Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
File:                     j-YTvuu37zaZLASRrROyZwcFcmA.mft (raw, json)
Hash identifier:          qaXywzFa+Aq3tKiRyt7TXn6/dptZ8G9MEHXE6IOQyGY=
Subject key identifier:   BE:CA:70:EC:85:CD:89:3A:3B:67:FC:18:05:79:EE:E1:44:70:53:5D
Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
Certificate issuer:       /CN=8fe613beebb7ef36992c0491ad13b26707057260
Certificate serial:       01903773F30C5BF7F350A2A9F7680E480480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
Manifest number:          0763
Signing time:             Thu 20 Jun 2024 21:01:03 +0000
Manifest this update:     Thu 20 Jun 2024 21:01:03 +0000
Manifest next update:     Fri 21 Jun 2024 21:01:03 +0000
Files and hashes:         1: j-YTvuu37zaZLASRrROyZwcFcmA.crl (hash: GuX6yXqkhCwBvJ+z++r7xJqX7MBZfwKoT2mkwH9EMdg=)
                          2: xAnHbN3shZrIkXAxb6MYvXfvhzQ.roa (hash: TYdh8EJGZI0xxVmWya9gm38v7gk+n7f8ZcwYJoqKzjI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 21:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:73:f3:0c:5b:f7:f3:50:a2:a9:f7:68:0e:48:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260
        Validity
            Not Before: Jun 20 21:01:03 2024 GMT
            Not After : Jun 21 21:01:03 2024 GMT
        Subject: CN=beca70ec85cd893a3b67fc180579eee14470535d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:dc:bf:41:d4:7b:d0:21:e9:72:d5:b8:1f:
                    00:e8:f3:f4:58:ab:aa:94:45:3c:cf:e2:80:92:a1:
                    30:9c:c5:f2:15:99:5e:4b:0e:a6:b7:9b:5a:97:8b:
                    73:af:c3:b9:f0:6f:e3:7c:76:a9:d0:c1:4a:16:59:
                    f4:0b:aa:b8:98:dc:7d:2e:03:87:ec:fb:e2:25:d9:
                    e9:45:fe:58:ad:c6:35:ad:11:3e:0f:e9:f1:25:36:
                    9a:dc:e0:ba:a5:37:a6:bd:de:95:92:ea:f1:f2:d9:
                    79:46:f0:6a:12:a1:47:a6:8c:bf:e3:c7:9e:41:01:
                    10:87:cf:73:99:b9:6f:27:3e:6f:20:cd:29:cc:9a:
                    79:26:17:41:3e:64:ef:64:7d:1c:bb:d4:20:54:3a:
                    2c:22:45:0f:ef:41:0d:46:51:74:1b:fd:29:46:91:
                    ba:ae:4b:b5:30:26:6a:47:7d:fc:57:58:a1:30:54:
                    2a:af:d1:c3:0b:43:2f:ed:76:d7:d9:c9:8e:44:66:
                    d4:b0:e2:86:28:d0:3b:f0:21:a2:b5:ab:53:92:da:
                    72:f0:65:21:1f:20:14:46:7d:39:bf:c9:a6:6c:dc:
                    97:e9:78:27:1c:b9:f3:56:09:5a:59:b8:d5:f6:bb:
                    91:fd:67:dd:ce:a8:db:86:14:b7:0c:fa:ef:62:91:
                    c4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CA:70:EC:85:CD:89:3A:3B:67:FC:18:05:79:EE:E1:44:70:53:5D
