Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
File:                     zznV9duFr0wmCPwMM8zE8nIBcYc.mft (raw, json)
Hash identifier:          L7HKA55itlvmdS9+Zc8DBApJQzKohuSgoxKo8zuE51U=
Subject key identifier:   8C:C4:B1:33:B5:C8:C9:7B:47:73:E4:66:BE:0B:A7:17:FC:48:0D:3E
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Certificate issuer:       /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial:       01901CD811E6DBC617F830D43F9C23CDF8A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
Manifest number:          0EDA
Signing time:             Sat 15 Jun 2024 17:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:40 +0000
Files and hashes:         1: dx5G68QhApAj4mBapVxJN2GIou0.roa (hash: /v/XeUYn730iCqzSvSulcpPpAS4xOj8h6XThidjzF5s=)
                          2: zznV9duFr0wmCPwMM8zE8nIBcYc.crl (hash: iBFMit42p5p0slN5iHyCGas6TUoFClFTEyRsEwEDfH0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:11:e6:db:c6:17:f8:30:d4:3f:9c:23:cd:f8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
        Validity
            Not Before: Jun 15 17:00:40 2024 GMT
            Not After : Jun 16 17:00:40 2024 GMT
        Subject: CN=8cc4b133b5c8c97b4773e466be0ba717fc480d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:17:cd:02:c8:4f:f4:39:ef:5b:bf:7c:02:
                    cf:03:00:3e:a3:6d:80:68:32:c1:14:35:10:da:0c:
                    27:63:e5:c3:64:46:7e:5b:bc:45:b2:24:06:1f:76:
                    e9:7f:4b:10:03:f6:ab:81:67:d0:42:70:3e:5a:42:
                    95:16:8c:88:d9:7b:99:20:cc:b0:64:2d:07:69:fc:
                    c0:64:24:f8:f3:e0:ff:53:fa:f1:f2:ba:25:a0:40:
                    6a:ed:f1:53:2e:31:f2:89:c6:fb:ec:47:da:52:e6:
                    8c:ad:b6:43:71:fa:74:13:87:51:99:2d:bc:67:68:
                    e7:cd:f2:ec:9b:0a:68:a9:71:7e:b2:dd:4b:91:95:
                    53:09:39:07:13:58:cb:3a:72:d0:64:99:45:ce:12:
                    d9:5c:d9:02:a7:a2:b3:9c:66:0e:9b:8d:38:33:2e:
                    8f:ac:1d:b8:92:7a:bb:6c:c1:d9:bb:89:39:c3:d8:
                    3d:62:8c:23:b5:03:15:3a:af:f4:ab:e3:86:68:b1:
                    f6:2a:e9:07:78:27:71:17:86:dc:3b:42:68:93:14:
                    09:45:25:56:37:d0:cc:65:6e:d2:63:96:4b:30:be:
                    cd:3e:f1:3b:bd:2a:27:3d:cd:e3:8e:d3:88:96:7d:
                    21:fe:0b:00:61:a8:55:16:1a:98:5b:71:1a:d9:1e:
                    f0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C4:B1:33:B5:C8:C9:7B:47:73:E4:66:BE:0B:A7:17:FC:48:0D:3E
            X509v3 Authority Key Identifier:
                keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9f:5c:3a:99:1a:1c:41:00:42:47:a0:69:04:69:86:c3:e4:
