Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
File:                     b5jR-Z44M-9AHUY0juyLdSCIxV0.mft (raw, json)
Hash identifier:          K4WhN1L2iaRyBtOuCOjC1C+APp6HPMXhqjL+Gp0WwsM=
Subject key identifier:   F9:62:6A:43:6F:7B:B0:BA:2D:CB:29:B8:4B:14:23:90:4D:88:D4:70
Authority key identifier: 6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
Certificate issuer:       /CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Certificate serial:       01901EFD5E982F559EBC2F0F0E99F2650C86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 03:00:39 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:39 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:39 +0000
Files and hashes:         1: PWAG0JobFS7yvsldTY9OX-6bLGU.roa (hash: XiYdeRszyb+qmr9Wx7RTN+cKBYqOpTlV7LlN2LK4JK4=)
                          2: b5jR-Z44M-9AHUY0juyLdSCIxV0.crl (hash: XZLmdqcLGQPdfIR6c2UxT2TLIpnlgWI4NgnNdycTMoU=)
                          3: rV8Tde05Dn4Mdce5DPlpG5oeS7Y.roa (hash: PbTrvocowvPXLcqYIO4Yo6mqEPW+kmWX7L84U+hGTcE=)
                          4: yGQmK1GNxPZ8SRgl8zt6D-o2V30.roa (hash: O2ieMMZevfPhkfWCSTykHJMCow8pbjHUGymKsm0tLgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:5e:98:2f:55:9e:bc:2f:0f:0e:99:f2:65:0c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f98d1f99e3833ef401d46348eec8b752088c55d
        Validity
            Not Before: Jun 16 03:00:39 2024 GMT
            Not After : Jun 17 03:00:39 2024 GMT
        Subject: CN=f9626a436f7bb0ba2dcb29b84b1423904d88d470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:30:a8:3c:91:88:8f:36:ea:06:0d:fe:62:53:
                    a4:ca:a1:72:ca:da:e2:64:f2:7d:2b:c6:e5:a2:0b:
                    71:8d:f5:1c:45:e6:6f:35:61:ca:17:a5:28:47:a9:
                    e1:92:a0:c5:bf:ab:b4:2a:a8:e0:76:ce:21:55:e0:
                    4c:96:78:a4:00:78:75:d2:e6:de:46:59:a3:35:eb:
                    a6:82:af:14:ba:b4:e3:e1:d7:ce:18:ae:bf:99:df:
                    43:dc:73:e2:b4:7f:ba:0a:8e:a2:3d:40:14:2c:e1:
                    ef:bb:f5:8a:03:02:0a:94:78:69:29:66:8c:a2:96:
                    0c:85:60:cc:4b:fa:1b:de:5e:41:41:cd:22:f1:d3:
                    f6:64:37:b9:60:2a:28:a0:97:69:e1:ca:6e:e6:a7:
                    41:d9:30:f2:ec:64:fe:3e:75:84:d8:23:0b:2d:92:
                    9f:4f:b8:e1:29:bc:5b:24:99:fd:bb:4b:01:53:99:
                    63:7e:ff:74:73:c7:0e:58:61:01:07:48:e0:b5:1c:
                    8b:ff:4e:06:01:83:7c:fb:3c:78:0b:41:dd:d9:2a:
                    ff:b6:9e:b3:43:74:d5:ab:60:5b:0e:b0:9d:55:d6:
                    d5:ed:78:d3:55:a2:b0:49:b4:94:f1:b5:ad:01:4a:
                    df:b4:c1:ed:8b:8a:ac:64:01:25:a7:fa:2b:bb:11:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:62:6A:43:6F:7B:B0:BA:2D:CB:29:B8:4B:14:23:90:4D:88:D4:70
