Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
File:                     Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft (raw, json)
Hash identifier:          rXw3EZ3r0IaVSgaoOeCsuxiKMeCTPj86gBZovFoT3wA=
Subject key identifier:   4E:D5:AE:CD:CA:C5:7B:18:83:CA:5D:5E:64:D9:B4:B1:F4:42:0A:9D
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Certificate issuer:       /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial:       019047F94D59E1590AB94643C19BBE125415
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
Manifest number:          1067
Signing time:             Mon 24 Jun 2024 02:00:38 +0000
Manifest this update:     Mon 24 Jun 2024 02:00:38 +0000
Manifest next update:     Tue 25 Jun 2024 02:00:38 +0000
Files and hashes:         1: 955RhmbPcnQ7C_FjWwazUMiSDfc.roa (hash: RWRd+AjCeDoWJIZc7pQHiyp5wBJa40gjND+cE5QzPXg=)
                          2: 9MYHG5RGeYKt6mWZ5B-jp6HfL1Q.roa (hash: QC4L+OYds8ZQEATWqJn6EjZ/sVHCv7Nwrgv+wnm/8Pc=)
                          3: GxyT6b5uLmmbQltjcFgT6v3Lm44.roa (hash: AQ+xK+ViRb0yzmKXU3t6Xx1753THK+uPnoxc1wH3juo=)
                          4: Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl (hash: FQpe6CeUPKEwjpUldQHC7gRxti+Zzeca6Cfz3R388GM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:47:f9:4d:59:e1:59:0a:b9:46:43:c1:9b:be:12:54:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
        Validity
            Not Before: Jun 24 02:00:38 2024 GMT
            Not After : Jun 25 02:00:38 2024 GMT
        Subject: CN=4ed5aecdcac57b1883ca5d5e64d9b4b1f4420a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:76:4b:59:45:c7:d3:02:7d:f9:ab:ed:4d:ec:
                    4e:85:e4:a6:0d:59:78:8b:29:0b:7d:42:a4:96:04:
                    37:10:21:ed:73:2b:19:12:a0:cb:3c:86:34:9e:56:
                    88:e2:a5:10:60:7a:8d:95:70:54:23:94:00:e8:a9:
                    b6:c8:66:15:a0:ea:68:fa:64:d7:b6:af:da:c7:66:
                    f0:d5:6a:51:92:79:91:f8:9b:8b:cf:b5:2e:05:7c:
                    1b:cf:cb:48:6f:4f:b6:e1:b1:45:69:42:57:c9:34:
                    d8:cd:fb:64:f7:37:20:21:ab:9d:8b:83:ee:54:3c:
                    6a:4c:92:2f:43:ac:47:69:c4:40:55:09:a5:6c:9d:
                    ab:d6:8c:ff:bc:82:7e:f9:53:63:d7:98:4d:fa:6e:
                    36:1e:91:2a:19:06:72:63:be:45:34:f8:2d:78:76:
                    3f:58:f7:16:ce:ae:d5:15:f9:64:4a:35:8d:31:c1:
                    15:cb:01:28:43:13:6a:87:54:21:da:d0:ad:f0:71:
                    ef:75:d5:22:b4:13:aa:27:30:fa:03:58:2a:43:eb:
                    8f:71:0d:39:b0:58:7d:fb:de:bb:7f:e4:c5:7f:52:
                    74:d6:3e:26:9e:1e:ad:88:4e:78:8d:97:e5:11:3b:
