Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
File:                     fEStUyVA0tLa66leE9YUt4Va1iI.mft (raw, json)
Hash identifier:          uqntMKJJw7SnNbSgR80QpUSbgC8fiXYCNjPzSAtcljw=
Subject key identifier:   7D:55:C8:C1:66:9B:DD:0A:29:87:CB:9F:08:64:C2:6F:B6:0C:D8:41
Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
Certificate issuer:       /CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Certificate serial:       01901C6A46D2C16B29DCB993EF2B0C37E401
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
Manifest number:          0155
Signing time:             Sat 15 Jun 2024 15:00:45 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:45 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:45 +0000
Files and hashes:         1: MzYDeANgZVntZl3mXbneGWbVlkY.roa (hash: AFdZ+5coTkGynFrU3mtLrsXikxEzV0MkXZDM0NC5VsQ=)
                          2: fEStUyVA0tLa66leE9YUt4Va1iI.crl (hash: ujn1HDH3axkss5XXEEubjQuWA+ynrolYlgtVYyM/7A4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:46:d2:c1:6b:29:dc:b9:93:ef:2b:0c:37:e4:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622
        Validity
            Not Before: Jun 15 15:00:45 2024 GMT
            Not After : Jun 16 15:00:45 2024 GMT
        Subject: CN=7d55c8c1669bdd0a2987cb9f0864c26fb60cd841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a6:b6:7c:c5:b0:65:28:91:5b:50:8b:87:29:
                    b0:27:6d:ff:e1:88:12:77:36:c8:8f:12:f6:b7:be:
                    95:11:5a:f5:6e:9f:26:83:ba:54:cf:d5:fc:d2:81:
                    ce:cb:1e:a5:50:f7:c1:e9:0b:ac:93:0c:53:b5:90:
                    47:dd:53:f0:5b:25:1f:e9:2f:a6:1d:f4:36:8b:9c:
                    b8:a6:18:04:94:4d:52:c5:c8:7e:d5:4a:ef:a2:0c:
                    d3:71:c7:a6:01:87:97:e1:25:8b:99:5f:b3:e8:8d:
                    66:3a:fa:ab:ae:bd:44:6c:7a:7c:1e:3d:db:81:cc:
                    bd:9f:c1:2a:35:04:db:76:11:70:e4:e1:63:35:ea:
                    53:37:a9:a3:9c:b4:30:fe:a1:64:0c:f1:fc:bb:58:
                    20:00:09:fc:ec:a5:8b:77:6c:0a:1f:c8:31:0c:c3:
                    97:d1:81:d4:a4:70:07:e9:02:d3:3e:f4:10:dd:4c:
                    44:f3:7e:c0:55:85:3f:e1:7a:8a:ab:10:50:ff:ba:
                    09:19:cd:f9:3a:c8:e9:39:c4:73:df:e7:a1:c5:3a:
                    cc:34:ac:45:98:37:65:15:24:01:09:80:60:bf:68:
                    48:f1:b2:57:b4:35:7d:4c:83:a3:86:a1:59:11:aa:
                    30:ac:f5:f6:d3:8a:ea:14:04:bd:33:6f:9a:ff:7c:
                    59:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:55:C8:C1:66:9B:DD:0A:29:87:CB:9F:08:64:C2:6F:B6:0C:D8:41
            X509v3 Authority Key Identifier:
                keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:9d:6e:1f:6f:36:cf:62:7c:c7:af:be:f0:65:94:66:f6:07:
         84:ff:b4:7c:8e:6f:03:07:de:37:71:07:18:aa:8f:4b:1d:4c:
         28:8c:d8:d4:41:05:37:fb:be:95:eb:31:76:7b:9e:dc:8a:3a:
         94:51:b9:88:b9:9c:03:71:b2:79:99:87:8a:a8:29:fd:ec:0c:
         a7:90:21:1c:8e:d9:0d:d4:36:c6:73:f6:3f:76:b4:81:d4:90:
         66:af:13:ee:12:32:26:41:94:15:46:00:64:91:a3:88:fd:96:
         e3:16:07:15:7b:a6:cd:82:99:8a:6b:a5:74:ab:69:44:ca:0f:
         06:0b:7d:27:e0:d6:cb:da:c6:6e:24:23:5f:80:85:60:a5:f2:
         37:a9:9c:a8:dd:bc:2c:25:99:e0:68:52:92:21:f8:cf:1f:0d:
         fa:ec:1a:03:b1:82:eb:48:ea:59:1e:50:93:ed:22:25:c5:4f:
         b3:66:51:ac:43:4c:20:64:7e:b5:7b:02:b3:05:8f:45:4f:42:
         1d:01:05:46:00:2f:4c:d1:b5:90:f5:48:8d:eb:b7:4b:71:16:
         a6:a6:31:1d:1c:90:ad:de:f5:40:93:fc:97:ce:fd:f9:68:15:
         ea:fe:a2:40:2e:54:7a:4f:86:13:ac:05:37:5b:99:a6:4c:dc:
         eb:bb:5f:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcakbSwWsp3LmT7ysMN+QBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNDRhZDUzMjU0MGQyZDJkYWViYTk1ZTEzZDYxNGI3ODU1
YWQ2MjIwHhcNMjQwNjE1MTUwMDQ1WhcNMjQwNjE2MTUwMDQ1WjAzMTEwLwYDVQQD
Eyg3ZDU1YzhjMTY2OWJkZDBhMjk4N2NiOWYwODY0YzI2ZmI2MGNkODQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aa2fMWwZSiRW1CLhymwJ23/4YgS
dzbIjxL2t76VEVr1bp8mg7pUz9X80oHOyx6lUPfB6QuskwxTtZBH3VPwWyUf6S+m
HfQ2i5y4phgElE1Sxch+1UrvogzTccemAYeX4SWLmV+z6I1mOvqrrr1EbHp8Hj3b
gcy9n8EqNQTbdhFw5OFjNepTN6mjnLQw/qFkDPH8u1ggAAn87KWLd2wKH8gxDMOX
0YHUpHAH6QLTPvQQ3UxE837AVYU/4XqKqxBQ/7oJGc35OsjpOcRz3+ehxTrMNKxF
mDdlFSQBCYBgv2hI8bJXtDV9TIOjhqFZEaowrPX204rqFAS9M2+a/3xZywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1VyMFmm90KKYfLnwhkwm+2DNhBMB8GA1UdIwQY
MBaAFHxErVMlQNLS2uupXhPWFLeFWtYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85NjQ2ZDctNWIwNC00NTQ0LThlZGMt
NjU5Y2I0MjdkY2Y3LzEvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85NjQ2ZDctNWIwNC00NTQ0LThlZGMtNjU5Y2I0MjdkY2Y3
LzEvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuZ1uH282
z2J8x6++8GWUZvYHhP+0fI5vAwfeN3EHGKqPSx1MKIzY1EEFN/u+lesxdnue3Io6
lFG5iLmcA3GyeZmHiqgp/ewMp5AhHI7ZDdQ2xnP2P3a0gdSQZq8T7hIyJkGUFUYA
ZJGjiP2W4xYHFXumzYKZimuldKtpRMoPBgt9J+DWy9rGbiQjX4CFYKXyN6mcqN28
LCWZ4GhSkiH4zx8N+uwaA7GC60jqWR5Qk+0iJcVPs2ZRrENMIGR+tXsCswWPRU9C
HQEFRgAvTNG1kPVIjeu3S3EWpqYxHRyQrd71QJP8l879+WgV6v6iQC5Uek+GE6wF
N1uZpkzc67tfqA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:30:47 2024 by rpki-client on console-fra.rpki-client.org