Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File:                     qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier:          5O3XfwF4HLblr8Mo6J3pQjNj3oiTfn5Qzu7J1HK+oGw=
Subject key identifier:   03:D9:8F:FA:06:DE:58:D3:D5:5F:5A:03:A2:B7:35:FF:EC:72:77:5B
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer:       /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial:       01903818720232947347708E8800ECA44CD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number:          06B6
Signing time:             Fri 21 Jun 2024 00:00:44 +0000
Manifest this update:     Fri 21 Jun 2024 00:00:44 +0000
Manifest next update:     Sat 22 Jun 2024 00:00:44 +0000
Files and hashes:         1: OU8yvue2-azbRc6beGdL9AoBv10.roa (hash: bXvTetani1Xr48nm/Od6TmHfzkfEvkht4jKzr4sjpck=)
                          2: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: QgH1LAenLzmz/ZUF5skuvHVJj1COBwB1lu1fm4SE8Z0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:38:18:72:02:32:94:73:47:70:8e:88:00:ec:a4:4c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
        Validity
            Not Before: Jun 21 00:00:44 2024 GMT
            Not After : Jun 22 00:00:44 2024 GMT
        Subject: CN=03d98ffa06de58d3d55f5a03a2b735ffec72775b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:66:39:ee:eb:0d:81:45:94:90:be:98:db:3e:
                    f8:72:17:58:fc:2e:dd:6f:bd:6e:79:57:d6:9b:2c:
                    9e:f6:60:3c:72:7a:bd:ca:b3:4a:93:d7:2f:6b:65:
                    d7:dd:e2:ad:c4:56:a6:e0:60:c9:c7:d4:f5:cb:65:
                    29:3d:f4:f8:5d:34:7f:2f:ae:ff:42:5d:40:64:49:
                    89:aa:dc:90:32:0d:19:6c:ba:69:36:fb:d7:26:ef:
                    84:5c:af:b4:e3:1f:ee:df:85:5a:84:1d:48:70:6d:
                    a2:f9:25:1c:a2:e1:21:3d:0c:b2:44:d0:4b:d8:b0:
                    33:c7:de:64:18:e4:a0:da:b5:d9:1f:b8:22:3a:1e:
                    06:35:c5:4b:a5:0d:51:40:0c:d3:d7:e8:fc:43:02:
                    77:5e:3d:d7:57:29:38:47:d1:3f:a6:da:c0:41:20:
                    d4:96:a9:2b:9a:ce:70:4e:d8:7f:ea:38:29:7a:ea:
                    c9:7d:8e:4c:ce:1a:66:6e:82:e1:05:e4:7f:36:78:
                    89:76:ad:3d:c6:53:b2:19:90:13:c6:5d:f2:49:16:
                    d7:3e:14:45:e2:01:3e:d6:57:69:e5:77:56:50:68:
                    11:0d:87:75:7a:ce:6c:0e:d5:d4:ac:9e:ea:85:36:
                    58:57:cc:08:65:bb:06:c4:fa:b2:6f:30:e6:e0:70:
                    ad:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D9:8F:FA:06:DE:58:D3:D5:5F:5A:03:A2:B7:35:FF:EC:72:77:5B
            X509v3 Authority Key Identifier:
                keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:29:b2:78:40:03:36:48:c7:d6:9d:97:c3:00:cd:7a:3a:dd:
         04:87:96:92:d5:a2:d5:bb:98:80:59:45:10:f1:99:30:6a:96:
         b3:9e:ea:6b:29:7c:7c:e2:df:60:5f:ed:bc:87:e7:33:53:a2:
         91:da:d3:c7:45:bd:eb:5b:2b:54:92:60:d9:a0:a0:be:2c:ec:
         cf:09:71:4c:9e:b9:af:26:e3:1d:85:ce:78:90:5f:a3:0a:4f:
         6e:63:74:cb:4b:dd:1b:37:1a:63:54:51:89:ee:fe:0f:57:50:
         0a:6a:0a:61:ed:77:d4:b5:2f:a4:b5:8d:03:82:51:f5:71:c7:
         d0:0e:02:a0:5c:b3:1d:bb:da:10:61:29:f6:f1:07:0d:53:c9:
         31:39:80:24:0b:33:21:fe:55:32:2f:6e:db:29:40:a6:ef:a9:
         5b:2e:53:8c:a5:7e:fc:95:43:f2:da:b4:91:0c:37:f7:9d:f4:
         6f:93:70:d1:70:73:b3:c1:9b:60:f9:bf:a3:7e:07:f0:d3:80:
         a8:3f:dd:eb:e0:a3:df:15:67:e4:4f:70:9e:48:e0:74:4f:3e:
         7e:84:b9:d8:6e:38:05:e5:65:de:b0:5c:f6:78:65:c3:4e:07:
         f6:33:75:08:7b:76:6c:a7:e8:13:d0:d7:f7:3f:1e:1a:1f:db:
         90:f3:18:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA4GHICMpRzR3COiADspEzTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDFjOTM5ZWE5NWEyMWYzYjc0MjkwMWRmZTA1ZjI2YTU3
Nzc1ODEwHhcNMjQwNjIxMDAwMDQ0WhcNMjQwNjIyMDAwMDQ0WjAzMTEwLwYDVQQD
EygwM2Q5OGZmYTA2ZGU1OGQzZDU1ZjVhMDNhMmI3MzVmZmVjNzI3NzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GY57usNgUWUkL6Y2z74chdY/C7d
b71ueVfWmyye9mA8cnq9yrNKk9cva2XX3eKtxFam4GDJx9T1y2UpPfT4XTR/L67/
Ql1AZEmJqtyQMg0ZbLppNvvXJu+EXK+04x/u34VahB1IcG2i+SUcouEhPQyyRNBL
2LAzx95kGOSg2rXZH7giOh4GNcVLpQ1RQAzT1+j8QwJ3Xj3XVyk4R9E/ptrAQSDU
lqkrms5wTth/6jgpeurJfY5MzhpmboLhBeR/NniJdq09xlOyGZATxl3ySRbXPhRF
4gE+1ldp5XdWUGgRDYd1es5sDtXUrJ7qhTZYV8wIZbsGxPqybzDm4HCtywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPZj/oG3ljT1V9aA6K3Nf/scndbMB8GA1UdIwQY
MBaAFKpByTnqlaIfO3QpAd/gXyald3WBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2Et
NjA3Y2EwMjViOTRmLzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2EtNjA3Y2EwMjViOTRm
LzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICmyeEAD
NkjH1p2XwwDNejrdBIeWktWi1buYgFlFEPGZMGqWs57qayl8fOLfYF/tvIfnM1Oi
kdrTx0W961srVJJg2aCgvizszwlxTJ65rybjHYXOeJBfowpPbmN0y0vdGzcaY1RR
ie7+D1dQCmoKYe131LUvpLWNA4JR9XHH0A4CoFyzHbvaEGEp9vEHDVPJMTmAJAsz
If5VMi9u2ylApu+pWy5TjKV+/JVD8tq0kQw39530b5Nw0XBzs8GbYPm/o34H8NOA
qD/d6+Cj3xVn5E9wnkjgdE8+foS52G44BeVl3rBc9nhlw04H9jN1CHt2bKfoE9DX
9z8eGh/bkPMYlA==
-----END CERTIFICATE-----
Generated at Fri Jun 21 04:17:49 2024 by rpki-client on console-fra.rpki-client.org