Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File:                     5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier:          /1joKLgMK/p6kavJdq68++NK60sUhMpCIfM7xY87PmM=
Subject key identifier:   28:C5:D3:99:53:B5:62:B8:44:2A:70:40:3F:26:65:34:03:0C:71:AB
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer:       /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial:       018FD67890454EC4F5DE903C70A5B29D2D73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number:          0D97
Signing time:             Sun 02 Jun 2024 01:02:56 +0000
Manifest this update:     Sun 02 Jun 2024 01:02:56 +0000
Manifest next update:     Mon 03 Jun 2024 01:02:56 +0000
Files and hashes:         1: 41vTqrC9I3EfPNR-13a6WBV_Yzs.roa (hash: 8Dp+2jNYHJ1oq1GljISTDoMsjca2C2jcphxrhjnKHf4=)
                          2: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: FtKPpznKmgAycs2mqR8jnfii+l0TWcUNohQuF0KCl5U=)
                          3: mKfB5cUG77rFTHIpfXX-obE9b08.roa (hash: 74RoOEEJngF976CiUo5e95q7QFic8Ntpj14Jeug9mTs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 19:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d6:78:90:45:4e:c4:f5:de:90:3c:70:a5:b2:9d:2d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
        Validity
            Not Before: Jun  2 01:02:56 2024 GMT
            Not After : Jun  3 01:02:56 2024 GMT
        Subject: CN=28c5d39953b562b8442a70403f266534030c71ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:90:bc:c6:93:74:a6:cb:70:e6:b7:df:e5:
                    03:14:80:8a:ac:7f:75:4d:55:de:1d:5a:59:32:f1:
                    d5:af:af:86:35:fa:7b:0c:14:58:7a:c2:22:08:a0:
                    cd:ac:d6:5d:34:15:40:a7:dc:11:f1:dd:87:20:38:
                    aa:cc:55:94:18:23:e5:06:c9:b6:a6:61:03:33:4e:
                    98:f3:b6:24:35:c5:d9:82:77:7c:9e:95:5f:88:aa:
                    70:f8:48:7b:9c:32:e1:9c:09:ca:e3:da:38:c1:48:
                    6a:02:76:44:6a:a9:e2:d4:42:c2:88:5b:54:89:5d:
                    5b:8e:72:af:53:18:53:90:1e:3f:dc:10:20:66:d2:
                    35:39:a6:d9:71:ae:a0:ae:ed:db:d7:02:fa:13:d4:
                    c7:d2:5d:9b:5d:67:06:83:a2:d0:13:77:fc:b6:3a:
                    f0:40:57:b6:ee:ae:02:90:bc:8f:95:b7:89:b0:6d:
                    79:ad:ee:79:a6:69:9b:2a:4e:4a:2b:ca:9c:ca:39:
                    18:93:b1:15:71:40:b3:bf:24:5b:4b:86:07:15:2b:
                    2b:21:33:59:75:c4:46:ae:ea:d2:ed:b2:2b:53:d4:
                    76:de:4a:cd:bb:bf:3e:8e:60:44:ed:4d:2d:da:d1:
                    96:22:4c:ed:82:90:d3:1f:01:21:b6:f4:c3:68:ed:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C5:D3:99:53:B5:62:B8:44:2A:70:40:3F:26:65:34:03:0C:71:AB
            X509v3 Authority Key Identifier:
                keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a8:c8:70:ee:a2:77:10:9d:39:bb:16:83:c7:5c:da:63:e9:
         f4:c6:fb:f5:56:e3:1d:cc:c5:5b:e6:48:1b:3e:d7:91:d2:05:
         d7:cc:d9:93:16:c3:1c:05:61:d0:cb:29:80:d5:56:16:ff:7d:
         1f:70:8c:e4:1e:9e:16:24:cb:d8:1e:87:61:98:21:49:00:3a:
         1f:10:16:d8:bb:6f:73:3e:34:0c:a2:ae:81:b0:50:7c:81:12:
         b1:05:30:e4:86:60:5e:a7:16:10:ee:21:1a:44:47:2d:43:39:
         56:83:64:30:25:95:f0:0b:2c:e0:6c:af:61:7c:ec:6a:dc:f1:
         08:8a:02:03:f3:bf:95:20:6a:47:ac:40:b3:cf:d9:a7:fa:06:
         14:df:c5:9c:60:41:de:32:0d:4f:5d:73:17:e0:ef:ac:69:52:
         8f:06:60:9c:8e:68:b3:65:b8:bc:5e:52:f6:bf:66:c7:f3:34:
         dc:19:cf:79:96:44:95:dc:c2:f8:5b:6f:b4:b2:99:d7:9b:93:
         89:eb:5f:41:21:98:e6:73:c2:96:30:24:fa:70:2e:75:cc:11:
         6a:c7:cc:8c:40:a7:7d:b8:47:51:d8:aa:e3:71:ab:4c:40:80:
         f3:34:94:c5:8c:c4:6b:7f:64:09:47:8e:8c:13:0c:cb:8d:38:
         a6:be:84:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY/WeJBFTsT13pA8cKWynS1zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MTM1ZDYzOTc2OGEzYTYzZWQ5YzVmZjQwYWY1ZWQwMWRm
NzQxY2IwHhcNMjQwNjAyMDEwMjU2WhcNMjQwNjAzMDEwMjU2WjAzMTEwLwYDVQQD
EygyOGM1ZDM5OTUzYjU2MmI4NDQyYTcwNDAzZjI2NjUzNDAzMGM3MWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0OQvMaTdKbLcOa33+UDFICKrH91
TVXeHVpZMvHVr6+GNfp7DBRYesIiCKDNrNZdNBVAp9wR8d2HIDiqzFWUGCPlBsm2
pmEDM06Y87YkNcXZgnd8npVfiKpw+Eh7nDLhnAnK49o4wUhqAnZEaqni1ELCiFtU
iV1bjnKvUxhTkB4/3BAgZtI1OabZca6gru3b1wL6E9TH0l2bXWcGg6LQE3f8tjrw
QFe27q4CkLyPlbeJsG15re55pmmbKk5KK8qcyjkYk7EVcUCzvyRbS4YHFSsrITNZ
dcRGrurS7bIrU9R23krNu78+jmBE7U0t2tGWIkztgpDTHwEhtvTDaO3zzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjF05lTtWK4RCpwQD8mZTQDDHGrMB8GA1UdIwQY
MBaAFOYTXWOXaKOmPtnF/0CvXtAd90HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2Et
MGE3NzBmMGM3NjA4LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2EtMGE3NzBmMGM3NjA4
LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKjIcO6i
dxCdObsWg8dc2mPp9Mb79VbjHczFW+ZIGz7XkdIF18zZkxbDHAVh0MspgNVWFv99
H3CM5B6eFiTL2B6HYZghSQA6HxAW2Ltvcz40DKKugbBQfIESsQUw5IZgXqcWEO4h
GkRHLUM5VoNkMCWV8Ass4GyvYXzsatzxCIoCA/O/lSBqR6xAs8/Zp/oGFN/FnGBB
3jINT11zF+DvrGlSjwZgnI5os2W4vF5S9r9mx/M03BnPeZZEldzC+FtvtLKZ15uT
ietfQSGY5nPCljAk+nAudcwRasfMjECnfbhHUdiq43GrTECA8zSUxYzEa39kCUeO
jBMMy404pr6EVA==
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:39:52 2024 by rpki-client on console-fra.rpki-client.org