Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
File:                     cAAC6c0sdKDvi1G0DUTRQaky0oM.mft (raw, json)
Hash identifier:          RDAwqCYjB4nElUK+9ukA7/uJT0eTXeCGjtP4L+t7yCU=
Subject key identifier:   96:37:FA:1D:40:01:E8:4B:12:BF:C9:E3:7A:62:87:44:87:7E:77:DB
Authority key identifier: 70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
Certificate issuer:       /CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Certificate serial:       0190459D7681126EE5652C00A8937496A114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
Manifest number:          0975
Signing time:             Sun 23 Jun 2024 15:01:05 +0000
Manifest this update:     Sun 23 Jun 2024 15:01:05 +0000
Manifest next update:     Mon 24 Jun 2024 15:01:05 +0000
Files and hashes:         1: XVpqmLAo1yF6g3F5_EJQ4IAX8Fw.roa (hash: VoAy/aLnxClF090nQCxrztcaT3RyB8yj9E2j8r8oB1w=)
                          2: cAAC6c0sdKDvi1G0DUTRQaky0oM.crl (hash: PVIt8Fef+9feigl6VAr0fOvPXtHmhR1SoqMY/lCB7cI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:76:81:12:6e:e5:65:2c:00:a8:93:74:96:a1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
        Validity
            Not Before: Jun 23 15:01:05 2024 GMT
            Not After : Jun 24 15:01:05 2024 GMT
        Subject: CN=9637fa1d4001e84b12bfc9e37a628744877e77db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:09:06:64:5d:fe:77:6e:8d:6e:55:b6:e1:
                    5a:0b:70:91:92:42:26:a7:6d:5f:1f:e0:75:86:8a:
                    24:4b:1a:62:78:e5:65:99:46:1e:4a:c8:c9:bb:e1:
                    2b:99:81:1e:86:15:03:9c:bf:d3:1c:99:a6:a5:99:
                    12:76:26:76:af:91:33:5d:20:db:fa:a4:c3:cd:15:
                    ab:50:3d:bd:57:0f:78:39:87:4d:a4:c4:51:57:9d:
                    2e:d7:72:51:b4:d7:0c:2f:b8:a2:00:26:9d:65:ec:
                    29:f6:8d:21:69:43:2f:25:55:d5:b1:2c:17:9a:9b:
                    b1:a7:93:57:ee:4c:66:52:62:00:d0:21:e8:91:3e:
                    23:e9:b2:70:98:07:1e:d2:79:3c:aa:ab:cd:fe:7a:
                    2e:ba:ba:7a:4b:e9:fa:a1:7c:89:8b:88:a1:ce:76:
                    b2:7c:fd:9d:cf:42:93:71:08:59:8b:7b:ec:88:75:
                    97:2c:02:c8:9b:81:29:8b:b3:a0:aa:81:26:63:3f:
                    50:4f:f7:9d:ee:22:24:d8:5e:36:e7:a5:9b:fc:d2:
                    af:25:2e:1b:6e:bb:d5:d2:de:ac:b2:d1:4e:19:d7:
                    a3:47:52:f1:cc:44:f5:de:57:7c:f5:40:39:35:cb:
                    8b:f8:ad:d6:8b:ba:03:f9:2e:13:77:10:4b:8a:7c:
                    4a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:37:FA:1D:40:01:E8:4B:12:BF:C9:E3:7A:62:87:44:87:7E:77:DB
            X509v3 Authority Key Identifier:
