Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
File:                     u_pCfUICOv2oiOhBX07c97ffGwU.mft (raw, json)
Hash identifier:          zLSL2xAvPQoKK07NuLlH3I0PbYiHYeeoWqqKsvOXqTc=
Subject key identifier:   69:B0:7C:A8:B5:11:59:E9:18:29:8A:45:9F:41:AF:7C:40:E1:3E:CC
Authority key identifier: BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
Certificate issuer:       /CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Certificate serial:       01901E593DF36E36CFC712E67AA346CDA3E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
Manifest number:          0418
Signing time:             Sun 16 Jun 2024 00:01:23 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:23 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:23 +0000
Files and hashes:         1: _hIbVT3menooV9Owm_I4HyGyFUk.roa (hash: yr8pnh/IaGhrC9EwQoPSAssKx5KwOCrjx7H3CRJxveo=)
                          2: u_pCfUICOv2oiOhBX07c97ffGwU.crl (hash: /S1+UW7meb+xrkgfxk25yHNlDaQEUn8yy25Evd/ePv0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:3d:f3:6e:36:cf:c7:12:e6:7a:a3:46:cd:a3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
        Validity
            Not Before: Jun 16 00:01:23 2024 GMT
            Not After : Jun 17 00:01:23 2024 GMT
        Subject: CN=69b07ca8b51159e918298a459f41af7c40e13ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:74:f9:a4:45:cb:96:36:2a:7c:c5:a9:fc:d0:
                    0f:ec:00:6d:c8:67:26:e7:67:e5:12:13:b7:45:e0:
                    40:2e:2c:f5:bf:c9:fe:d4:7b:48:37:2c:76:52:41:
                    22:82:2f:87:4e:e7:aa:9c:f0:5c:74:5a:44:ca:7c:
                    ef:59:be:bb:f9:17:4f:fb:31:94:c7:70:ad:4b:37:
                    55:0d:56:d7:28:f0:68:74:24:94:f0:30:1c:fe:ff:
                    ba:bb:1e:92:d9:f9:d3:ce:45:b2:ff:e9:67:22:4b:
                    b1:13:fd:e0:55:bb:13:59:d9:11:5b:e6:72:e6:58:
                    73:90:0c:a7:e0:e8:f2:d8:9c:99:f4:e6:db:ed:29:
                    ee:fb:9d:fe:95:26:bf:05:63:3f:83:06:7f:84:ae:
                    fc:5a:fc:47:e5:50:d0:11:00:1f:d9:1a:14:76:fb:
                    14:9d:86:23:02:fd:d9:ed:0f:d2:62:d8:00:9a:9b:
                    23:b8:ba:4a:34:6d:df:3e:ce:3d:92:0d:38:ef:59:
                    5a:b3:87:08:9f:07:85:77:04:a1:4c:21:b5:8f:d6:
                    f2:02:4c:2f:ec:83:4e:fd:db:01:49:69:1c:06:10:
                    37:87:c5:b5:60:ac:7c:82:c7:e1:be:f6:d4:96:6e:
                    93:14:90:2f:57:ed:5e:c4:fa:4d:9b:64:37:ef:29:
                    ba:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B0:7C:A8:B5:11:59:E9:18:29:8A:45:9F:41:AF:7C:40:E1:3E:CC
            X509v3 Authority Key Identifier:
                keyid:BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e2:aa:92:99:f7:d1:33:60:a2:38:07:b0:54:f3:31:a0:8a:
         3a:1c:8f:f7:3e:b7:21:a3:15:94:aa:23:51:40:9a:96:81:59:
         f3:ae:65:fd:4f:49:10:f6:d4:a4:1a:58:04:6e:a0:34:a3:24:
         31:be:52:22:0f:ad:0b:cf:ce:1d:64:d8:46:1f:20:32:a6:c7:
         4d:81:02:87:3c:68:f1:d8:d3:33:95:9b:f2:ad:fd:6d:56:a5:
         b4:44:f9:e8:0c:3e:5a:ff:5b:8f:f5:fe:c4:7d:5a:7f:f1:a3:
         39:7e:5b:91:8a:00:6c:c1:dd:6d:25:7f:eb:84:aa:a8:82:42:
         0e:6f:b7:80:79:af:b4:aa:71:26:57:4e:ee:e2:6c:f1:b4:74:
         cb:f9:24:29:a8:52:08:6f:c0:43:df:c7:42:cc:c6:a3:54:94:
         04:39:4b:5a:c5:af:c3:a1:44:20:3e:9c:94:a7:75:cf:48:b7:
         ab:fb:df:e0:dc:f9:21:36:40:d1:76:36:8a:dd:66:d3:23:3a:
         9f:a8:fe:61:ac:d8:09:e0:55:82:c1:45:49:22:bc:08:86:94:
         59:e5:6f:4b:9e:d6:5e:ce:74:64:d2:8a:b9:9d:31:f6:c1:6a:
         7a:7f:c1:3b:17:5c:4d:27:d9:5f:5b:64:ca:c2:28:c0:ad:47:
         28:ed:aa:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWT3zbjbPxxLmeqNGzaPpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmE0MjdkNDIwMjNhZmRhODg4ZTg0MTVmNGVkY2Y3Yjdk
ZjFiMDUwHhcNMjQwNjE2MDAwMTIzWhcNMjQwNjE3MDAwMTIzWjAzMTEwLwYDVQQD
Eyg2OWIwN2NhOGI1MTE1OWU5MTgyOThhNDU5ZjQxYWY3YzQwZTEzZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunT5pEXLljYqfMWp/NAP7ABtyGcm
52flEhO3ReBALiz1v8n+1HtINyx2UkEigi+HTueqnPBcdFpEynzvWb67+RdP+zGU
x3CtSzdVDVbXKPBodCSU8DAc/v+6ux6S2fnTzkWy/+lnIkuxE/3gVbsTWdkRW+Zy
5lhzkAyn4Ojy2JyZ9Obb7Snu+53+lSa/BWM/gwZ/hK78WvxH5VDQEQAf2RoUdvsU
nYYjAv3Z7Q/SYtgAmpsjuLpKNG3fPs49kg0471las4cInweFdwShTCG1j9byAkwv
7INO/dsBSWkcBhA3h8W1YKx8gsfhvvbUlm6TFJAvV+1exPpNm2Q37ym6VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmwfKi1EVnpGCmKRZ9Br3xA4T7MMB8GA1UdIwQY
MBaAFLv6Qn1CAjr9qIjoQV9O3Pe33xsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YTc5YTEtM2QxOS00ZGU0LWJlODkt
OGEyMDA2OTFmNzI0LzEvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80YTc5YTEtM2QxOS00ZGU0LWJlODktOGEyMDA2OTFmNzI0
LzEvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOKqkpn3
0TNgojgHsFTzMaCKOhyP9z63IaMVlKojUUCaloFZ865l/U9JEPbUpBpYBG6gNKMk
Mb5SIg+tC8/OHWTYRh8gMqbHTYEChzxo8djTM5Wb8q39bValtET56Aw+Wv9bj/X+
xH1af/GjOX5bkYoAbMHdbSV/64SqqIJCDm+3gHmvtKpxJldO7uJs8bR0y/kkKahS
CG/AQ9/HQszGo1SUBDlLWsWvw6FEID6clKd1z0i3q/vf4Nz5ITZA0XY2it1m0yM6
n6j+YazYCeBVgsFFSSK8CIaUWeVvS57WXs50ZNKKuZ0x9sFqen/BOxdcTSfZX1tk
ysIowK1HKO2qFA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:26 2024 by rpki-client on console-fra.rpki-client.org