            X509v3 Authority Key Identifier:
                keyid:6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:d3:4b:17:46:d8:04:70:18:3c:42:1a:5e:c0:92:09:88:
         46:b1:d8:6c:78:e2:f5:3f:75:e3:34:7a:d1:1e:93:fe:23:6e:
         a8:c2:2e:5c:a8:25:11:8e:b4:e0:e1:fa:b1:44:16:7f:08:9d:
         10:db:fb:d8:87:15:4c:3f:34:13:41:b4:93:71:c9:21:e9:63:
         53:30:9b:72:c3:12:5e:80:3e:41:9e:1c:1e:2e:1b:a0:09:c7:
         a1:4c:d0:c6:e3:d0:e3:c8:04:34:65:33:ea:fa:83:46:c5:93:
         0a:c2:40:79:02:84:9d:14:e0:23:59:7e:bf:64:ff:a7:29:a2:
         65:01:64:93:7b:d7:b1:f0:44:11:8a:62:15:ad:72:a9:4c:2f:
         f5:14:45:db:d3:bb:0f:b5:c6:74:be:34:51:b3:c2:f6:49:56:
         68:f0:86:e8:43:63:80:8f:28:37:3d:ab:79:6d:b9:30:27:f2:
         65:a9:98:4f:2e:ca:4d:d1:46:1e:c8:64:63:70:05:0b:09:2b:
         7a:36:58:68:33:2b:d0:ef:1f:4e:4c:07:21:87:d2:73:82:3f:
         99:9b:8b:b4:74:36:d9:2f:c9:88:8d:00:be:4f:18:4f:e3:95:
         c3:db:4a:2b:81:f3:f2:56:d3:02:11:0e:a6:d4:a4:79:16:70:
         83:6a:03:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAe/V6YL1WevC8PDpnyZQyGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOThkMWY5OWUzODMzZWY0MDFkNDYzNDhlZWM4Yjc1MjA4
OGM1NWQwHhcNMjQwNjE2MDMwMDM5WhcNMjQwNjE3MDMwMDM5WjAzMTEwLwYDVQQD
EyhmOTYyNmE0MzZmN2JiMGJhMmRjYjI5Yjg0YjE0MjM5MDRkODhkNDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjCoPJGIjzbqBg3+YlOkyqFyytri
ZPJ9K8blogtxjfUcReZvNWHKF6UoR6nhkqDFv6u0Kqjgds4hVeBMlnikAHh10ube
RlmjNeumgq8UurTj4dfOGK6/md9D3HPitH+6Co6iPUAULOHvu/WKAwIKlHhpKWaM
opYMhWDMS/ob3l5BQc0i8dP2ZDe5YCoooJdp4cpu5qdB2TDy7GT+PnWE2CMLLZKf
T7jhKbxbJJn9u0sBU5ljfv90c8cOWGEBB0jgtRyL/04GAYN8+zx4C0Hd2Sr/tp6z
Q3TVq2BbDrCdVdbV7XjTVaKwSbSU8bWtAUrftMHti4qsZAElp/oruxHxXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPliakNve7C6LcspuEsUI5BNiNRwMB8GA1UdIwQY
MBaAFG+Y0fmeODPvQB1GNI7si3UgiMVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVqUi1aNDRNLTlBSFVZMGp1eUxkU0NJeFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zYzA4ZjEtOTZlMC00YzU0LWE0NjYt
MDdkNGIxMTVjYzgyLzEvYjVqUi1aNDRNLTlBSFVZMGp1eUxkU0NJeFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zYzA4ZjEtOTZlMC00YzU0LWE0NjYtMDdkNGIxMTVjYzgy
LzEvYjVqUi1aNDRNLTlBSFVZMGp1eUxkU0NJeFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYk/TSxdG
2ARwGDxCGl7AkgmIRrHYbHji9T914zR60R6T/iNuqMIuXKglEY604OH6sUQWfwid
ENv72IcVTD80E0G0k3HJIeljUzCbcsMSXoA+QZ4cHi4boAnHoUzQxuPQ48gENGUz
6vqDRsWTCsJAeQKEnRTgI1l+v2T/pymiZQFkk3vXsfBEEYpiFa1yqUwv9RRF29O7
D7XGdL40UbPC9klWaPCG6ENjgI8oNz2reW25MCfyZamYTy7KTdFGHshkY3AFCwkr
ejZYaDMr0O8fTkwHIYfSc4I/mZuLtHQ22S/JiI0Avk8YT+OVw9tKK4Hz8lbTAhEO
ptSkeRZwg2oDPw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:52:24 2024 by rpki-client on console-fra.rpki-client.org