         42:91:8b:d7:b6:c4:dc:03:4e:9a:9c:60:1b:7d:37:3a:ae:78:
         33:dc:7f:12:9e:2a:33:18:4c:9b:ec:b0:e4:8b:02:21:cf:9e:
         b1:4b:e6:f8:e0:2e:1b:37:11:11:5d:f3:1a:7b:54:c6:d3:cf:
         fa:6e:c1:17:a2:7a:db:81:0e:0d:bb:bf:3a:14:c5:72:31:2f:
         8b:e4:20:4f:41:a7:83:20:f1:f5:ff:55:cd:fa:62:34:d0:eb:
         74:9c:57:5a:f3:b6:f1:70:58:27:e7:10:da:62:16:f5:ea:92:
         d2:dd:79:a6:23:cb:f1:7e:53:57:74:88:8c:ea:99:6d:00:a7:
         77:61:6d:72:4b:40:2e:fa:ab:31:8a:1d:22:f6:b7:05:ae:19:
         dd:b9:cf:5b:df:4a:eb:af:d4:66:1a:b5:e8:e4:70:87:28:97:
         59:8a:ef:49:c3:9f:59:74:2c:2e:e5:d4:8b:01:81:a5:b6:8b:
         b0:2f:bd:1a:37:77:50:9a:68:8f:93:ec:20:2a:a6:45:67:81:
         d7:f8:41:21:3f:8f:4c:54:b7:3c:35:8b:ed:c3:f2:e9:f2:5c:
         8f:e0:7a:0c:db:5f:b7:db:22:20:7e:80:e9:96:dc:3c:82:98:
         99:35:5b:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAc2BHm28YX+DDUP5wjzfioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMzlkNWY1ZGI4NWFmNGMyNjA4ZmMwYzMzY2NjNGYyNzIw
MTcxODcwHhcNMjQwNjE1MTcwMDQwWhcNMjQwNjE2MTcwMDQwWjAzMTEwLwYDVQQD
Eyg4Y2M0YjEzM2I1YzhjOTdiNDc3M2U0NjZiZTBiYTcxN2ZjNDgwZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8EXzQLIT/Q571u/fALPAwA+o22A
aDLBFDUQ2gwnY+XDZEZ+W7xFsiQGH3bpf0sQA/argWfQQnA+WkKVFoyI2XuZIMyw
ZC0HafzAZCT48+D/U/rx8roloEBq7fFTLjHyicb77EfaUuaMrbZDcfp0E4dRmS28
Z2jnzfLsmwpoqXF+st1LkZVTCTkHE1jLOnLQZJlFzhLZXNkCp6KznGYOm404My6P
rB24knq7bMHZu4k5w9g9YowjtQMVOq/0q+OGaLH2KukHeCdxF4bcO0JokxQJRSVW
N9DMZW7SY5ZLML7NPvE7vSonPc3jjtOIln0h/gsAYahVFhqYW3Ea2R7wOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzEsTO1yMl7R3PkZr4Lpxf8SA0+MB8GA1UdIwQY
MBaAFM851fXbha9MJgj8DDPMxPJyAXGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenpuVjlkdUZyMHdtQ1B3TU04ekU4bklCY1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yN2ZiYzYtY2NkZS00NjBiLTlmZjkt
YTFjYzIzMTYwYTQ4LzEvenpuVjlkdUZyMHdtQ1B3TU04ekU4bklCY1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8yN2ZiYzYtY2NkZS00NjBiLTlmZjktYTFjYzIzMTYwYTQ4
LzEvenpuVjlkdUZyMHdtQ1B3TU04ekU4bklCY1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqp9cOpka
HEEAQkegaQRphsPkQpGL17bE3ANOmpxgG303Oq54M9x/Ep4qMxhMm+yw5IsCIc+e
sUvm+OAuGzcREV3zGntUxtPP+m7BF6J624EODbu/OhTFcjEvi+QgT0GngyDx9f9V
zfpiNNDrdJxXWvO28XBYJ+cQ2mIW9eqS0t15piPL8X5TV3SIjOqZbQCnd2FtcktA
LvqrMYodIva3Ba4Z3bnPW99K66/UZhq16ORwhyiXWYrvScOfWXQsLuXUiwGBpbaL
sC+9Gjd3UJpoj5PsICqmRWeB1/hBIT+PTFS3PDWL7cPy6fJcj+B6DNtft9siIH6A
6ZbcPIKYmTVblQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:26:40 2024 by rpki-client on console-fra.rpki-client.org