Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
File:                     RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft (raw, json)
Hash identifier:          dLVSv78wslYOO8LTifP3i7+6EvUXp8+gt9r+QWBu5vg=
Subject key identifier:   C3:48:7E:31:7F:BB:27:63:08:11:E4:F0:57:C5:6C:D8:53:D3:30:59
Authority key identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
Certificate issuer:       /CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Certificate serial:       01902A25F46AC7AEDB5ACDB6C6D5EDC9BBA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
Manifest number:          11CF
Signing time:             Tue 18 Jun 2024 07:00:48 +0000
Manifest this update:     Tue 18 Jun 2024 07:00:48 +0000
Manifest next update:     Wed 19 Jun 2024 07:00:48 +0000
Files and hashes:         1: 4NkcVL_v6Z1KXW3pvadait0Wb5M.roa (hash: tcdLqUXAqVzZ53NWK8OHGXEH82kStFpr+2CPuFxY+pI=)
                          2: ITtnTNd_rwh2goslSfH3ShqxcDw.roa (hash: nVr6QEFC4rxvEUKj9HxqtdY1Ns+iWteMwHc3gCHBUok=)
                          3: NgN0J5BhxTcLZz6ooKiE3v_5wuQ.roa (hash: 5JE+JorIsdG7WlMHuaSq46uheXKDRON9DgW4CR/6Rrc=)
                          4: RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl (hash: fL8scoq4DSihPqVpdmj8mbsdPcA6kiBtKR0xSmCe8CA=)
                          5: wFvcpTjpVQDcxfIDDv3nYpss1HI.roa (hash: gmm37nRtuMOYdCuw5NXxbwCK0vV/0eJv88ei0ZQ3REA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2a:25:f4:6a:c7:ae:db:5a:cd:b6:c6:d5:ed:c9:bb:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
        Validity
            Not Before: Jun 18 07:00:48 2024 GMT
            Not After : Jun 19 07:00:48 2024 GMT
        Subject: CN=c3487e317fbb27630811e4f057c56cd853d33059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a0:1e:a6:08:d0:e9:4e:cc:1d:82:57:1a:5f:
                    c3:e3:ba:c4:56:6f:fa:9f:78:c6:9b:53:25:5e:78:
                    23:be:4a:b5:d7:27:76:c8:75:92:0a:1b:ba:f4:8e:
                    ad:ca:e5:1e:7e:62:51:58:79:e7:e5:16:60:a1:02:
                    d3:1f:bd:c9:3f:22:67:dc:77:ae:56:84:24:a4:58:
                    b9:19:57:6c:92:e8:26:74:fc:ee:f8:e0:d7:87:c6:
                    5f:46:7d:d3:f4:8f:43:6d:41:f4:75:f0:e7:b3:23:
                    ee:5e:46:a7:ce:9a:72:57:4c:04:b5:03:80:02:7f:
                    54:10:25:85:38:68:34:16:97:17:5c:e8:91:5a:23:
                    78:18:fc:18:6b:17:99:c8:56:0b:28:eb:ff:07:2f:
                    2d:f2:ee:21:ef:83:78:44:35:58:cd:45:1a:73:44:
                    34:02:8c:cd:f1:51:3f:ef:90:2c:d0:56:e2:ac:8a:
                    67:6d:65:c4:c6:f0:95:57:17:7e:d4:b3:ed:cd:a8:
                    12:22:d7:7d:80:65:31:4a:c5:71:a5:4e:29:44:68:
                    33:35:dd:1e:79:da:f6:14:08:45:e7:1e:4d:ce:e8:
                    86:79:91:d3:dc:ae:d3:ab:37:26:17:6b:58:d2:4d:
