Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File:                     0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier:          RxLW0nUzBaxU4GChhsYzkR6nN2PlLEmbayZ2Dn+a31c=
Subject key identifier:   3E:79:CF:B0:C1:8F:E7:32:18:3F:43:EE:C2:2D:2A:87:6C:EA:5A:06
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer:       /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial:       01901D0F829978DDA132BA0C211A777ACC0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number:          0159
Signing time:             Sat 15 Jun 2024 18:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:13 +0000
Files and hashes:         1: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: jP1Cxw9+CXAISadulqsrIH8uO3SPS+/E62sLJTG/CXo=)
                          2: czPff2lrTb5YV5EvNqJEit3u2Kk.roa (hash: UsZsmZKlNH/ST6HPD+CHmf6qgWzxDNm8fOXqx5Gsyzc=)
                          3: dJa-2FiaALFLMBpDHuBQtmSlsBc.roa (hash: CngtiWNygsdS36V8QM4wiI4ejTCC6rxhb91C4CA5J1k=)
                          4: wUv-lrDooRs7_Qicc8NcQRJQzcY.roa (hash: U9zv2tyVQtkeIhxob00A4vtFSswGsxJ+/PrGgKYcb5A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:82:99:78:dd:a1:32:ba:0c:21:1a:77:7a:cc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
        Validity
            Not Before: Jun 15 18:01:13 2024 GMT
            Not After : Jun 16 18:01:13 2024 GMT
        Subject: CN=3e79cfb0c18fe732183f43eec22d2a876cea5a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:13:74:56:4a:60:0a:13:b9:ab:2d:93:2d:60:
                    2c:c0:b0:51:cd:87:17:2a:9e:59:5d:02:1b:66:ba:
                    b3:09:74:d9:4b:82:1a:89:d2:ad:73:50:ac:93:09:
                    ff:00:5b:cb:3f:5c:6f:0c:66:55:cb:39:4e:e1:f9:
                    79:6e:e8:f9:33:9c:48:fc:2e:28:95:6c:f4:e3:bc:
                    bc:b5:07:43:c5:11:01:b9:f6:c7:4d:bd:50:d5:61:
                    1a:ac:bd:d2:46:86:e7:d1:e6:e1:d7:5c:51:73:79:
                    4d:32:7d:b4:1b:2b:1e:ab:c0:b4:5d:18:68:db:5c:
                    af:c7:b8:9b:f4:f5:49:0e:86:67:2c:02:ab:80:bb:
                    7c:b1:82:c9:71:9f:fb:2e:78:e2:81:d9:d4:01:23:
                    99:d8:a7:48:ab:28:f1:1b:91:41:a5:aa:2f:df:4b:
                    60:90:2c:c4:68:22:2b:36:a4:b9:c7:f1:d4:7c:65:
                    60:30:13:8e:e3:48:48:22:ae:42:16:ca:41:fd:e1:
                    25:64:49:83:46:ff:a1:f9:eb:75:3a:70:79:a0:60:
                    2f:7e:ba:69:0e:4f:9a:fa:e1:44:72:1a:e2:66:ed:
                    ea:f1:be:0b:7c:12:70:ef:77:43:98:bf:ce:5a:bc:
                    f7:48:51:6e:45:0c:2d:cd:3c:ed:35:de:ca:2e:34:
                    28:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:79:CF:B0:C1:8F:E7:32:18:3F:43:EE:C2:2D:2A:87:6C:EA:5A:06
