Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File:                     U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier:          Td/l90/0P1zJ3CyIDaqiURf2VGLl4MuJ4XgTVUGsBEU=
Subject key identifier:   C0:9E:1D:67:CC:84:33:A6:C7:41:A3:90:52:D5:73:9F:F9:27:39:38
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer:       /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial:       01901DEC76842EE311992FA338140818A184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number:          0883
Signing time:             Sat 15 Jun 2024 22:02:34 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:34 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:34 +0000
Files and hashes:         1: 3gLtSDLEe6rtZLYjTGS-p898gGg.roa (hash: MNsiVtjxGnS+4S66O4z33HHRr03ktwKBRe32ALWdmQc=)
                          2: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: 5UD03VXpPUjkqSeQNpWN6/2aOwanoEGPYrAsMpDirDs=)
                          3: X8irpd-3ZTCbCG81SguCHGWGATA.roa (hash: hZdQAoVG134VXboM+RRiU+3eX0GUHo+5pVXxqIQ1zrI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:76:84:2e:e3:11:99:2f:a3:38:14:08:18:a1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
        Validity
            Not Before: Jun 15 22:02:34 2024 GMT
            Not After : Jun 16 22:02:34 2024 GMT
        Subject: CN=c09e1d67cc8433a6c741a39052d5739ff9273938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0e:c6:8a:6a:2c:6a:18:61:7d:2b:68:d3:cb:
                    bd:dd:a7:6f:33:b2:82:60:70:bc:0d:68:c1:42:21:
                    bc:61:03:38:18:48:7f:04:26:46:66:1f:af:ef:1e:
                    d7:ef:97:22:a9:d6:88:c9:28:3b:b0:91:50:07:2b:
                    a4:8b:f5:4d:88:01:a3:e8:0c:9c:44:bb:6a:ab:e5:
                    53:ec:f5:89:9f:50:e1:4b:fb:8e:f4:b4:3e:68:03:
                    97:ac:50:d2:43:7f:7e:2a:73:0e:9a:ef:45:3e:e6:
                    2d:69:b1:c5:b3:7f:38:f7:e9:5f:c0:ee:8f:3a:23:
                    9a:24:e7:cd:fd:3a:d4:0b:5d:67:c8:32:e9:40:10:
                    10:53:34:4f:c5:20:f2:d2:9e:f4:99:0b:02:d5:cf:
                    e4:c6:b1:4f:af:58:d1:e2:ce:76:f9:da:93:22:8d:
                    9b:90:03:a3:c8:7a:4b:a8:24:a8:1e:61:1a:96:62:
                    0c:8c:fd:63:8a:0a:52:65:3d:9e:77:fc:96:3d:96:
                    c1:b5:89:ec:9b:ba:92:8b:a6:07:f5:73:a6:31:4c:
                    58:5b:75:db:f4:6e:82:80:3d:30:ea:5c:0f:5e:8f:
                    26:b7:80:d3:05:e1:6e:ca:d6:45:11:1e:77:67:54:
                    5a:0d:fc:8b:5b:85:dd:75:b6:37:7f:f7:3d:ff:bb:
                    c0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9E:1D:67:CC:84:33:A6:C7:41:A3:90:52:D5:73:9F:F9:27:39:38
            X509v3 Authority Key Identifier:
                keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:25:74:f0:45:94:d8:71:8a:cf:2f:55:93:dd:d1:f0:90:8b:
         32:ae:dd:dd:7a:04:e4:4d:f3:99:69:20:fe:b4:a7:0e:51:18:
         15:a0:6d:39:a6:c2:49:63:57:d0:8a:51:42:9d:0f:ac:ca:4f:
         98:ab:f4:ed:83:1f:f7:9a:3b:05:a1:08:2f:8b:7a:60:ee:64:
         b7:ae:ab:97:70:59:92:8e:f4:05:60:4e:0a:a9:49:2f:7d:d0:
         ad:7e:e6:d4:69:d4:ef:c5:d1:47:8a:55:f0:d8:d7:e0:12:65:
         15:a3:23:76:4b:b2:da:12:1b:80:b8:de:ba:56:22:1b:8d:01:
         d5:62:bd:f0:00:0b:28:17:1a:8b:13:c1:72:21:77:dc:eb:10:
         2d:1a:6e:34:72:bd:7c:b7:26:31:25:a7:93:3c:e8:bb:3f:34:
         71:38:d6:78:d6:35:db:59:08:7d:1d:c5:d7:fc:6d:c9:2c:8c:
         31:65:8a:2d:c5:50:a4:1a:b4:b2:15:e9:fd:89:14:2b:bc:52:
         f2:74:c4:52:57:57:e9:96:3a:62:2a:58:87:a6:79:7d:cf:14:
         84:ad:af:db:bf:45:85:f3:56:0f:36:d6:6d:66:e4:9d:5a:5f:
         5a:ad:c6:48:68:f5:fa:f3:23:71:af:b0:8d:b7:2c:27:52:e5:
         95:5a:32:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7HaELuMRmS+jOBQIGKGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzOTNhYjkzZTg1NzAxYTczZWY0ZDVlMDBlZDZlYjk4OTM5
MzczOTQwHhcNMjQwNjE1MjIwMjM0WhcNMjQwNjE2MjIwMjM0WjAzMTEwLwYDVQQD
EyhjMDllMWQ2N2NjODQzM2E2Yzc0MWEzOTA1MmQ1NzM5ZmY5MjczOTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w7GimosahhhfSto08u93advM7KC
YHC8DWjBQiG8YQM4GEh/BCZGZh+v7x7X75ciqdaIySg7sJFQByuki/VNiAGj6Ayc
RLtqq+VT7PWJn1DhS/uO9LQ+aAOXrFDSQ39+KnMOmu9FPuYtabHFs3849+lfwO6P
OiOaJOfN/TrUC11nyDLpQBAQUzRPxSDy0p70mQsC1c/kxrFPr1jR4s52+dqTIo2b
kAOjyHpLqCSoHmEalmIMjP1jigpSZT2ed/yWPZbBtYnsm7qSi6YH9XOmMUxYW3Xb
9G6CgD0w6lwPXo8mt4DTBeFuytZFER53Z1RaDfyLW4XddbY3f/c9/7vAXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCeHWfMhDOmx0GjkFLVc5/5Jzk4MB8GA1UdIwQY
MBaAFFOTq5PoVwGnPvTV4A7W65iTk3OUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAt
NTlhN2VmZDM4NGMwLzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAtNTlhN2VmZDM4NGMw
LzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSV08EWU
2HGKzy9Vk93R8JCLMq7d3XoE5E3zmWkg/rSnDlEYFaBtOabCSWNX0IpRQp0PrMpP
mKv07YMf95o7BaEIL4t6YO5kt66rl3BZko70BWBOCqlJL33QrX7m1GnU78XRR4pV
8NjX4BJlFaMjdkuy2hIbgLjeulYiG40B1WK98AALKBcaixPBciF33OsQLRpuNHK9
fLcmMSWnkzzouz80cTjWeNY121kIfR3F1/xtySyMMWWKLcVQpBq0shXp/YkUK7xS
8nTEUldX6ZY6YipYh6Z5fc8UhK2v279FhfNWDzbWbWbknVpfWq3GSGj1+vMjca+w
jbcsJ1LllVoyZA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:20 2024 by rpki-client on console-fra.rpki-client.org