                keyid:70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:78:bc:da:c4:25:27:5a:03:ea:2c:f0:c7:e2:45:6d:05:ee:
         38:4b:f1:43:d1:f9:ba:21:3c:d2:1b:a4:06:c6:07:39:12:49:
         e2:17:65:17:94:7b:a7:72:3b:a0:96:86:9d:76:bc:f8:6a:c8:
         e2:2a:b0:db:81:da:94:6f:b6:bc:54:83:fd:a6:bb:a0:23:71:
         31:15:b5:e0:3c:ec:7c:97:76:08:3e:4b:35:e0:29:f4:a2:3c:
         f7:63:b3:54:fa:00:56:d9:f0:90:87:69:bc:7f:91:92:27:58:
         e0:0b:c1:7a:51:99:cc:ea:eb:40:20:06:ef:99:53:81:95:3b:
         6d:97:05:80:b6:b9:f4:23:bd:de:a8:f9:3a:72:79:9b:ec:ea:
         13:84:70:88:5d:5d:e3:0f:2a:3c:67:ec:ff:3f:f4:74:17:51:
         b9:8a:14:28:74:3f:f4:d3:7b:a9:20:d6:7c:f4:5c:f5:4e:ac:
         8b:8f:9b:ee:df:04:38:0b:5c:df:5b:4c:e0:40:a2:02:ac:5e:
         8f:6c:d7:f3:bd:a9:7e:62:80:fc:6e:3c:c5:9c:5b:7f:d6:92:
         91:a2:c6:11:58:ab:45:20:56:76:18:be:eb:f8:3b:29:c1:d6:
         cf:a0:69:b0:ca:de:1c:07:7c:93:5a:53:b2:50:bc:8d:a2:3d:
         da:b7:f3:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFnXaBEm7lZSwAqJN0lqEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMDAwMmU5Y2QyYzc0YTBlZjhiNTFiNDBkNDRkMTQxYTkz
MmQyODMwHhcNMjQwNjIzMTUwMTA1WhcNMjQwNjI0MTUwMTA1WjAzMTEwLwYDVQQD
Eyg5NjM3ZmExZDQwMDFlODRiMTJiZmM5ZTM3YTYyODc0NDg3N2U3N2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTMJBmRd/ndujW5VtuFaC3CRkkIm
p21fH+B1hookSxpieOVlmUYeSsjJu+ErmYEehhUDnL/THJmmpZkSdiZ2r5EzXSDb
+qTDzRWrUD29Vw94OYdNpMRRV50u13JRtNcML7iiACadZewp9o0haUMvJVXVsSwX
mpuxp5NX7kxmUmIA0CHokT4j6bJwmAce0nk8qqvN/nouurp6S+n6oXyJi4ihznay
fP2dz0KTcQhZi3vsiHWXLALIm4Epi7OgqoEmYz9QT/ed7iIk2F4256Wb/NKvJS4b
brvV0t6sstFOGdejR1LxzET13ld89UA5NcuL+K3Wi7oD+S4TdxBLinxKuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJY3+h1AAehLEr/J43pih0SHfnfbMB8GA1UdIwQY
MBaAFHAAAunNLHSg74tRtA1E0UGpMtKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0FBQzZjMHNkS0R2aTFHMERVVFJRYWt5MG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81MmUwYmMtOTYyOS00YTIwLWEwMDIt
OTA5MjA5MzU2YjJmLzEvY0FBQzZjMHNkS0R2aTFHMERVVFJRYWt5MG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81MmUwYmMtOTYyOS00YTIwLWEwMDItOTA5MjA5MzU2YjJm
LzEvY0FBQzZjMHNkS0R2aTFHMERVVFJRYWt5MG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHi82sQl
J1oD6izwx+JFbQXuOEvxQ9H5uiE80hukBsYHORJJ4hdlF5R7p3I7oJaGnXa8+GrI
4iqw24HalG+2vFSD/aa7oCNxMRW14DzsfJd2CD5LNeAp9KI892OzVPoAVtnwkIdp
vH+RkidY4AvBelGZzOrrQCAG75lTgZU7bZcFgLa59CO93qj5OnJ5m+zqE4RwiF1d
4w8qPGfs/z/0dBdRuYoUKHQ/9NN7qSDWfPRc9U6si4+b7t8EOAtc31tM4ECiAqxe
j2zX872pfmKA/G48xZxbf9aSkaLGEVirRSBWdhi+6/g7KcHWz6BpsMreHAd8k1pT
slC8jaI92rfzew==
-----END CERTIFICATE-----
Generated at Sun Jun 23 19:06:00 2024 by rpki-client on console-fra.rpki-client.org