Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/mflcN9caovSWleE_QX4wqXMEqvQ.mft
File:                     mflcN9caovSWleE_QX4wqXMEqvQ.mft (raw, json)
Hash identifier:          aV1okhcDLhIA0eaWRDE6EBqRCetKrPNiGMlNmrBNjeo=
Subject key identifier:   D2:AA:EE:5F:CA:8C:B8:C1:08:0A:11:6B:63:44:37:C9:1E:5B:89:17
Authority key identifier: 99:F9:5C:37:D7:1A:A2:F4:96:95:E1:3F:41:7E:30:A9:73:04:AA:F4
Certificate issuer:       /CN=99f95c37d71aa2f49695e13f417e30a97304aaf4
Certificate serial:       01901C6A7DCCF184DB86FAF5C0879E4CBF6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mflcN9caovSWleE_QX4wqXMEqvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/mflcN9caovSWleE_QX4wqXMEqvQ.mft
Manifest number:          09DC
Signing time:             Sat 15 Jun 2024 15:00:59 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:59 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:59 +0000
Files and hashes:         1: cZDJ0tg7E7zfW2kAPW7a9MLEwOs.roa (hash: FP5DF5mwbgabPSmCCshKZeehn/mD14DG5iUOIotN2Is=)
                          2: mflcN9caovSWleE_QX4wqXMEqvQ.crl (hash: 0xZ51/GPO/O4GcNFiDaTvQbB+DfAwb6MgNby/ezN1VQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/mflcN9caovSWleE_QX4wqXMEqvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/mflcN9caovSWleE_QX4wqXMEqvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mflcN9caovSWleE_QX4wqXMEqvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:7d:cc:f1:84:db:86:fa:f5:c0:87:9e:4c:bf:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f95c37d71aa2f49695e13f417e30a97304aaf4
        Validity
            Not Before: Jun 15 15:00:59 2024 GMT
            Not After : Jun 16 15:00:59 2024 GMT
        Subject: CN=d2aaee5fca8cb8c1080a116b634437c91e5b8917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:d6:50:d1:12:34:47:3a:90:bf:b0:f0:59:
                    34:95:d1:26:f6:a5:d4:5e:4d:22:9a:2c:30:10:8d:
                    be:c7:fa:33:6f:7c:26:9b:af:31:6b:1c:66:c5:11:
                    89:f5:17:76:ae:28:d9:53:a3:31:2d:8c:a6:6a:ca:
                    af:5c:c1:4b:06:e4:78:6e:ec:b4:cf:48:f5:f9:b5:
                    c3:68:bc:8e:f6:e2:0e:e1:b5:2e:51:ed:ed:34:94:
                    5c:6a:b4:74:5a:28:c8:5a:2b:81:d6:55:3c:f6:a6:
                    4e:51:94:f4:2f:ce:9d:a4:28:af:da:36:66:b6:78:
                    2d:3f:ce:ba:cb:bb:59:94:3e:72:80:06:48:d2:a4:
                    cc:1d:01:1e:0e:9e:52:0a:98:a6:3b:5c:d5:0e:45:
                    0c:df:2d:bc:95:f8:29:15:e8:75:c5:40:05:3b:13:
                    6e:44:54:1d:69:6a:52:f7:15:4d:4c:f8:ab:ab:00:
                    69:bd:0e:f9:1a:a4:57:db:bc:38:0d:ad:79:ce:9a:
                    c8:29:0e:9f:fe:47:55:a6:ab:ee:1a:cd:3b:b4:04:
                    ba:98:12:bc:41:9b:ae:60:85:0f:8f:03:65:d4:8a:
                    0a:b7:1b:aa:e6:b3:bc:aa:6f:b9:51:66:14:ae:86:
                    58:07:79:e6:ef:5a:5a:68:40:70:63:fb:32:ef:cf:
                    d9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AA:EE:5F:CA:8C:B8:C1:08:0A:11:6B:63:44:37:C9:1E:5B:89:17
