Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File:                     adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier:          ivblv9ijvQJ7dzhHbkYri/VlV3QWr+BVOgBeUmsCrKU=
Subject key identifier:   28:8D:F8:E2:0D:1E:2D:9D:2F:BA:FB:71:4B:7D:8B:13:ED:61:91:DC
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer:       /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial:       018F874A627463DD8CF1AEB8D27CAF13467D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number:          0AB6
Signing time:             Fri 17 May 2024 16:02:29 +0000
Manifest this update:     Fri 17 May 2024 16:02:29 +0000
Manifest next update:     Sat 18 May 2024 16:02:29 +0000
Files and hashes:         1: aGNCZ9zqJs45LL3xvG6aYo9xpTw.roa (hash: xPIJVm13TkOIfsUFOR2ovAO0Hoc1p63IBS2toZ9YPPc=)
                          2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: N9xkqDp1ftf1v5bdjLeGsdqLcFF89gMMRLqjwABY0ss=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:62:74:63:dd:8c:f1:ae:b8:d2:7c:af:13:46:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
        Validity
            Not Before: May 17 16:02:29 2024 GMT
            Not After : May 18 16:02:29 2024 GMT
        Subject: CN=288df8e20d1e2d9d2fbafb714b7d8b13ed6191dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:f4:ac:79:91:96:13:90:5e:89:40:c4:c1:
                    bc:72:2a:f8:fe:63:26:78:a4:84:e4:41:23:6b:95:
                    44:a1:25:8d:47:77:6c:6f:d0:1d:5f:2e:f6:01:5e:
                    d2:02:00:0f:bb:bd:4d:b7:0c:7c:2f:ea:48:17:2f:
                    15:4d:34:41:f6:28:0d:28:b7:ff:ac:d5:20:fe:be:
                    b6:15:31:54:75:8b:0a:28:1d:52:9c:ac:60:22:80:
                    86:af:4a:3b:a7:3a:80:05:85:5a:6f:d4:e5:7b:66:
                    3e:66:9d:a1:f8:7f:4e:f6:81:6c:c4:0e:0d:f8:19:
                    71:20:40:8e:ba:85:eb:b0:ab:6e:34:4f:f8:41:3e:
                    c4:b7:61:a7:6a:12:fd:69:ec:fb:53:46:8b:c2:58:
                    c3:20:5b:0f:75:22:ef:26:f0:c7:9a:d2:4b:f1:d3:
                    a7:86:49:e4:18:b4:66:ee:86:2c:8e:61:3e:40:a0:
                    0e:9f:51:07:2e:5a:9b:22:50:0a:4f:6d:da:dd:30:
                    aa:47:06:4f:ad:60:eb:90:99:c8:eb:a7:3d:b5:b4:
                    fc:bd:9f:b1:d0:9f:d1:96:6b:ca:a6:be:51:e9:8b:
                    6e:02:e1:57:73:03:65:db:0e:93:69:ff:0c:b4:7a:
                    00:0d:ea:bc:10:7c:11:9d:83:0f:cd:78:8a:5e:82:
                    54:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8D:F8:E2:0D:1E:2D:9D:2F:BA:FB:71:4B:7D:8B:13:ED:61:91:DC
            X509v3 Authority Key Identifier:
                keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:46:7b:29:8f:6d:81:a0:ee:7a:14:e0:0d:2c:61:9f:9b:ca:
         64:c7:85:fe:76:83:41:ed:54:dc:75:23:3c:c9:29:87:fa:d3:
         36:0d:1a:28:2b:73:63:86:1e:50:0f:18:c6:4d:1e:70:df:92:
         42:d8:70:02:a5:38:8d:6e:bf:66:74:a3:7f:cc:52:9e:eb:da:
         79:e4:32:b2:e0:13:71:93:4b:67:62:92:f7:3d:45:dd:53:74:
         49:4e:6b:17:e7:01:69:dd:a5:a4:a9:e7:fe:95:f4:d3:62:23:
         0a:c0:77:c6:7f:f7:2f:9f:39:a5:af:e0:ef:0e:7f:e4:24:f1:
         6e:27:c2:4e:df:30:ea:a9:6c:35:af:04:af:e9:38:64:ac:89:
         e9:e1:e8:4e:08:ae:8d:8a:8a:3e:5a:76:b5:06:cd:75:62:d1:
         45:16:95:a6:84:5f:36:2b:85:a6:70:f8:b2:30:d1:7b:ad:a7:
         69:34:4d:47:43:59:b4:4c:3a:57:4d:ac:63:6c:56:b3:17:01:
         ec:1c:69:3c:70:ff:3c:47:20:68:7c:dd:a8:45:95:33:3a:cf:
         67:13:d4:ae:57:6b:bd:b5:14:db:05:54:a4:52:71:6f:c8:c9:
         e9:0a:02:f1:0f:98:9c:41:7e:6a:4c:93:06:2f:01:e4:56:ca:
         13:f7:9c:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSmJ0Y92M8a640nyvE0Z9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDYwNDg1NzFkODdlYWJjNGJlZDFhN2NkZmY4MzU4N2Zi
ODk2NjQwHhcNMjQwNTE3MTYwMjI5WhcNMjQwNTE4MTYwMjI5WjAzMTEwLwYDVQQD
EygyODhkZjhlMjBkMWUyZDlkMmZiYWZiNzE0YjdkOGIxM2VkNjE5MWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcX0rHmRlhOQXolAxMG8cir4/mMm
eKSE5EEja5VEoSWNR3dsb9AdXy72AV7SAgAPu71Ntwx8L+pIFy8VTTRB9igNKLf/
rNUg/r62FTFUdYsKKB1SnKxgIoCGr0o7pzqABYVab9Tle2Y+Zp2h+H9O9oFsxA4N
+BlxIECOuoXrsKtuNE/4QT7Et2GnahL9aez7U0aLwljDIFsPdSLvJvDHmtJL8dOn
hknkGLRm7oYsjmE+QKAOn1EHLlqbIlAKT23a3TCqRwZPrWDrkJnI66c9tbT8vZ+x
0J/RlmvKpr5R6YtuAuFXcwNl2w6Taf8MtHoADeq8EHwRnYMPzXiKXoJUqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiN+OINHi2dL7r7cUt9ixPtYZHcMB8GA1UdIwQY
MBaAFGnWBIVx2H6rxL7Rp83/g1h/uJZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMWNkZjItY2EzMC00NzE4LWFjODAt
ZjE5NmZkMGE0OTdiLzEvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xMWNkZjItY2EzMC00NzE4LWFjODAtZjE5NmZkMGE0OTdi
LzEvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUZ7KY9t
gaDuehTgDSxhn5vKZMeF/naDQe1U3HUjPMkph/rTNg0aKCtzY4YeUA8Yxk0ecN+S
QthwAqU4jW6/ZnSjf8xSnuvaeeQysuATcZNLZ2KS9z1F3VN0SU5rF+cBad2lpKnn
/pX002IjCsB3xn/3L585pa/g7w5/5CTxbifCTt8w6qlsNa8Er+k4ZKyJ6eHoTgiu
jYqKPlp2tQbNdWLRRRaVpoRfNiuFpnD4sjDRe62naTRNR0NZtEw6V02sY2xWsxcB
7BxpPHD/PEcgaHzdqEWVMzrPZxPUrldrvbUU2wVUpFJxb8jJ6QoC8Q+YnEF+akyT
Bi8B5FbKE/ecPg==
-----END CERTIFICATE-----
Generated at Fri May 17 17:55:05 2024 by rpki-client on console-ams.rpki-client.org