Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
File:                     do75wQS-IihL97J1bSqBc5RqOG4.mft (raw, json)
Hash identifier:          DYzz3tUVb5E8gCh8GYcEDPrcyrrBLyTg665onb9TP9k=
Subject key identifier:   A6:38:1B:65:C7:47:E4:F4:EB:42:A6:5A:FE:BD:E8:EE:42:A0:3F:71
Authority key identifier: 76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
Certificate issuer:       /CN=768ef9c104be22284bf7b2756d2a8173946a386e
Certificate serial:       01901E59455AA10843C2F6B1E57FFAF982D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 00:01:25 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:25 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:25 +0000
Files and hashes:         1: 1-Rb3U9ZTIGj7qfCag4g7GzJsHKI.roa (hash: gCyHpQqfnZ2yB8sN1nrczY7XFo9eFl5dbZsjfhWId+o=)
                          2: do75wQS-IihL97J1bSqBc5RqOG4.crl (hash: oh4Ci+KmEFjWoA5lmQJxO2dMcrMb+gL6MYief03zKEQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:45:5a:a1:08:43:c2:f6:b1:e5:7f:fa:f9:82:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768ef9c104be22284bf7b2756d2a8173946a386e
        Validity
            Not Before: Jun 16 00:01:25 2024 GMT
            Not After : Jun 17 00:01:25 2024 GMT
        Subject: CN=a6381b65c747e4f4eb42a65afebde8ee42a03f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:62:e8:6e:f1:d5:c8:33:a1:dd:05:c0:8e:5f:
                    9b:bb:31:b1:4a:34:bb:11:b7:f5:1e:28:81:3f:d2:
                    49:66:df:e8:b3:13:35:e8:7f:0f:e9:0b:15:ac:90:
                    94:2f:2f:89:df:4c:6a:68:b2:a8:66:ad:97:b2:5b:
                    43:ab:2d:6f:12:1b:28:5d:c0:8d:aa:ca:ba:c6:d7:
                    b2:2c:d4:59:a2:0c:36:9e:14:f9:2a:40:86:98:3a:
                    74:21:b7:41:06:b2:e1:2f:16:64:d4:f9:e0:e1:34:
                    4f:f5:95:92:74:1d:24:84:77:3f:77:88:12:b9:49:
                    42:0c:ab:53:f4:8f:b7:c8:05:d0:bb:ca:79:32:0f:
                    54:53:00:e7:5e:be:eb:6b:dd:96:8f:c7:96:a2:4e:
                    89:16:94:f0:56:c8:cd:40:39:cf:91:a5:0d:54:18:
                    ce:3a:9d:33:53:df:00:ca:88:f5:11:78:3a:7a:0f:
                    6c:6e:6a:cd:b4:4b:31:b5:c7:1a:01:ea:39:9e:26:
                    cb:a9:48:d5:c9:6c:34:cd:03:ce:58:c0:ea:6a:af:
                    c8:9d:5a:3a:41:09:00:25:e7:22:f6:67:a3:56:7d:
                    15:84:4f:be:f7:76:d9:bb:1d:1b:20:2d:0f:2c:51:
                    87:8e:14:06:ab:54:05:f2:2c:eb:6c:b7:65:e9:01:
                    96:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:38:1B:65:C7:47:E4:F4:EB:42:A6:5A:FE:BD:E8:EE:42:A0:3F:71
