Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
File:                     rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json)
Hash identifier:          OqiywoFcGlG294h7P3ulnaQA+peIW/1JfvroK74HXXI=
Subject key identifier:   53:52:08:97:BA:A4:74:22:EE:D2:83:F1:30:FE:21:D4:E9:7C:CE:24
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Certificate issuer:       /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial:       01901EC69883A33D8DEBB77D400972D92AC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
Manifest number:          1079
Signing time:             Sun 16 Jun 2024 02:00:49 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:49 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:49 +0000
Files and hashes:         1: 5Ce1LLmrppScdBgUzXOYPfMJVoI.roa (hash: 0ICYer0le2kY8XUPXoznDwLQzpgIThBqsxz/9edLPyk=)
                          2: Pr5icgp5i9wgKJ820epmj3xE3T4.roa (hash: /ZeiV3/i3wuSWX6eWaTx8vsS1pf5LBeexOpmnSn6WCM=)
                          3: _9wL0fuljVPtrADYR_sMmNzojrM.roa (hash: 387UkCF/ry9sdDxx906h4I2x6H15jWAEKkBa2NTkbh8=)
                          4: g9CPxbprGsI6kpi0B1EkUhba9Xo.roa (hash: RsS2uE+Pn46uhT7E+ZN0Ig21/HZvM8nCfD2n8Kncm2k=)
                          5: gVQc1Aj9LbsbNV6kZmGRvWvuuz0.roa (hash: eKb98j9pgCwGo0Tp6dReZcwQ4agigc1VvCGjdqpWy6I=)
                          6: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: jiujpEGO987RWKlrdvxBDOalP/ZjxLls+oI0pKrWLBg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:98:83:a3:3d:8d:eb:b7:7d:40:09:72:d9:2a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
        Validity
            Not Before: Jun 16 02:00:49 2024 GMT
            Not After : Jun 17 02:00:49 2024 GMT
        Subject: CN=53520897baa47422eed283f130fe21d4e97cce24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:43:27:54:30:3f:eb:17:03:f9:91:77:4c:91:
                    66:82:84:2b:a5:c2:19:c4:f8:85:52:13:c6:db:f7:
                    87:64:ac:ca:3e:80:0b:b2:ed:33:94:a4:96:31:7a:
                    51:2b:d5:18:03:9e:59:26:e7:68:82:a2:06:6b:80:
                    d6:36:dc:49:4b:dc:ea:92:6b:97:9d:e7:10:5a:dd:
                    a6:9a:77:6a:c6:f7:d0:86:2a:3d:79:20:da:b0:b0:
                    e2:13:a2:dd:1b:00:a4:c5:e8:64:60:1f:1b:04:3f:
                    d2:14:23:52:bd:9b:78:ae:68:fc:f8:73:ed:84:45:
                    79:56:2b:54:81:ea:fe:0b:ba:80:36:8e:ad:cd:a2:
                    de:31:da:48:1e:ab:fd:0b:b1:20:a7:5e:cc:51:f6:
                    b8:51:57:70:b4:48:a2:8d:1c:47:90:bc:2a:e1:dd:
                    60:2b:10:8c:eb:e2:4d:7c:36:22:9a:27:37:86:34:
                    a8:79:cc:5e:2c:c5:12:70:06:a5:d7:83:30:c6:5b:
                    83:5d:4a:1d:dc:1f:3e:8a:00:54:8e:85:8a:84:4b:
