Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
File:                     NZ8eO4BVHpihb8K7y33YfJoO_iU.mft (raw, json)
Hash identifier:          UDccc3ESkaLLIZi4FSMZBGQgF48vpwrOWEMSKgGl1cM=
Subject key identifier:   37:4A:EF:5E:A9:CB:B2:66:D4:AA:36:A9:B3:09:42:D1:89:5E:EF:7E
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Certificate issuer:       /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial:       01901DB3CA2A11E818459C011B56254AE5C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
Manifest number:          08C7
Signing time:             Sat 15 Jun 2024 21:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 21:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 21:00:40 +0000
Files and hashes:         1: DJjDf957_BXlLY1eZ-s8nAeCohc.roa (hash: w8Aj5mEJX0sQRtfb43J1DfE69c7i8zVdV4cX2DefEwU=)
                          2: NZ8eO4BVHpihb8K7y33YfJoO_iU.crl (hash: rlH1mRvibVTbFgrrsCxgrDiE7S4InMBEe5V22ynwlBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:b3:ca:2a:11:e8:18:45:9c:01:1b:56:25:4a:e5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
        Validity
            Not Before: Jun 15 21:00:40 2024 GMT
            Not After : Jun 16 21:00:40 2024 GMT
        Subject: CN=374aef5ea9cbb266d4aa36a9b30942d1895eef7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:74:b0:b5:63:68:f1:95:02:10:6d:50:52:78:
                    60:7f:ee:d1:8e:d5:88:0d:a0:a2:01:67:03:f3:a2:
                    f0:03:bc:1b:5d:f6:d7:d6:c1:01:60:2d:a4:9e:a6:
                    90:87:aa:76:21:9d:c6:96:5f:3e:a0:8e:7f:25:d0:
                    7c:f9:cf:23:3a:d9:1c:06:eb:fd:5f:39:f8:98:1f:
                    7a:2b:3b:9e:32:c3:3c:8e:f3:e5:18:13:92:65:91:
                    9d:8c:e7:5c:08:75:79:2a:8c:ae:df:63:be:36:ff:
                    43:c5:be:67:ea:fb:2d:01:b8:e3:b7:83:a4:1b:7d:
                    3b:7b:31:c5:f6:45:36:92:b6:83:ff:78:f8:09:87:
                    a9:85:3a:9b:26:8a:c4:5d:b1:06:f5:e1:c0:8b:bb:
                    6a:a6:9e:9d:34:40:6c:bf:c8:ec:a4:44:2e:7a:b0:
                    ce:84:21:8b:96:b1:b7:a3:94:6c:53:a9:4a:da:aa:
                    82:9d:4f:11:c1:bf:eb:76:5a:76:74:84:c8:bf:a0:
                    fb:db:3b:78:4c:7e:b2:af:91:52:d5:33:04:dc:1f:
                    8f:80:ea:10:d5:59:96:fb:8a:44:66:fe:9d:de:1d:
                    e6:12:d3:61:fd:30:a4:4a:7c:e9:0a:de:15:db:3e:
                    98:35:89:87:f6:4b:e6:50:5a:9f:f9:e5:7e:ff:c0:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4A:EF:5E:A9:CB:B2:66:D4:AA:36:A9:B3:09:42:D1:89:5E:EF:7E
            X509v3 Authority Key Identifier:
                keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:58:63:02:a5:04:9e:4c:c5:93:ce:b5:84:b9:8c:a7:26:2d:
         66:a7:82:dc:b7:7e:59:26:de:a8:bf:63:a6:1c:af:be:c4:b6:
         ab:34:53:33:41:e2:fd:ae:d1:fb:87:7c:0d:ee:db:8e:61:a3:
         1c:49:5d:ff:3a:23:b1:33:50:3a:d5:83:7d:bd:83:5c:43:b9:
         56:01:1e:ae:e4:cc:87:8f:d2:88:d2:97:01:44:43:86:d0:3c:
         6a:1c:34:a4:34:12:be:bc:10:60:10:0e:64:bc:64:40:38:b8:
         ed:7a:dc:8f:2a:89:ea:2a:be:af:09:54:ca:ea:ac:1f:32:75:
         a7:fb:75:90:41:0e:da:07:bf:d5:3c:3c:78:c0:05:7f:6b:b2:
         f5:95:bd:49:f8:10:fe:95:aa:2b:b4:a3:2e:7b:3e:d4:22:b3:
         e9:6c:8e:a5:48:d4:e2:e3:6b:23:21:8c:e3:cd:f8:77:57:b5:
         0c:e3:8d:63:ae:e1:e1:c0:d2:6f:f1:a1:71:58:a6:f4:00:79:
         59:bf:d6:60:09:14:22:c6:85:37:b7:65:46:be:4c:10:78:ce:
         d3:7b:a5:7b:96:f4:51:80:64:5b:6a:24:96:b4:e9:6b:d8:13:
         4f:3f:08:39:e1:74:df:0a:96:49:d6:61:12:2e:94:7c:e9:c3:
         4a:af:d4:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAds8oqEegYRZwBG1YlSuXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWYxZTNiODA1NTFlOThhMTZmYzJiYmNiN2RkODdjOWEw
ZWZlMjUwHhcNMjQwNjE1MjEwMDQwWhcNMjQwNjE2MjEwMDQwWjAzMTEwLwYDVQQD
EygzNzRhZWY1ZWE5Y2JiMjY2ZDRhYTM2YTliMzA5NDJkMTg5NWVlZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXSwtWNo8ZUCEG1QUnhgf+7RjtWI
DaCiAWcD86LwA7wbXfbX1sEBYC2knqaQh6p2IZ3Gll8+oI5/JdB8+c8jOtkcBuv9
Xzn4mB96KzueMsM8jvPlGBOSZZGdjOdcCHV5Koyu32O+Nv9Dxb5n6vstAbjjt4Ok
G307ezHF9kU2kraD/3j4CYephTqbJorEXbEG9eHAi7tqpp6dNEBsv8jspEQuerDO
hCGLlrG3o5RsU6lK2qqCnU8Rwb/rdlp2dITIv6D72zt4TH6yr5FS1TME3B+PgOoQ
1VmW+4pEZv6d3h3mEtNh/TCkSnzpCt4V2z6YNYmH9kvmUFqf+eV+/8DadwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdK716py7Jm1Ko2qbMJQtGJXu9+MB8GA1UdIwQY
MBaAFDWfHjuAVR6YoW/Cu8t92HyaDv4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEt
M2YzYTAyNzQ4YzJhLzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEtM2YzYTAyNzQ4YzJh
LzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVhjAqUE
nkzFk861hLmMpyYtZqeC3Ld+WSbeqL9jphyvvsS2qzRTM0Hi/a7R+4d8De7bjmGj
HEld/zojsTNQOtWDfb2DXEO5VgEeruTMh4/SiNKXAURDhtA8ahw0pDQSvrwQYBAO
ZLxkQDi47XrcjyqJ6iq+rwlUyuqsHzJ1p/t1kEEO2ge/1Tw8eMAFf2uy9ZW9SfgQ
/pWqK7SjLns+1CKz6WyOpUjU4uNrIyGM4834d1e1DOONY67h4cDSb/GhcVim9AB5
Wb/WYAkUIsaFN7dlRr5MEHjO03ule5b0UYBkW2oklrTpa9gTTz8IOeF03wqWSdZh
Ei6UfOnDSq/UmQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:50:03 2024 by rpki-client on console-ams.rpki-client.org