            X509v3 Authority Key Identifier:
                keyid:76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:62:31:e4:b5:0b:91:ba:c8:b3:b9:f8:46:a3:62:42:21:f1:
         00:51:a5:3d:64:96:0f:60:0b:6c:a8:f3:2d:61:6a:aa:a1:48:
         a1:8b:e6:3a:be:17:a1:1a:f4:b3:77:a0:c1:fc:82:73:b4:bb:
         26:56:60:fe:df:7d:79:0a:32:6b:7f:fb:a0:99:0e:38:9c:cd:
         03:26:02:e3:92:bb:34:26:cb:97:9e:cf:f0:bf:ac:04:13:37:
         b7:6e:2e:0d:08:16:a6:e0:27:fc:96:02:0e:56:cf:bc:a0:20:
         40:95:b3:ee:fd:26:72:44:00:7f:94:cf:6a:dd:3c:2e:89:9f:
         bb:bb:81:93:16:38:7d:5b:01:85:da:18:cf:9f:e3:73:66:45:
         bf:d3:46:8d:7b:93:dc:81:41:de:c7:33:05:1c:a6:ac:cd:02:
         4a:a1:e3:c1:66:72:c5:7a:51:ab:09:f4:8e:68:4e:f9:2d:d4:
         71:09:d9:2c:e0:64:72:00:b0:43:30:c3:96:0c:aa:e0:f3:64:
         e2:09:c1:6d:6d:f6:c2:a7:d6:48:2e:3c:d4:32:3e:6f:09:0b:
         d7:b6:e4:ac:8d:0f:48:23:29:64:aa:d7:5a:08:1a:cf:d1:6c:
         e9:74:f1:fd:a3:87:4f:e2:3a:87:be:82:dc:4e:99:fc:a4:74:
         53:9a:b0:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWUVaoQhDwvax5X/6+YLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OGVmOWMxMDRiZTIyMjg0YmY3YjI3NTZkMmE4MTczOTQ2
YTM4NmUwHhcNMjQwNjE2MDAwMTI1WhcNMjQwNjE3MDAwMTI1WjAzMTEwLwYDVQQD
EyhhNjM4MWI2NWM3NDdlNGY0ZWI0MmE2NWFmZWJkZThlZTQyYTAzZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32LobvHVyDOh3QXAjl+buzGxSjS7
Ebf1HiiBP9JJZt/osxM16H8P6QsVrJCULy+J30xqaLKoZq2XsltDqy1vEhsoXcCN
qsq6xteyLNRZogw2nhT5KkCGmDp0IbdBBrLhLxZk1Png4TRP9ZWSdB0khHc/d4gS
uUlCDKtT9I+3yAXQu8p5Mg9UUwDnXr7ra92Wj8eWok6JFpTwVsjNQDnPkaUNVBjO
Op0zU98Ayoj1EXg6eg9sbmrNtEsxtccaAeo5nibLqUjVyWw0zQPOWMDqaq/InVo6
QQkAJeci9mejVn0VhE++93bZux0bIC0PLFGHjhQGq1QF8izrbLdl6QGWYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKY4G2XHR+T060KmWv696O5CoD9xMB8GA1UdIwQY
MBaAFHaO+cEEviIoS/eydW0qgXOUajhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84NmI0MDItZTQzYi00YjdlLTk4ZWUt
YjZiNzRjYjI5OWIwLzEvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84NmI0MDItZTQzYi00YjdlLTk4ZWUtYjZiNzRjYjI5OWIw
LzEvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGIx5LUL
kbrIs7n4RqNiQiHxAFGlPWSWD2ALbKjzLWFqqqFIoYvmOr4XoRr0s3egwfyCc7S7
JlZg/t99eQoya3/7oJkOOJzNAyYC45K7NCbLl57P8L+sBBM3t24uDQgWpuAn/JYC
DlbPvKAgQJWz7v0mckQAf5TPat08Lomfu7uBkxY4fVsBhdoYz5/jc2ZFv9NGjXuT
3IFB3sczBRymrM0CSqHjwWZyxXpRqwn0jmhO+S3UcQnZLOBkcgCwQzDDlgyq4PNk
4gnBbW32wqfWSC481DI+bwkL17bkrI0PSCMpZKrXWggaz9Fs6XTx/aOHT+I6h76C
3E6Z/KR0U5qwbQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:50:13 2024 by rpki-client on console-fra.rpki-client.org