Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
File:                     R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json)
Hash identifier:          OlwBuwS8exvvZwWp7iYedXvM6MdFzMBxwjc7x1gL+WQ=
Subject key identifier:   7A:D8:34:67:DF:73:A2:D6:3C:AE:1A:20:B4:DF:CF:57:13:4F:9D:31
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Certificate issuer:       /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial:       019047C31256E17252B73F8E6225EBB7D997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
Manifest number:          11DB
Signing time:             Mon 24 Jun 2024 01:01:24 +0000
Manifest this update:     Mon 24 Jun 2024 01:01:24 +0000
Manifest next update:     Tue 25 Jun 2024 01:01:24 +0000
Files and hashes:         1: DxjkKXKyFsNLqufXTV9e1T82m6k.roa (hash: K6DnI96JZkzFOs1CX+AJMcGf78HS/hSb1fBbhc6f884=)
                          2: FHoweOmKaLkTpYFWQroLoMlmbXI.roa (hash: ZCqn7doLPLRb8C3lqSmXhrq6CLidnMYsD+BcZjj0KhQ=)
                          3: IwYHO_9j9oaqOlFIBtkJk4yPMCY.roa (hash: JK4JgYTgETgMcO366VVFBLuponyKK6hLfugLdf9llJw=)
                          4: Ma22HQffkC1w9LLY9MHkMh7_bpw.roa (hash: N2mjCEa/JcfQCAn4u3DIWAiyt0Yf9HIjVhjZ6tK9LZw=)
                          5: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: /sAO5VdODj+I9UMjP4GRmQlfjSRFnrjcVX4G5QB+Ge8=)
                          6: tVcTHcFYSFfffzKQkSmU60SB2Z8.roa (hash: ZferKT+Yg5/7nCMVYd76PKRzXjaD0Ig2RIwtuxGmrrU=)
                          7: u5ZBAAkuRWO4jTndrGDRqXsxZWs.roa (hash: KEWI0xX5rCdsVyIOQQGLkRkvNUcDWVrVwo4I7DiuQyY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:47:c3:12:56:e1:72:52:b7:3f:8e:62:25:eb:b7:d9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
        Validity
            Not Before: Jun 24 01:01:24 2024 GMT
            Not After : Jun 25 01:01:24 2024 GMT
        Subject: CN=7ad83467df73a2d63cae1a20b4dfcf57134f9d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:9e:58:a3:fe:63:d4:9b:89:b5:78:cd:82:
                    f3:06:de:9f:8a:c2:fb:83:5b:da:f0:e7:61:6c:f1:
                    57:78:7a:57:00:26:05:16:2f:79:78:04:d7:5d:fb:
                    5e:9c:6b:79:6f:08:05:96:0a:92:e4:99:93:45:93:
                    d2:1f:76:a9:2c:d3:b3:b2:c2:e4:a6:34:7a:cf:d9:
                    b8:36:05:ee:7e:18:6a:04:99:83:37:21:eb:81:be:
                    11:de:1b:dc:58:9c:7c:33:dc:2f:fe:c4:5d:78:e4:
                    03:2e:0a:db:ff:1c:b1:23:79:50:eb:3b:8f:15:e8:
                    c4:44:80:87:bb:7a:30:29:0d:06:8b:60:d2:2a:14:
                    e2:5d:7f:fb:6f:8b:d5:f9:cd:e8:09:c9:23:5a:51:
                    8f:54:8f:dd:a1:e8:1f:ee:fe:20:4c:ce:58:24:c1:
                    8e:86:cd:51:22:6e:ee:2b:72:8e:f6:4e:c3:e3:99:
                    83:fc:ad:5e:4a:3d:a0:39:61:7d:9e:9a:63:90:1b:
                    a0:54:62:7e:5d:26:4b:a8:0e:07:7d:b1:c5:ae:ac:
