Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
File:                     ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json)
Hash identifier:          9rC18KFNDSclH0PTgG++fyGvZkDu8cR3+9KBuzXeIPY=
Subject key identifier:   A1:E7:6B:F6:7A:10:7F:7D:C5:83:BA:9F:45:46:CC:3E:9F:8E:B6:19
Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Certificate issuer:       /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Certificate serial:       01901BFCFEA436FFBC3534AC9766C893A635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
Manifest number:          0E83
Signing time:             Sat 15 Jun 2024 13:01:23 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:23 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:23 +0000
Files and hashes:         1: U5wKQsq4yED7UQOtd4LlmyvH1Ww.roa (hash: l2C5ESNBrAxld77b3qxHHo5+M2By0kN89mW5lE7hnQI=)
                          2: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: 4/QcnGCkBh4MEIvxnIYvvhvrcN2NAyYPi1814RG9xIk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:fe:a4:36:ff:bc:35:34:ac:97:66:c8:93:a6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
        Validity
            Not Before: Jun 15 13:01:23 2024 GMT
            Not After : Jun 16 13:01:23 2024 GMT
        Subject: CN=a1e76bf67a107f7dc583ba9f4546cc3e9f8eb619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:16:42:32:44:d6:e8:e0:8a:97:6b:af:78:
                    c9:a1:9a:fd:32:12:95:17:9e:78:69:ed:70:fb:22:
                    f7:e9:75:a9:c0:2f:ee:4a:c2:52:c4:65:a5:20:da:
                    c0:b5:62:db:00:8a:2c:fd:9a:c5:bf:e6:d0:9a:56:
                    3d:9d:da:35:4c:e1:da:2c:24:ef:bb:f3:06:9d:53:
                    9a:bc:c5:b6:dc:d0:91:b2:86:0e:b3:66:f2:a0:e8:
                    32:bd:4e:6a:ba:b7:6b:ee:46:ad:43:20:39:38:4f:
                    e9:27:82:ef:14:bc:1d:c6:1a:3e:9b:74:ea:f2:b9:
                    20:54:0b:72:b7:90:9f:d3:0a:f8:f4:5e:3a:7f:56:
                    8c:b4:84:ae:95:81:74:c3:30:01:f3:2e:e5:4f:0d:
                    2d:95:9e:90:36:74:f5:30:fd:4a:36:9c:17:1b:e9:
                    a0:e1:50:78:b1:b4:10:43:71:99:70:e3:71:fc:b4:
                    a8:34:7f:44:1b:5f:5a:32:fc:49:bc:eb:96:bb:13:
                    29:74:6e:ba:51:f2:dd:3e:8c:dc:41:e0:e4:01:15:
                    75:7c:93:81:73:d8:ee:7b:be:52:ee:f4:97:10:04:
                    2d:db:ef:9d:b6:43:1b:83:4c:5d:14:47:0c:56:8a:
                    74:15:9b:6f:31:1f:14:84:a5:6b:b6:cd:69:7a:d5:
                    aa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E7:6B:F6:7A:10:7F:7D:C5:83:BA:9F:45:46:CC:3E:9F:8E:B6:19
            X509v3 Authority Key Identifier:
                keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4e:18:92:b4:8a:1f:99:46:43:1f:26:19:17:a1:b1:a1:bd:
         83:40:20:82:56:fd:4e:a7:8f:f7:da:82:73:e2:c2:48:d4:96:
         1b:2b:64:1b:ae:e3:fc:bf:98:1c:87:53:b4:a3:25:54:5e:ed:
         2a:0a:25:c8:f7:af:73:85:b4:cf:ce:d4:f9:55:dd:ee:7f:c4:
         2c:37:2d:63:2e:a1:83:51:6e:ec:db:17:f1:f9:83:39:53:ef:
         52:2a:e1:bc:c8:e8:67:f7:bc:95:9e:2c:d5:6b:1f:ea:e2:ca:
         e1:26:5d:d7:23:a4:f6:55:3c:ec:c1:a5:d2:7c:b2:c9:1a:85:
         81:37:55:ba:c9:2a:33:90:31:f9:dd:77:13:b9:5f:93:2b:3e:
         e8:9f:da:fa:01:9e:dc:78:ce:97:af:1c:40:20:60:b4:f2:39:
         a2:23:ce:ec:67:74:8a:47:92:41:a7:05:74:dc:9d:eb:f2:a2:
         70:ce:c8:38:37:58:29:58:d3:f7:7b:29:d0:8d:3d:84:4a:8e:
         d0:e8:b5:d3:a1:df:12:71:94:8a:03:e5:4c:d6:23:3b:67:75:
         80:24:52:0b:06:7f:4c:c8:7e:82:4f:58:98:42:7f:8a:78:e8:
         75:42:1f:6f:5a:9e:11:f3:dc:e9:02:4e:17:66:fb:78:09:46:
         01:ca:b4:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/P6kNv+8NTSsl2bIk6Y1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDY2MzI5NTc2YzljMDFiM2NkODI4NWY0YjU0YjAxNzBk
OGMzOWEwHhcNMjQwNjE1MTMwMTIzWhcNMjQwNjE2MTMwMTIzWjAzMTEwLwYDVQQD
EyhhMWU3NmJmNjdhMTA3ZjdkYzU4M2JhOWY0NTQ2Y2MzZTlmOGViNjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeIWQjJE1ujgipdrr3jJoZr9MhKV
F554ae1w+yL36XWpwC/uSsJSxGWlINrAtWLbAIos/ZrFv+bQmlY9ndo1TOHaLCTv
u/MGnVOavMW23NCRsoYOs2byoOgyvU5qurdr7katQyA5OE/pJ4LvFLwdxho+m3Tq
8rkgVAtyt5Cf0wr49F46f1aMtISulYF0wzAB8y7lTw0tlZ6QNnT1MP1KNpwXG+mg
4VB4sbQQQ3GZcONx/LSoNH9EG19aMvxJvOuWuxMpdG66UfLdPozcQeDkARV1fJOB
c9jue75S7vSXEAQt2++dtkMbg0xdFEcMVop0FZtvMR8UhKVrts1petWq6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHna/Z6EH99xYO6n0VGzD6fjrYZMB8GA1UdIwQY
MBaAFGXWYylXbJwBs82ChfS1SwFw2MOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgt
MWU2NjUwNTEzMWNhLzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgtMWU2NjUwNTEzMWNh
LzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsE4YkrSK
H5lGQx8mGRehsaG9g0Agglb9TqeP99qCc+LCSNSWGytkG67j/L+YHIdTtKMlVF7t
KgolyPevc4W0z87U+VXd7n/ELDctYy6hg1Fu7NsX8fmDOVPvUirhvMjoZ/e8lZ4s
1Wsf6uLK4SZd1yOk9lU87MGl0nyyyRqFgTdVuskqM5Ax+d13E7lfkys+6J/a+gGe
3HjOl68cQCBgtPI5oiPO7Gd0ikeSQacFdNyd6/KicM7IODdYKVjT93sp0I09hEqO
0Oi106HfEnGUigPlTNYjO2d1gCRSCwZ/TMh+gk9YmEJ/injodUIfb1qeEfPc6QJO
F2b7eAlGAcq0IA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:57:11 2024 by rpki-client on console-ams.rpki-client.org