1:c2:d6:e2:b4:81:31:18:36:48:
                    25:0a:25:af:cc:5e:42:5e:16:27:ff:ee:81:96:97:
                    40:40:23:de:aa:ed:e8:7c:25:ce:5c:e6:b1:32:94:
                    35:35:70:a3:c8:ba:62:b2:73:02:59:11:b3:92:81:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9D:2D:CB:06:79:0D:B2:58:39:07:5F:71:67:7D:E8:E9:0F:81:70
            X509v3 Authority Key Identifier:
                keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:61:3d:cb:16:42:53:b4:ae:f6:52:cd:0f:4c:55:77:98:db:
         b0:02:b1:ef:2a:0a:4b:c7:51:22:c1:b9:24:12:32:37:47:26:
         56:01:fc:f2:86:33:33:1c:59:46:ea:94:66:f9:b5:b2:29:28:
         cc:b8:61:02:f0:35:cb:fa:d1:67:6b:14:4b:3a:1b:52:32:06:
         ab:d8:65:d5:be:55:c9:1c:4d:82:06:b2:a3:c7:5b:a6:9f:f1:
         37:29:f3:f7:a9:ce:35:b3:12:5b:ce:f5:6f:11:6b:ef:b7:76:
         ce:c5:3f:6b:03:76:da:ae:37:e6:4c:af:43:37:8e:73:0b:65:
         c1:84:39:47:a4:d0:00:7f:02:9f:d9:16:a8:e8:d6:91:45:fe:
         61:48:bf:e2:03:1b:68:ed:9f:fe:aa:4a:44:dd:1a:07:cf:48:
         44:1c:ec:f0:28:27:c0:93:c2:5e:48:27:74:07:19:9b:07:6a:
         c8:35:79:13:37:39:43:21:93:71:5b:9d:a2:6b:cc:d4:25:f5:
         82:2c:61:b8:6a:d3:ba:1a:f2:e2:2f:58:52:a3:3c:da:35:a2:
         04:93:6c:24:da:26:a6:cd:fc:dc:df:e7:b8:ff:dd:df:d0:bd:
         70:22:8d:5d:e1:15:7e:90:16:02:c8:45:5f:cc:17:c8:31:33:
         72:7e:7a:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7YvHSMaisM/wpX0tmr8/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODFkMGM0MDk1MWE0ZjkwMGU0ZDlkZDljMjBlNDg1NjM1
MDkyMGUwHhcNMjQwNjE1MjIwMzQ1WhcNMjQwNjE2MjIwMzQ1WjAzMTEwLwYDVQQD
EyhmNzlkMmRjYjA2NzkwZGIyNTgzOTA3NWY3MTY3N2RlOGU5MGY4MTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfAVbGUM9KZ+p0pnetVRHeXYHWJr
dLxTIgvBWkYpojCpdEzQFpKmDcm5IxSUcm73UTH9XO1jIGw9ZrnKzCy01JWDG5nU
V11ZLeYlFic4jlKtxIqiDgCyBQUlkckTC5jBPfbF7I16S3aLM2t+VWWu0gVZ4wKR
D/Y94xRT7S/0cb45hU7nRg9ealgcN/+qCRXpETQ4AL6uruKHfRkfXiBvnb34g7lX
D61K55V3+5Hzza5XgLPv1zB//DbKFTaAaDOr6px3RzvrLeHC1uK0gTEYNkglCiWv
zF5CXhYn/+6BlpdAQCPequ3ofCXOXOaxMpQ1NXCjyLpisnMCWRGzkoEKVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPedLcsGeQ2yWDkHX3FnfejpD4FwMB8GA1UdIwQY
MBaAFNGB0MQJUaT5AOTZ3Zwg5IVjUJIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEt
Mzg4YjgxYzBjOTBjLzEvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEtMzg4YjgxYzBjOTBj
LzEvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWE9yxZC
U7Su9lLND0xVd5jbsAKx7yoKS8dRIsG5JBIyN0cmVgH88oYzMxxZRuqUZvm1siko
zLhhAvA1y/rRZ2sUSzobUjIGq9hl1b5VyRxNggayo8dbpp/xNynz96nONbMSW871
bxFr77d2zsU/awN22q435kyvQzeOcwtlwYQ5R6TQAH8Cn9kWqOjWkUX+YUi/4gMb
aO2f/qpKRN0aB89IRBzs8CgnwJPCXkgndAcZmwdqyDV5Ezc5QyGTcVudomvM1CX1
gixhuGrTuhry4i9YUqM82jWiBJNsJNomps383N/nuP/d39C9cCKNXeEVfpAWAshF
X8wXyDEzcn56Pw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:24 2024 by rpki-client on console-ams.rpki-client.org