Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
File:                     Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json)
Hash identifier:          r0s9z8a/CX1+s8V1fedfE3HzE0s2VJEE2kxu0DTHiKU=
Subject key identifier:   CA:75:7B:27:5C:88:B6:ED:DE:0B:62:52:64:F1:13:4D:7A:11:09:8E
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Certificate issuer:       /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial:       0190448CF70B13F7D5867BA26167EB7EEFBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
Manifest number:          0242
Signing time:             Sun 23 Jun 2024 10:03:27 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:27 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:27 +0000
Files and hashes:         1: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: xHh+M768QYDD6xIoEf+Ij5YQ/VNylwXuiKfnRUfkjKs=)
                          2: b8sU1eeuYNDamzG72M7jL55xeuY.roa (hash: MAVLiZpuGXk5rCm1ozIQ3I0+s5ITzcz8vZdXV5KdnDM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:f7:0b:13:f7:d5:86:7b:a2:61:67:eb:7e:ef:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
        Validity
            Not Before: Jun 23 10:03:27 2024 GMT
            Not After : Jun 24 10:03:27 2024 GMT
        Subject: CN=ca757b275c88b6edde0b625264f1134d7a11098e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:a1:3f:2b:01:31:00:72:94:08:df:a1:c8:
                    06:cd:01:99:e7:d0:26:39:93:15:b0:83:c4:4f:37:
                    fb:45:03:28:f0:e5:ba:85:7c:93:70:28:c7:d4:01:
                    97:0f:8a:35:04:5b:14:72:7c:b7:ec:9c:fc:26:a9:
                    c6:60:69:d3:81:8f:22:67:1d:3c:10:23:c4:ee:ca:
                    13:28:31:72:2f:31:26:f2:8e:aa:18:6b:3c:03:ce:
                    e5:9d:1d:19:26:7b:42:91:e6:25:e1:6e:45:8c:81:
                    1b:e2:e9:79:24:50:ea:c5:54:3d:34:d2:8c:7c:45:
                    22:61:5d:52:af:e8:64:e4:64:9a:f1:f0:2f:d0:60:
                    bf:d3:2b:7c:26:5d:c7:d7:85:27:48:5d:ba:fc:0f:
                    2c:ec:6c:34:cf:07:a3:d0:18:b0:55:c2:34:d9:1b:
                    c1:9a:8b:6a:10:91:f2:f2:c9:58:ae:c9:58:75:fd:
                    71:0d:fc:47:a9:18:19:65:46:63:cb:b4:02:76:9f:
                    e4:5c:7a:82:86:44:17:bb:4f:7d:a2:17:37:8b:97:
                    d9:d3:e0:bb:5e:c4:40:fa:20:40:96:7e:5b:06:a3:
                    aa:8f:b8:d7:da:75:9d:30:4c:44:37:cd:ce:f6:c5:
                    6d:68:b5:7c:3f:66:27:d1:ec:88:eb:02:b9:1e:ba:
                    95:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:75:7B:27:5C:88:B6:ED:DE:0B:62:52:64:F1:13:4D:7A:11:09:8E
            X509v3 Authority Key Identifier:
                keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ee:c1:17:db:02:e2:09:e5:dd:85:bf:16:2b:aa:31:b4:31:
         0f:ee:e3:98:f7:84:90:a5:87:95:bf:7b:b9:35:60:2a:20:c5:
         49:b6:72:f9:3e:02:f6:9c:63:32:3e:5f:da:99:25:e0:f2:d9:
         30:7c:cd:cb:95:00:f9:90:e4:b7:6b:e8:97:b2:91:45:76:3b:
         b8:df:68:67:f7:00:ae:6e:17:e6:66:c2:bd:27:27:ee:01:10:
         ee:41:49:74:84:37:2c:c3:26:39:12:11:1b:b5:3a:22:9d:08:
         01:3f:80:8b:80:7f:20:1d:ea:7a:3f:e9:64:73:e4:1f:c1:95:
         10:83:57:c4:1a:04:5d:fd:d8:16:19:34:13:62:63:8b:c2:38:
         49:50:57:13:60:04:cc:80:71:bf:76:69:a4:3a:63:d8:4e:77:
         0c:9a:44:b4:bb:42:c1:46:b7:3c:3c:50:d4:09:88:80:bd:a2:
         36:d8:10:c0:25:52:7e:b3:1e:3d:99:a5:a1:ec:be:e1:0b:ee:
         1c:13:b9:16:39:66:ee:d8:cb:52:df:5b:bc:cd:ff:34:72:47:
         cd:2c:72:61:e6:83:7a:25:f5:95:f1:a9:d6:56:f6:f2:68:3e:
         77:19:4c:5a:cc:24:9c:74:88:d6:ca:8b:25:91:11:eb:86:28:
         12:51:5b:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEjPcLE/fVhnuiYWfrfu+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NTkyNjdmMDNmNzZkODdmZTQxYjJjYjBiMjk1ZDIzYzc1
NGM1OWEwHhcNMjQwNjIzMTAwMzI3WhcNMjQwNjI0MTAwMzI3WjAzMTEwLwYDVQQD
EyhjYTc1N2IyNzVjODhiNmVkZGUwYjYyNTI2NGYxMTM0ZDdhMTEwOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytqhPysBMQBylAjfocgGzQGZ59Am
OZMVsIPETzf7RQMo8OW6hXyTcCjH1AGXD4o1BFsUcny37Jz8JqnGYGnTgY8iZx08
ECPE7soTKDFyLzEm8o6qGGs8A87lnR0ZJntCkeYl4W5FjIEb4ul5JFDqxVQ9NNKM
fEUiYV1Sr+hk5GSa8fAv0GC/0yt8Jl3H14UnSF26/A8s7Gw0zwej0BiwVcI02RvB
motqEJHy8slYrslYdf1xDfxHqRgZZUZjy7QCdp/kXHqChkQXu099ohc3i5fZ0+C7
XsRA+iBAln5bBqOqj7jX2nWdMExEN83O9sVtaLV8P2Yn0eyI6wK5HrqVCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMp1eydciLbt3gtiUmTxE016EQmOMB8GA1UdIwQY
MBaAFGdZJn8D922H/kGyywspXSPHVMWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEt
OWY4YWJlMGU5ZmYwLzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEtOWY4YWJlMGU5ZmYw
LzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+7BF9sC
4gnl3YW/FiuqMbQxD+7jmPeEkKWHlb97uTVgKiDFSbZy+T4C9pxjMj5f2pkl4PLZ
MHzNy5UA+ZDkt2vol7KRRXY7uN9oZ/cArm4X5mbCvScn7gEQ7kFJdIQ3LMMmORIR
G7U6Ip0IAT+Ai4B/IB3qej/pZHPkH8GVEINXxBoEXf3YFhk0E2Jji8I4SVBXE2AE
zIBxv3ZppDpj2E53DJpEtLtCwUa3PDxQ1AmIgL2iNtgQwCVSfrMePZmloey+4Qvu
HBO5Fjlm7tjLUt9bvM3/NHJHzSxyYeaDeiX1lfGp1lb28mg+dxlMWswknHSI1sqL
JZER64YoElFbgA==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:50:33 2024 by rpki-client on console-ams.rpki-client.org