                    08:86:57:ee:dd:59:ce:9f:f5:7a:8b:84:cb:da:6f:
                    5d:10:e9:9d:f9:0c:46:cc:45:25:3f:19:28:7e:66:
                    ad:9f:09:3e:b7:de:24:ef:3f:2d:da:d1:ed:2d:42:
                    30:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:52:08:97:BA:A4:74:22:EE:D2:83:F1:30:FE:21:D4:E9:7C:CE:24
            X509v3 Authority Key Identifier:
                keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:6f:46:75:a6:0c:02:03:86:84:53:52:78:41:f7:f6:53:eb:
         be:fc:d0:5e:44:5c:5f:2b:ee:d4:e9:35:b5:a1:97:d4:20:a0:
         d5:91:0c:ca:be:ca:4e:a2:93:fe:de:82:a9:1d:42:62:c3:e1:
         c4:ee:6b:14:3c:24:42:30:3c:d4:92:cf:8f:26:d1:b0:65:a9:
         2a:63:fe:35:a9:a8:b1:e2:67:48:a0:31:80:4d:f3:65:47:60:
         b3:e0:db:c0:e2:3e:41:c1:b3:9f:b4:b5:bf:b6:3a:ed:37:ad:
         f4:0b:5f:d2:d4:49:b3:0f:55:5c:97:95:02:15:35:24:70:14:
         9f:40:d5:d4:99:30:da:a8:19:4c:aa:01:50:1d:3c:a9:0c:59:
         87:f2:ee:55:31:3d:92:f0:08:1d:84:d9:9d:46:63:9d:dd:35:
         6a:40:41:66:52:7f:27:52:4d:3b:07:07:4b:af:37:20:6a:7d:
         bc:b5:be:c6:1b:0a:2c:5b:77:03:7f:67:80:44:1e:9e:56:c9:
         83:46:48:8b:c6:c5:1b:a2:f7:21:7d:fe:e3:f4:d3:1b:3c:27:
         97:c3:ec:5e:fc:fe:a2:67:e0:a3:97:cc:e8:f7:c1:02:43:9d:
         85:6a:2f:12:c4:24:bc:de:b3:96:a3:9f:e7:bf:ef:7c:fa:f5:
         36:30:5f:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexpiDoz2N67d9QAly2SrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1
MTBhYTkwHhcNMjQwNjE2MDIwMDQ5WhcNMjQwNjE3MDIwMDQ5WjAzMTEwLwYDVQQD
Eyg1MzUyMDg5N2JhYTQ3NDIyZWVkMjgzZjEzMGZlMjFkNGU5N2NjZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UMnVDA/6xcD+ZF3TJFmgoQrpcIZ
xPiFUhPG2/eHZKzKPoALsu0zlKSWMXpRK9UYA55ZJudogqIGa4DWNtxJS9zqkmuX
necQWt2mmndqxvfQhio9eSDasLDiE6LdGwCkxehkYB8bBD/SFCNSvZt4rmj8+HPt
hEV5VitUger+C7qANo6tzaLeMdpIHqv9C7Egp17MUfa4UVdwtEiijRxHkLwq4d1g
KxCM6+JNfDYimic3hjSoecxeLMUScAal14MwxluDXUod3B8+igBUjoWKhEsIhlfu
3VnOn/V6i4TL2m9dEOmd+QxGzEUlPxkofmatnwk+t94k7z8t2tHtLUIwSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNSCJe6pHQi7tKD8TD+IdTpfM4kMB8GA1UdIwQY
MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt
M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3
LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiG9GdaYM
AgOGhFNSeEH39lPrvvzQXkRcXyvu1Ok1taGX1CCg1ZEMyr7KTqKT/t6CqR1CYsPh
xO5rFDwkQjA81JLPjybRsGWpKmP+NamoseJnSKAxgE3zZUdgs+DbwOI+QcGzn7S1
v7Y67Tet9Atf0tRJsw9VXJeVAhU1JHAUn0DV1Jkw2qgZTKoBUB08qQxZh/LuVTE9
kvAIHYTZnUZjnd01akBBZlJ/J1JNOwcHS683IGp9vLW+xhsKLFt3A39ngEQenlbJ
g0ZIi8bFG6L3IX3+4/TTGzwnl8PsXvz+omfgo5fM6PfBAkOdhWovEsQkvN6zlqOf
57/vfPr1NjBfVg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:45:30 2024 by rpki-client on console-fra.rpki-client.org