Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File:                     NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier:          vUaiAFkBEWBt8nTKBCGHOM6Ut8+b1utbdqWsKnGieCw=
Subject key identifier:   3C:98:5A:24:AE:EF:AD:DD:32:8A:55:13:8D:7D:1D:59:2C:73:D4:CF
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer:       /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial:       019045D407E63C0E27B504E910869A12469E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 16:00:41 +0000
Manifest this update:     Sun 23 Jun 2024 16:00:41 +0000
Manifest next update:     Mon 24 Jun 2024 16:00:41 +0000
Files and hashes:         1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: MvpPQNEdvVuvcOoSRtATn/2WbenfiUaaJTaf/3qYhJw=)
                          2: vMlav8-kMk_WskNEWudE9YmxV-0.roa (hash: 2ac9bzl44U8yDQK3JzdQEI0mwZd9xK+j0BgpcysGPMc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:07:e6:3c:0e:27:b5:04:e9:10:86:9a:12:46:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340551ace81314829351a27e399aeddb33246155
        Validity
            Not Before: Jun 23 16:00:41 2024 GMT
            Not After : Jun 24 16:00:41 2024 GMT
        Subject: CN=3c985a24aeefaddd328a55138d7d1d592c73d4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dc:b2:4b:39:23:c7:5d:33:74:fd:c0:a9:73:
                    a9:37:5d:f9:27:da:5c:0c:18:ae:88:ef:9f:0e:0b:
                    48:29:90:6f:91:31:40:87:29:25:4b:af:17:26:98:
                    b9:5a:be:49:bd:af:83:c4:dd:dc:39:78:31:01:25:
                    f9:f4:da:cb:06:ea:42:4f:52:79:0b:d3:e0:c3:ac:
                    27:dc:14:22:2a:0d:5c:d5:9f:30:72:bc:74:b1:e5:
                    0c:68:f7:8d:fd:42:91:ac:62:df:69:61:ba:54:f6:
                    65:b9:f4:69:2e:75:12:75:26:8c:fb:0f:5d:7e:3f:
                    cd:9e:d3:56:a8:d8:ac:77:83:d4:12:78:44:bf:24:
                    47:11:bc:80:44:bd:6b:df:e9:11:13:d6:df:3d:63:
                    be:ba:e0:c6:61:ff:65:d0:9f:15:48:bf:3e:1a:02:
                    7a:58:4a:28:46:f7:5b:7d:d9:b3:66:03:c0:4a:95:
                    f2:64:7a:96:c4:a2:df:21:0d:6f:37:fb:56:8d:ff:
                    39:90:c6:61:70:34:cb:ea:74:bc:5c:15:1b:ee:06:
                    68:92:6f:22:9a:56:5e:1b:bb:1e:f9:2a:78:7b:49:
                    2f:f2:d4:27:bc:11:32:cf:56:9c:5b:52:79:56:3d:
                    d5:3a:5a:51:31:8b:33:44:19:04:8f:40:6b:7e:15:
                    5a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:98:5A:24:AE:EF:AD:DD:32:8A:55:13:8D:7D:1D:59:2C:73:D4:CF
            X509v3 Authority Key Identifier:
                keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2b:e5:ce:43:28:aa:2b:c7:19:dc:33:1d:7f:15:53:ae:bd:
         1f:63:27:96:65:11:cb:43:d6:a1:4c:ed:72:39:be:de:d1:38:
         82:c7:bb:29:82:28:9d:a0:bd:c4:85:cd:97:be:dd:40:62:9e:
         21:e4:b2:76:75:e3:ba:59:36:84:89:24:23:a7:ac:af:67:82:
         06:99:ee:f5:71:4f:6d:1d:45:ac:1c:2a:e0:66:af:ed:6b:04:
         49:6b:35:b8:6d:63:84:31:cb:31:9d:9c:63:3c:9f:93:75:18:
         9c:07:98:e9:ef:a9:3b:7b:ed:54:f4:bf:df:d5:a2:59:98:f7:
         d1:8c:ed:2d:70:f7:06:03:ff:51:e3:f7:21:0e:64:ff:6d:c0:
         ef:fb:61:ac:52:2e:46:5f:ac:0a:9d:9a:a6:bd:f7:a0:7d:80:
         09:6a:8d:e2:07:2f:fd:99:c6:ec:1c:28:8b:6f:84:fd:50:86:
         8d:3a:42:9b:6b:81:65:8f:39:30:96:2f:15:0e:40:99:f8:3b:
         4c:72:cc:c5:05:5a:e4:cb:6f:59:8a:6e:6c:1c:93:80:5c:7c:
         b0:65:42:ec:3c:9f:18:da:53:9b:3c:19:8e:f4:2c:d9:fe:49:
         1c:9c:b9:fe:60:d8:3d:d5:a9:26:ba:d8:c9:75:63:ae:39:43:
         d9:ef:c5:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBF1AfmPA4ntQTpEIaaEkaeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDU1MWFjZTgxMzE0ODI5MzUxYTI3ZTM5OWFlZGRiMzMy
NDYxNTUwHhcNMjQwNjIzMTYwMDQxWhcNMjQwNjI0MTYwMDQxWjAzMTEwLwYDVQQD
EygzYzk4NWEyNGFlZWZhZGRkMzI4YTU1MTM4ZDdkMWQ1OTJjNzNkNGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdyySzkjx10zdP3AqXOpN135J9pc
DBiuiO+fDgtIKZBvkTFAhyklS68XJpi5Wr5Jva+DxN3cOXgxASX59NrLBupCT1J5
C9Pgw6wn3BQiKg1c1Z8wcrx0seUMaPeN/UKRrGLfaWG6VPZlufRpLnUSdSaM+w9d
fj/NntNWqNisd4PUEnhEvyRHEbyARL1r3+kRE9bfPWO+uuDGYf9l0J8VSL8+GgJ6
WEooRvdbfdmzZgPASpXyZHqWxKLfIQ1vN/tWjf85kMZhcDTL6nS8XBUb7gZokm8i
mlZeG7se+Sp4e0kv8tQnvBEyz1acW1J5Vj3VOlpRMYszRBkEj0BrfhVaVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyYWiSu763dMopVE419HVksc9TPMB8GA1UdIwQY
MBaAFDQFUazoExSCk1Gifjma7dszJGFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2It
MTNlYTU2ZDFmNjNhLzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hYTM4MDUtYzhhNC00ZjY1LTg3Y2ItMTNlYTU2ZDFmNjNh
LzEvTkFWUnJPZ1RGSUtUVWFKLU9acnQyek1rWVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSvlzkMo
qivHGdwzHX8VU669H2MnlmURy0PWoUztcjm+3tE4gse7KYIonaC9xIXNl77dQGKe
IeSydnXjulk2hIkkI6esr2eCBpnu9XFPbR1FrBwq4Gav7WsESWs1uG1jhDHLMZ2c
Yzyfk3UYnAeY6e+pO3vtVPS/39WiWZj30YztLXD3BgP/UeP3IQ5k/23A7/thrFIu
Rl+sCp2apr33oH2ACWqN4gcv/ZnG7Bwoi2+E/VCGjTpCm2uBZY85MJYvFQ5Amfg7
THLMxQVa5MtvWYpubByTgFx8sGVC7DyfGNpTmzwZjvQs2f5JHJy5/mDYPdWpJrrY
yXVjrjlD2e/Fiw==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:37:52 2024 by rpki-client on console-ams.rpki-client.org