Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
File:                     zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft (raw, json)
Hash identifier:          9UZi6eN4hEXa7e466nPy3aEZuhbdQPdqMHCyMAxFPak=
Subject key identifier:   F7:00:F8:1A:95:B5:0F:C7:EC:D6:62:33:32:B4:6B:8D:40:61:E0:DF
Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
Certificate issuer:       /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Certificate serial:       01901EFD8C44C864C03E5B7781275CA74DC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
Manifest number:          0778
Signing time:             Sun 16 Jun 2024 03:00:51 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:51 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:51 +0000
Files and hashes:         1: Dy5ZkDW0UfAL590M5yyfFuQeA3s.roa (hash: brZVk/x+0hWnpdiWpGdRMDX5arbELDhwajL+ZdwGLBo=)
                          2: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl (hash: SDA8+o43Hn3ajbwWzDRWp+yBjqrji9DCOpXbx51hg0s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:8c:44:c8:64:c0:3e:5b:77:81:27:5c:a7:4d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
        Validity
            Not Before: Jun 16 03:00:51 2024 GMT
            Not After : Jun 17 03:00:51 2024 GMT
        Subject: CN=f700f81a95b50fc7ecd6623332b46b8d4061e0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:50:cb:c1:a3:4f:34:d3:0c:13:ee:a0:b4:1a:
                    f0:4b:b9:b8:20:61:ca:e5:b1:aa:f6:2e:6b:09:ed:
                    8f:7b:b2:02:80:15:f8:e5:9b:01:62:c5:f4:64:09:
                    28:e9:40:9e:d6:71:8c:7f:2d:4f:80:08:9b:fd:f1:
                    09:5f:44:eb:d8:ee:a1:0f:7b:38:62:51:2b:51:47:
                    d5:c2:f5:d0:4a:9f:c5:c0:48:0d:bd:11:5f:39:af:
                    99:6c:2a:68:71:fc:ab:07:7c:73:31:05:01:e8:ef:
                    83:d6:8e:e0:bf:fe:2d:53:90:0b:0f:0f:e4:b5:62:
                    18:2f:d1:d6:ba:31:f9:b4:f3:2e:f1:1c:26:ce:0d:
                    a2:fb:6e:1f:e5:e1:5a:e1:c1:c4:1a:a2:a9:5b:3a:
                    33:07:dd:4f:b3:e1:a0:e3:c3:0f:69:b4:97:82:5f:
                    2b:84:dd:cf:68:b5:43:33:9b:8a:e0:db:81:cb:96:
                    42:a8:cb:59:2c:0d:fd:40:47:a9:6f:42:14:1c:19:
                    78:79:1e:41:14:0c:47:17:fd:49:eb:f4:92:b0:c5:
                    80:ff:4e:75:23:26:a4:14:01:50:e9:46:b7:88:66:
                    60:62:38:22:fd:97:78:58:b7:b7:97:db:05:32:50:
                    78:72:82:10:e7:ef:05:54:46:15:29:bf:a4:6c:74:
                    5d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:00:F8:1A:95:B5:0F:C7:EC:D6:62:33:32:B4:6B:8D:40:61:E0:DF
            X509v3 Authority Key Identifier:
                keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:71:51:55:1f:f5:fb:20:1d:a3:2b:73:bc:79:12:5b:13:6c:
         a0:d0:7b:cc:e4:12:5e:b6:4e:48:41:d9:52:b6:21:91:d5:61:
         98:a3:70:45:39:ec:91:fe:79:8b:be:07:aa:c8:f0:02:93:9c:
         fa:58:9a:20:94:8c:4c:d7:bc:9c:c9:d2:1c:da:2a:a3:23:0b:
         43:59:30:ab:6c:dc:c3:3c:9f:a1:5a:64:21:99:a6:e1:23:02:
         d3:c7:72:ab:30:c6:d1:04:99:2d:2e:2d:8d:b5:f4:d6:97:b0:
         63:96:0a:51:e9:16:35:1a:39:9e:74:ba:29:38:50:f5:1c:a3:
         e5:06:99:1b:70:0b:7f:64:48:15:fc:43:cb:a8:ba:73:5f:db:
         a0:6c:c1:e6:68:6a:da:c2:75:aa:eb:d1:ed:92:ee:71:e5:43:
         1b:14:d8:c9:d7:ab:f5:99:ff:49:82:65:6c:fc:7d:41:2a:cb:
         50:2e:6d:32:f3:42:ae:25:42:37:47:8e:d9:f2:20:33:24:49:
         68:cc:94:93:c8:a9:bb:3d:19:14:4c:83:29:b4:0c:c4:f6:64:
         38:66:ff:d7:22:61:d5:86:70:f6:83:04:c4:00:80:9c:95:fd:
         84:37:48:67:74:52:82:e0:99:3c:4d:10:b7:9a:71:af:2b:7a:
         fd:d9:84:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAe/YxEyGTAPlt3gSdcp03FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOGU4ZWJkODBmY2Y4ODQ5NzVlNDJiNDZiZjRlNTQ4Nzkz
ZjI5Y2IwHhcNMjQwNjE2MDMwMDUxWhcNMjQwNjE3MDMwMDUxWjAzMTEwLwYDVQQD
EyhmNzAwZjgxYTk1YjUwZmM3ZWNkNjYyMzMzMmI0NmI4ZDQwNjFlMGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lDLwaNPNNMME+6gtBrwS7m4IGHK
5bGq9i5rCe2Pe7ICgBX45ZsBYsX0ZAko6UCe1nGMfy1PgAib/fEJX0Tr2O6hD3s4
YlErUUfVwvXQSp/FwEgNvRFfOa+ZbCpocfyrB3xzMQUB6O+D1o7gv/4tU5ALDw/k
tWIYL9HWujH5tPMu8Rwmzg2i+24f5eFa4cHEGqKpWzozB91Ps+Gg48MPabSXgl8r
hN3PaLVDM5uK4NuBy5ZCqMtZLA39QEepb0IUHBl4eR5BFAxHF/1J6/SSsMWA/051
IyakFAFQ6Ua3iGZgYjgi/Zd4WLe3l9sFMlB4coIQ5+8FVEYVKb+kbHRdpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcA+BqVtQ/H7NZiMzK0a41AYeDfMB8GA1UdIwQY
MBaAFM2Ojr2A/PiEl15CtGv05Uh5PynLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelk2T3ZZRDgtSVNYWGtLMGFfVGxTSGtfS2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9kYzhmOWItMDZkNi00NGQzLTlhMzgt
Mjg2YTVlZTZlMDQzLzEvelk2T3ZZRDgtSVNYWGtLMGFfVGxTSGtfS2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9kYzhmOWItMDZkNi00NGQzLTlhMzgtMjg2YTVlZTZlMDQz
LzEvelk2T3ZZRDgtSVNYWGtLMGFfVGxTSGtfS2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXFRVR/1
+yAdoytzvHkSWxNsoNB7zOQSXrZOSEHZUrYhkdVhmKNwRTnskf55i74HqsjwApOc
+liaIJSMTNe8nMnSHNoqoyMLQ1kwq2zcwzyfoVpkIZmm4SMC08dyqzDG0QSZLS4t
jbX01pewY5YKUekWNRo5nnS6KThQ9Ryj5QaZG3ALf2RIFfxDy6i6c1/boGzB5mhq
2sJ1quvR7ZLuceVDGxTYyder9Zn/SYJlbPx9QSrLUC5tMvNCriVCN0eO2fIgMyRJ
aMyUk8ipuz0ZFEyDKbQMxPZkOGb/1yJh1YZw9oMExACAnJX9hDdIZ3RSguCZPE0Q
t5pxryt6/dmEPQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:07 2024 by rpki-client on console-fra.rpki-client.org