Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File:                     4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier:          2Q0rMYLCGLkCVGkwc8s6hVxgialC41zcHXS9C9oH1gY=
Subject key identifier:   00:AB:30:5C:AB:2C:CE:3A:CD:01:4E:16:F6:47:19:45:54:8B:08:27
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer:       /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial:       0190508E85F438DDB7FFC945F702930F955D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number:          AB
Signing time:             Tue 25 Jun 2024 18:00:35 +0000
Manifest this update:     Tue 25 Jun 2024 18:00:35 +0000
Manifest next update:     Wed 26 Jun 2024 18:00:35 +0000
Files and hashes:         1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: t4lGIDLxks3+sOWlYPf83XbYkU+Hs7+MmOCj7QzxFTc=)
                          2: ZJKn36loWlj0fuc-EVjG9Cizs4Q.roa (hash: daJen4xFPiwSlOzjCzp+Cey1wJwRGq3nVhjTthtftA0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:50:8e:85:f4:38:dd:b7:ff:c9:45:f7:02:93:0f:95:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
        Validity
            Not Before: Jun 25 18:00:35 2024 GMT
            Not After : Jun 26 18:00:35 2024 GMT
        Subject: CN=00ab305cab2cce3acd014e16f6471945548b0827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b5:d4:7e:28:c3:dd:d3:8e:3f:38:d0:e1:ba:
                    df:6f:f8:dd:2d:07:d6:9d:6b:a3:c4:18:08:ba:a7:
                    9b:e6:f4:61:20:29:ae:11:f3:ab:77:dc:b2:57:0e:
                    e1:07:aa:eb:73:b0:62:7a:eb:20:15:01:2d:0d:b0:
                    da:e7:b1:73:7a:78:e7:9c:22:87:3b:ca:ed:36:1a:
                    1a:17:5b:8e:4e:e8:69:90:eb:8e:aa:9e:63:f8:be:
                    7c:6b:66:be:e7:cd:00:34:a5:41:63:cb:9a:73:0b:
                    46:84:09:89:54:65:9a:bf:84:27:ae:5c:da:38:c0:
                    cb:6e:db:8b:27:76:60:28:6e:0a:1e:b4:88:5a:83:
                    07:2b:f4:c3:2a:cc:90:c3:73:50:5e:3c:49:3e:96:
                    cf:af:51:f8:1d:0a:b6:30:67:3f:b6:eb:97:f8:c1:
                    21:92:2a:ba:d8:65:c8:87:e0:13:98:d1:8f:99:84:
                    e1:f4:b7:5a:08:2e:a2:62:ed:2d:74:ef:50:93:76:
                    e5:be:eb:93:7b:59:e7:a5:2d:aa:6d:3f:a4:87:80:
                    7e:cd:99:44:03:1f:de:23:dd:23:2d:dc:6b:97:3c:
                    44:d2:08:36:de:1d:eb:d8:68:eb:16:e1:4c:3c:e0:
                    46:1b:02:9b:29:57:3c:91:96:15:6f:68:9a:e6:09:
                    fb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AB:30:5C:AB:2C:CE:3A:CD:01:4E:16:F6:47:19:45:54:8B:08:27
            X509v3 Authority Key Identifier:
                keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:38:90:3d:7e:56:01:f2:9a:a9:a7:87:45:29:40:99:74:86:
         c0:d0:ef:30:cc:4d:25:ce:93:e5:08:00:19:b9:17:bb:ac:54:
         8a:35:8b:f1:02:0b:48:37:a6:84:92:0e:08:9b:42:8e:27:69:
         ee:5c:05:68:cb:d5:e4:f4:c2:02:b2:ce:65:8f:57:77:fd:0f:
         c2:d6:5d:5c:02:45:60:49:7b:a1:40:63:ec:17:6e:33:0b:6a:
         c7:11:30:3a:3c:74:e3:2c:8a:74:29:d1:b4:9b:a3:20:6c:c1:
         63:92:5e:7a:da:8d:c6:38:8e:8b:bb:d9:be:49:26:72:7f:62:
         b4:31:22:8b:a2:34:be:b2:17:3d:05:1e:77:3d:c0:02:c8:85:
         e7:b0:39:7d:78:60:59:3d:15:31:cb:36:0a:20:30:e8:f2:69:
         23:d4:75:aa:1d:d9:1a:55:49:ac:df:25:48:3b:72:fa:d9:2d:
         e9:19:a9:39:46:78:5b:83:9f:9e:c2:7c:93:60:8d:a9:c7:c1:
         a4:98:c0:c6:7c:76:77:31:84:c7:fa:39:c3:0c:b4:3c:a4:9f:
         68:d3:d8:bf:ab:92:20:ce:36:3b:1c:c2:1e:2d:09:94:79:e1:
         1d:88:60:7e:03:65:3f:8b:fb:8a:bd:1c:2d:d0:19:9a:72:ab:
         ec:88:9a:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBQjoX0ON23/8lF9wKTD5VdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZDVkNTYxZTc2ZWYyNTljNGEwMmRmMzBmMzUwNjRkZWRl
ZGYyZDcwHhcNMjQwNjI1MTgwMDM1WhcNMjQwNjI2MTgwMDM1WjAzMTEwLwYDVQQD
EygwMGFiMzA1Y2FiMmNjZTNhY2QwMTRlMTZmNjQ3MTk0NTU0OGIwODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLXUfijD3dOOPzjQ4brfb/jdLQfW
nWujxBgIuqeb5vRhICmuEfOrd9yyVw7hB6rrc7BieusgFQEtDbDa57FzenjnnCKH
O8rtNhoaF1uOTuhpkOuOqp5j+L58a2a+580ANKVBY8uacwtGhAmJVGWav4Qnrlza
OMDLbtuLJ3ZgKG4KHrSIWoMHK/TDKsyQw3NQXjxJPpbPr1H4HQq2MGc/tuuX+MEh
kiq62GXIh+ATmNGPmYTh9LdaCC6iYu0tdO9Qk3blvuuTe1nnpS2qbT+kh4B+zZlE
Ax/eI90jLdxrlzxE0gg23h3r2GjrFuFMPOBGGwKbKVc8kZYVb2ia5gn7rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACrMFyrLM46zQFOFvZHGUVUiwgnMB8GA1UdIwQY
MBaAFODV1WHnbvJZxKAt8w81Bk3t7fLXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kNDU0NjktMGM3Yi00NDEwLWJiNWUt
N2RjNTI4YWE1ZDRlLzEvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kNDU0NjktMGM3Yi00NDEwLWJiNWUtN2RjNTI4YWE1ZDRl
LzEvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFziQPX5W
AfKaqaeHRSlAmXSGwNDvMMxNJc6T5QgAGbkXu6xUijWL8QILSDemhJIOCJtCjidp
7lwFaMvV5PTCArLOZY9Xd/0PwtZdXAJFYEl7oUBj7BduMwtqxxEwOjx04yyKdCnR
tJujIGzBY5JeetqNxjiOi7vZvkkmcn9itDEii6I0vrIXPQUedz3AAsiF57A5fXhg
WT0VMcs2CiAw6PJpI9R1qh3ZGlVJrN8lSDty+tkt6RmpOUZ4W4OfnsJ8k2CNqcfB
pJjAxnx2dzGEx/o5wwy0PKSfaNPYv6uSIM42OxzCHi0JlHnhHYhgfgNlP4v7ir0c
LdAZmnKr7Iiaog==
-----END CERTIFICATE-----
Generated at Tue Jun 25 22:46:53 2024 by rpki-client on console-ams.rpki-client.org