Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
File:                     zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft (raw, json)
Hash identifier:          O1qOl8r4OpYD2duHGhmeb0GYCsq51iRHpZ15VkmcgKQ=
Subject key identifier:   59:C2:D8:15:A5:77:E2:EA:7D:70:3A:7A:EE:C3:7E:5D:19:26:82:0E
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Certificate issuer:       /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial:       01901EC6E1602BF962962BC23D8E462B7827
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 02:01:08 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:08 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:08 +0000
Files and hashes:         1: V0EFEhey7obucioqDkd4qD1cNgM.roa (hash: Apn/NAhg4hg6Sq4WUb5gNPVwpP0Zra6HNarrbrkCBtQ=)
                          2: adtMNQAySxt88Ssc2EmZHEONHy4.roa (hash: fdZ04ESjlev89LKvcrPk5vmNIRpe6BCeEruETN2RAsc=)
                          3: zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl (hash: GFgkIJ/CF7QhP3tsTaqzUdlsu3RBdJvxkU5pQ5cEC9Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:e1:60:2b:f9:62:96:2b:c2:3d:8e:46:2b:78:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
        Validity
            Not Before: Jun 16 02:01:08 2024 GMT
            Not After : Jun 17 02:01:08 2024 GMT
        Subject: CN=59c2d815a577e2ea7d703a7aeec37e5d1926820e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f9:08:fb:fe:08:cd:85:b5:24:e7:44:73:60:
                    d6:1d:0a:f5:c5:f8:55:8b:df:03:e9:cd:a0:a1:cd:
                    bc:81:74:13:08:04:f5:b8:aa:cd:5e:9f:6e:a6:2d:
                    80:e1:b4:2b:2e:65:e5:82:40:db:cf:2d:bb:71:50:
                    c2:cb:55:ff:33:96:65:16:da:90:2b:fd:d5:3d:5e:
                    5e:89:99:b0:5b:f0:e2:82:2f:87:bd:33:e8:1b:e3:
                    f8:03:76:fe:db:8e:d0:ba:ea:fb:6f:0f:30:e4:18:
                    8f:5c:8e:b6:7e:1c:7e:69:16:4a:33:da:7a:34:1b:
                    88:5b:72:67:1f:6a:37:3c:52:ab:1d:e1:29:25:da:
                    c1:83:61:2c:bc:60:d6:33:33:f8:46:d2:a9:93:87:
                    e0:f2:75:6b:f2:23:d2:0c:2a:47:34:5e:48:cf:a6:
                    1b:d2:fa:86:44:de:2f:5a:c2:ae:0f:a6:c9:1e:cb:
                    f2:85:e0:f3:e2:ac:f5:62:38:f1:aa:49:88:61:2a:
                    64:a2:6d:ba:ef:bf:60:a4:d2:4e:cc:d6:df:23:0d:
                    85:aa:c6:6d:75:b0:b8:75:50:09:41:f4:61:30:ce:
                    e7:34:09:20:62:44:7c:90:41:5c:f1:cd:ab:f9:f7:
                    5a:48:70:94:81:0a:50:53:0f:8d:3d:b9:8d:2d:32:
                    ab:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C2:D8:15:A5:77:E2:EA:7D:70:3A:7A:EE:C3:7E:5D:19:26:82:0E
            X509v3 Authority Key Identifier:
                keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:02:0a:b1:3e:cc:c8:03:9f:9d:7c:e8:3f:85:91:ff:c3:7c:
         c0:7c:b9:d2:9e:ba:76:4a:a8:65:ca:a0:41:4c:02:af:16:3b:
         78:b1:01:e1:98:d0:f2:91:c0:ff:84:56:ba:4f:6f:d4:3c:c5:
         a9:34:a2:60:18:03:6f:56:f5:fc:d5:b2:78:3c:32:36:a7:1a:
         a5:1a:cd:79:8b:d0:5c:d9:aa:40:38:c9:b4:8d:6b:c4:c5:1e:
         6d:9b:0c:df:3b:38:e4:fe:af:55:4c:2d:c5:fb:89:dd:43:3a:
         09:24:d9:47:0a:cc:1b:23:ea:b0:ec:04:b4:e8:ba:b9:02:4c:
         41:a3:d8:38:3e:f5:38:19:53:99:d5:c3:8c:36:2a:3f:47:b8:
         57:68:a0:7d:ed:03:71:12:c3:53:ff:63:4a:4c:46:1f:12:30:
         a5:99:e5:fe:b1:b5:31:9f:f6:f6:b2:e0:5a:2b:32:53:a2:48:
         17:c6:91:28:91:0a:cb:67:35:15:96:3f:86:6a:16:3f:c7:7b:
         cf:ab:07:f2:a9:ca:ea:26:3f:a5:10:0f:c1:a7:9d:d0:de:25:
         12:67:05:af:e1:8c:2f:5a:52:3e:2d:d9:5c:70:24:72:72:50:
         3c:96:59:47:9c:90:0f:11:50:17:80:a4:53:fe:20:d1:c2:d7:
         dd:7a:b8:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexuFgK/lilivCPY5GK3gnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYjBjYTIyOTEyNzZkN2QyYTJmOGE3MDUwZjRiYTgyN2Zl
OTEwYTEwHhcNMjQwNjE2MDIwMTA4WhcNMjQwNjE3MDIwMTA4WjAzMTEwLwYDVQQD
Eyg1OWMyZDgxNWE1NzdlMmVhN2Q3MDNhN2FlZWMzN2U1ZDE5MjY4MjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPkI+/4IzYW1JOdEc2DWHQr1xfhV
i98D6c2goc28gXQTCAT1uKrNXp9upi2A4bQrLmXlgkDbzy27cVDCy1X/M5ZlFtqQ
K/3VPV5eiZmwW/Digi+HvTPoG+P4A3b+247Quur7bw8w5BiPXI62fhx+aRZKM9p6
NBuIW3JnH2o3PFKrHeEpJdrBg2EsvGDWMzP4RtKpk4fg8nVr8iPSDCpHNF5Iz6Yb
0vqGRN4vWsKuD6bJHsvyheDz4qz1YjjxqkmIYSpkom26779gpNJOzNbfIw2FqsZt
dbC4dVAJQfRhMM7nNAkgYkR8kEFc8c2r+fdaSHCUgQpQUw+NPbmNLTKriQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnC2BWld+LqfXA6eu7Dfl0ZJoIOMB8GA1UdIwQY
MBaAFMywyiKRJ219Ki+KcFD0uoJ/6RChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekxES0lwRW5iWDBxTDRwd1VQUzZnbl9wRUtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kMzgzNjAtNGQxZi00MjJlLTkwYWUt
MDhiOWUxMTAxYWE3LzEvekxES0lwRW5iWDBxTDRwd1VQUzZnbl9wRUtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9kMzgzNjAtNGQxZi00MjJlLTkwYWUtMDhiOWUxMTAxYWE3
LzEvekxES0lwRW5iWDBxTDRwd1VQUzZnbl9wRUtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQIKsT7M
yAOfnXzoP4WR/8N8wHy50p66dkqoZcqgQUwCrxY7eLEB4ZjQ8pHA/4RWuk9v1DzF
qTSiYBgDb1b1/NWyeDwyNqcapRrNeYvQXNmqQDjJtI1rxMUebZsM3zs45P6vVUwt
xfuJ3UM6CSTZRwrMGyPqsOwEtOi6uQJMQaPYOD71OBlTmdXDjDYqP0e4V2igfe0D
cRLDU/9jSkxGHxIwpZnl/rG1MZ/29rLgWisyU6JIF8aRKJEKy2c1FZY/hmoWP8d7
z6sH8qnK6iY/pRAPwaed0N4lEmcFr+GML1pSPi3ZXHAkcnJQPJZZR5yQDxFQF4Ck
U/4g0cLX3Xq4Gw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 05:04:02 2024 by rpki-client on console-ams.rpki-client.org