Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File:                     HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier:          bYM8R27D8ESWHECJaLPb/3Jp94dzZL3qxaik1J/ns/g=
Subject key identifier:   D4:40:E3:9A:9F:BA:3A:F1:9F:95:21:6D:D1:2B:53:86:A8:B6:7D:EE
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer:       /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial:       01901E590D4F9203448C03DD6DD1296652C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number:          02AC
Signing time:             Sun 16 Jun 2024 00:01:10 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:10 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:10 +0000
Files and hashes:         1: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: bpPNN8ZllsFEfUkXolrYe6i4g4+vnw34AOmTE9ovaEs=)
                          2: wPprtlMnFXSHAf0336Ro9cbLtck.roa (hash: /fXnL9AkAv3Fioj58181d4yJmK75ZQ9mPWfZsNccZVk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:0d:4f:92:03:44:8c:03:dd:6d:d1:29:66:52:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
        Validity
            Not Before: Jun 16 00:01:10 2024 GMT
            Not After : Jun 17 00:01:10 2024 GMT
        Subject: CN=d440e39a9fba3af19f95216dd12b5386a8b67dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:a1:e8:04:82:ed:6a:18:82:ec:58:c7:a0:
                    bc:4d:c6:e4:a0:4a:10:a6:e8:54:31:62:21:75:83:
                    8c:cd:f3:c5:fb:8e:b7:1c:1c:66:8c:62:ea:ee:c1:
                    de:cf:84:b1:41:c9:26:2c:4f:ad:a5:e6:49:e4:9c:
                    78:c6:02:10:87:ff:71:d3:4b:75:64:b2:6e:34:dd:
                    e2:55:b4:21:0b:a5:54:2e:5b:0e:34:b3:33:8e:a0:
                    0a:db:4f:30:a7:95:6e:d2:5d:77:2f:aa:99:10:43:
                    29:c9:5d:83:39:15:3b:b4:c6:20:f2:fa:83:46:b1:
                    57:f7:d4:a6:16:d8:21:c9:19:35:82:17:54:ab:05:
                    09:8b:4e:82:aa:62:50:71:60:ef:03:dc:ec:e0:2c:
                    8c:5f:b3:93:2e:4a:94:d1:b3:02:32:49:17:14:fe:
                    57:e9:79:72:76:75:1e:d7:35:bb:7e:6c:aa:4b:a3:
                    72:32:a1:c0:35:9a:9f:a6:e2:dd:c3:ba:02:fc:44:
                    41:1a:98:09:3e:e8:73:07:be:d9:65:dc:20:48:5a:
                    fd:d5:b6:c8:03:12:f8:82:ce:6a:a4:16:30:d6:f4:
                    73:33:70:48:a5:e2:51:4d:d3:9e:c4:e7:ae:6d:a8:
                    c6:49:21:60:fa:78:cf:38:13:a8:41:43:8b:ab:71:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:40:E3:9A:9F:BA:3A:F1:9F:95:21:6D:D1:2B:53:86:A8:B6:7D:EE
            X509v3 Authority Key Identifier:
                keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:bd:bb:f4:6b:44:37:20:92:b4:d4:3f:37:1b:60:18:cd:10:
         9e:ae:6d:28:cc:8b:7b:a2:cb:07:bf:7f:9d:d7:99:c6:44:00:
         11:a0:da:97:f0:4d:2d:0a:15:fd:d0:60:28:78:49:8d:69:de:
         f8:b8:17:76:7a:de:74:fb:64:34:c4:dd:80:aa:b4:d9:ab:39:
         1f:ea:36:3b:76:b9:b2:6b:df:22:09:8f:75:52:c6:42:bc:dc:
         df:8b:3c:6a:85:ab:42:bd:45:7a:a9:4f:d2:5d:20:a4:ad:dd:
         29:39:0b:f0:17:e0:fd:32:14:21:3e:07:bf:95:58:ed:aa:c3:
         14:8b:37:b5:36:c1:ff:7c:65:aa:aa:25:1f:86:54:bc:5e:ab:
         c7:8f:e5:93:15:10:76:bb:38:af:dd:e1:9a:1f:e7:d0:af:1b:
         b4:e5:e1:63:a5:a2:28:a1:d9:15:0c:f8:b1:8a:3e:75:0c:a3:
         db:48:8a:f6:54:d5:22:29:3c:be:05:12:95:c6:58:41:c0:51:
         88:4e:df:81:ea:13:f1:98:2b:60:9c:d0:6c:6a:cd:bf:f2:90:
         f4:46:c8:16:70:ab:38:8b:52:c8:20:23:65:0e:49:a3:8a:a1:
         b3:dd:d5:29:18:e8:b6:73:2c:1e:2f:8a:ef:44:a0:70:21:96:
         25:f2:ac:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWQ1PkgNEjAPdbdEpZlLCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMzYxZDdmMWY1ZjgyMzk3NzUwMjYwNjM1MWZkNDhkZmJl
ZTExZTMwHhcNMjQwNjE2MDAwMTEwWhcNMjQwNjE3MDAwMTEwWjAzMTEwLwYDVQQD
EyhkNDQwZTM5YTlmYmEzYWYxOWY5NTIxNmRkMTJiNTM4NmE4YjY3ZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+Wh6ASC7WoYguxYx6C8TcbkoEoQ
puhUMWIhdYOMzfPF+463HBxmjGLq7sHez4SxQckmLE+tpeZJ5Jx4xgIQh/9x00t1
ZLJuNN3iVbQhC6VULlsONLMzjqAK208wp5Vu0l13L6qZEEMpyV2DORU7tMYg8vqD
RrFX99SmFtghyRk1ghdUqwUJi06CqmJQcWDvA9zs4CyMX7OTLkqU0bMCMkkXFP5X
6XlydnUe1zW7fmyqS6NyMqHANZqfpuLdw7oC/ERBGpgJPuhzB77ZZdwgSFr91bbI
AxL4gs5qpBYw1vRzM3BIpeJRTdOexOeubajGSSFg+njPOBOoQUOLq3ExQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRA45qfujrxn5UhbdErU4aotn3uMB8GA1UdIwQY
MBaAFB02HX8fX4I5d1AmBjUf1I377hHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEt
ZTkxODhiY2VjMGM1LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEtZTkxODhiY2VjMGM1
LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPb279GtE
NyCStNQ/NxtgGM0Qnq5tKMyLe6LLB79/ndeZxkQAEaDal/BNLQoV/dBgKHhJjWne
+LgXdnredPtkNMTdgKq02as5H+o2O3a5smvfIgmPdVLGQrzc34s8aoWrQr1FeqlP
0l0gpK3dKTkL8Bfg/TIUIT4Hv5VY7arDFIs3tTbB/3xlqqolH4ZUvF6rx4/lkxUQ
drs4r93hmh/n0K8btOXhY6WiKKHZFQz4sYo+dQyj20iK9lTVIik8vgUSlcZYQcBR
iE7fgeoT8ZgrYJzQbGrNv/KQ9EbIFnCrOItSyCAjZQ5Jo4qhs93VKRjotnMsHi+K
70SgcCGWJfKssw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:59 2024 by rpki-client on console-fra.rpki-client.org