            X509v3 Authority Key Identifier:
                keyid:99:F9:5C:37:D7:1A:A2:F4:96:95:E1:3F:41:7E:30:A9:73:04:AA:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mflcN9caovSWleE_QX4wqXMEqvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/mflcN9caovSWleE_QX4wqXMEqvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/mflcN9caovSWleE_QX4wqXMEqvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:2f:ad:75:b5:03:bf:37:da:76:e8:d7:7d:0b:96:0c:94:db:
         d0:35:23:9d:b8:aa:cf:b8:49:0b:39:99:96:3a:01:c5:a9:ab:
         38:ce:60:ee:e3:2e:12:10:a8:86:fe:ac:f2:70:f6:27:2a:f6:
         34:17:09:21:5e:63:78:2a:90:68:65:85:b0:a6:2d:93:14:56:
         c4:e3:30:88:08:f9:e9:41:ce:ba:4a:59:d5:b2:a9:fd:d7:bc:
         22:53:cd:94:c1:7c:48:b5:4f:0f:f0:9d:55:99:bf:fd:2e:81:
         ca:d9:0b:81:a8:e2:a0:93:38:bc:f9:e1:31:ab:32:55:de:1e:
         50:3c:c3:92:19:43:85:6f:af:16:c1:60:8f:80:e7:c3:6d:92:
         ad:cc:e0:b2:f9:2a:4e:23:3a:81:c4:59:b1:c9:00:58:84:24:
         94:fb:d7:84:62:a7:68:83:70:04:bf:5e:2b:5d:7d:75:0e:36:
         55:72:82:ea:83:be:34:18:a2:21:f9:26:1d:13:88:35:6f:ee:
         f7:a4:45:a2:db:8d:d7:e9:2c:14:51:07:8d:ba:a3:b2:f1:9b:
         bd:80:b7:64:33:c4:d3:b7:13:b8:85:ef:b8:e7:bc:00:ca:f7:
         0d:71:59:02:34:ea:52:d6:cd:5d:21:a0:89:39:8b:1a:23:1e:
         68:5f:ca:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcan3M8YTbhvr1wIeeTL9uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Zjk1YzM3ZDcxYWEyZjQ5Njk1ZTEzZjQxN2UzMGE5NzMw
NGFhZjQwHhcNMjQwNjE1MTUwMDU5WhcNMjQwNjE2MTUwMDU5WjAzMTEwLwYDVQQD
EyhkMmFhZWU1ZmNhOGNiOGMxMDgwYTExNmI2MzQ0MzdjOTFlNWI4OTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrXWUNESNEc6kL+w8Fk0ldEm9qXU
Xk0imiwwEI2+x/ozb3wmm68xaxxmxRGJ9Rd2rijZU6MxLYymasqvXMFLBuR4buy0
z0j1+bXDaLyO9uIO4bUuUe3tNJRcarR0WijIWiuB1lU89qZOUZT0L86dpCiv2jZm
tngtP866y7tZlD5ygAZI0qTMHQEeDp5SCpimO1zVDkUM3y28lfgpFeh1xUAFOxNu
RFQdaWpS9xVNTPirqwBpvQ75GqRX27w4Da15zprIKQ6f/kdVpqvuGs07tAS6mBK8
QZuuYIUPjwNl1IoKtxuq5rO8qm+5UWYUroZYB3nm71paaEBwY/sy78/ZwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKq7l/KjLjBCAoRa2NEN8keW4kXMB8GA1UdIwQY
MBaAFJn5XDfXGqL0lpXhP0F+MKlzBKr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZsY045Y2FvdlNXbGVFX1FYNHdxWE1FcXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YjgzMDEtOTM5MS00Mzg0LWI5NTEt
NWVlZTEyM2IzOGRjLzEvbWZsY045Y2FvdlNXbGVFX1FYNHdxWE1FcXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YjgzMDEtOTM5MS00Mzg0LWI5NTEtNWVlZTEyM2IzOGRj
LzEvbWZsY045Y2FvdlNXbGVFX1FYNHdxWE1FcXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABC+tdbUD
vzfadujXfQuWDJTb0DUjnbiqz7hJCzmZljoBxamrOM5g7uMuEhCohv6s8nD2Jyr2
NBcJIV5jeCqQaGWFsKYtkxRWxOMwiAj56UHOukpZ1bKp/de8IlPNlMF8SLVPD/Cd
VZm//S6BytkLgajioJM4vPnhMasyVd4eUDzDkhlDhW+vFsFgj4Dnw22Srczgsvkq
TiM6gcRZsckAWIQklPvXhGKnaINwBL9eK119dQ42VXKC6oO+NBiiIfkmHROINW/u
96RFotuN1+ksFFEHjbqjsvGbvYC3ZDPE07cTuIXvuOe8AMr3DXFZAjTqUtbNXSGg
iTmLGiMeaF/K7g==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:04:10 2024 by rpki-client on console-ams.rpki-client.org