                    e6:0e:cb:5c:92:a1:6a:61:23:ae:bc:ed:23:02:29:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:48:7E:31:7F:BB:27:63:08:11:E4:F0:57:C5:6C:D8:53:D3:30:59
            X509v3 Authority Key Identifier:
                keyid:47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:c0:e1:ac:fd:2a:46:6f:32:da:64:84:e3:9a:27:01:3b:53:
         df:50:da:e0:fd:7e:21:a9:e1:d3:ff:16:06:d2:e6:6c:a8:ea:
         8c:ea:2d:32:5a:0b:55:86:da:47:bc:86:6c:70:70:2a:5e:84:
         6b:c3:f9:59:cf:b4:a7:f8:07:24:a0:94:3f:57:6a:9e:c4:cb:
         a8:8f:71:0f:26:e9:e4:59:fb:19:fb:d6:5b:b5:67:24:20:a6:
         4e:f9:a4:98:d6:49:ad:10:30:7a:ba:60:1a:05:9e:2b:ce:86:
         f3:13:46:7d:10:e1:1b:40:b8:84:b8:81:86:0b:3e:0b:b9:8d:
         82:32:a7:75:b2:00:84:25:b2:9a:ac:11:64:0a:54:40:3f:9e:
         03:5d:09:78:98:2e:c9:8a:6f:74:1c:be:b8:45:34:b6:9d:a9:
         8b:1c:59:f1:cc:6f:8a:b6:20:68:d1:f6:01:50:25:0b:0c:42:
         e2:45:70:17:6a:84:68:8c:31:01:bc:23:e9:0f:dc:85:cb:98:
         18:6e:0f:af:b5:92:d6:46:96:19:db:d6:d0:bf:a0:08:ce:d9:
         f0:9e:ca:62:6e:6b:de:57:d2:71:e3:dd:30:d1:a7:6e:d9:f8:
         47:fd:9c:bc:22:b6:71:b8:81:12:a4:7b:47:66:56:c9:99:2f:
         7b:d5:c3:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAqJfRqx67bWs22xtXtybupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MDVkM2M2YTViMDUxMjY4MmNkZmRmMzYzYjE5YTljNTY3
ZjFmNmMwHhcNMjQwNjE4MDcwMDQ4WhcNMjQwNjE5MDcwMDQ4WjAzMTEwLwYDVQQD
EyhjMzQ4N2UzMTdmYmIyNzYzMDgxMWU0ZjA1N2M1NmNkODUzZDMzMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaAepgjQ6U7MHYJXGl/D47rEVm/6
n3jGm1MlXngjvkq11yd2yHWSChu69I6tyuUefmJRWHnn5RZgoQLTH73JPyJn3Heu
VoQkpFi5GVdskugmdPzu+ODXh8ZfRn3T9I9DbUH0dfDnsyPuXkanzppyV0wEtQOA
An9UECWFOGg0FpcXXOiRWiN4GPwYaxeZyFYLKOv/By8t8u4h74N4RDVYzUUac0Q0
AozN8VE/75As0FbirIpnbWXExvCVVxd+1LPtzagSItd9gGUxSsVxpU4pRGgzNd0e
edr2FAhF5x5NzuiGeZHT3K7TqzcmF2tY0k3mDstckqFqYSOuvO0jAil8awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNIfjF/uydjCBHk8FfFbNhT0zBZMB8GA1UdIwQY
MBaAFEcF08alsFEmgs3982OxmpxWfx9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUndYVHhxV3dVU2FDemYzelk3R2FuRlpfSDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81NmFlZTktOTk2Yy00MzhmLWJiMDAt
MGRmYTZiMjJlZmYyLzEvUndYVHhxV3dVU2FDemYzelk3R2FuRlpfSDJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81NmFlZTktOTk2Yy00MzhmLWJiMDAtMGRmYTZiMjJlZmYy
LzEvUndYVHhxV3dVU2FDemYzelk3R2FuRlpfSDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA28DhrP0q
Rm8y2mSE45onATtT31Da4P1+Ianh0/8WBtLmbKjqjOotMloLVYbaR7yGbHBwKl6E
a8P5Wc+0p/gHJKCUP1dqnsTLqI9xDybp5Fn7GfvWW7VnJCCmTvmkmNZJrRAwerpg
GgWeK86G8xNGfRDhG0C4hLiBhgs+C7mNgjKndbIAhCWymqwRZApUQD+eA10JeJgu
yYpvdBy+uEU0tp2pixxZ8cxvirYgaNH2AVAlCwxC4kVwF2qEaIwxAbwj6Q/chcuY
GG4Pr7WS1kaWGdvW0L+gCM7Z8J7KYm5r3lfScePdMNGnbtn4R/2cvCK2cbiBEqR7
R2ZWyZkve9XD1w==
-----END CERTIFICATE-----
Generated at Tue Jun 18 11:14:02 2024 by rpki-client on console-ams.rpki-client.org