Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File:                     QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier:          4KWebL53wRojfRLo6sE/jPpA2p38eJbj51Rsi8a2dKo=
Subject key identifier:   35:E1:37:F0:B7:EB:6F:5A:5B:26:9B:23:FD:61:4D:05:5C:C7:B7:6B
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer:       /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial:       01901DEB25D14B16B534B95F93BFBAB2A69D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:01:08 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:08 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:08 +0000
Files and hashes:         1: KRMa5Tivbgv6pqCNpnTuwkFG7jQ.roa (hash: Obvoh8CAOxYKwF+TKTP3SbX31WlMVImQMlkkUPGWtGs=)
                          2: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: eESelE73TagzX0UE+TjJlGvXMLHcBW3J21XG9Sj/KEw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:25:d1:4b:16:b5:34:b9:5f:93:bf:ba:b2:a6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
        Validity
            Not Before: Jun 15 22:01:08 2024 GMT
            Not After : Jun 16 22:01:08 2024 GMT
        Subject: CN=35e137f0b7eb6f5a5b269b23fd614d055cc7b76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:6d:44:0e:52:8d:6e:5f:a5:06:13:7c:f3:
                    e5:6e:0a:e2:fe:1f:93:7f:01:10:d6:92:d1:e0:a1:
                    df:fb:ec:ed:a6:5f:9e:db:0f:d4:58:fc:73:4d:70:
                    3a:bb:96:13:09:c2:84:fb:91:7c:d8:0a:13:2d:6e:
                    be:84:66:4f:d0:be:68:f6:15:39:84:3f:1c:4a:a2:
                    0f:ee:30:4a:c2:04:ee:de:b4:b3:72:40:9b:99:9c:
                    06:72:7a:ba:d6:b2:07:68:6e:8c:89:b2:a8:1e:ed:
                    51:d6:e6:83:1f:dd:84:5b:38:ed:f2:ba:6d:ab:51:
                    f8:15:55:23:05:4c:71:16:e5:38:31:72:13:56:45:
                    4c:cf:a7:eb:d8:78:0f:f9:be:0b:a5:26:41:6c:8b:
                    45:75:31:c6:83:24:5f:b6:d9:bb:39:30:cd:79:e0:
                    ae:98:6f:ed:41:8c:a4:cf:4e:35:3d:60:f8:c2:dd:
                    33:71:3a:e5:0c:86:ec:56:57:35:c7:09:ef:6d:3e:
                    ea:1e:02:e5:f0:19:96:21:4e:af:6a:88:c1:2b:d7:
                    97:1b:9c:10:c8:b8:59:99:c6:23:4c:04:6f:50:f2:
                    d1:d3:9a:c7:98:49:1d:63:25:7e:63:e9:86:12:e2:
                    b1:60:ad:f7:e0:f2:c3:1e:ef:e0:b9:ef:c2:a5:64:
                    65:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E1:37:F0:B7:EB:6F:5A:5B:26:9B:23:FD:61:4D:05:5C:C7:B7:6B
            X509v3 Authority Key Identifier:
                keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:41:11:be:d8:75:ca:6a:8c:a9:cb:5e:31:c9:39:b2:f9:d1:
         56:74:4a:fa:58:28:c6:5d:e6:74:d9:06:7b:48:bb:83:5b:6d:
         80:53:69:d5:7b:dd:f1:35:c1:57:3c:bb:95:4a:69:1e:89:1b:
         91:42:85:9e:bf:df:c2:6f:b3:c8:79:ef:d8:37:98:50:2e:c6:
         65:2d:8f:de:47:e1:c9:25:35:e5:ad:68:27:2a:30:92:6b:11:
         c4:b4:b5:bc:e1:b0:13:88:34:dc:dc:04:f1:01:0c:1f:6c:06:
         4d:d0:68:d3:60:9c:df:52:e5:3e:39:f1:ec:d7:6b:4a:51:9f:
         0e:96:07:26:61:7a:41:57:b3:e3:ff:ff:0f:fa:eb:93:68:a9:
         bb:89:e1:fd:97:3c:6b:1f:d6:48:3c:d0:83:91:d9:d9:36:18:
         69:28:a8:86:35:ed:d4:af:c7:94:ec:0c:5b:be:34:e9:93:b0:
         e8:5d:1f:e0:5e:43:6f:15:45:05:40:5f:f2:56:47:5e:89:44:
         5b:b3:a0:d1:4d:e0:49:0a:de:27:5e:07:6e:e5:f2:70:ce:cd:
         93:b1:79:04:4f:98:74:29:fb:9e:0c:85:4a:1a:f7:bb:a0:ac:
         64:0b:a9:f3:8f:b3:f2:e9:a7:ba:57:fc:b8:9d:35:66:bd:b3:
         4a:40:ef:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6yXRSxa1NLlfk7+6sqadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjFhMjRjODBmZGNhMzI5NjQ0NTczYWU2ZDYxYzlmMmUz
NzRlZDgwHhcNMjQwNjE1MjIwMTA4WhcNMjQwNjE2MjIwMTA4WjAzMTEwLwYDVQQD
EygzNWUxMzdmMGI3ZWI2ZjVhNWIyNjliMjNmZDYxNGQwNTVjYzdiNzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSdtRA5SjW5fpQYTfPPlbgri/h+T
fwEQ1pLR4KHf++ztpl+e2w/UWPxzTXA6u5YTCcKE+5F82AoTLW6+hGZP0L5o9hU5
hD8cSqIP7jBKwgTu3rSzckCbmZwGcnq61rIHaG6MibKoHu1R1uaDH92EWzjt8rpt
q1H4FVUjBUxxFuU4MXITVkVMz6fr2HgP+b4LpSZBbItFdTHGgyRfttm7OTDNeeCu
mG/tQYykz041PWD4wt0zcTrlDIbsVlc1xwnvbT7qHgLl8BmWIU6vaojBK9eXG5wQ
yLhZmcYjTARvUPLR05rHmEkdYyV+Y+mGEuKxYK334PLDHu/gue/CpWRlDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXhN/C3629aWyabI/1hTQVcx7drMB8GA1UdIwQY
MBaAFELxokyA/coylkRXOubWHJ8uN07YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzkt
NzE2OGFlMGI4Mjc4LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzktNzE2OGFlMGI4Mjc4
LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkERvth1
ymqMqcteMck5svnRVnRK+lgoxl3mdNkGe0i7g1ttgFNp1Xvd8TXBVzy7lUppHokb
kUKFnr/fwm+zyHnv2DeYUC7GZS2P3kfhySU15a1oJyowkmsRxLS1vOGwE4g03NwE
8QEMH2wGTdBo02Cc31LlPjnx7NdrSlGfDpYHJmF6QVez4///D/rrk2ipu4nh/Zc8
ax/WSDzQg5HZ2TYYaSiohjXt1K/HlOwMW7406ZOw6F0f4F5DbxVFBUBf8lZHXolE
W7Og0U3gSQreJ14HbuXycM7Nk7F5BE+YdCn7ngyFShr3u6CsZAup84+z8umnulf8
uJ01Zr2zSkDvqA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:09 2024 by rpki-client on console-fra.rpki-client.org