Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
File:                     zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft (raw, json)
Hash identifier:          OONy/Xq+prwgciOq/PrH/XWciM2DdJ8N7ih3m3EbUas=
Subject key identifier:   5B:CB:32:4E:1D:0F:53:94:31:CA:BD:E7:17:64:95:17:2D:BE:59:56
Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
Certificate issuer:       /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Certificate serial:       01901E8F951CEB706D7296ADF23B7C28ED36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
Manifest number:          07BC
Signing time:             Sun 16 Jun 2024 01:00:44 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:44 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:44 +0000
Files and hashes:         1: 2ZD-l6D0AKeAMpQDbQpXeFgywmw.roa (hash: kETlQSIDLVP6x+ewTSJp21ehC6dECC3IAaMvA54I0nE=)
                          2: zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl (hash: 5gRQa3rKXi7lVdBaES/Jw157bLlCdYb5Q8Kn/b31Q2g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:95:1c:eb:70:6d:72:96:ad:f2:3b:7c:28:ed:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
        Validity
            Not Before: Jun 16 01:00:44 2024 GMT
            Not After : Jun 17 01:00:44 2024 GMT
        Subject: CN=5bcb324e1d0f539431cabde7176495172dbe5956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2b:b0:02:cc:44:96:7d:f2:43:df:90:66:af:
                    14:81:1b:6f:e2:1d:29:04:fd:8d:b7:2a:27:f3:83:
                    88:5b:7c:cc:16:ea:d2:31:c9:e2:ee:c8:75:f1:51:
                    c3:15:8d:0e:8b:a2:20:37:10:d9:52:a2:ad:43:a1:
                    6e:87:4d:f2:14:7e:bc:dd:20:24:1a:7b:40:b2:3d:
                    78:03:84:23:80:5e:46:0d:2d:bb:b7:2a:36:9a:f8:
                    7b:03:24:92:60:81:0d:60:2b:85:f7:8c:57:3b:70:
                    a9:bd:5a:27:d3:ac:d3:a9:b0:73:ad:61:65:48:2f:
                    93:68:78:45:69:c6:47:65:56:15:f1:67:eb:42:a0:
                    44:27:5f:99:33:96:5c:14:55:a8:0c:ec:73:f6:2a:
                    16:26:3d:92:27:2a:a4:e8:11:89:71:93:c1:74:25:
                    93:5c:57:2c:83:41:f4:6e:c8:b7:d0:15:62:db:d6:
                    02:f6:8a:40:89:87:9f:ea:c6:a3:37:93:0c:41:03:
                    b8:c5:cc:da:70:1a:7f:ae:f2:99:b6:b7:3e:2c:b1:
                    da:c9:7b:79:de:9f:e6:6b:02:cc:c7:d3:06:8f:95:
                    04:68:19:f5:71:40:7a:f1:aa:4c:6c:54:7b:df:5f:
                    4e:c3:63:62:e3:19:e5:79:e9:44:2e:0b:d6:85:39:
                    48:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CB:32:4E:1D:0F:53:94:31:CA:BD:E7:17:64:95:17:2D:BE:59:56
            X509v3 Authority Key Identifier:
                keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:bf:04:87:6f:fe:57:e3:1b:1d:58:cc:54:17:9a:2e:7e:56:
         ac:22:8a:c5:e9:a8:7a:d5:c7:93:09:6f:46:c1:e9:65:d3:76:
         80:1f:48:ae:7d:90:31:9f:62:5f:d3:cd:c1:6a:c5:b2:25:97:
         c7:a0:88:16:db:43:6c:e8:c5:c7:a1:2f:f3:da:82:cf:7e:5f:
         d1:01:60:d5:a2:18:65:3b:d3:fd:36:00:26:90:20:4a:87:31:
         6a:dc:05:52:f6:d5:57:73:b6:c7:5b:6c:91:bf:ee:b6:51:ce:
         08:17:1e:08:fb:fb:38:01:b3:69:10:46:f1:cc:04:c8:16:69:
         28:79:2c:51:91:51:32:9b:ee:eb:a7:8b:ae:4d:90:bd:35:f9:
         56:97:03:42:c3:63:99:8d:50:3a:7a:41:d8:e3:d5:b1:68:a9:
         70:13:b3:38:15:19:e4:00:32:6f:38:48:c2:c6:2f:e4:a5:55:
         af:48:0d:ba:a4:4d:ef:1f:43:f6:a2:b1:54:de:9b:6c:14:1a:
         9b:2c:2d:e1:c7:ce:74:b2:a2:ef:62:c6:96:84:3e:fb:aa:39:
         ec:d3:65:51:38:94:04:30:37:84:09:be:7f:e7:e8:d7:be:6c:
         fa:b8:d5:32:4c:55:00:45:51:92:ad:b8:20:b6:25:27:49:e5:
         da:12:b4:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej5Uc63Btcpat8jt8KO02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNTVmNzZjZmU5ZGFmYjJkOTQxOTAxNDJiYzhhYWIwZDMy
ODA2ZWUwHhcNMjQwNjE2MDEwMDQ0WhcNMjQwNjE3MDEwMDQ0WjAzMTEwLwYDVQQD
Eyg1YmNiMzI0ZTFkMGY1Mzk0MzFjYWJkZTcxNzY0OTUxNzJkYmU1OTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyuwAsxEln3yQ9+QZq8UgRtv4h0p
BP2Ntyon84OIW3zMFurSMcni7sh18VHDFY0Oi6IgNxDZUqKtQ6Fuh03yFH683SAk
GntAsj14A4QjgF5GDS27tyo2mvh7AySSYIENYCuF94xXO3CpvVon06zTqbBzrWFl
SC+TaHhFacZHZVYV8WfrQqBEJ1+ZM5ZcFFWoDOxz9ioWJj2SJyqk6BGJcZPBdCWT
XFcsg0H0bsi30BVi29YC9opAiYef6sajN5MMQQO4xczacBp/rvKZtrc+LLHayXt5
3p/mawLMx9MGj5UEaBn1cUB68apMbFR7319Ow2Ni4xnleelELgvWhTlIWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvLMk4dD1OUMcq95xdklRctvllWMB8GA1UdIwQY
MBaAFMxV92z+na+y2UGQFCvIqrDTKAbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekZYM2JQNmRyN0xaUVpBVUs4aXFzTk1vQnU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kODFmMTQtMWZmNC00MmIxLTliOWYt
MzRjZDA1NzVlMWNiLzEvekZYM2JQNmRyN0xaUVpBVUs4aXFzTk1vQnU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kODFmMTQtMWZmNC00MmIxLTliOWYtMzRjZDA1NzVlMWNi
LzEvekZYM2JQNmRyN0xaUVpBVUs4aXFzTk1vQnU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmL8Eh2/+
V+MbHVjMVBeaLn5WrCKKxemoetXHkwlvRsHpZdN2gB9Irn2QMZ9iX9PNwWrFsiWX
x6CIFttDbOjFx6Ev89qCz35f0QFg1aIYZTvT/TYAJpAgSocxatwFUvbVV3O2x1ts
kb/utlHOCBceCPv7OAGzaRBG8cwEyBZpKHksUZFRMpvu66eLrk2QvTX5VpcDQsNj
mY1QOnpB2OPVsWipcBOzOBUZ5AAybzhIwsYv5KVVr0gNuqRN7x9D9qKxVN6bbBQa
mywt4cfOdLKi72LGloQ++6o57NNlUTiUBDA3hAm+f+fo175s+rjVMkxVAEVRkq24
ILYlJ0nl2hK03Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:33:59 2024 by rpki-client on console-ams.rpki-client.org