Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
File:                     v62CMaRsZBx6swHXv77w3Ams1M4.mft (raw, json)
Hash identifier:          L5AD/44Z3Pb9l33V6ZWYVl5BnLHvhYbZnhmf05J0EZg=
Subject key identifier:   20:9B:60:CA:5E:C4:F3:76:E4:28:AC:7D:9C:E1:1D:86:2F:B7:C3:FE
Authority key identifier: BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE
Certificate issuer:       /CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
Certificate serial:       01901EFD749585E068F7B58072CD4D88A96D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
Manifest number:          0E99
Signing time:             Sun 16 Jun 2024 03:00:45 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:45 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:45 +0000
Files and hashes:         1: 7iB_khZVr5Xeq7EbHQUdyisepBo.roa (hash: nc9YnYYaQjwgmXQd2FgTmyhoSA5F2rMMS+Uckt+1rfU=)
                          2: v62CMaRsZBx6swHXv77w3Ams1M4.crl (hash: bGt0qzdya/HTREUw7o+V+BhMZ6gZOo/5NsTQ0vQB4SY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:74:95:85:e0:68:f7:b5:80:72:cd:4d:88:a9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
        Validity
            Not Before: Jun 16 03:00:45 2024 GMT
            Not After : Jun 17 03:00:45 2024 GMT
        Subject: CN=209b60ca5ec4f376e428ac7d9ce11d862fb7c3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b2:4b:bc:ad:fb:73:93:66:b6:64:23:3e:20:
                    43:20:29:ba:84:1e:e4:27:3d:a5:a2:ca:83:0a:06:
                    a3:7d:91:4b:20:4a:a9:f2:be:fd:c1:e7:73:0c:da:
                    3d:06:5a:92:b8:6e:57:d5:4f:47:09:21:6f:99:a6:
                    82:c6:d3:8e:85:9c:e2:6a:9b:b3:6d:74:af:17:81:
                    d3:69:1a:0e:c2:b0:60:24:68:a1:d7:1d:df:9e:97:
                    06:03:aa:2c:81:24:30:b9:21:af:96:f2:20:e2:08:
                    73:a3:7e:cc:87:bb:dd:ff:35:35:6c:21:3d:dd:db:
                    a8:86:09:43:44:3b:13:5b:c9:a6:fc:44:5b:1c:ea:
                    a3:22:e1:a8:ff:79:a0:3d:a8:28:b0:ac:b9:95:cd:
                    93:0c:06:0f:35:55:de:02:e3:08:b7:5f:a3:54:29:
                    11:20:ed:23:3b:bc:0d:f9:05:a2:24:fb:f8:6e:8e:
                    3e:fd:66:b4:d8:1b:83:83:9b:59:97:b1:de:5b:0b:
                    61:62:5c:c3:d7:27:f5:3e:55:9f:17:bc:f1:b4:be:
                    9f:a5:7f:f6:4c:2b:d5:ba:c8:07:b9:a6:13:62:9b:
                    5a:78:2a:e6:ac:f9:29:cd:06:e6:22:15:b5:a5:2a:
                    b1:d1:51:29:c3:9e:f2:16:bc:2d:4d:4b:ee:e2:98:
                    2e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9B:60:CA:5E:C4:F3:76:E4:28:AC:7D:9C:E1:1D:86:2F:B7:C3:FE
            X509v3 Authority Key Identifier:
