Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File:                     k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier:          +wx9Xr3js7T0+sLX/bd4c+bXlH+WfWYi+cOadgp8Gs4=
Subject key identifier:   DF:62:FA:4F:6E:13:99:DC:56:5F:65:D8:7F:1B:64:36:48:A8:27:B0
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer:       /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial:       01901DED6C18005D888D08290489ADD36DA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:03:37 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:37 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:37 +0000
Files and hashes:         1: 6jQ3xTr0DIH9j5gjCwFzp6Mvd2I.roa (hash: ncr2QxgHYD4NU6BEHv1sH7MKgOyN/gtD0TuynRqqXm0=)
                          2: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: XvR4ADBtwByQAqY8LIk61QBnvExkBCrh2kiFX5hOBH0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:6c:18:00:5d:88:8d:08:29:04:89:ad:d3:6d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
        Validity
            Not Before: Jun 15 22:03:37 2024 GMT
            Not After : Jun 16 22:03:37 2024 GMT
        Subject: CN=df62fa4f6e1399dc565f65d87f1b643648a827b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e0:1d:72:c1:22:b5:27:6f:cd:3e:f3:7a:07:
                    1a:9a:d7:62:e1:5b:ff:5e:b3:0c:31:b8:08:d8:3e:
                    a9:86:9e:ca:2e:70:a3:9f:06:3f:25:81:62:80:c4:
                    49:8c:d8:25:d2:a2:0d:cf:03:f8:23:28:1a:45:d3:
                    94:ab:0b:16:6b:10:14:14:46:c7:b2:32:13:bd:f4:
                    4a:2d:54:f6:84:d4:bf:14:3d:7c:9f:f2:36:f8:66:
                    6b:40:42:ad:c2:f9:33:be:06:b4:13:52:01:b7:7a:
                    09:cd:dd:03:1d:73:7f:1f:cb:c7:94:a2:29:ea:bf:
                    47:9f:e6:11:35:c6:fa:66:e7:c5:a0:b2:62:26:c3:
                    ae:6c:f3:0c:80:9b:d4:a6:c1:06:b5:53:f0:57:c5:
                    52:46:ae:e9:d8:c2:12:1d:cb:db:73:f3:a4:2a:d6:
                    14:e2:ae:c0:dd:aa:3c:77:89:05:be:61:5c:cf:b3:
                    06:95:99:b8:f6:8d:aa:dd:78:c4:d7:7d:26:5a:87:
                    cd:0a:61:39:1f:3a:50:e2:00:20:ec:51:6c:73:87:
                    4d:58:87:ff:d9:e9:29:87:14:22:97:b8:17:10:9c:
                    44:08:10:2c:0b:ba:00:79:b4:cb:d2:b4:9e:df:d5:
                    48:78:ec:ad:6d:f1:ef:b8:02:59:00:46:38:99:5e:
                    68:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:62:FA:4F:6E:13:99:DC:56:5F:65:D8:7F:1B:64:36:48:A8:27:B0
            X509v3 Authority Key Identifier:
                keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:3c:6a:a5:70:76:21:38:04:83:36:d2:75:03:51:b5:cd:e2:
         73:ff:17:08:21:35:7c:7d:05:a2:b2:14:83:ae:f5:db:f0:ff:
         bd:9e:24:7f:c3:ef:d5:e9:e7:d7:ca:37:f8:81:0b:ed:5a:87:
         89:ec:c1:07:c6:ce:59:5d:d2:0d:db:54:cf:8b:8e:32:dd:cc:
         37:3d:1b:f4:ea:e4:ef:a9:7e:f4:f8:c1:24:f2:d8:c4:7f:84:
         ef:7f:62:c0:1e:e0:87:3c:c3:82:a0:69:50:00:35:bc:d8:d0:
         95:75:9d:c6:0f:37:d0:41:39:6d:85:7f:3e:80:2f:89:29:7a:
         21:96:bf:0f:06:ca:c4:fb:03:ce:2e:2e:43:78:bf:5e:14:6c:
         72:4f:74:8c:4c:11:ed:c2:b7:d4:58:34:b3:1f:42:8b:1e:eb:
         b0:57:22:2c:66:ab:1c:a9:e2:66:be:dc:cb:5c:3d:46:a2:9c:
         ce:20:15:89:66:9d:c1:30:e9:b3:6d:86:5d:b4:de:39:ea:20:
         19:96:ea:31:0a:ef:7f:45:45:cc:31:93:21:bd:95:c5:0b:a4:
         01:ad:3f:84:51:a3:27:2a:a8:f4:cc:3a:dc:c0:72:8f:5c:8f:
         8e:66:83:50:cc:0c:4f:f1:6d:ee:de:fe:f7:12:84:4d:20:89:
         19:d7:fa:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7WwYAF2IjQgpBImt022gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzOGVlOTUxY2RhYmMzY2U4MDVlYzhkZjBiZjM0MDNiZGZh
OWM2NTcwHhcNMjQwNjE1MjIwMzM3WhcNMjQwNjE2MjIwMzM3WjAzMTEwLwYDVQQD
EyhkZjYyZmE0ZjZlMTM5OWRjNTY1ZjY1ZDg3ZjFiNjQzNjQ4YTgyN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuAdcsEitSdvzT7zegcamtdi4Vv/
XrMMMbgI2D6php7KLnCjnwY/JYFigMRJjNgl0qINzwP4IygaRdOUqwsWaxAUFEbH
sjITvfRKLVT2hNS/FD18n/I2+GZrQEKtwvkzvga0E1IBt3oJzd0DHXN/H8vHlKIp
6r9Hn+YRNcb6ZufFoLJiJsOubPMMgJvUpsEGtVPwV8VSRq7p2MISHcvbc/OkKtYU
4q7A3ao8d4kFvmFcz7MGlZm49o2q3XjE130mWofNCmE5HzpQ4gAg7FFsc4dNWIf/
2ekphxQil7gXEJxECBAsC7oAebTL0rSe39VIeOytbfHvuAJZAEY4mV5oOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9i+k9uE5ncVl9l2H8bZDZIqCewMB8GA1UdIwQY
MBaAFJOO6VHNq8POgF7I3wvzQDvfqcZXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAt
ZTBmNWQ4NmUzN2EzLzEvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hOGZlNWItNmFjZS00MjM2LThhOTAtZTBmNWQ4NmUzN2Ez
LzEvazQ3cFVjMnJ3ODZBWHNqZkNfTkFPOS1weGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDxqpXB2
ITgEgzbSdQNRtc3ic/8XCCE1fH0ForIUg6712/D/vZ4kf8Pv1enn18o3+IEL7VqH
iezBB8bOWV3SDdtUz4uOMt3MNz0b9Ork76l+9PjBJPLYxH+E739iwB7ghzzDgqBp
UAA1vNjQlXWdxg830EE5bYV/PoAviSl6IZa/DwbKxPsDzi4uQ3i/XhRsck90jEwR
7cK31Fg0sx9Cix7rsFciLGarHKniZr7cy1w9RqKcziAViWadwTDps22GXbTeOeog
GZbqMQrvf0VFzDGTIb2VxQukAa0/hFGjJyqo9Mw63MByj1yPjmaDUMwMT/Ft7t7+
9xKETSCJGdf6cA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 05:05:47 2024 by rpki-client on console-ams.rpki-client.org