                    53:15:f0:db:52:e7:69:8f:ff:7a:3d:d7:9c:b1:14:
                    e3:64:9c:24:01:fd:38:0a:32:35:6f:42:5a:af:68:
                    3a:89:c0:2b:b1:79:62:f6:95:01:2d:1b:0d:8a:fa:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D8:34:67:DF:73:A2:D6:3C:AE:1A:20:B4:DF:CF:57:13:4F:9D:31
            X509v3 Authority Key Identifier:
                keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e3:fa:5a:03:fd:f4:cc:5e:a3:dc:3f:80:8a:90:da:bd:e8:
         1a:60:ab:8c:9a:39:a4:43:73:51:0f:f6:49:83:52:75:6f:9c:
         3a:ce:27:50:ed:55:45:96:e4:63:5c:09:15:26:13:69:b4:e9:
         ef:50:6c:7b:1b:b9:e6:50:ff:33:b9:d3:28:11:7b:e1:c2:d8:
         5f:87:30:0e:cc:e0:fa:87:a6:78:23:c6:aa:60:62:e9:ac:ec:
         23:d2:0d:91:1b:d9:f2:c2:90:5c:66:af:86:4b:13:27:4a:23:
         ca:df:70:75:d9:67:54:ad:ff:bd:c9:8d:dc:62:d1:81:81:7e:
         4e:b4:a7:6b:f3:b3:ab:4d:52:ed:e3:83:88:aa:e1:7e:02:af:
         74:15:22:91:d2:b7:34:a1:d8:27:a6:31:f8:27:ba:99:d3:6a:
         93:28:32:70:d7:f8:63:d2:60:7f:2a:84:9d:18:79:60:35:19:
         ac:08:7f:5d:9d:95:98:99:b8:f3:ee:49:42:2e:5a:23:64:7a:
         d5:b4:31:78:96:09:a2:80:d4:85:5c:2f:c0:7b:7f:62:c5:77:
         2b:dc:93:8d:f3:2c:95:f1:b3:81:67:19:0d:a1:24:c3:0a:f5:
         9a:0b:16:4b:af:f6:0e:b7:3f:f3:b6:c5:ef:a3:d9:a8:72:f2:
         dc:51:5a:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBHwxJW4XJStz+OYiXrt9mXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZTk0Y2NiN2I2MDFkYTBjYTA5NDY5ZjYwZjY1MzY0MGZl
ZDhjMWMwHhcNMjQwNjI0MDEwMTI0WhcNMjQwNjI1MDEwMTI0WjAzMTEwLwYDVQQD
Eyg3YWQ4MzQ2N2RmNzNhMmQ2M2NhZTFhMjBiNGRmY2Y1NzEzNGY5ZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRqeWKP+Y9SbibV4zYLzBt6fisL7
g1va8OdhbPFXeHpXACYFFi95eATXXftenGt5bwgFlgqS5JmTRZPSH3apLNOzssLk
pjR6z9m4NgXufhhqBJmDNyHrgb4R3hvcWJx8M9wv/sRdeOQDLgrb/xyxI3lQ6zuP
FejERICHu3owKQ0Gi2DSKhTiXX/7b4vV+c3oCckjWlGPVI/doegf7v4gTM5YJMGO
hs1RIm7uK3KO9k7D45mD/K1eSj2gOWF9nppjkBugVGJ+XSZLqA4HfbHFrqxTFfDb
Uudpj/96PdecsRTjZJwkAf04CjI1b0Jar2g6icArsXli9pUBLRsNivoJUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrYNGffc6LWPK4aILTfz1cTT50xMB8GA1UdIwQY
MBaAFEfpTMt7YB2gyglGn2D2U2QP7YwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQt
YmQ5MGEzZjA2ZTE2LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQtYmQ5MGEzZjA2ZTE2
LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeP6WgP9
9Mxeo9w/gIqQ2r3oGmCrjJo5pENzUQ/2SYNSdW+cOs4nUO1VRZbkY1wJFSYTabTp
71Bsexu55lD/M7nTKBF74cLYX4cwDszg+oemeCPGqmBi6azsI9INkRvZ8sKQXGav
hksTJ0ojyt9wddlnVK3/vcmN3GLRgYF+TrSna/Ozq01S7eODiKrhfgKvdBUikdK3
NKHYJ6Yx+Ce6mdNqkygycNf4Y9JgfyqEnRh5YDUZrAh/XZ2VmJm48+5JQi5aI2R6
1bQxeJYJooDUhVwvwHt/YsV3K9yTjfMslfGzgWcZDaEkwwr1mgsWS6/2Drc/87bF
76PZqHLy3FFaPw==
-----END CERTIFICATE-----
Generated at Mon Jun 24 10:22:26 2024 by rpki-client on console-fra.rpki-client.org