                    d7:04:af:b3:ad:bb:47:b8:ac:7f:a3:e6:60:9b:69:
                    42:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D5:AE:CD:CA:C5:7B:18:83:CA:5D:5E:64:D9:B4:B1:F4:42:0A:9D
            X509v3 Authority Key Identifier:
                keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fd:b9:2e:b2:71:94:18:d9:87:bb:12:6b:f4:6f:d4:c0:ec:
         c6:7b:e8:d1:dd:ba:dc:4f:7d:94:c6:0e:7b:61:bd:6b:31:dd:
         6f:58:1c:6c:7b:37:c2:74:00:f7:02:2b:fb:54:07:e0:9d:5b:
         29:05:c6:37:74:f4:20:eb:c3:7e:9f:9b:6c:8f:5a:1d:aa:84:
         f0:d8:0b:56:a3:9a:fb:ed:ba:98:a5:d2:20:2a:ea:5e:e9:a0:
         04:d5:52:fb:69:46:52:f0:bd:5e:f8:ff:47:36:b5:ad:84:46:
         a2:6c:de:89:c3:c6:76:83:e0:09:49:35:99:b3:ce:bf:36:43:
         4e:e1:a9:34:ce:f6:a6:a2:47:af:a7:4a:7d:79:91:c6:1f:db:
         8a:a8:3f:d9:7e:f2:b2:06:20:7e:ff:fa:96:e4:57:f8:42:ef:
         c1:e6:7d:f0:4f:22:1a:97:fe:91:0c:ae:25:59:b8:6c:81:6a:
         8c:5f:92:13:9f:e5:d0:63:14:eb:4e:d7:28:00:ed:ad:7d:8b:
         a9:04:5f:8c:80:c0:12:67:9e:4a:e8:6d:95:62:18:90:78:6e:
         7b:b7:85:48:87:2d:ee:aa:c4:7e:e3:57:0a:5a:f6:70:71:99:
         e1:1f:ac:35:60:b3:02:7d:13:fc:81:03:bb:09:8b:4f:3c:4a:
         c2:bd:2e:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBH+U1Z4VkKuUZDwZu+ElQVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NGRjZmE5NjM5OTcxNjY5MmQyNDVhODA0ODg3YzA5ZGE0
NTFmOGYwHhcNMjQwNjI0MDIwMDM4WhcNMjQwNjI1MDIwMDM4WjAzMTEwLwYDVQQD
Eyg0ZWQ1YWVjZGNhYzU3YjE4ODNjYTVkNWU2NGQ5YjRiMWY0NDIwYTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHZLWUXH0wJ9+avtTexOheSmDVl4
iykLfUKklgQ3ECHtcysZEqDLPIY0nlaI4qUQYHqNlXBUI5QA6Km2yGYVoOpo+mTX
tq/ax2bw1WpRknmR+JuLz7UuBXwbz8tIb0+24bFFaUJXyTTYzftk9zcgIaudi4Pu
VDxqTJIvQ6xHacRAVQmlbJ2r1oz/vIJ++VNj15hN+m42HpEqGQZyY75FNPgteHY/
WPcWzq7VFflkSjWNMcEVywEoQxNqh1Qh2tCt8HHvddUitBOqJzD6A1gqQ+uPcQ05
sFh9+967f+TFf1J01j4mnh6tiE54jZflETvXBK+zrbtHuKx/o+Zgm2lCEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7Vrs3KxXsYg8pdXmTZtLH0QgqdMB8GA1UdIwQY
MBaAFEZNz6ljmXFmktJFqASIfAnaRR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTct
YWYxZjM2ODExMDk4LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTctYWYxZjM2ODExMDk4
LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHf25LrJx
lBjZh7sSa/Rv1MDsxnvo0d263E99lMYOe2G9azHdb1gcbHs3wnQA9wIr+1QH4J1b
KQXGN3T0IOvDfp+bbI9aHaqE8NgLVqOa++26mKXSICrqXumgBNVS+2lGUvC9Xvj/
Rza1rYRGomzeicPGdoPgCUk1mbPOvzZDTuGpNM72pqJHr6dKfXmRxh/biqg/2X7y
sgYgfv/6luRX+ELvweZ98E8iGpf+kQyuJVm4bIFqjF+SE5/l0GMU607XKADtrX2L
qQRfjIDAEmeeSuhtlWIYkHhue7eFSIct7qrEfuNXClr2cHGZ4R+sNWCzAn0T/IED
uwmLTzxKwr0ujA==
-----END CERTIFICATE-----
Generated at Mon Jun 24 09:22:32 2024 by rpki-client on console-ams.rpki-client.org