Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
File:                     jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft (raw, json)
Hash identifier:          MqwiBDbGnZ7F5l9/EHchZKJJdXZ+E5nVpCSb3Z7G6i4=
Subject key identifier:   02:CD:8D:C3:93:78:E4:E2:BC:97:F7:90:73:0C:A6:8A:18:77:5F:04
Authority key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
Certificate issuer:       /CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Certificate serial:       01901E902458619AD47866A6A58CA5A6ADB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
Manifest number:          0BC0
Signing time:             Sun 16 Jun 2024 01:01:21 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:21 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:21 +0000
Files and hashes:         1: gF0NkHy8wxS8qALBz3-yFYb2MF4.roa (hash: qMdxBjufNDC0GmAJyM8H1As+jKLA4ykOV0NHzlIxNRU=)
                          2: jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl (hash: 8GD6iue4e5/06ogIEt7ExGYoLoBQo7zhpGa3t+v0WpY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:24:58:61:9a:d4:78:66:a6:a5:8c:a5:a6:ad:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
        Validity
            Not Before: Jun 16 01:01:21 2024 GMT
            Not After : Jun 17 01:01:21 2024 GMT
        Subject: CN=02cd8dc39378e4e2bc97f790730ca68a18775f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:ef:df:82:97:07:42:bb:8d:d4:bf:23:8e:
                    7c:c1:2c:71:1c:49:23:15:fb:83:97:34:65:e6:e0:
                    8c:40:7d:40:29:d8:c5:6a:94:2c:b7:ff:fb:ac:ee:
                    9a:c6:ef:39:9f:e3:c5:05:62:35:05:0a:f2:f5:f3:
                    47:d1:1a:12:a0:9e:e7:e1:b3:49:71:4e:82:c3:a6:
                    10:4e:11:7c:56:0b:1d:8c:94:2c:08:39:77:70:46:
                    f7:86:6e:9c:c9:65:21:00:98:3a:40:b9:db:89:a3:
                    ed:7e:06:11:de:61:9f:f1:d6:21:55:8e:92:36:87:
                    bd:ea:1b:60:11:18:3c:44:8e:6e:f5:16:a5:c3:7a:
                    f8:01:48:aa:a8:29:e2:ea:68:91:fc:67:59:0f:00:
                    64:ac:ad:13:52:51:42:52:58:cf:01:40:83:17:9d:
                    71:e5:45:bc:c9:f8:2b:24:0e:b2:9d:93:bf:35:16:
                    95:42:11:5e:6e:d8:3d:71:2c:75:44:c5:39:6d:84:
                    3c:2c:5d:cf:bc:23:1a:c3:37:62:74:7e:b5:82:f7:
                    4c:bd:d8:0d:1d:1e:e2:2d:0a:7e:e7:fb:10:14:99:
                    81:85:93:f9:f7:84:f9:86:f1:58:2f:69:ef:85:b9:
                    27:6b:0a:06:20:78:b7:f3:c3:7f:45:d5:03:22:1b:
                    35:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CD:8D:C3:93:78:E4:E2:BC:97:F7:90:73:0C:A6:8A:18:77:5F:04
            X509v3 Authority Key Identifier:
                keyid:8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f7:0e:0d:8e:b5:bb:1c:49:16:3f:40:5f:bc:9e:f3:1d:88:
         4a:22:70:f4:67:4c:5d:9f:1b:7c:a7:80:6a:b6:63:1d:e6:8d:
         1d:5a:6c:6f:6b:fa:6c:a1:d5:67:a1:5b:c0:5e:47:82:a7:62:
         57:5d:b7:a5:c6:c4:d1:32:02:21:b4:d1:7a:58:4c:ee:2e:55:
         b0:58:c0:97:17:d3:f1:f1:7c:48:20:0d:68:81:0e:4a:67:ca:
         04:23:4f:30:86:4e:d7:e1:a1:78:bb:8b:0f:c4:72:2a:bd:f9:
         07:2f:8a:00:01:a6:dc:b6:22:5c:a0:c9:94:57:ae:45:70:0b:
         3a:4d:31:30:60:25:67:67:c7:61:df:04:d7:12:08:ce:a2:9b:
         af:54:e6:4e:5c:d9:52:31:f6:1b:db:be:fa:30:1d:48:83:9c:
         f9:83:12:67:04:bf:09:db:0c:84:29:7d:fa:52:30:7f:80:b1:
         98:2e:5f:f6:48:21:42:f6:01:c2:07:51:c0:d5:f4:e2:91:e7:
         92:f5:d0:83:0f:8d:9e:61:16:92:f7:c3:a7:f6:f0:a2:d7:0a:
         2d:8d:72:b3:c7:a4:40:8d:dd:62:1e:90:ac:a3:fc:97:37:d2:
         3d:b4:d3:09:d3:cc:2f:8b:20:6a:c8:e3:30:c1:3b:89:e6:c8:
         14:72:e8:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAekCRYYZrUeGampYylpq22MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNjkyZDI5YWMzMTJkMmFiNjA2MWU0NGE5ZGUwZWQzNzUx
YWVhN2UwHhcNMjQwNjE2MDEwMTIxWhcNMjQwNjE3MDEwMTIxWjAzMTEwLwYDVQQD
EygwMmNkOGRjMzkzNzhlNGUyYmM5N2Y3OTA3MzBjYTY4YTE4Nzc1ZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM7v34KXB0K7jdS/I458wSxxHEkj
FfuDlzRl5uCMQH1AKdjFapQst//7rO6axu85n+PFBWI1BQry9fNH0RoSoJ7n4bNJ
cU6Cw6YQThF8VgsdjJQsCDl3cEb3hm6cyWUhAJg6QLnbiaPtfgYR3mGf8dYhVY6S
Noe96htgERg8RI5u9Ralw3r4AUiqqCni6miR/GdZDwBkrK0TUlFCUljPAUCDF51x
5UW8yfgrJA6ynZO/NRaVQhFebtg9cSx1RMU5bYQ8LF3PvCMawzdidH61gvdMvdgN
HR7iLQp+5/sQFJmBhZP594T5hvFYL2nvhbknawoGIHi388N/RdUDIhs1kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALNjcOTeOTivJf3kHMMpooYd18EMB8GA1UdIwQY
MBaAFIxpLSmsMS0qtgYeRKneDtN1Gup+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iYjc1NTYtOWZjNy00MDZlLWIzOGEt
OTI2MmU1M2UxZDEwLzEvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9iYjc1NTYtOWZjNy00MDZlLWIzOGEtOTI2MmU1M2UxZDEw
LzEvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/cODY61
uxxJFj9AX7ye8x2ISiJw9GdMXZ8bfKeAarZjHeaNHVpsb2v6bKHVZ6FbwF5Hgqdi
V123pcbE0TICIbTRelhM7i5VsFjAlxfT8fF8SCANaIEOSmfKBCNPMIZO1+GheLuL
D8RyKr35By+KAAGm3LYiXKDJlFeuRXALOk0xMGAlZ2fHYd8E1xIIzqKbr1TmTlzZ
UjH2G9u++jAdSIOc+YMSZwS/CdsMhCl9+lIwf4CxmC5f9kghQvYBwgdRwNX04pHn
kvXQgw+NnmEWkvfDp/bwotcKLY1ys8ekQI3dYh6QrKP8lzfSPbTTCdPML4sgasjj
MME7iebIFHLo2A==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:04:21 2024 by rpki-client on console-fra.rpki-client.org