Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File:                     pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier:          RhXrIAgs2kiyKWY6OMDxt24ArTBp+7XfMJbXTYs2ozU=
Subject key identifier:   20:A5:D1:F9:84:DA:B9:E3:86:40:65:71:59:C2:06:DD:81:DB:3A:FE
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer:       /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial:       019048683F1215A081222D760EB4F1BBB3EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number:          075E
Signing time:             Mon 24 Jun 2024 04:01:49 +0000
Manifest this update:     Mon 24 Jun 2024 04:01:49 +0000
Manifest next update:     Tue 25 Jun 2024 04:01:49 +0000
Files and hashes:         1: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: jlQzoR7Ix4YNuYu4aBBiw1/RxPmptUkpuSZ4bqRH7Qc=)
                          2: tOSxZOxJKleonEMvQFRBOblqOFM.roa (hash: S5l7y8jnMRml64IX6+MPcJ6uCfuAdVoXNY848uOybSc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:3f:12:15:a0:81:22:2d:76:0e:b4:f1:bb:b3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
        Validity
            Not Before: Jun 24 04:01:49 2024 GMT
            Not After : Jun 25 04:01:49 2024 GMT
        Subject: CN=20a5d1f984dab9e38640657159c206dd81db3afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:16:bf:da:f1:08:f0:83:85:00:cd:d7:88:
                    7f:c0:18:29:d8:8f:5e:f2:d0:59:c2:fc:46:5b:10:
                    d2:cf:af:9b:fc:1a:c4:34:37:fe:18:3d:b2:03:93:
                    c9:74:bf:95:22:67:73:0b:40:c5:a7:e4:e9:5a:ad:
                    e6:d3:85:d0:dc:f6:4d:8c:73:3e:56:fc:10:ab:8f:
                    86:11:79:fe:5b:bd:ed:70:4c:24:ae:c2:35:51:dd:
                    55:ab:7d:a8:21:f3:04:cf:c8:0e:fa:28:6d:77:61:
                    69:75:17:33:a5:ba:29:14:7f:86:30:80:7d:3f:58:
                    42:e3:a1:c3:57:ba:93:ed:41:18:e0:5a:cf:22:4f:
                    ec:af:f3:52:e6:61:5c:9e:88:05:be:5d:4e:f9:4e:
                    d5:65:7d:4c:1e:95:ff:4c:ff:3b:5b:ed:84:40:ca:
                    a0:ec:4b:4e:17:e5:b7:82:b3:fe:64:8a:1b:0a:c9:
                    43:e5:cc:cf:a4:f6:b6:ec:d3:27:af:69:7f:5a:0e:
                    1c:ab:19:05:22:c2:6e:b4:f5:5e:5d:27:a8:19:a7:
                    20:d2:0f:ca:47:de:7c:bc:ab:03:f0:b6:ec:b9:a5:
                    a7:43:8f:4f:3d:06:85:ef:60:e7:08:24:55:c4:41:
                    de:af:55:06:e7:c3:c4:4c:30:05:8c:3f:eb:f7:17:
                    69:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A5:D1:F9:84:DA:B9:E3:86:40:65:71:59:C2:06:DD:81:DB:3A:FE
            X509v3 Authority Key Identifier:
                keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ee:5a:0c:49:c1:95:05:ec:06:75:cd:a7:17:77:ab:df:04:
         90:a4:48:8b:ee:6e:8f:ff:1f:10:9c:2b:9e:39:44:50:21:9b:
         20:d4:2b:c7:86:83:55:27:f1:26:d5:70:d5:b6:bf:40:2f:4e:
         a5:85:3e:89:fe:2a:e7:94:52:22:02:16:31:28:db:d5:4d:bb:
         a2:84:28:04:66:98:48:04:61:c9:d9:7c:22:cb:7e:ca:50:de:
         0c:f1:c3:9d:2e:f3:4e:76:03:70:43:d8:93:a9:6b:f4:d3:e7:
         76:83:af:d1:e2:af:90:cf:74:f0:50:14:65:6a:9e:09:ff:f4:
         59:a3:82:9d:e5:3c:1b:da:47:a2:28:ef:85:7a:22:7e:96:a5:
         e7:44:21:10:ee:82:dd:fb:06:ea:d9:77:ab:8c:be:c9:20:3f:
         b1:89:70:f1:a9:0b:a5:dc:9a:8e:df:5e:98:6a:0d:82:4e:54:
         6d:a4:c9:f2:97:60:46:01:63:15:84:46:cb:7b:0b:9f:c7:62:
         f9:ff:2e:2a:e4:74:c4:48:97:05:fd:38:9d:1a:67:1c:d0:f1:
         71:b0:df:83:6d:6f:96:da:65:c0:3a:c8:51:7d:45:1a:b1:6d:
         9a:34:78:f9:81:a5:06:b2:13:f8:11:8f:88:b8:5e:c3:ea:be:
         c0:4a:2c:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBIaD8SFaCBIi12DrTxu7PqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MDhmYzkyNDYwNDI3NTExMTBkMmVjNTA2NWQwYzQ3ZDFk
NDNjZDAwHhcNMjQwNjI0MDQwMTQ5WhcNMjQwNjI1MDQwMTQ5WjAzMTEwLwYDVQQD
EygyMGE1ZDFmOTg0ZGFiOWUzODY0MDY1NzE1OWMyMDZkZDgxZGIzYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC4Wv9rxCPCDhQDN14h/wBgp2I9e
8tBZwvxGWxDSz6+b/BrENDf+GD2yA5PJdL+VImdzC0DFp+TpWq3m04XQ3PZNjHM+
VvwQq4+GEXn+W73tcEwkrsI1Ud1Vq32oIfMEz8gO+ihtd2FpdRczpbopFH+GMIB9
P1hC46HDV7qT7UEY4FrPIk/sr/NS5mFcnogFvl1O+U7VZX1MHpX/TP87W+2EQMqg
7EtOF+W3grP+ZIobCslD5czPpPa27NMnr2l/Wg4cqxkFIsJutPVeXSeoGacg0g/K
R958vKsD8LbsuaWnQ49PPQaF72DnCCRVxEHer1UG58PETDAFjD/r9xdpkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCl0fmE2rnjhkBlcVnCBt2B2zr+MB8GA1UdIwQY
MBaAFKQI/JJGBCdREQ0uxQZdDEfR1DzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNTk3YzUtM2VjNC00YjQ2LThjN2It
ZDkyMjQ4YWFiZTJkLzEvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hNTk3YzUtM2VjNC00YjQ2LThjN2ItZDkyMjQ4YWFiZTJk
LzEvcEFqOGtrWUVKMUVSRFM3RkJsME1SOUhVUE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvO5aDEnB
lQXsBnXNpxd3q98EkKRIi+5uj/8fEJwrnjlEUCGbINQrx4aDVSfxJtVw1ba/QC9O
pYU+if4q55RSIgIWMSjb1U27ooQoBGaYSARhydl8Ist+ylDeDPHDnS7zTnYDcEPY
k6lr9NPndoOv0eKvkM908FAUZWqeCf/0WaOCneU8G9pHoijvhXoifpal50QhEO6C
3fsG6tl3q4y+ySA/sYlw8akLpdyajt9emGoNgk5UbaTJ8pdgRgFjFYRGy3sLn8di
+f8uKuR0xEiXBf04nRpnHNDxcbDfg21vltplwDrIUX1FGrFtmjR4+YGlBrIT+BGP
iLhew+q+wEos/w==
-----END CERTIFICATE-----
Generated at Mon Jun 24 12:37:40 2024 by rpki-client on console-fra.rpki-client.org