Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
File:                     _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json)
Hash identifier:          jHvI/qmnZmhr58sobUvXB0Oxdy6lYpvwJS+2sULq3f4=
Subject key identifier:   BA:AA:6F:32:E1:D5:8C:5D:75:9A:88:78:D6:6E:72:4D:4B:5A:82:30
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Certificate issuer:       /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial:       0190415297E7123E293A24F52F682249D311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
Manifest number:          0E59
Signing time:             Sat 22 Jun 2024 19:00:50 +0000
Manifest this update:     Sat 22 Jun 2024 19:00:50 +0000
Manifest next update:     Sun 23 Jun 2024 19:00:50 +0000
Files and hashes:         1: QoQI1pFS1VMnrjK34JQFtBdQXOg.roa (hash: bDQVJMJITgg1CpPAc51tdKeFsiJe2EqgtEIeXqCStog=)
                          2: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: /QF0XoYtlgWDyVYLXBCXsgrSu8ALok1fmcCtXyCy+/o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:52:97:e7:12:3e:29:3a:24:f5:2f:68:22:49:d3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
        Validity
            Not Before: Jun 22 19:00:50 2024 GMT
            Not After : Jun 23 19:00:50 2024 GMT
        Subject: CN=baaa6f32e1d58c5d759a8878d66e724d4b5a8230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1f:4c:e4:4b:42:44:72:60:9a:a9:b7:ee:59:
                    a6:d4:ec:4f:68:14:54:68:db:b2:9b:82:bc:84:8b:
                    62:09:1b:5d:b5:fc:e9:6a:f5:b8:be:83:b3:30:ba:
                    bb:b3:4c:2a:11:0a:c4:77:61:63:1d:36:00:01:12:
                    9d:20:63:00:5a:82:55:44:60:16:43:c4:d2:b5:60:
                    c6:51:42:dd:cc:c2:92:85:1f:d2:5f:b1:5b:17:67:
                    9a:0f:cb:53:a3:9a:0c:43:c6:54:d1:6a:7b:ff:6c:
                    5c:d5:b7:26:3a:e2:12:a8:eb:c2:4f:ed:52:4b:8f:
                    ef:c3:73:d8:d7:95:b5:57:af:f8:61:d8:dc:0f:ec:
                    d6:c7:09:cc:91:5c:f8:ea:b1:44:1a:73:35:08:6a:
                    2c:30:ea:ea:8e:a1:88:4b:eb:e1:94:a8:59:06:da:
                    0b:84:5c:76:9f:8c:ff:49:15:bb:16:10:c8:b6:af:
                    a8:b7:4f:69:1e:b7:aa:98:0a:a6:90:ef:23:fe:2e:
                    12:6e:8c:e6:c0:b0:60:06:1a:8b:36:f3:8e:54:57:
                    52:1b:26:9d:25:3f:92:a9:3e:31:af:4a:b7:08:d2:
                    1a:d2:cc:8b:b4:4b:19:83:45:bd:2c:1f:c5:42:ac:
                    52:b6:ea:c9:dd:9f:d4:13:71:e3:6d:3d:36:32:eb:
                    20:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AA:6F:32:E1:D5:8C:5D:75:9A:88:78:D6:6E:72:4D:4B:5A:82:30
            X509v3 Authority Key Identifier:
                keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:96:11:87:9b:97:61:01:b5:48:54:56:4d:98:40:78:5b:3c:
         37:e8:4f:55:33:4a:19:9f:fa:6f:d1:fd:2b:ca:ae:be:41:44:
         74:23:44:3c:14:c1:63:06:1b:23:bf:4b:76:9b:72:4d:47:3d:
         a4:7c:fd:73:f1:ac:f2:0d:4c:7c:aa:37:5a:3d:a2:40:f1:2f:
         22:1d:31:eb:ff:29:57:16:96:95:46:c4:85:ea:b3:87:f7:c3:
         c6:a3:59:95:4c:27:47:4b:26:e5:44:be:c2:8a:fa:03:d8:0f:
         74:53:7c:8f:7b:54:7a:a7:43:4f:72:a6:5d:6e:ff:d3:8e:dc:
         c8:e8:40:e6:7d:71:5c:88:9a:d7:5f:86:fb:02:f8:da:fe:45:
         d3:2e:f1:e7:50:bb:81:90:9d:d8:dd:e0:33:04:b6:63:cd:8b:
         77:d5:60:00:d2:90:1d:a2:cc:07:42:e0:2a:4a:88:23:98:95:
         4f:4b:c2:25:60:bf:63:21:f8:60:f6:4a:77:2c:bb:17:ad:30:
         6e:1c:c4:e9:ce:15:3e:68:9f:2b:4d:d9:4f:6c:4d:90:dc:89:
         11:b8:20:55:d2:e8:d9:a3:cf:ac:47:6a:c5:d5:fb:86:28:90:
         92:b9:17:53:56:76:91:f4:0a:85:61:46:82:ad:73:47:69:b0:
         e6:12:57:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBBUpfnEj4pOiT1L2giSdMRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOGVjMzQzNTM4MGU4YWUxNWZjODFjZGRjYzk0Y2VlNjdk
NmIzOTAwHhcNMjQwNjIyMTkwMDUwWhcNMjQwNjIzMTkwMDUwWjAzMTEwLwYDVQQD
EyhiYWFhNmYzMmUxZDU4YzVkNzU5YTg4NzhkNjZlNzI0ZDRiNWE4MjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx9M5EtCRHJgmqm37lmm1OxPaBRU
aNuym4K8hItiCRtdtfzpavW4voOzMLq7s0wqEQrEd2FjHTYAARKdIGMAWoJVRGAW
Q8TStWDGUULdzMKShR/SX7FbF2eaD8tTo5oMQ8ZU0Wp7/2xc1bcmOuISqOvCT+1S
S4/vw3PY15W1V6/4YdjcD+zWxwnMkVz46rFEGnM1CGosMOrqjqGIS+vhlKhZBtoL
hFx2n4z/SRW7FhDItq+ot09pHreqmAqmkO8j/i4SbozmwLBgBhqLNvOOVFdSGyad
JT+SqT4xr0q3CNIa0syLtEsZg0W9LB/FQqxSturJ3Z/UE3HjbT02MusgjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqqbzLh1YxddZqIeNZuck1LWoIwMB8GA1UdIwQY
MBaAFP2Ow0NTgOiuFfyBzdzJTO5n1rOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYt
Zjc2MjUyNjMwN2U4LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYtZjc2MjUyNjMwN2U4
LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZYRh5uX
YQG1SFRWTZhAeFs8N+hPVTNKGZ/6b9H9K8quvkFEdCNEPBTBYwYbI79LdptyTUc9
pHz9c/Gs8g1MfKo3Wj2iQPEvIh0x6/8pVxaWlUbEheqzh/fDxqNZlUwnR0sm5US+
wor6A9gPdFN8j3tUeqdDT3KmXW7/047cyOhA5n1xXIia11+G+wL42v5F0y7x51C7
gZCd2N3gMwS2Y82Ld9VgANKQHaLMB0LgKkqII5iVT0vCJWC/YyH4YPZKdyy7F60w
bhzE6c4VPmifK03ZT2xNkNyJEbggVdLo2aPPrEdqxdX7hiiQkrkXU1Z2kfQKhWFG
gq1zR2mw5hJXpA==
-----END CERTIFICATE-----
Generated at Sat Jun 22 20:58:18 2024 by rpki-client on console-ams.rpki-client.org