                keyid:BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c6:f7:e9:bb:45:c4:de:8a:f2:1f:f1:97:32:21:1d:c9:28:
         cb:e0:78:f7:ed:6f:00:13:c8:2c:01:03:88:74:f6:ec:b6:d3:
         4f:1e:83:04:0f:05:38:fb:90:0c:3e:de:ec:27:e1:af:ad:b9:
         64:52:cd:54:b9:0b:de:a3:9d:b1:74:9d:7f:1f:58:87:73:92:
         55:f3:13:2f:8e:e6:48:ec:e0:af:7a:75:84:e5:04:25:7a:b0:
         42:a1:57:9e:33:ec:5f:29:e9:1c:3c:8d:20:94:4d:1d:bf:25:
         5d:d1:e7:1b:55:4c:07:b6:b1:a4:1c:f7:45:7e:b2:a9:b8:92:
         71:33:74:5e:13:3f:fb:fe:f6:c2:4f:0a:7d:fa:77:c9:4a:93:
         cc:53:1a:58:bc:ea:2f:da:e8:e3:b2:91:f1:c2:a0:8a:d1:14:
         13:13:a5:be:fd:bc:b1:0c:62:0e:98:59:9d:29:e2:4e:81:d6:
         59:54:a7:04:8e:be:39:3b:c7:f5:b1:24:28:e0:1d:df:e5:c3:
         79:f6:92:c2:a8:d7:c2:bf:6f:c2:33:9d:f2:fe:a5:73:9d:8b:
         12:d6:97:18:2e:77:1b:9f:9b:e8:b0:63:1e:c6:70:fa:71:dc:
         b5:f9:ee:98:da:fd:6a:da:81:ae:59:ef:33:ea:0c:7b:10:c1:
         fb:91:4b:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAe/XSVheBo97WAcs1NiKltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYWQ4MjMxYTQ2YzY0MWM3YWIzMDFkN2JmYmVmMGRjMDlh
Y2Q0Y2UwHhcNMjQwNjE2MDMwMDQ1WhcNMjQwNjE3MDMwMDQ1WjAzMTEwLwYDVQQD
EygyMDliNjBjYTVlYzRmMzc2ZTQyOGFjN2Q5Y2UxMWQ4NjJmYjdjM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07JLvK37c5NmtmQjPiBDICm6hB7k
Jz2losqDCgajfZFLIEqp8r79wedzDNo9BlqSuG5X1U9HCSFvmaaCxtOOhZziapuz
bXSvF4HTaRoOwrBgJGih1x3fnpcGA6osgSQwuSGvlvIg4ghzo37Mh7vd/zU1bCE9
3duohglDRDsTW8mm/ERbHOqjIuGo/3mgPagosKy5lc2TDAYPNVXeAuMIt1+jVCkR
IO0jO7wN+QWiJPv4bo4+/Wa02BuDg5tZl7HeWwthYlzD1yf1PlWfF7zxtL6fpX/2
TCvVusgHuaYTYptaeCrmrPkpzQbmIhW1pSqx0VEpw57yFrwtTUvu4pguvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCbYMpexPN25CisfZzhHYYvt8P+MB8GA1UdIwQY
MBaAFL+tgjGkbGQcerMB17++8NwJrNTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjYyQ01hUnNaQng2c3dIWHY3N3czQW1zMU00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zMzc5MDAtMzgwZS00OWQ4LWFmNGUt
OWRkNDJjMTcxMTEyLzEvdjYyQ01hUnNaQng2c3dIWHY3N3czQW1zMU00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zMzc5MDAtMzgwZS00OWQ4LWFmNGUtOWRkNDJjMTcxMTEy
LzEvdjYyQ01hUnNaQng2c3dIWHY3N3czQW1zMU00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsb36btF
xN6K8h/xlzIhHckoy+B49+1vABPILAEDiHT27LbTTx6DBA8FOPuQDD7e7Cfhr625
ZFLNVLkL3qOdsXSdfx9Yh3OSVfMTL47mSOzgr3p1hOUEJXqwQqFXnjPsXynpHDyN
IJRNHb8lXdHnG1VMB7axpBz3RX6yqbiScTN0XhM/+/72wk8Kffp3yUqTzFMaWLzq
L9ro47KR8cKgitEUExOlvv28sQxiDphZnSniToHWWVSnBI6+OTvH9bEkKOAd3+XD
efaSwqjXwr9vwjOd8v6lc52LEtaXGC53G5+b6LBjHsZw+nHctfnumNr9atqBrlnv
M+oMexDB+5FL6A==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:27 2024 by rpki-client on console-fra.rpki-client.org