Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File:                     dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier:          a13pphIzEF2Qd2+P0hqJXCoDuS12muuw2sFLw9JyGOQ=
Subject key identifier:   DC:4F:9D:75:18:4E:9E:CB:21:1A:76:9D:8F:E5:82:F8:7B:C4:19:7B
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer:       /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial:       01901CA1216323D44B5BC591E421FBAFE1C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 16:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:40 +0000
Files and hashes:         1: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: 4E32ag1zblUu5WccKE1ZiKjaIIekLr63zW4ciVGNGJ4=)
                          2: grzrGg4_ToMbBX9iaB8jKFatUlk.roa (hash: rjONq1y4IsPKttoDvDDiwmzXpuQJimcBu0cOd2DCgNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:21:63:23:d4:4b:5b:c5:91:e4:21:fb:af:e1:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
        Validity
            Not Before: Jun 15 16:00:40 2024 GMT
            Not After : Jun 16 16:00:40 2024 GMT
        Subject: CN=dc4f9d75184e9ecb211a769d8fe582f87bc4197b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:c8:bc:48:04:cf:cc:2b:d2:48:47:87:18:
                    0e:4b:2f:24:9c:48:6b:ed:3f:59:d6:d9:52:88:0e:
                    5a:bf:7b:37:33:bd:f6:59:4c:32:ba:5d:4e:55:2b:
                    9c:7c:dc:26:14:98:5e:98:ca:df:68:4f:e3:8c:81:
                    75:cb:f4:69:b2:82:15:76:9e:8f:98:4b:b1:91:e4:
                    5c:81:40:52:69:df:d3:37:db:e1:a7:62:fa:b0:0f:
                    f2:d8:6e:d8:f6:4b:78:19:ca:72:64:17:fc:65:78:
                    91:bf:96:0f:df:f5:17:4e:c8:d5:80:10:fc:9f:fa:
                    10:55:cd:78:ab:ab:42:0b:1d:18:f5:e8:5b:b7:9b:
                    a2:ca:5d:00:d3:66:b3:27:57:0d:f1:b8:92:da:55:
                    95:1a:66:90:58:62:54:d1:ca:c2:bd:11:0b:e0:24:
                    86:12:c1:36:23:ca:d9:41:d6:33:7b:00:d6:ee:b6:
                    96:db:8c:f7:b0:4a:1d:68:d9:03:b3:e1:40:f8:88:
                    58:e3:12:df:2e:0e:b2:d0:6a:25:88:84:f2:ac:72:
                    c2:34:69:a5:b9:86:00:93:14:03:03:16:cd:14:7a:
                    9f:3d:6b:b7:4e:40:b4:84:ce:28:89:bb:46:5f:b6:
                    fe:dd:75:15:ba:31:c6:52:88:92:50:81:88:44:c7:
                    a7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4F:9D:75:18:4E:9E:CB:21:1A:76:9D:8F:E5:82:F8:7B:C4:19:7B
            X509v3 Authority Key Identifier:
                keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c5:49:71:c4:b4:39:10:3c:a6:20:88:0c:9e:5e:cc:c1:7a:
         01:61:d2:5b:10:3e:ae:e0:e1:50:43:53:b2:33:31:50:06:db:
         96:44:d4:ae:ca:f1:00:1f:3d:c8:4b:e0:60:9e:e5:25:70:c7:
         c1:7e:04:c1:ee:29:e6:1a:f4:7b:40:2f:89:3e:7e:99:24:dd:
         7a:dc:85:cf:60:0a:00:ab:ad:53:b4:2f:a3:83:3d:5c:fe:50:
         12:89:f2:80:4c:65:6c:85:33:a4:8e:80:f8:97:f9:dc:83:82:
         12:b6:e2:5e:13:38:6d:de:84:c0:08:bb:59:cb:f4:d0:da:65:
         ee:bd:00:ea:c7:53:c2:43:aa:97:ee:c9:4a:a1:1f:88:61:7a:
         e2:4c:83:27:b7:ab:d2:90:ec:43:ee:d2:7d:02:b1:46:33:22:
         d6:f2:f1:d9:bb:81:e5:e4:ea:ab:be:0d:29:d9:69:37:70:9e:
         28:43:c2:c3:62:9a:5c:00:a1:0a:60:e1:ab:84:52:4d:45:69:
         a3:fe:2d:43:ed:85:3d:c1:9a:9c:4b:1c:5c:fa:79:11:4b:26:
         e4:50:84:1b:97:69:cf:2a:bd:92:a3:73:f3:45:13:f2:dc:b8:
         8a:dc:fa:19:32:27:19:6d:9b:ad:29:8e:51:b7:d8:72:23:3c:
         67:f8:b2:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcoSFjI9RLW8WR5CH7r+HBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZjkzNjljNmUyM2MxYmYwZGJlZDMwMWM3ZDAwYjRhM2Zk
ZjBkMDQwHhcNMjQwNjE1MTYwMDQwWhcNMjQwNjE2MTYwMDQwWjAzMTEwLwYDVQQD
EyhkYzRmOWQ3NTE4NGU5ZWNiMjExYTc2OWQ4ZmU1ODJmODdiYzQxOTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosPIvEgEz8wr0khHhxgOSy8knEhr
7T9Z1tlSiA5av3s3M732WUwyul1OVSucfNwmFJhemMrfaE/jjIF1y/RpsoIVdp6P
mEuxkeRcgUBSad/TN9vhp2L6sA/y2G7Y9kt4GcpyZBf8ZXiRv5YP3/UXTsjVgBD8
n/oQVc14q6tCCx0Y9ehbt5uiyl0A02azJ1cN8biS2lWVGmaQWGJU0crCvREL4CSG
EsE2I8rZQdYzewDW7raW24z3sEodaNkDs+FA+IhY4xLfLg6y0GoliITyrHLCNGml
uYYAkxQDAxbNFHqfPWu3TkC0hM4oibtGX7b+3XUVujHGUoiSUIGIRMenGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxPnXUYTp7LIRp2nY/lgvh7xBl7MB8GA1UdIwQY
MBaAFHT5NpxuI8G/Db7TAcfQC0o/3w0EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iOWRjNGMtNjQzYS00MWI4LWE0NTkt
MmI1MThhY2I3OGYzLzEvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iOWRjNGMtNjQzYS00MWI4LWE0NTktMmI1MThhY2I3OGYz
LzEvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesVJccS0
ORA8piCIDJ5ezMF6AWHSWxA+ruDhUENTsjMxUAbblkTUrsrxAB89yEvgYJ7lJXDH
wX4Ewe4p5hr0e0AviT5+mSTdetyFz2AKAKutU7Qvo4M9XP5QEonygExlbIUzpI6A
+Jf53IOCErbiXhM4bd6EwAi7Wcv00Npl7r0A6sdTwkOql+7JSqEfiGF64kyDJ7er
0pDsQ+7SfQKxRjMi1vLx2buB5eTqq74NKdlpN3CeKEPCw2KaXAChCmDhq4RSTUVp
o/4tQ+2FPcGanEscXPp5EUsm5FCEG5dpzyq9kqNz80UT8ty4itz6GTInGW2brSmO
UbfYciM8Z/iyig==
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:52:44 2024 by rpki-client on console-ams.rpki-client.org