            X509v3 Authority Key Identifier:
                keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e4:89:f1:b7:f4:3f:df:91:be:7b:7c:0a:14:ac:89:43:f1:
         c8:8f:df:eb:6e:c1:97:13:2d:4e:56:00:b1:5d:80:64:03:9c:
         82:06:fe:06:81:39:d5:ee:72:99:1e:23:0e:f2:f6:0a:be:c6:
         d4:0e:71:b7:4c:19:e4:3b:c9:53:5d:36:5e:67:61:d5:7d:ea:
         0d:14:76:ba:97:19:70:08:f5:54:47:9f:42:49:71:25:9c:6d:
         f1:cf:b7:91:c9:a7:52:ab:82:24:d1:20:c3:47:3b:0c:52:d7:
         9d:ef:a1:f7:55:0c:7a:52:ef:e1:a8:4b:68:39:2f:52:f4:43:
         9e:5c:af:7c:75:70:61:e7:39:62:3e:ad:a6:81:24:ff:d0:25:
         59:19:01:cc:0d:da:15:4e:75:d2:76:45:8c:51:ed:3f:80:71:
         20:97:fe:96:bf:c4:46:a4:99:51:e4:00:c0:d2:b8:9c:bb:ee:
         63:74:b4:74:d7:91:a6:1c:e2:c4:43:4e:ce:fb:17:00:c8:87:
         29:91:e3:04:32:5b:8d:72:5e:bb:9e:9a:ec:5d:95:43:30:87:
         3f:a7:19:40:df:ec:b4:97:ad:f5:da:9e:16:68:d3:4d:ab:8d:
         7f:3a:88:d7:dd:39:4a:d4:fd:59:bf:2d:b8:be:7f:31:86:46:
         7c:ad:4a:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdD4KZeN2hMroMIRp3eswLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNDMyMmIyZDBhNzk0ZmQwNzZiODVlOGRjNTc4YWJiMGQw
M2VjNDAwHhcNMjQwNjE1MTgwMTEzWhcNMjQwNjE2MTgwMTEzWjAzMTEwLwYDVQQD
EygzZTc5Y2ZiMGMxOGZlNzMyMTgzZjQzZWVjMjJkMmE4NzZjZWE1YTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RN0VkpgChO5qy2TLWAswLBRzYcX
Kp5ZXQIbZrqzCXTZS4IaidKtc1Cskwn/AFvLP1xvDGZVyzlO4fl5buj5M5xI/C4o
lWz047y8tQdDxREBufbHTb1Q1WEarL3SRobn0ebh11xRc3lNMn20Gyseq8C0XRho
21yvx7ib9PVJDoZnLAKrgLt8sYLJcZ/7LnjigdnUASOZ2KdIqyjxG5FBpaov30tg
kCzEaCIrNqS5x/HUfGVgMBOO40hIIq5CFspB/eElZEmDRv+h+et1OnB5oGAvfrpp
Dk+a+uFEchriZu3q8b4LfBJw73dDmL/OWrz3SFFuRQwtzTztNd7KLjQo3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD55z7DBj+cyGD9D7sItKods6loGMB8GA1UdIwQY
MBaAFNJDIrLQp5T9B2uF6NxXirsNA+xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGtNaXN0Q25sUDBIYTRYbzNGZUt1dzBEN0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85N2MzNTMtMGMzNi00MDY2LWE1NmIt
MTM5YTQ5NmNkNTljLzEvMGtNaXN0Q25sUDBIYTRYbzNGZUt1dzBEN0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy85N2MzNTMtMGMzNi00MDY2LWE1NmItMTM5YTQ5NmNkNTlj
LzEvMGtNaXN0Q25sUDBIYTRYbzNGZUt1dzBEN0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuSJ8bf0
P9+Rvnt8ChSsiUPxyI/f627BlxMtTlYAsV2AZAOcggb+BoE51e5ymR4jDvL2Cr7G
1A5xt0wZ5DvJU102Xmdh1X3qDRR2upcZcAj1VEefQklxJZxt8c+3kcmnUquCJNEg
w0c7DFLXne+h91UMelLv4ahLaDkvUvRDnlyvfHVwYec5Yj6tpoEk/9AlWRkBzA3a
FU510nZFjFHtP4BxIJf+lr/ERqSZUeQAwNK4nLvuY3S0dNeRphzixENOzvsXAMiH
KZHjBDJbjXJeu56a7F2VQzCHP6cZQN/stJet9dqeFmjTTauNfzqI1905StT9Wb8t
uL5/MYZGfK1KeA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:18:20 2024 by rpki-client on console-ams.rpki-client.org