Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
File:                     ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json)
Hash identifier:          bpHoTBvIxUbZVq4DMFmfWBSVPk/tlrMSZpIOSE+ICf8=
Subject key identifier:   C7:43:74:81:33:57:55:DB:8A:C2:C8:14:4C:EA:34:AE:7F:B3:50:1A
Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Certificate issuer:       /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Certificate serial:       019037061D81E35D18F75582362D9CDCBC4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
Manifest number:          0E91
Signing time:             Thu 20 Jun 2024 19:01:05 +0000
Manifest this update:     Thu 20 Jun 2024 19:01:05 +0000
Manifest next update:     Fri 21 Jun 2024 19:01:05 +0000
Files and hashes:         1: U5wKQsq4yED7UQOtd4LlmyvH1Ww.roa (hash: l2C5ESNBrAxld77b3qxHHo5+M2By0kN89mW5lE7hnQI=)
                          2: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: Tyx0ECeL/Z+h9B7VU1wBOOP0PTxnJFtfw95xqnU+9Vc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:06:1d:81:e3:5d:18:f7:55:82:36:2d:9c:dc:bc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
        Validity
            Not Before: Jun 20 19:01:05 2024 GMT
            Not After : Jun 21 19:01:05 2024 GMT
        Subject: CN=c7437481335755db8ac2c8144cea34ae7fb3501a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:b5:30:84:f7:a7:13:06:09:41:7c:13:5b:
                    81:4c:0d:c9:96:d8:59:5c:f9:0f:83:db:7c:32:14:
                    25:d9:63:a9:ef:87:e7:3a:68:0a:02:7f:1e:ba:98:
                    5b:aa:47:25:12:38:b7:9c:b2:d9:71:05:3b:1a:97:
                    43:29:50:4f:fd:03:8b:41:5c:57:e9:ac:5c:95:6c:
                    b4:3d:25:c3:09:b1:a0:5c:37:9c:b0:d1:60:67:a7:
                    e2:f9:d7:e0:78:aa:e1:11:7d:13:a2:46:73:7e:a0:
                    ce:cc:4e:f7:d2:49:8b:c7:ab:5d:2b:a9:c8:e8:6a:
                    42:47:ae:ab:33:15:12:e2:33:18:cf:7c:6f:c7:f4:
                    86:d6:ab:91:49:06:63:35:3a:1f:6c:c1:b2:f0:3a:
                    18:da:a9:3d:af:18:3f:39:7a:98:bc:60:df:f0:3c:
                    73:dd:10:65:3c:3e:99:a5:f4:82:e5:4c:75:c1:66:
                    91:f9:f9:19:c1:f2:dc:29:fb:cb:a5:b4:77:e8:a5:
                    c9:26:8e:3a:b6:2e:d6:06:a7:c4:ad:cf:11:d2:4b:
                    98:29:14:f3:91:ee:66:f6:e3:12:d5:40:01:d6:11:
                    4a:8a:51:0d:8f:64:b9:eb:a1:35:78:5e:6e:f9:36:
                    9b:09:e0:0b:47:a6:c1:7d:b4:ad:4f:00:69:d5:71:
                    2c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:43:74:81:33:57:55:DB:8A:C2:C8:14:4C:EA:34:AE:7F:B3:50:1A
            X509v3 Authority Key Identifier:
                keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:47:23:6b:16:ee:42:a0:c0:48:42:a9:fa:83:55:3c:88:85:
         9e:02:e8:6c:f2:c8:93:1d:49:8c:f1:da:fe:d6:ad:78:1f:c2:
         11:63:c6:c2:f9:c9:41:16:58:a5:a4:70:f7:43:e4:4b:2c:22:
         f3:f7:2d:56:42:13:ec:c5:d9:88:17:80:1c:27:08:eb:e0:3e:
         7e:b4:53:7e:05:1e:47:81:d8:b3:7a:ce:bf:2f:2c:f6:f6:0c:
         a3:c4:03:18:5d:48:1e:45:3f:9c:6e:8d:b5:65:09:4e:b1:a4:
         cc:4c:4e:6e:20:6c:e8:77:d7:1b:e3:9c:10:b9:6c:1c:40:e1:
         48:af:67:ae:3d:ff:89:47:7e:35:89:24:7c:e1:87:b7:b8:ad:
         b5:d1:79:bc:17:c6:64:3a:2f:83:ca:6e:b2:35:1c:1a:3c:62:
         71:37:1f:c4:a9:07:ec:38:01:17:33:6b:7d:bf:a7:a3:23:3f:
         cb:a4:c7:76:a3:be:1d:ff:d2:97:c2:ff:3b:6d:50:7e:9e:a1:
         a4:2e:3b:ef:c1:ee:8f:54:8c:14:b2:4a:42:e5:1d:cd:ce:51:
         34:75:63:c2:36:d1:d0:ff:54:6b:bb:47:12:e5:39:5a:90:03:
         c4:ee:3f:d7:b8:57:c9:43:90:bd:3f:e8:ea:ce:3c:8b:80:57:
         b8:f0:a6:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA3Bh2B410Y91WCNi2c3LxKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDY2MzI5NTc2YzljMDFiM2NkODI4NWY0YjU0YjAxNzBk
OGMzOWEwHhcNMjQwNjIwMTkwMTA1WhcNMjQwNjIxMTkwMTA1WjAzMTEwLwYDVQQD
EyhjNzQzNzQ4MTMzNTc1NWRiOGFjMmM4MTQ0Y2VhMzRhZTdmYjM1MDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9y1MIT3pxMGCUF8E1uBTA3JlthZ
XPkPg9t8MhQl2WOp74fnOmgKAn8euphbqkclEji3nLLZcQU7GpdDKVBP/QOLQVxX
6axclWy0PSXDCbGgXDecsNFgZ6fi+dfgeKrhEX0TokZzfqDOzE730kmLx6tdK6nI
6GpCR66rMxUS4jMYz3xvx/SG1quRSQZjNTofbMGy8DoY2qk9rxg/OXqYvGDf8Dxz
3RBlPD6ZpfSC5Ux1wWaR+fkZwfLcKfvLpbR36KXJJo46ti7WBqfErc8R0kuYKRTz
ke5m9uMS1UAB1hFKilENj2S566E1eF5u+TabCeALR6bBfbStTwBp1XEsTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdDdIEzV1XbisLIFEzqNK5/s1AaMB8GA1UdIwQY
MBaAFGXWYylXbJwBs82ChfS1SwFw2MOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgt
MWU2NjUwNTEzMWNhLzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgtMWU2NjUwNTEzMWNh
LzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEcjaxbu
QqDASEKp+oNVPIiFngLobPLIkx1JjPHa/tateB/CEWPGwvnJQRZYpaRw90PkSywi
8/ctVkIT7MXZiBeAHCcI6+A+frRTfgUeR4HYs3rOvy8s9vYMo8QDGF1IHkU/nG6N
tWUJTrGkzExObiBs6HfXG+OcELlsHEDhSK9nrj3/iUd+NYkkfOGHt7ittdF5vBfG
ZDovg8pusjUcGjxicTcfxKkH7DgBFzNrfb+noyM/y6THdqO+Hf/Sl8L/O21Qfp6h
pC4778Huj1SMFLJKQuUdzc5RNHVjwjbR0P9Ua7tHEuU5WpADxO4/17hXyUOQvT/o
6s48i4BXuPCmJw==
-----END CERTIFICATE-----
Generated at Fri Jun 21 04:45:54 2024 by rpki-client on console-ams.rpki-client.org