Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
File:                     XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json)
Hash identifier:          quOWEmf3zt1wbAiSmxZgYK4aDXT6YcNwGLCRdZp2LG8=
Subject key identifier:   92:9F:94:03:90:EE:9F:38:AC:B5:28:B4:E6:D8:75:02:5D:9F:3F:DA
Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
Certificate issuer:       /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Certificate serial:       01901BFE91B5543F88111D009AA877B38354
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
Manifest number:          0254
Signing time:             Sat 15 Jun 2024 13:03:06 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:06 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:06 +0000
Files and hashes:         1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: 6K8YvUN1VRKRSWiuTSp23H2hWCuF4vXMvrVdxmEx5o4=)
                          2: sS1AR4FgRRNYkpotwRkNQO8kVEM.roa (hash: hJpNaJKnQNDzRFdlAesa61rJkakb92rbddMB7FELQzk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:91:b5:54:3f:88:11:1d:00:9a:a8:77:b3:83:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
        Validity
            Not Before: Jun 15 13:03:06 2024 GMT
            Not After : Jun 16 13:03:06 2024 GMT
        Subject: CN=929f940390ee9f38acb528b4e6d875025d9f3fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d9:ee:8e:5e:c1:92:f3:62:34:a9:5f:85:25:
                    95:ad:44:69:ad:a6:59:51:bb:ca:9f:81:04:52:ba:
                    25:1e:6e:ed:81:f0:1a:31:da:bb:83:91:33:db:b9:
                    3c:54:b2:ee:7c:65:48:a7:4b:97:ce:f1:05:a2:e5:
                    ff:33:bd:52:9a:09:82:bb:c8:7c:8c:10:d8:28:f8:
                    82:5b:de:56:17:65:18:80:3b:e6:e1:dd:45:68:d0:
                    90:49:ac:59:a6:45:02:41:bc:25:68:b1:8a:30:a4:
                    bf:03:56:a5:72:e3:53:12:34:b7:a2:3a:32:a0:3b:
                    31:08:e6:92:50:19:cf:ed:76:f8:25:0a:8e:37:d6:
                    8b:74:ff:b5:51:25:c1:7e:be:5f:18:32:f2:ee:16:
                    f0:6f:95:65:79:14:fa:2a:ac:6a:1c:ab:b1:e5:7b:
                    d4:16:ba:2a:eb:5f:36:b0:94:06:a7:53:03:78:d3:
                    02:3c:1f:87:04:b3:dc:ab:a1:a1:95:c9:08:a5:bc:
                    f1:fb:90:f6:9b:3a:6d:05:ac:77:e0:0c:6f:c8:d0:
                    74:53:11:72:8f:bd:c3:b1:90:62:c7:76:d7:88:92:
                    da:6a:01:7d:d2:32:e6:68:53:4d:8c:18:44:e0:92:
                    b3:a6:d2:56:01:a2:04:03:1f:3e:74:49:6c:b5:7a:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9F:94:03:90:EE:9F:38:AC:B5:28:B4:E6:D8:75:02:5D:9F:3F:DA
            X509v3 Authority Key Identifier:
                keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d6:e1:64:c1:1a:91:da:af:d7:5c:af:53:36:dc:f8:dc:76:
         a1:67:6d:ae:47:65:ab:03:67:6a:85:ba:04:48:03:34:66:ec:
         28:81:38:26:77:66:8d:dc:a4:70:92:28:29:1b:d0:a8:26:85:
         37:5f:b4:80:1a:f7:bf:0e:cc:1c:38:80:df:73:bd:a3:9f:c0:
         45:33:28:6d:97:19:0c:02:98:95:98:03:1b:7d:33:92:bd:96:
         16:b1:55:67:fa:9f:3e:fe:ed:b5:0b:2a:8a:2b:d5:1d:8b:a4:
         a1:e7:29:3d:7d:8e:90:ee:54:5a:17:30:09:22:61:61:8f:a9:
         ae:aa:86:c5:2f:c2:8d:00:1f:fb:af:a3:ba:f3:32:9c:b9:4e:
         55:1b:e0:74:ed:fb:1c:21:82:d9:76:fb:cb:ba:6a:f4:3c:d4:
         b6:2d:1f:8b:c1:ba:86:42:e8:31:28:7c:12:14:b8:5e:24:6b:
         78:57:14:09:6d:19:b2:b3:e5:98:13:72:55:f7:9a:9f:fe:d4:
         0f:8d:e4:22:a9:14:e5:05:a3:02:1d:04:10:da:4c:27:d2:85:
         5a:09:00:ae:95:6a:0c:0a:d8:11:53:1d:1a:dc:42:41:22:4e:
         86:39:6e:77:fe:62:46:7a:ea:68:1b:73:85:64:e2:76:a0:e8:
         50:03:20:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/pG1VD+IER0Amqh3s4NUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZGU4ZTgxMzlmMmM4ZjYyZjg0ODJkMDFiMGFkYjg2YjJh
MWQxOTUwHhcNMjQwNjE1MTMwMzA2WhcNMjQwNjE2MTMwMzA2WjAzMTEwLwYDVQQD
Eyg5MjlmOTQwMzkwZWU5ZjM4YWNiNTI4YjRlNmQ4NzUwMjVkOWYzZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9nujl7BkvNiNKlfhSWVrURpraZZ
UbvKn4EEUrolHm7tgfAaMdq7g5Ez27k8VLLufGVIp0uXzvEFouX/M71SmgmCu8h8
jBDYKPiCW95WF2UYgDvm4d1FaNCQSaxZpkUCQbwlaLGKMKS/A1alcuNTEjS3ojoy
oDsxCOaSUBnP7Xb4JQqON9aLdP+1USXBfr5fGDLy7hbwb5VleRT6KqxqHKux5XvU
Froq6182sJQGp1MDeNMCPB+HBLPcq6GhlckIpbzx+5D2mzptBax34AxvyNB0UxFy
j73DsZBix3bXiJLaagF90jLmaFNNjBhE4JKzptJWAaIEAx8+dElstXoowwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKflAOQ7p84rLUotObYdQJdnz/aMB8GA1UdIwQY
MBaAFFzejoE58sj2L4SC0BsK24ayodGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy81NjE4YTgtMGI2NC00MWU3LTliNzMt
MDM4OTE4ZWI3MjBmLzEvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy81NjE4YTgtMGI2NC00MWU3LTliNzMtMDM4OTE4ZWI3MjBm
LzEvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdbhZMEa
kdqv11yvUzbc+Nx2oWdtrkdlqwNnaoW6BEgDNGbsKIE4JndmjdykcJIoKRvQqCaF
N1+0gBr3vw7MHDiA33O9o5/ARTMobZcZDAKYlZgDG30zkr2WFrFVZ/qfPv7ttQsq
iivVHYukoecpPX2OkO5UWhcwCSJhYY+prqqGxS/CjQAf+6+juvMynLlOVRvgdO37
HCGC2Xb7y7pq9DzUti0fi8G6hkLoMSh8EhS4XiRreFcUCW0ZsrPlmBNyVfean/7U
D43kIqkU5QWjAh0EENpMJ9KFWgkArpVqDArYEVMdGtxCQSJOhjlud/5iRnrqaBtz
hWTidqDoUAMgcQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:51:37 2024 by rpki-client on console-ams.rpki-client.org