Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
File:                     0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json)
Hash identifier:          kTJAcA10CQaH4ruWabg7via+44XTv4p2NCbP/+HYoA8=
Subject key identifier:   19:F9:2E:70:31:F8:D8:18:C2:82:86:E0:0F:CD:99:A2:FF:36:E5:57
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Certificate issuer:       /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial:       0190459D687C8B00E281650E06F7A9026096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
Manifest number:          11DC
Signing time:             Sun 23 Jun 2024 15:01:02 +0000
Manifest this update:     Sun 23 Jun 2024 15:01:02 +0000
Manifest next update:     Mon 24 Jun 2024 15:01:02 +0000
Files and hashes:         1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: ubul+bEzvPnx8IByJRV32EVPPkyggBK9c/6C1bJkCqg=)
                          2: KhsahvrewKd-kx7MgQz3B6G1gV4.roa (hash: MQpITv8od1Rxp7XqdDTiAPlFMe1HKrEH7qL0A3YOVO0=)
                          3: Y5-S_iv_vWih2EkktvAzz97lx9M.roa (hash: 88RdgFbQsVzlFI0SanuOyFYZG4AX5lcJ2GLcEPMs9Pc=)
                          4: fSAgx4DIZewx8vStNZ6qUUTMhF8.roa (hash: iNR5YsXiX3QMXJXVr7AxNMZoVgRg1L8TphBSPrDzAiY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:68:7c:8b:00:e2:81:65:0e:06:f7:a9:02:60:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
        Validity
            Not Before: Jun 23 15:01:02 2024 GMT
            Not After : Jun 24 15:01:02 2024 GMT
        Subject: CN=19f92e7031f8d818c28286e00fcd99a2ff36e557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:be:5c:c7:26:0e:80:9e:77:77:45:18:c6:
                    ec:b4:53:04:bd:c8:c1:62:98:41:65:18:6f:01:bf:
                    9c:5e:b1:5a:01:20:a8:cb:ca:39:3d:86:5b:6e:ab:
                    04:74:64:ae:fc:da:05:6a:a4:90:69:08:31:68:43:
                    57:68:b8:f6:00:a6:b0:5d:32:71:fd:1b:8c:27:1d:
                    d2:08:ce:39:d8:13:45:1b:9d:fe:ab:ac:f6:a0:86:
                    52:6e:48:50:68:c5:e1:b8:16:c0:2f:f9:7e:86:96:
                    27:a1:e7:3d:1e:ef:fa:fc:ed:7b:a2:27:7d:8b:4e:
                    62:78:1e:8b:41:f3:58:fe:6c:d6:06:4a:26:14:34:
                    a4:f5:fd:4f:90:63:34:ac:3e:f0:3a:8d:7a:c4:16:
                    96:b0:db:36:28:a7:a3:d6:29:e3:1b:fe:c3:6c:93:
                    a9:7a:10:b5:3b:0c:60:b0:63:bb:c0:da:a7:98:fb:
                    bc:19:79:53:60:37:28:d6:18:0b:76:1d:4c:73:b1:
                    ce:fe:f3:6c:f5:d0:6f:4b:b0:c9:d6:f2:91:c5:22:
                    67:8b:9a:59:2b:6c:d5:be:57:f7:76:fc:5c:14:b9:
                    65:81:5b:a4:88:63:e2:bc:2c:e6:4f:2b:a3:01:b8:
                    6c:2b:ea:48:70:13:d8:35:68:d9:c9:a9:19:9f:e9:
