Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File:                     Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier:          9K7+CpJ/T09nIW0aNAynjPCihtObV0N9HSlg41nAQv8=
Subject key identifier:   B1:24:A9:82:B2:A5:29:0D:69:DC:DF:A5:A6:42:50:11:50:EC:3F:9B
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer:       /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial:       01901E8FE10BB4B5195ED50D3DD9DE3B224B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number:          EB
Signing time:             Sun 16 Jun 2024 01:01:04 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:04 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:04 +0000
Files and hashes:         1: N4y4gaUkhP_gsldB13xd1h6j6D0.roa (hash: GYxcXVUcjuxAspMY0pTQrTIu33QH2812QNz3SpgMgCY=)
                          2: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: 0Ipec4N61P/jtvljkyDppI6uXddEE+GMMgGhol6WtYc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:e1:0b:b4:b5:19:5e:d5:0d:3d:d9:de:3b:22:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
        Validity
            Not Before: Jun 16 01:01:04 2024 GMT
            Not After : Jun 17 01:01:04 2024 GMT
        Subject: CN=b124a982b2a5290d69dcdfa5a642501150ec3f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dc:89:48:44:c2:2b:df:f3:ad:2f:08:f7:8b:
                    38:8e:13:31:0c:a3:f6:ab:99:61:e6:89:c5:58:72:
                    7d:b9:81:1b:28:ef:12:bb:05:a6:17:47:4c:1d:51:
                    cf:04:09:d9:ba:2e:04:95:dc:c5:6d:0d:04:f3:c2:
                    d3:ef:3e:33:e7:42:f8:28:8f:26:ee:ed:51:76:ae:
                    19:89:81:cd:dc:2a:24:95:1c:5c:17:e2:58:38:b1:
                    f5:ab:8a:e7:d5:b6:b7:ef:77:88:35:64:f1:3d:ba:
                    3a:4e:00:9b:fb:08:48:8b:3f:0d:9f:7c:ca:b6:2c:
                    f3:b4:16:7e:fe:b9:34:2d:18:4a:e3:1a:14:54:29:
                    5f:53:dd:94:75:a3:3c:6a:8c:5f:cf:01:16:88:05:
                    ca:63:1c:59:9f:de:4a:f7:b7:1d:64:db:9d:24:d2:
                    07:b9:fb:c5:3f:2d:a3:f0:bd:eb:de:a4:bd:4c:0b:
                    28:f8:34:97:87:9e:55:ed:e6:04:5c:ae:a6:5c:3e:
                    d0:10:9c:46:51:e9:dc:c7:55:a4:a9:d6:7b:bf:9b:
                    85:92:58:dc:e4:c2:cf:99:ba:f8:bc:3b:70:79:54:
                    a8:41:40:27:e8:de:99:4d:e1:f0:c9:e3:48:63:0f:
                    60:6e:a1:21:43:0c:5e:5a:81:17:22:99:f6:c5:d3:
                    44:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:24:A9:82:B2:A5:29:0D:69:DC:DF:A5:A6:42:50:11:50:EC:3F:9B
            X509v3 Authority Key Identifier:
                keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5d:fe:0e:ea:ba:79:f2:44:bc:1d:85:55:00:aa:1f:e4:9d:
         b5:82:d3:9a:7d:a8:23:85:9e:25:f4:d9:71:3a:80:25:36:de:
         d1:d9:c7:39:30:24:eb:09:9f:8f:24:59:f8:6a:a3:03:47:04:
         92:9a:f8:80:0e:59:43:37:a7:6c:bd:5c:14:94:ea:51:4d:69:
         35:89:fd:62:76:c2:6c:64:56:32:c1:b7:86:30:05:7d:22:85:
         09:a0:32:c3:a6:17:60:1b:a7:e6:dd:01:e3:16:da:de:aa:ee:
         89:19:0d:b2:4e:29:d9:6f:b4:cc:b1:56:22:e5:a8:99:de:52:
         cc:92:40:9c:c3:78:83:07:19:ed:5c:69:52:d7:32:66:34:59:
         bf:da:a2:24:fd:88:42:5e:fb:c3:3b:1a:8a:ee:75:1e:7e:c2:
         cb:e1:ef:ca:cc:79:29:17:9e:d0:d0:14:50:33:13:ca:83:83:
         d5:13:73:9d:7c:ef:ad:35:b7:ef:aa:45:4e:df:6b:3d:85:5c:
         4e:d3:9c:49:de:73:8c:14:3e:fc:32:94:6a:fa:37:90:b4:27:
         26:da:29:8d:f5:ef:7b:f7:45:ba:83:78:c1:f4:52:6d:83:e1:
         1f:32:e5:6b:4e:c7:8c:e5:27:9f:d1:67:7c:94:da:47:d8:2a:
         0b:ff:db:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej+ELtLUZXtUNPdneOyJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmM2Y1NTRiODAyODFkZWEyYTMwMDMxOGFhYWQ2ZDJkOTdm
MWNlNDQwHhcNMjQwNjE2MDEwMTA0WhcNMjQwNjE3MDEwMTA0WjAzMTEwLwYDVQQD
EyhiMTI0YTk4MmIyYTUyOTBkNjlkY2RmYTVhNjQyNTAxMTUwZWMzZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dyJSETCK9/zrS8I94s4jhMxDKP2
q5lh5onFWHJ9uYEbKO8SuwWmF0dMHVHPBAnZui4EldzFbQ0E88LT7z4z50L4KI8m
7u1Rdq4ZiYHN3CoklRxcF+JYOLH1q4rn1ba373eINWTxPbo6TgCb+whIiz8Nn3zK
tizztBZ+/rk0LRhK4xoUVClfU92UdaM8aoxfzwEWiAXKYxxZn95K97cdZNudJNIH
ufvFPy2j8L3r3qS9TAso+DSXh55V7eYEXK6mXD7QEJxGUencx1WkqdZ7v5uFkljc
5MLPmbr4vDtweVSoQUAn6N6ZTeHwyeNIYw9gbqEhQwxeWoEXIpn2xdNEwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEkqYKypSkNadzfpaZCUBFQ7D+bMB8GA1UdIwQY
MBaAFD8/VUuAKB3qKjADGKqtbS2X8c5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQt
ZjUzM2I4ZGY4MGE5LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQtZjUzM2I4ZGY4MGE5
LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUV3+Duq6
efJEvB2FVQCqH+SdtYLTmn2oI4WeJfTZcTqAJTbe0dnHOTAk6wmfjyRZ+GqjA0cE
kpr4gA5ZQzenbL1cFJTqUU1pNYn9YnbCbGRWMsG3hjAFfSKFCaAyw6YXYBun5t0B
4xba3qruiRkNsk4p2W+0zLFWIuWomd5SzJJAnMN4gwcZ7VxpUtcyZjRZv9qiJP2I
Ql77wzsaiu51Hn7Cy+Hvysx5KRee0NAUUDMTyoOD1RNznXzvrTW376pFTt9rPYVc
TtOcSd5zjBQ+/DKUavo3kLQnJtopjfXve/dFuoN4wfRSbYPhHzLla07HjOUnn9Fn
fJTaR9gqC//bFw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 05:11:57 2024 by rpki-client on console-ams.rpki-client.org