Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
File:                     2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json)
Hash identifier:          Ct0Sx93ZE5r6TOXUay59khgS8ha1gzglon/z4Hq/jM8=
Subject key identifier:   E9:AC:C3:EE:0A:61:3E:C3:A3:CD:DF:47:20:E1:70:9E:E4:5C:5B:05
Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
Certificate issuer:       /CN=da35b27eb523b67f8d691c8062f3370e149302fd
Certificate serial:       01901D0F1C1FDC49FD649A21B5BDD23C1168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
Manifest number:          111F
Signing time:             Sat 15 Jun 2024 18:00:47 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:47 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:47 +0000
Files and hashes:         1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: gE6E9cbeMfEqIkV0OZsDwodcdH51gra7HRozSN+tttI=)
                          2: IwPkJaDaCyQRJWYB6-dd_8jvWrE.roa (hash: z5//vBbYFNmNkJfgjchsQzSdS/7ZQu7Z2MpVMNRmBQo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:1c:1f:dc:49:fd:64:9a:21:b5:bd:d2:3c:11:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd
        Validity
            Not Before: Jun 15 18:00:47 2024 GMT
            Not After : Jun 16 18:00:47 2024 GMT
        Subject: CN=e9acc3ee0a613ec3a3cddf4720e1709ee45c5b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:47:66:a4:d7:53:d8:60:34:15:28:b8:f8:
                    ad:92:94:5a:e6:1d:0e:c4:4f:40:7e:8c:92:0e:4c:
                    2f:35:40:6d:2f:f6:d2:6e:a2:2a:c3:7e:19:f7:60:
                    d7:1a:e1:6a:9a:a2:f2:6a:49:31:a0:bf:59:f2:54:
                    a2:7c:84:60:77:83:b6:f8:9a:b9:28:63:49:2b:e2:
                    75:9e:f4:b8:95:e2:5e:b8:30:a8:d5:96:cc:fc:1a:
                    93:4e:65:b9:32:d9:62:9d:3c:38:cc:c8:d1:07:b6:
                    99:a2:a5:68:50:c0:79:ac:ca:69:0a:3a:40:15:23:
                    e0:d5:3f:00:f1:11:8b:1b:36:d3:c7:1a:bf:22:81:
                    eb:cf:9d:58:49:57:23:2d:1b:c1:53:db:81:51:ff:
                    bd:72:c4:7d:f9:91:66:32:a1:6f:31:94:17:65:92:
                    bc:15:5a:ef:c5:ce:92:59:4a:c1:86:97:ec:55:36:
                    df:91:27:57:c7:ca:b5:2a:00:68:d7:11:c1:33:51:
                    bc:1f:82:c5:a9:61:85:af:15:28:8e:a7:ec:25:11:
                    25:2c:97:4d:ee:bd:cb:dd:f3:7a:51:04:2c:46:15:
                    28:46:5a:92:51:ff:d0:a0:c9:82:1c:fb:4b:19:7d:
                    0a:9d:8c:b2:0b:53:4e:66:b0:64:1d:49:60:ee:32:
                    df:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AC:C3:EE:0A:61:3E:C3:A3:CD:DF:47:20:E1:70:9E:E4:5C:5B:05
            X509v3 Authority Key Identifier:
                keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:69:2b:43:95:8d:65:0f:c7:93:7d:79:e9:38:a2:76:56:b8:
         35:a0:1f:cb:9f:63:04:fc:3f:8e:0a:09:19:52:aa:48:1d:eb:
         d0:eb:a8:d0:f6:db:1f:bf:2c:d0:b5:27:b7:01:94:24:ce:2f:
         30:2a:c9:c5:f4:da:4c:f7:a3:e2:d8:48:b2:c5:71:01:0e:32:
         c3:bb:5a:af:f2:79:f5:6d:d2:d9:0f:3f:c8:ef:40:a5:23:be:
         01:06:b0:7c:82:d3:8b:89:9e:f6:5b:c3:2b:12:03:6d:15:26:
         cf:f6:8a:bf:f5:ec:b3:43:36:47:1e:96:df:ad:58:a3:7a:e2:
         3c:5e:8a:89:3b:42:b8:18:ef:4e:c9:23:87:e7:38:ba:80:71:
         2a:fe:13:e5:b7:65:87:93:c9:74:c2:b1:ca:53:f5:ca:89:f2:
         d2:71:93:34:e2:ae:06:02:4b:18:79:da:74:3f:e3:45:0e:4a:
         e6:d9:f2:c6:04:ea:cb:c0:89:5c:88:af:cf:6c:91:88:cf:83:
         41:37:8b:48:04:eb:ff:35:73:9c:54:d3:6a:9e:b7:6d:d9:ce:
         22:07:85:ba:32:04:fc:5e:f1:74:dc:55:a2:0e:ae:22:da:79:
         bd:53:ba:a8:ea:ad:96:dc:3f:09:33:24:d4:d3:5f:3f:87:1f:
         94:d3:90:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdDxwf3En9ZJohtb3SPBFoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMzViMjdlYjUyM2I2N2Y4ZDY5MWM4MDYyZjMzNzBlMTQ5
MzAyZmQwHhcNMjQwNjE1MTgwMDQ3WhcNMjQwNjE2MTgwMDQ3WjAzMTEwLwYDVQQD
EyhlOWFjYzNlZTBhNjEzZWMzYTNjZGRmNDcyMGUxNzA5ZWU0NWM1YjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb9HZqTXU9hgNBUouPitkpRa5h0O
xE9AfoySDkwvNUBtL/bSbqIqw34Z92DXGuFqmqLyakkxoL9Z8lSifIRgd4O2+Jq5
KGNJK+J1nvS4leJeuDCo1ZbM/BqTTmW5MtlinTw4zMjRB7aZoqVoUMB5rMppCjpA
FSPg1T8A8RGLGzbTxxq/IoHrz51YSVcjLRvBU9uBUf+9csR9+ZFmMqFvMZQXZZK8
FVrvxc6SWUrBhpfsVTbfkSdXx8q1KgBo1xHBM1G8H4LFqWGFrxUojqfsJRElLJdN
7r3L3fN6UQQsRhUoRlqSUf/QoMmCHPtLGX0KnYyyC1NOZrBkHUlg7jLf0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmsw+4KYT7Do83fRyDhcJ7kXFsFMB8GA1UdIwQY
MBaAFNo1sn61I7Z/jWkcgGLzNw4UkwL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mM2Y4YzQtMTliMC00ZjNiLTg4ZTMt
Y2NlYWViNWQyZGI5LzEvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mM2Y4YzQtMTliMC00ZjNiLTg4ZTMtY2NlYWViNWQyZGI5
LzEvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmkrQ5WN
ZQ/Hk3156Tiidla4NaAfy59jBPw/jgoJGVKqSB3r0Ouo0PbbH78s0LUntwGUJM4v
MCrJxfTaTPej4thIssVxAQ4yw7tar/J59W3S2Q8/yO9ApSO+AQawfILTi4me9lvD
KxIDbRUmz/aKv/Xss0M2Rx6W361Yo3riPF6KiTtCuBjvTskjh+c4uoBxKv4T5bdl
h5PJdMKxylP1yony0nGTNOKuBgJLGHnadD/jRQ5K5tnyxgTqy8CJXIivz2yRiM+D
QTeLSATr/zVznFTTap63bdnOIgeFujIE/F7xdNxVog6uItp5vVO6qOqtltw/CTMk
1NNfP4cflNOQbw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:04:33 2024 by rpki-client on console-ams.rpki-client.org