Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File:                     TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier:          Nr8qBsOIozNW6qfqGMsVAg0ZmNSTu3WfYocEkV8n/M4=
Subject key identifier:   16:82:4C:71:9C:96:4A:65:6A:50:8A:AD:BF:D6:BB:F8:F5:BC:56:14
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer:       /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial:       01901BFE701108030F2E7EAA3C2F8A6A627D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 13:02:57 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:57 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:57 +0000
Files and hashes:         1: FqHVmkJz2LeePqI9esBKzqII4S0.roa (hash: C7YaYNuyaxr7GXeZUaDERL3zxQ53iEs2uwQHirGLWzo=)
                          2: OlsJTeabmAGdHkgiStDl2J3Yia8.roa (hash: 3LB59E2zGfoZNdBhX0Upke/031gDOY/8Kr/gYOwgZuI=)
                          3: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: iC5i0v+vSPCjz+o0y3eTHBzo1hyAJr9WX6XkyFZN5QM=)
                          4: XAy_ofcAvnQkaEcULMh_zhoUVCg.roa (hash: LjZl2Qe5BQnsWFUVqq7DKQUnCgrFNrfO4KH7NwP0nV8=)
                          5: foLOcYg-7LcPiDsn8-AZ7Azgn2I.roa (hash: rsStUQnqgnUH/Bh9XKegu1/sfdllrflKVFiM18NkVK4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:70:11:08:03:0f:2e:7e:aa:3c:2f:8a:6a:62:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
        Validity
            Not Before: Jun 15 13:02:57 2024 GMT
            Not After : Jun 16 13:02:57 2024 GMT
        Subject: CN=16824c719c964a656a508aadbfd6bbf8f5bc5614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:b2:f6:6f:68:ed:f2:51:35:84:5f:cb:dc:
                    22:c9:59:4a:29:7b:41:21:ff:77:ea:b9:0c:13:35:
                    bd:85:5f:ec:be:97:8a:83:88:ad:c0:d8:02:57:21:
                    ff:fa:8f:0f:09:5d:48:21:bd:b7:b1:20:a1:f3:f3:
                    10:ad:27:63:96:af:ed:4e:59:68:4d:ce:78:1c:d6:
                    d1:aa:59:96:99:8e:d5:24:ff:8a:ed:a6:43:5b:5f:
                    2e:f4:55:4f:a2:34:66:6f:54:f5:98:90:7c:d6:81:
                    87:52:54:be:cb:7e:ab:ef:96:0a:b7:63:9a:1f:1b:
                    5f:29:76:44:ab:53:27:7e:d1:15:ac:37:b5:bf:59:
                    ae:b7:24:4e:05:7b:fb:9c:27:0b:51:aa:3d:09:ea:
                    de:bf:60:16:be:f5:7c:87:69:c3:ab:2a:ed:e5:c0:
                    75:bc:83:e0:96:a8:e3:0b:0d:d6:f2:80:dd:da:58:
                    95:e0:4e:18:4a:8e:eb:84:ae:c1:59:db:4d:63:b4:
                    f5:8a:c1:fb:a6:e2:bf:ad:88:bc:10:84:3c:c2:93:
                    ce:3e:1e:ab:ae:b7:77:c7:b4:ea:de:1d:67:23:51:
                    c3:03:f1:c4:85:bc:91:5c:38:3e:bf:02:e3:b3:4b:
                    72:ee:37:ea:22:ee:9f:26:2c:4e:4c:61:59:63:09:
