Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File:                     dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier:          rD66DqsUE17TPPNTInJED92/flLpGQ29j4xlHWwsQPs=
Subject key identifier:   68:4D:4C:18:B1:F2:93:25:6E:40:7A:FC:02:20:37:B7:65:F0:9D:95
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer:       /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial:       0190429EFF3EF318226C161DB5AF44EA28E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number:          0CA2
Signing time:             Sun 23 Jun 2024 01:03:54 +0000
Manifest this update:     Sun 23 Jun 2024 01:03:54 +0000
Manifest next update:     Mon 24 Jun 2024 01:03:54 +0000
Files and hashes:         1: 5J4syWzMNYAAvhRky_13h9SCyrU.roa (hash: srbJ86XNEf4n3svadFEpEGitxG3+cjt+FTFTCgFB2KQ=)
                          2: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: nbNK9k0gKx9OryOi72a1ZgS/AhKVfIqBAvX83RSfJfg=)
                          3: j4GCoGR2ifS4g3vRyBFVOZyKhQY.roa (hash: waY3m/0AGdDp0LpEKELDEkJIuzP3S6IrvmOeMlAEtOw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:42:9e:ff:3e:f3:18:22:6c:16:1d:b5:af:44:ea:28:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
        Validity
            Not Before: Jun 23 01:03:54 2024 GMT
            Not After : Jun 24 01:03:54 2024 GMT
        Subject: CN=684d4c18b1f293256e407afc022037b765f09d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:bf:c7:4e:74:d1:02:7a:b9:7c:04:90:e8:
                    47:b8:93:cd:f4:59:ad:b6:41:26:bb:7e:bc:bf:c0:
                    87:0e:f9:ae:50:53:e1:38:79:b1:3e:a4:97:2c:72:
                    bf:9d:7c:f0:4e:85:78:20:df:7e:a4:4c:b5:e7:41:
                    e2:87:37:63:b7:7e:03:fd:54:09:b2:e7:c2:5e:80:
                    a0:16:fe:28:50:97:13:cc:99:f7:8b:c1:1a:b6:f3:
                    60:52:53:ad:83:94:18:c1:23:4e:a3:fe:6b:94:9d:
                    b5:f8:54:95:51:ee:87:5c:7b:23:59:d0:4e:81:c4:
                    34:7d:4c:08:a0:e0:93:27:87:0b:67:b5:10:e4:ca:
                    47:f2:39:a1:82:36:d2:f6:90:92:a8:a4:cb:b5:84:
                    b8:dc:6b:cb:81:0c:58:40:1a:f9:44:89:ef:e0:08:
                    34:0b:9f:f7:60:b9:41:7b:61:ba:20:82:82:1e:d9:
                    a2:37:82:5f:0f:f7:8b:46:62:de:36:3b:fc:5b:1f:
                    e0:12:b1:e5:a6:6e:fb:27:8f:52:d0:dd:a9:61:7d:
                    43:bf:8b:8f:96:58:58:42:90:56:4a:74:3a:4e:63:
                    05:fc:9a:cd:fa:b7:5a:67:ad:cf:eb:4d:18:c1:32:
                    1b:40:9b:20:a9:39:d7:3e:49:3d:9e:a8:2e:fb:d2:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4D:4C:18:B1:F2:93:25:6E:40:7A:FC:02:20:37:B7:65:F0:9D:95
            X509v3 Authority Key Identifier:
                keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1c:4b:e2:35:86:25:f7:d0:12:45:a8:26:6b:ec:02:64:e7:
         38:d8:f6:90:07:aa:35:bf:d8:38:a5:e8:70:1c:b5:2e:e0:8c:
         e1:b2:82:13:b7:37:4b:0b:a4:f3:4f:16:10:a9:1e:6b:35:7e:
         87:a3:9b:92:c4:d6:f6:55:f9:17:44:b1:3e:a7:64:c5:e4:c4:
         3e:80:47:cd:06:00:a8:ff:25:ee:16:ed:da:a0:f6:5c:f5:3c:
         00:d3:22:16:23:03:81:6b:ba:3d:dc:c6:0f:f0:da:4c:ee:b0:
         12:1c:65:45:a9:74:6a:c3:c2:7f:95:35:4b:e9:fb:58:24:7a:
         91:cc:99:7a:57:d4:70:8e:31:7b:4a:6b:bd:07:1a:95:ce:08:
         7e:b3:12:00:2b:18:58:3a:33:79:57:a7:2d:87:8e:dd:46:f8:
         4f:21:65:f7:32:aa:9f:54:e8:38:60:d9:78:e0:76:68:84:a5:
         50:7d:2c:2d:64:66:9d:6e:d7:25:db:32:c4:e3:21:18:6c:d2:
         06:9c:c8:e8:bf:2a:45:23:18:8f:bb:7b:18:4a:e5:aa:f7:e8:
         15:69:72:4e:3f:b4:54:fa:22:a2:05:83:5e:f6:ec:e0:24:01:
         88:00:29:3d:53:9e:22:fc:0e:4b:ec:56:a5:a1:df:0f:f8:55:
         d6:5b:bd:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBCnv8+8xgibBYdta9E6ijmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2Q4NTBjZDEyYTM2M2RkY2RiMGRjMjczZTFkZmM4NjNi
NzA1ZjcwHhcNMjQwNjIzMDEwMzU0WhcNMjQwNjI0MDEwMzU0WjAzMTEwLwYDVQQD
Eyg2ODRkNGMxOGIxZjI5MzI1NmU0MDdhZmMwMjIwMzdiNzY1ZjA5ZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqa/x0500QJ6uXwEkOhHuJPN9Fmt
tkEmu368v8CHDvmuUFPhOHmxPqSXLHK/nXzwToV4IN9+pEy150Hihzdjt34D/VQJ
sufCXoCgFv4oUJcTzJn3i8EatvNgUlOtg5QYwSNOo/5rlJ21+FSVUe6HXHsjWdBO
gcQ0fUwIoOCTJ4cLZ7UQ5MpH8jmhgjbS9pCSqKTLtYS43GvLgQxYQBr5RInv4Ag0
C5/3YLlBe2G6IIKCHtmiN4JfD/eLRmLeNjv8Wx/gErHlpm77J49S0N2pYX1Dv4uP
llhYQpBWSnQ6TmMF/JrN+rdaZ63P600YwTIbQJsgqTnXPkk9nqgu+9JgZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhNTBix8pMlbkB6/AIgN7dl8J2VMB8GA1UdIwQY
MBaAFHQ9hQzRKjY93NsNwnPh38hjtwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzIt
MWRhZjgwYzUxOWQwLzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzItMWRhZjgwYzUxOWQw
LzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRxL4jWG
JffQEkWoJmvsAmTnONj2kAeqNb/YOKXocBy1LuCM4bKCE7c3Swuk808WEKkeazV+
h6ObksTW9lX5F0SxPqdkxeTEPoBHzQYAqP8l7hbt2qD2XPU8ANMiFiMDgWu6PdzG
D/DaTO6wEhxlRal0asPCf5U1S+n7WCR6kcyZelfUcI4xe0prvQcalc4IfrMSACsY
WDozeVenLYeO3Ub4TyFl9zKqn1ToOGDZeOB2aISlUH0sLWRmnW7XJdsyxOMhGGzS
BpzI6L8qRSMYj7t7GErlqvfoFWlyTj+0VPoiogWDXvbs4CQBiAApPVOeIvwOS+xW
paHfD/hV1lu94Q==
-----END CERTIFICATE-----
Generated at Sun Jun 23 03:21:00 2024 by rpki-client on console-fra.rpki-client.org