Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File:                     rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier:          g8Lkw8pP3cHYcNBwMD5oQujAlk8RvOrS7P6wjr2s/p8=
Subject key identifier:   C2:51:AD:6B:7E:0F:84:06:4D:D7:2B:E6:46:20:A8:7F:8B:54:4F:B3
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer:       /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial:       0190351907E9DC796A7098B9E8D3059883D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number:          0A66
Signing time:             Thu 20 Jun 2024 10:02:31 +0000
Manifest this update:     Thu 20 Jun 2024 10:02:31 +0000
Manifest next update:     Fri 21 Jun 2024 10:02:31 +0000
Files and hashes:         1: NlGTgRxSWyTIyIz4YsPoE9DjZtk.roa (hash: zbc1A2J5SGirVHi69d9ev+xxHYfp6fZBmbAL6LfG8gg=)
                          2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: WDbK85TituT+nzsfOBeayG4mr0g6/EOPKrlYlIFeZaI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 10:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:35:19:07:e9:dc:79:6a:70:98:b9:e8:d3:05:98:83:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
        Validity
            Not Before: Jun 20 10:02:31 2024 GMT
            Not After : Jun 21 10:02:31 2024 GMT
        Subject: CN=c251ad6b7e0f84064dd72be64620a87f8b544fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:c4:30:99:12:75:03:3a:17:52:00:df:d4:
                    cd:cc:d7:58:e5:23:67:d1:d5:f5:ce:5f:80:1c:2c:
                    e8:56:9f:f1:b6:9c:d3:4d:3f:d5:0d:53:19:4c:aa:
                    9d:88:ec:b6:38:4c:a3:e4:f9:fd:52:d7:ae:fd:8d:
                    f5:5c:65:b0:f9:6d:60:30:50:28:15:83:1a:44:5a:
                    f1:fd:fd:df:78:d0:dd:c6:39:bc:39:88:72:df:49:
                    8f:00:25:8f:30:23:13:d6:4a:83:59:48:ea:61:56:
                    f6:55:f4:95:de:73:14:06:0f:39:6c:53:cd:76:96:
                    95:0d:88:26:f8:0e:a3:25:45:45:ce:e3:04:8e:d7:
                    1b:1f:f2:02:5d:6a:17:ce:cd:35:dc:d5:36:7f:f8:
                    cc:fd:ba:c1:32:61:27:27:8f:5d:4f:89:0e:4a:6f:
                    32:03:86:02:de:61:92:cd:6a:ba:d0:d1:99:ce:d2:
                    21:3c:67:c3:a0:bf:7d:90:44:dd:90:c1:86:aa:d2:
                    a2:28:8f:1d:08:0f:b8:e3:64:f7:70:40:c9:e1:2c:
                    c9:64:47:df:8e:39:65:69:8d:08:46:1c:fd:3c:e4:
                    1b:4e:6f:e2:f8:5f:89:c9:b2:c9:b6:65:b9:6a:bb:
                    39:9e:6e:ae:64:72:d6:f5:b7:8f:a4:9e:7c:84:c3:
                    02:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:51:AD:6B:7E:0F:84:06:4D:D7:2B:E6:46:20:A8:7F:8B:54:4F:B3
            X509v3 Authority Key Identifier:
                keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:94:62:b1:81:1c:43:59:5c:b6:db:09:1c:f6:b9:2f:2b:25:
         4c:86:9f:ea:5e:5b:e7:d8:5b:4e:1d:a4:f7:60:9e:1c:1e:cc:
         08:d8:d4:0e:80:ed:90:4e:b4:29:25:26:27:5f:e0:1b:67:76:
         40:ef:90:91:7c:78:4f:23:4f:81:54:13:65:32:ae:88:1d:5b:
         ed:a8:9a:db:87:29:53:0f:e5:1d:44:09:6e:eb:82:ea:24:9d:
         9a:d7:2d:89:77:ca:8f:82:e3:0e:91:04:8b:38:8a:01:b5:12:
         07:d9:8e:fe:78:df:9f:58:3b:27:f4:9d:d3:4c:34:11:31:b4:
         a6:92:61:67:44:fc:c8:b9:7f:4f:97:f4:e6:ef:64:fc:b6:4c:
         26:2a:dd:86:eb:38:be:fc:3b:4c:33:b7:9d:a9:3e:1f:71:ee:
         e4:5a:83:d9:0e:1b:f7:74:5f:e8:cf:df:1f:b1:d1:49:65:f7:
         81:48:55:4d:1b:db:af:62:5d:24:50:b5:c0:22:5a:61:8e:56:
         66:cd:ca:21:6e:63:89:08:d3:d4:43:17:d2:5c:76:40:16:e3:
         1c:b5:71:cc:e2:0c:2f:7f:41:9a:ce:a1:63:06:16:e6:3a:52:
         a2:be:32:71:13:27:4d:7c:c4:71:d4:9f:68:b8:31:28:71:e1:
         ed:b1:e1:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA1GQfp3HlqcJi56NMFmIPYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzY3YmMxOWYwNjY5OTY0OTBhMjA2Njc0YzhkYThmNWVk
MmNkMGUwHhcNMjQwNjIwMTAwMjMxWhcNMjQwNjIxMTAwMjMxWjAzMTEwLwYDVQQD
EyhjMjUxYWQ2YjdlMGY4NDA2NGRkNzJiZTY0NjIwYTg3ZjhiNTQ0ZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKzEMJkSdQM6F1IA39TNzNdY5SNn
0dX1zl+AHCzoVp/xtpzTTT/VDVMZTKqdiOy2OEyj5Pn9Uteu/Y31XGWw+W1gMFAo
FYMaRFrx/f3feNDdxjm8OYhy30mPACWPMCMT1kqDWUjqYVb2VfSV3nMUBg85bFPN
dpaVDYgm+A6jJUVFzuMEjtcbH/ICXWoXzs013NU2f/jM/brBMmEnJ49dT4kOSm8y
A4YC3mGSzWq60NGZztIhPGfDoL99kETdkMGGqtKiKI8dCA+442T3cEDJ4SzJZEff
jjllaY0IRhz9POQbTm/i+F+JybLJtmW5ars5nm6uZHLW9bePpJ58hMMChQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJRrWt+D4QGTdcr5kYgqH+LVE+zMB8GA1UdIwQY
MBaAFK02e8GfBmmWSQogZnTI2o9e0s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQt
ODRiNjdiNDcwYjA0LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQtODRiNjdiNDcwYjA0
LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpRisYEc
Q1lcttsJHPa5LyslTIaf6l5b59hbTh2k92CeHB7MCNjUDoDtkE60KSUmJ1/gG2d2
QO+QkXx4TyNPgVQTZTKuiB1b7aia24cpUw/lHUQJbuuC6iSdmtctiXfKj4LjDpEE
iziKAbUSB9mO/njfn1g7J/Sd00w0ETG0ppJhZ0T8yLl/T5f05u9k/LZMJirdhus4
vvw7TDO3nak+H3Hu5FqD2Q4b93Rf6M/fH7HRSWX3gUhVTRvbr2JdJFC1wCJaYY5W
Zs3KIW5jiQjT1EMX0lx2QBbjHLVxzOIML39Bms6hYwYW5jpSor4ycRMnTXzEcdSf
aLgxKHHh7bHh2w==
-----END CERTIFICATE-----
Generated at Thu Jun 20 14:20:23 2024 by rpki-client on console-fra.rpki-client.org