                    22:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:82:4C:71:9C:96:4A:65:6A:50:8A:AD:BF:D6:BB:F8:F5:BC:56:14
            X509v3 Authority Key Identifier:
                keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ea:44:e1:21:ac:71:e4:f7:fe:11:ea:ce:fe:96:51:8f:ae:
         f5:0d:43:5e:c2:f5:15:6a:d2:7e:cd:f8:b2:97:be:97:de:ee:
         ba:a2:fa:32:cf:36:31:80:6b:18:79:90:7d:99:97:e0:8a:00:
         88:20:84:f7:80:00:e2:89:fc:f6:f0:01:38:f9:35:1c:35:ad:
         b3:e2:fa:ef:af:58:a8:70:b5:87:f9:f6:7b:48:d8:a0:56:85:
         56:df:f8:a5:1e:ba:ab:2f:6e:fc:6d:4c:21:15:52:27:e2:70:
         e5:79:fd:3f:6e:d2:3d:48:1f:03:dc:13:db:4e:94:c5:4e:54:
         0e:fb:cc:d7:19:30:32:5f:f1:82:82:fa:73:db:55:e4:e0:ab:
         fb:66:b0:f0:c7:8d:aa:16:52:ed:dc:ed:f8:3d:e1:a1:27:80:
         fa:1b:1b:e2:d3:ed:ab:93:56:27:49:d3:4e:2f:4b:7a:d9:2f:
         56:ed:ba:dc:79:8a:34:94:5e:09:0b:b0:65:0d:37:36:52:2e:
         81:66:fe:3e:e6:91:46:e0:a3:44:73:04:29:34:b6:17:0a:ea:
         dd:9e:7c:fd:fc:49:c6:7b:91:ed:b9:08:fc:ba:da:6b:46:0c:
         98:54:50:19:e5:c9:8b:4f:dd:72:82:c8:8f:33:57:bd:bd:14:
         18:1e:8a:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/nARCAMPLn6qPC+KamJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDAzYmM2MGI0YTEzYzNkYWEzNDExYWM5MjNjNjM3MmQ0
MjNlYjgwHhcNMjQwNjE1MTMwMjU3WhcNMjQwNjE2MTMwMjU3WjAzMTEwLwYDVQQD
EygxNjgyNGM3MTljOTY0YTY1NmE1MDhhYWRiZmQ2YmJmOGY1YmM1NjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXay9m9o7fJRNYRfy9wiyVlKKXtB
If936rkMEzW9hV/svpeKg4itwNgCVyH/+o8PCV1IIb23sSCh8/MQrSdjlq/tTllo
Tc54HNbRqlmWmY7VJP+K7aZDW18u9FVPojRmb1T1mJB81oGHUlS+y36r75YKt2Oa
HxtfKXZEq1MnftEVrDe1v1mutyROBXv7nCcLUao9Cerev2AWvvV8h2nDqyrt5cB1
vIPglqjjCw3W8oDd2liV4E4YSo7rhK7BWdtNY7T1isH7puK/rYi8EIQ8wpPOPh6r
rrd3x7Tq3h1nI1HDA/HEhbyRXDg+vwLjs0ty7jfqIu6fJixOTGFZYwkimQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaCTHGclkplalCKrb/Wu/j1vFYUMB8GA1UdIwQY
MBaAFExAO8YLShPD2qNBGskjxjctQj64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjct
MmU4NGI4ZDE4ZTRlLzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjctMmU4NGI4ZDE4ZTRl
LzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOpE4SGs
ceT3/hHqzv6WUY+u9Q1DXsL1FWrSfs34spe+l97uuqL6Ms82MYBrGHmQfZmX4IoA
iCCE94AA4on89vABOPk1HDWts+L6769YqHC1h/n2e0jYoFaFVt/4pR66qy9u/G1M
IRVSJ+Jw5Xn9P27SPUgfA9wT206UxU5UDvvM1xkwMl/xgoL6c9tV5OCr+2aw8MeN
qhZS7dzt+D3hoSeA+hsb4tPtq5NWJ0nTTi9LetkvVu263HmKNJReCQuwZQ03NlIu
gWb+PuaRRuCjRHMEKTS2Fwrq3Z58/fxJxnuR7bkI/Lraa0YMmFRQGeXJi0/dcoLI
jzNXvb0UGB6K+w==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:19:25 2024 by rpki-client on console-ams.rpki-client.org