Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File:                     INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier:          Y0hLBp6Avq15bMp8iSgaIetTphTIMY8aZCjsf+Jonwc=
Subject key identifier:   C0:35:63:4E:2A:AE:52:61:1B:7C:5D:34:3C:4D:DE:F0:84:5C:85:FF
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer:       /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial:       01901DEBC43D5F36F13A901EDE1F95E5A2DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number:          070C
Signing time:             Sat 15 Jun 2024 22:01:48 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:48 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:48 +0000
Files and hashes:         1: 1edC6yW53ueZauW7Qv02bcMwu28.roa (hash: IAOi3SELH8GOcgNEiEpYRVlf6baZwL8pA06tH+zUSaM=)
                          2: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: 1VM3auXFSjm10iEO43rooJdimwge3hUZVRU4ejir5h0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:c4:3d:5f:36:f1:3a:90:1e:de:1f:95:e5:a2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
        Validity
            Not Before: Jun 15 22:01:48 2024 GMT
            Not After : Jun 16 22:01:48 2024 GMT
        Subject: CN=c035634e2aae52611b7c5d343c4ddef0845c85ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4d:7e:cc:b9:ac:b8:91:e3:02:da:2a:3b:44:
                    08:41:dc:fa:11:46:e6:13:cc:0b:9d:34:e7:f6:53:
                    26:7d:20:45:63:03:0d:12:57:32:2a:07:d3:b4:e9:
                    f1:e2:e4:6f:66:ff:4b:71:32:d6:8e:5e:c8:f9:f9:
                    24:b6:e0:4c:7a:ff:7f:90:dc:a8:09:2d:14:25:d1:
                    4f:f6:a7:e0:d6:85:99:28:60:0a:cc:1a:d2:98:cf:
                    6a:0d:3f:45:8d:a8:ba:2d:2d:f6:14:c7:45:77:6d:
                    8c:b6:3f:82:9b:b2:9d:91:71:f4:98:4d:99:fb:3c:
                    a3:3b:e6:56:af:e0:17:f8:f2:dc:00:7e:d7:87:be:
                    bc:08:7b:f0:07:6c:44:49:63:df:6b:db:be:0f:6c:
                    61:3a:db:ed:64:7c:c5:3a:39:71:f3:fc:b2:4e:92:
                    80:c5:c6:1a:84:68:58:a6:5a:54:ef:61:39:59:66:
                    9e:e5:dd:9d:d8:59:f3:22:3d:18:b5:74:d4:76:09:
                    90:46:c2:c5:5d:0a:ea:db:e7:96:1f:b0:1e:4a:eb:
                    4e:1f:0b:c2:db:63:d7:24:71:b8:96:82:32:ae:5d:
                    75:cf:f9:b0:b9:21:15:8e:d6:c1:65:25:a5:b8:37:
                    12:3b:e0:92:42:a3:e0:ae:28:bd:97:3e:2c:7c:ee:
                    e6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:35:63:4E:2A:AE:52:61:1B:7C:5D:34:3C:4D:DE:F0:84:5C:85:FF
            X509v3 Authority Key Identifier:
                keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:48:dd:88:45:8b:ca:a4:ea:ca:4d:3f:0e:81:74:05:fa:fa:
         9e:d6:66:2c:e7:85:77:66:8d:32:10:89:4e:05:e6:7d:04:4b:
         e3:89:e3:66:42:f1:4b:81:bd:72:5e:51:ea:68:66:c2:26:e6:
         fa:b7:11:88:94:c0:7a:7a:a0:fa:c0:f6:92:72:a1:4b:fd:23:
         f0:c2:ce:0f:68:81:1d:43:16:10:15:9d:3d:dd:89:69:85:e6:
         54:de:01:ae:22:08:6a:73:e4:d6:f4:ba:c6:6a:bd:bf:75:b0:
         55:0c:e0:ab:ae:28:c5:e9:34:78:d2:27:47:5c:a2:0f:47:4a:
         98:69:5d:8b:27:f2:ff:95:93:eb:ed:95:5f:32:27:54:1d:66:
         9c:95:a4:7d:a7:7a:64:1e:60:0c:5f:f3:0f:f3:f0:19:09:31:
         54:3b:37:24:3c:59:a4:88:2a:ec:c9:51:aa:34:72:52:01:a4:
         fe:0e:3d:41:11:01:03:aa:a3:27:85:3a:00:fc:0b:23:64:ce:
         11:14:ae:36:e8:38:27:62:02:4e:5c:40:1e:56:56:c3:b5:ec:
         7e:a9:53:6f:1a:33:e4:f6:a7:12:bf:51:cf:28:49:82:99:6f:
         aa:4f:83:c9:70:4a:3c:38:a7:a9:56:45:95:5b:1c:c2:f1:64:
         95:ab:99:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd68Q9XzbxOpAe3h+V5aLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDViODQ4M2IxNzEyYjcwMjM1NDEwNTZlNzMwODUzNjZk
MjkzNDYwHhcNMjQwNjE1MjIwMTQ4WhcNMjQwNjE2MjIwMTQ4WjAzMTEwLwYDVQQD
EyhjMDM1NjM0ZTJhYWU1MjYxMWI3YzVkMzQzYzRkZGVmMDg0NWM4NWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU1+zLmsuJHjAtoqO0QIQdz6EUbm
E8wLnTTn9lMmfSBFYwMNElcyKgfTtOnx4uRvZv9LcTLWjl7I+fkktuBMev9/kNyo
CS0UJdFP9qfg1oWZKGAKzBrSmM9qDT9Fjai6LS32FMdFd22Mtj+Cm7KdkXH0mE2Z
+zyjO+ZWr+AX+PLcAH7Xh768CHvwB2xESWPfa9u+D2xhOtvtZHzFOjlx8/yyTpKA
xcYahGhYplpU72E5WWae5d2d2FnzIj0YtXTUdgmQRsLFXQrq2+eWH7AeSutOHwvC
22PXJHG4loIyrl11z/mwuSEVjtbBZSWluDcSO+CSQqPgrii9lz4sfO7mTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMA1Y04qrlJhG3xdNDxN3vCEXIX/MB8GA1UdIwQY
MBaAFCDVuEg7FxK3AjVBBW5zCFNm0pNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEt
MGMyZmY3OTM3ZTZmLzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEtMGMyZmY3OTM3ZTZm
LzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkjdiEWL
yqTqyk0/DoF0Bfr6ntZmLOeFd2aNMhCJTgXmfQRL44njZkLxS4G9cl5R6mhmwibm
+rcRiJTAenqg+sD2knKhS/0j8MLOD2iBHUMWEBWdPd2JaYXmVN4BriIIanPk1vS6
xmq9v3WwVQzgq64oxek0eNInR1yiD0dKmGldiyfy/5WT6+2VXzInVB1mnJWkfad6
ZB5gDF/zD/PwGQkxVDs3JDxZpIgq7MlRqjRyUgGk/g49QREBA6qjJ4U6APwLI2TO
ERSuNug4J2ICTlxAHlZWw7XsfqlTbxoz5PanEr9RzyhJgplvqk+DyXBKPDinqVZF
lVscwvFklauZtg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:47:12 2024 by rpki-client on console-ams.rpki-client.org