                    0e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F9:2E:70:31:F8:D8:18:C2:82:86:E0:0F:CD:99:A2:FF:36:E5:57
            X509v3 Authority Key Identifier:
                keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:59:eb:ce:9b:b3:86:ec:13:65:55:f2:50:71:34:47:87:75:
         5b:21:4c:7b:94:23:52:5f:0b:21:0f:6e:d5:0d:d5:65:6e:c3:
         d3:da:7b:9f:b3:bc:fc:09:90:2d:41:a1:84:63:66:c3:56:67:
         d6:db:a0:ba:13:62:2a:c4:bf:da:30:1a:d7:67:ee:94:f3:ab:
         f9:57:cc:bb:5d:0b:0c:a5:fd:94:69:ef:37:cb:f1:ab:4b:66:
         02:6b:9e:70:65:e3:f6:4a:27:27:9d:8a:73:37:f2:1f:52:95:
         9e:c3:f1:11:fc:96:eb:ee:7f:34:0a:30:d2:3a:0d:b7:7c:b6:
         53:7b:aa:8a:aa:d6:84:37:ec:62:2c:96:be:98:e7:05:14:ea:
         6d:81:13:9f:0e:87:9b:e2:f7:55:62:a7:db:8e:bd:1d:1a:a4:
         1e:83:80:b7:a0:51:2a:4b:a6:df:6c:fb:dc:d4:bc:91:56:00:
         dd:cf:ee:80:41:64:6f:fc:2a:b5:10:86:8b:ef:f2:34:32:bb:
         62:f4:29:3e:2c:77:ff:1c:93:65:86:25:e3:04:c3:5a:89:ac:
         17:b0:76:1b:91:0b:19:ac:6d:54:14:da:b8:ec:ee:09:02:ac:
         75:c6:0b:45:d3:4f:46:87:3f:ed:7f:3e:2a:83:9c:64:3e:98:
         6a:de:90:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFnWh8iwDigWUOBvepAmCWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYTQ0NTI2MDJjOWRmOTc3YzlkNWRkOGRjMTNiNjY2MWRm
NDAxMzYwHhcNMjQwNjIzMTUwMTAyWhcNMjQwNjI0MTUwMTAyWjAzMTEwLwYDVQQD
EygxOWY5MmU3MDMxZjhkODE4YzI4Mjg2ZTAwZmNkOTlhMmZmMzZlNTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw32+XMcmDoCed3dFGMbstFMEvcjB
YphBZRhvAb+cXrFaASCoy8o5PYZbbqsEdGSu/NoFaqSQaQgxaENXaLj2AKawXTJx
/RuMJx3SCM452BNFG53+q6z2oIZSbkhQaMXhuBbAL/l+hpYnoec9Hu/6/O17oid9
i05ieB6LQfNY/mzWBkomFDSk9f1PkGM0rD7wOo16xBaWsNs2KKej1injG/7DbJOp
ehC1OwxgsGO7wNqnmPu8GXlTYDco1hgLdh1Mc7HO/vNs9dBvS7DJ1vKRxSJni5pZ
K2zVvlf3dvxcFLllgVukiGPivCzmTyujAbhsK+pIcBPYNWjZyakZn+kOzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBn5LnAx+NgYwoKG4A/NmaL/NuVXMB8GA1UdIwQY
MBaAFNKkRSYCyd+XfJ1d2NwTtmYd9AE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQt
ZmU3NGVmN2FhYzk1LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQtZmU3NGVmN2FhYzk1
LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVnrzpuz
huwTZVXyUHE0R4d1WyFMe5QjUl8LIQ9u1Q3VZW7D09p7n7O8/AmQLUGhhGNmw1Zn
1tuguhNiKsS/2jAa12fulPOr+VfMu10LDKX9lGnvN8vxq0tmAmuecGXj9konJ52K
czfyH1KVnsPxEfyW6+5/NAow0joNt3y2U3uqiqrWhDfsYiyWvpjnBRTqbYETnw6H
m+L3VWKn2469HRqkHoOAt6BRKkum32z73NS8kVYA3c/ugEFkb/wqtRCGi+/yNDK7
YvQpPix3/xyTZYYl4wTDWomsF7B2G5ELGaxtVBTauOzuCQKsdcYLRdNPRoc/7X8+
KoOcZD6Yat6QcQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 19:01:53 2024 by rpki-client on console-ams.rpki-client.org