            X509v3 Authority Key Identifier:
                keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:45:82:f6:69:80:b0:fb:b0:09:6b:3f:01:5d:25:5d:5f:ee:
         0b:01:8e:cc:c0:2e:8d:c8:b7:54:99:de:76:7f:f1:27:24:85:
         77:c6:83:b8:eb:df:98:a2:5d:c8:45:df:a2:07:8f:cc:25:da:
         c9:91:3e:b6:f8:30:f2:50:9d:23:04:4d:c5:cd:1a:21:6d:12:
         46:7d:bf:0c:46:e4:39:af:6f:ed:4f:b4:71:24:13:56:64:e6:
         69:6a:d5:64:18:19:c8:61:8d:55:63:1c:ff:6f:d4:a3:8c:2e:
         02:68:90:f5:90:68:d0:39:d0:18:d7:95:1d:bd:4d:b5:18:b0:
         ae:12:f5:64:98:80:79:dc:43:fd:61:90:46:07:53:09:e1:91:
         db:93:21:31:18:6a:30:db:9d:0f:50:b6:53:db:e1:0d:29:fc:
         0f:56:f7:86:9a:30:52:5d:a9:f6:da:19:25:bf:60:00:f1:59:
         35:32:dd:4d:4b:4e:a2:83:51:39:b5:56:2b:c5:e6:ae:7d:45:
         bc:cb:40:f2:5f:12:3c:ea:8b:bf:a2:68:08:8f:69:fd:f4:74:
         63:25:ed:31:73:8f:28:8d:8c:4f:91:bb:37:9c:12:77:2c:4c:
         7b:09:58:ba:1c:ae:56:ed:f9:74:78:d2:0a:09:df:d0:78:fa:
         75:f4:1c:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA3c/MMW/fzUKKp92gOSASAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZTYxM2JlZWJiN2VmMzY5OTJjMDQ5MWFkMTNiMjY3MDcw
NTcyNjAwHhcNMjQwNjIwMjEwMTAzWhcNMjQwNjIxMjEwMTAzWjAzMTEwLwYDVQQD
EyhiZWNhNzBlYzg1Y2Q4OTNhM2I2N2ZjMTgwNTc5ZWVlMTQ0NzA1MzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9Xcv0HUe9Ah6XLVuB8A6PP0WKuq
lEU8z+KAkqEwnMXyFZleSw6mt5tal4tzr8O58G/jfHap0MFKFln0C6q4mNx9LgOH
7PviJdnpRf5YrcY1rRE+D+nxJTaa3OC6pTemvd6Vkurx8tl5RvBqEqFHpoy/48ee
QQEQh89zmblvJz5vIM0pzJp5JhdBPmTvZH0cu9QgVDosIkUP70ENRlF0G/0pRpG6
rku1MCZqR338V1ihMFQqr9HDC0Mv7XbX2cmORGbUsOKGKNA78CGitatTktpy8GUh
HyAURn05v8mmbNyX6XgnHLnzVglaWbjV9ruR/WfdzqjbhhS3DPrvYpHEKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7KcOyFzYk6O2f8GAV57uFEcFNdMB8GA1UdIwQY
MBaAFI/mE77rt+82mSwEka0TsmcHBXJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83YWY5OWQtZGE4NS00MWE1LWFhNGYt
ZmE2NjU0YTJhNmZlLzEvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83YWY5OWQtZGE4NS00MWE1LWFhNGYtZmE2NjU0YTJhNmZl
LzEvai1ZVHZ1dTM3emFaTEFTUnJST3lad2NGY21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEWC9mmA
sPuwCWs/AV0lXV/uCwGOzMAujci3VJnedn/xJySFd8aDuOvfmKJdyEXfogePzCXa
yZE+tvgw8lCdIwRNxc0aIW0SRn2/DEbkOa9v7U+0cSQTVmTmaWrVZBgZyGGNVWMc
/2/Uo4wuAmiQ9ZBo0DnQGNeVHb1NtRiwrhL1ZJiAedxD/WGQRgdTCeGR25MhMRhq
MNudD1C2U9vhDSn8D1b3hpowUl2p9toZJb9gAPFZNTLdTUtOooNRObVWK8Xmrn1F
vMtA8l8SPOqLv6JoCI9p/fR0YyXtMXOPKI2MT5G7N5wSdyxMewlYuhyuVu35dHjS
Cgnf0Hj6dfQcqQ==
-----END CERTIFICATE-----
Generated at Fri Jun 21 04:08:20 2024 by rpki-client on console-fra.rpki-client.org