Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File:                     qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier:          0Sp0RkElTPrmfU6jZx84cCDGHw1hU1y07ktu/R92lhY=
Subject key identifier:   ED:64:C8:54:B1:0B:DC:85:32:B9:51:45:DA:78:F4:BC:A6:98:F1:40
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer:       /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial:       01901FDB4AE95ACF187851B909520B2F6F8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 07:03:03 +0000
Manifest this update:     Sun 16 Jun 2024 07:03:03 +0000
Manifest next update:     Mon 17 Jun 2024 07:03:03 +0000
Files and hashes:         1: Y5OnFI_ASQKiP8sn2vjF01n0hgM.roa (hash: Ao+XfFad/9xTmSoUChE6wSBDnLonlbalr70VLSu3tEE=)
                          2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: 425pLROtTtG/kByyPh4qsQXPkZ85RU3LcKxR0DTiWOU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:db:4a:e9:5a:cf:18:78:51:b9:09:52:0b:2f:6f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
        Validity
            Not Before: Jun 16 07:03:03 2024 GMT
            Not After : Jun 17 07:03:03 2024 GMT
        Subject: CN=ed64c854b10bdc8532b95145da78f4bca698f140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:07:91:f5:10:97:36:10:3a:eb:93:f1:98:3e:
                    18:c8:da:34:d4:2f:06:bc:1e:27:26:b5:b6:cb:1a:
                    89:e7:d7:63:fa:46:fa:70:19:b1:de:0d:a6:08:91:
                    55:a0:74:80:12:e1:dc:07:9a:bc:19:ac:b2:ff:c1:
                    33:12:f8:04:b8:f6:30:62:8b:4f:78:dd:74:cd:b6:
                    0b:4a:17:37:d2:62:f7:a3:94:2c:be:0b:f0:33:ee:
                    33:0a:e4:76:4b:36:52:3e:77:dd:d7:63:43:59:bf:
                    70:da:db:8c:51:b2:b8:d4:9a:e1:48:59:ef:19:0d:
                    e3:21:02:4c:87:00:fe:db:10:d6:f9:ba:09:c0:f6:
                    0d:bc:88:46:a6:e4:5c:d7:22:6c:ed:1b:24:28:58:
                    77:0b:ef:e0:da:e9:fb:0b:92:c7:d1:aa:ed:81:85:
                    f3:9b:4f:d6:1a:92:4e:ff:fa:81:31:8d:66:c5:3b:
                    6d:4c:cf:42:e2:cb:1f:06:4c:ba:f0:9c:ab:ba:ce:
                    c8:5b:c5:85:c0:d9:b7:c4:23:19:db:a1:59:cf:14:
                    ca:4d:26:0c:bc:4c:39:4e:77:0e:7a:11:b6:f0:fa:
                    fb:0a:72:10:72:c0:38:b9:77:c2:a8:54:bf:d9:da:
                    83:a0:2a:5b:eb:83:81:91:0d:40:60:bf:e0:51:e6:
                    f5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:64:C8:54:B1:0B:DC:85:32:B9:51:45:DA:78:F4:BC:A6:98:F1:40
            X509v3 Authority Key Identifier:
                keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1b:e5:5e:42:4e:f1:f7:05:ba:60:4b:7c:00:66:78:a5:a3:
         98:47:75:c8:c3:ad:ee:e3:69:f0:94:48:3d:11:b2:25:e8:d5:
         43:f3:d4:e5:d5:26:24:e8:b3:e3:f4:c3:04:39:e9:90:9b:e5:
         92:00:d0:e0:4c:6b:14:a7:1a:9c:80:4b:06:49:00:b7:72:22:
         e0:0f:c8:52:7b:fc:36:bb:04:1f:1a:8e:5b:03:c9:f0:76:4b:
         a7:6f:e9:bd:a5:ea:e4:19:e2:73:81:7a:d7:0e:5d:f1:91:09:
         c0:ba:e8:56:e5:f4:d1:b6:bb:57:3b:cb:f5:56:ca:a5:fe:6b:
         fc:df:fa:0b:41:49:57:4b:f5:59:6b:b7:26:ef:34:9e:44:2f:
         df:71:a1:fa:0f:e2:b1:dc:91:24:fd:65:0c:24:84:44:64:39:
         cb:a2:18:07:52:55:fc:28:c0:84:9d:56:73:67:eb:e1:26:af:
         4f:e6:5c:d2:86:08:bb:1a:1c:68:61:11:27:17:4d:3b:a3:78:
         67:e7:06:f1:7d:1a:ba:9d:ea:e5:b0:6a:da:55:db:81:18:85:
         d7:ac:6c:c1:89:c7:b0:a0:4a:b7:ab:46:b2:cb:ec:2e:a0:f4:
         3c:f8:c1:29:bd:eb:db:f2:48:2e:42:7d:cb:9d:ab:5e:5d:0e:
         4c:9c:ea:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAf20rpWs8YeFG5CVILL2+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OGU1OTQzYzM1NWQ0OGMwMDRlNmJmNGEzYjZjZGI4YzMw
YWRjNGMwHhcNMjQwNjE2MDcwMzAzWhcNMjQwNjE3MDcwMzAzWjAzMTEwLwYDVQQD
EyhlZDY0Yzg1NGIxMGJkYzg1MzJiOTUxNDVkYTc4ZjRiY2E2OThmMTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QeR9RCXNhA665PxmD4YyNo01C8G
vB4nJrW2yxqJ59dj+kb6cBmx3g2mCJFVoHSAEuHcB5q8Gayy/8EzEvgEuPYwYotP
eN10zbYLShc30mL3o5QsvgvwM+4zCuR2SzZSPnfd12NDWb9w2tuMUbK41JrhSFnv
GQ3jIQJMhwD+2xDW+boJwPYNvIhGpuRc1yJs7RskKFh3C+/g2un7C5LH0artgYXz
m0/WGpJO//qBMY1mxTttTM9C4ssfBky68Jyrus7IW8WFwNm3xCMZ26FZzxTKTSYM
vEw5TncOehG28Pr7CnIQcsA4uXfCqFS/2dqDoCpb64OBkQ1AYL/gUeb1GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1kyFSxC9yFMrlRRdp49LymmPFAMB8GA1UdIwQY
MBaAFKmOWUPDVdSMAE5r9KO2zbjDCtxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDkyY2QtN2ZlMy00MjIzLTgzNTAt
M2M3NzNhNmM0MmY5LzEvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jZDkyY2QtN2ZlMy00MjIzLTgzNTAtM2M3NzNhNmM0MmY5
LzEvcVk1WlE4TlYxSXdBVG12MG83Yk51TU1LM0V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhvlXkJO
8fcFumBLfABmeKWjmEd1yMOt7uNp8JRIPRGyJejVQ/PU5dUmJOiz4/TDBDnpkJvl
kgDQ4ExrFKcanIBLBkkAt3Ii4A/IUnv8NrsEHxqOWwPJ8HZLp2/pvaXq5Bnic4F6
1w5d8ZEJwLroVuX00ba7VzvL9VbKpf5r/N/6C0FJV0v1WWu3Ju80nkQv33Gh+g/i
sdyRJP1lDCSERGQ5y6IYB1JV/CjAhJ1Wc2fr4SavT+Zc0oYIuxocaGERJxdNO6N4
Z+cG8X0aup3q5bBq2lXbgRiF16xswYnHsKBKt6tGssvsLqD0PPjBKb3r2/JILkJ9
y52rXl0OTJzq8Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 08:07:50 2024 by rpki-client on console-ams.rpki-client.org