Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File:                     X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier:          xbGKp1R4IZNT2y3K7NgQdjsLjy3C+/u/oGYHGmIxHjw=
Subject key identifier:   57:E9:6C:3B:3B:8E:3D:F0:B4:48:52:BE:94:B8:D5:A4:54:65:F0:B4
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer:       /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial:       01901DEDA1322F677651754C33BAC3C67323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:03:50 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:50 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:50 +0000
Files and hashes:         1: Uz_Vioh_nw0iq8oWlMcwzbixI44.roa (hash: azLNNhol7oHbKBpxcKT+gg349gcpBlroogKCnbR+Fv8=)
                          2: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: 3jSzB0EyjLMF16oCD8nxUcJHCEloguolgbh6I74LdEk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:a1:32:2f:67:76:51:75:4c:33:ba:c3:c6:73:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
        Validity
            Not Before: Jun 15 22:03:50 2024 GMT
            Not After : Jun 16 22:03:50 2024 GMT
        Subject: CN=57e96c3b3b8e3df0b44852be94b8d5a45465f0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:1d:06:ad:86:d4:6a:0d:98:e4:09:c2:79:
                    9a:0b:bc:b9:5a:ff:08:b4:5c:96:b6:40:b8:d6:39:
                    e6:27:62:57:07:30:7d:5f:eb:d4:4e:77:a4:b1:35:
                    d8:b9:bc:24:b2:d6:66:0c:9f:5d:50:b5:bf:97:de:
                    a0:01:7a:8d:c4:fb:1a:6a:d7:04:4f:49:fb:f4:46:
                    14:f5:3d:e8:ba:0c:98:7d:2c:66:ef:aa:77:65:cf:
                    be:92:32:bf:25:74:ba:5e:e6:5c:0c:73:94:aa:f5:
                    7d:b4:5c:7f:0c:68:74:fd:22:6d:5f:bb:6d:c4:35:
                    d1:d9:84:ab:e8:92:42:fa:26:86:5d:b5:1c:8c:3f:
                    85:0c:0b:03:35:54:16:61:6b:c2:5e:37:72:cd:16:
                    6a:ee:a9:e3:5c:c0:86:f3:ee:33:4e:a6:a4:48:19:
                    93:a9:75:f1:ed:b3:f9:49:ed:39:5a:ea:31:57:36:
                    88:1a:b3:8e:0e:9a:f4:2e:35:4c:98:28:8b:9b:a9:
                    4c:08:2d:d4:61:e5:15:b8:e4:d2:0b:31:3d:33:a1:
                    70:2a:55:79:ee:ef:24:51:e0:c0:06:fc:da:19:7c:
                    d7:76:47:de:f2:6d:3d:16:8a:a1:78:3d:65:e7:31:
                    3d:17:9a:26:9d:27:76:35:8b:fb:58:b3:95:36:c6:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E9:6C:3B:3B:8E:3D:F0:B4:48:52:BE:94:B8:D5:A4:54:65:F0:B4
            X509v3 Authority Key Identifier:
                keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ed:35:f1:eb:14:de:4a:9f:00:6e:7e:9d:9b:65:af:c5:ca:
         51:47:fb:be:73:af:b1:43:fa:bc:47:cc:e9:c6:0a:d3:69:e1:
         e4:5c:47:b8:43:32:e9:6d:9f:2e:b3:5e:2d:22:b3:f8:92:94:
         ad:24:60:75:83:b7:60:f6:f2:97:d1:2b:6e:2b:ac:65:05:b7:
         d3:92:0e:f1:27:89:36:3e:18:59:83:dd:6c:78:85:92:70:51:
         66:cc:54:f6:cf:0b:40:01:ed:92:df:4f:df:4a:f0:23:b4:58:
         f2:d4:7c:5e:08:80:b7:79:59:c5:cf:dc:97:7f:7d:e9:fd:31:
         a4:5b:f7:67:01:c0:77:5b:1a:c0:2d:fc:5c:9e:b9:8c:5e:0d:
         13:24:b6:8f:d7:e2:55:93:85:77:74:96:75:2d:54:67:a3:13:
         d6:d8:9b:c9:38:83:d0:a3:bf:98:a5:61:36:87:8f:6a:41:f7:
         0a:e0:b5:39:45:8a:92:52:6e:f8:6e:e8:22:c1:d8:1f:13:0c:
         05:d0:11:cc:16:d4:af:70:f6:72:fe:b1:0b:af:c5:00:d2:11:
         88:ac:8e:ef:71:4d:e2:79:7d:a5:3c:22:dc:ca:04:37:e2:06:
         bd:46:4a:89:9c:3f:c9:3d:98:b8:df:57:97:8a:42:db:64:a8:
         ec:c6:c9:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7aEyL2d2UXVMM7rDxnMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmODNjMzk3NmNmMDBlNDJjYmVkNTM5MjRjNGE4NjU1NmJk
NzAxNDIwHhcNMjQwNjE1MjIwMzUwWhcNMjQwNjE2MjIwMzUwWjAzMTEwLwYDVQQD
Eyg1N2U5NmMzYjNiOGUzZGYwYjQ0ODUyYmU5NGI4ZDVhNDU0NjVmMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4odBq2G1GoNmOQJwnmaC7y5Wv8I
tFyWtkC41jnmJ2JXBzB9X+vUTneksTXYubwkstZmDJ9dULW/l96gAXqNxPsaatcE
T0n79EYU9T3ougyYfSxm76p3Zc++kjK/JXS6XuZcDHOUqvV9tFx/DGh0/SJtX7tt
xDXR2YSr6JJC+iaGXbUcjD+FDAsDNVQWYWvCXjdyzRZq7qnjXMCG8+4zTqakSBmT
qXXx7bP5Se05WuoxVzaIGrOODpr0LjVMmCiLm6lMCC3UYeUVuOTSCzE9M6FwKlV5
7u8kUeDABvzaGXzXdkfe8m09FoqheD1l5zE9F5omnSd2NYv7WLOVNsb1VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfpbDs7jj3wtEhSvpS41aRUZfC0MB8GA1UdIwQY
MBaAFF+Dw5ds8A5Cy+1TkkxKhlVr1wFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEt
OWMzZWZmYWYyYWYyLzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEtOWMzZWZmYWYyYWYy
LzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUu018esU
3kqfAG5+nZtlr8XKUUf7vnOvsUP6vEfM6cYK02nh5FxHuEMy6W2fLrNeLSKz+JKU
rSRgdYO3YPbyl9ErbiusZQW305IO8SeJNj4YWYPdbHiFknBRZsxU9s8LQAHtkt9P
30rwI7RY8tR8XgiAt3lZxc/cl3996f0xpFv3ZwHAd1sawC38XJ65jF4NEyS2j9fi
VZOFd3SWdS1UZ6MT1tibyTiD0KO/mKVhNoePakH3CuC1OUWKklJu+G7oIsHYHxMM
BdARzBbUr3D2cv6xC6/FANIRiKyO73FN4nl9pTwi3MoEN+IGvUZKiZw/yT2YuN9X
l4pC22So7MbJoA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 05:11:45 2024 by rpki-client on console-ams.rpki-client.org