Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
File:                     n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft (raw, json)
Hash identifier:          3mF+2evnqt1bXAo50WaUxMNCuU/bcu8FTRTKaO68ZxI=
Subject key identifier:   7B:7E:AF:C2:BA:28:F2:15:08:25:FD:BB:0E:9F:1E:9E:7C:BF:A5:DF
Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
Certificate issuer:       /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Certificate serial:       019051A1414FF0995CE1D9F4D963CB9460C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
Manifest number:          0149
Signing time:             Tue 25 Jun 2024 23:00:40 +0000
Manifest this update:     Tue 25 Jun 2024 23:00:40 +0000
Manifest next update:     Wed 26 Jun 2024 23:00:40 +0000
Files and hashes:         1: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl (hash: 5zvm/EO/TUqurCGxjXqaDYhMWriuLVSSMUo/5ykIOdI=)
                          2: wHl-FlZJtYlHUVFH6713QS-yMoo.roa (hash: jjAeBR6lfy3bKeXrrhwpZAJZm/pLBgAMNUrM7V4kSOs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:51:a1:41:4f:f0:99:5c:e1:d9:f4:d9:63:cb:94:60:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
        Validity
            Not Before: Jun 25 23:00:40 2024 GMT
            Not After : Jun 26 23:00:40 2024 GMT
        Subject: CN=7b7eafc2ba28f2150825fdbb0e9f1e9e7cbfa5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e4:fc:45:89:45:ed:ef:16:da:9b:28:ca:57:
                    b9:b0:33:b6:b9:9c:29:4b:6b:fe:9a:14:97:ed:fb:
                    80:9e:d2:98:ce:14:f2:8e:27:e4:72:de:c9:dc:4c:
                    66:33:9f:02:6f:e6:d9:3e:a0:7c:9d:6c:88:d6:2f:
                    27:cd:dc:48:d6:53:c5:97:f8:47:ac:8b:0c:e6:2d:
                    05:e2:c8:d6:0c:df:6f:f0:ce:78:46:7d:71:26:91:
                    fe:98:77:74:92:06:15:a9:dd:89:cd:50:20:c0:23:
                    42:78:ec:40:2a:a5:a8:1f:12:76:08:43:43:2c:f4:
                    5f:5a:e0:62:24:6b:0a:c4:a6:f8:4c:25:04:04:5e:
                    dd:22:32:5c:e6:af:dd:5e:f1:a0:1e:5c:f8:55:fd:
                    f9:52:80:1b:64:cb:40:36:24:60:4b:70:5d:e8:f2:
                    de:bb:4a:31:45:a4:11:3a:48:9e:2d:07:9e:23:2f:
                    13:a7:b7:5b:e3:51:e6:dc:39:f9:10:2f:f8:89:e5:
                    99:04:de:42:4b:14:af:67:6b:80:a2:70:9a:12:fa:
                    36:c5:fd:ec:d4:21:b4:c7:93:9d:7a:af:69:cd:02:
                    4c:fc:47:90:ac:e4:0e:3b:6e:b7:81:cb:c4:cf:b5:
                    fc:ed:2c:b0:25:2c:a4:4e:df:01:d8:55:0f:45:79:
                    73:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7E:AF:C2:BA:28:F2:15:08:25:FD:BB:0E:9F:1E:9E:7C:BF:A5:DF
            X509v3 Authority Key Identifier:
                keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:af:db:6a:d6:7a:a7:91:ee:1f:0a:23:31:c9:97:5f:db:f4:
         9f:a1:4b:ea:c6:ad:10:c9:c3:1e:12:8b:42:6c:39:19:96:07:
         f9:5f:e3:8c:f7:88:3f:4b:0f:af:8c:31:54:48:83:6f:fc:6a:
         53:55:7c:49:d3:12:02:42:28:7a:01:2e:00:b7:ee:f0:7a:32:
         a6:93:79:05:35:de:54:cd:2c:8a:a3:55:67:37:ae:56:7f:e4:
         5e:21:fa:2a:7b:30:5b:d7:8f:ac:3d:b7:54:da:0d:e9:4c:6b:
         89:fd:e9:d4:52:08:f6:38:73:81:1b:78:79:f0:8b:52:23:f8:
         80:4a:5d:f5:fa:31:68:0a:83:16:18:e5:24:b4:64:4c:42:16:
         54:cb:b8:85:af:ff:2a:86:a4:1d:72:6d:d6:09:4e:87:00:11:
         e8:01:2f:95:55:6c:d4:68:d2:88:f7:da:da:6c:b2:0f:53:fe:
         4e:ec:38:a0:fa:2f:d7:7d:48:3a:83:7c:44:a0:bc:11:cc:6b:
         5a:88:c0:d5:0e:e9:6d:10:a3:da:b8:26:a7:6b:d9:0d:c5:83:
         07:b2:3f:7f:84:5a:5b:77:99:23:0c:94:3e:28:ae:ac:bf:17:
         8c:47:48:76:0f:31:de:d8:f3:73:e1:c7:c4:f9:60:ed:6f:65:
         a9:a3:c8:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBRoUFP8Jlc4dn02WPLlGDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOTc0ZGE0NWQ1OTE0ZWRlMTM4MWVlYWY5YzJiYjE2NDVi
NjY0M2EwHhcNMjQwNjI1MjMwMDQwWhcNMjQwNjI2MjMwMDQwWjAzMTEwLwYDVQQD
Eyg3YjdlYWZjMmJhMjhmMjE1MDgyNWZkYmIwZTlmMWU5ZTdjYmZhNWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOT8RYlF7e8W2psoyle5sDO2uZwp
S2v+mhSX7fuAntKYzhTyjifkct7J3ExmM58Cb+bZPqB8nWyI1i8nzdxI1lPFl/hH
rIsM5i0F4sjWDN9v8M54Rn1xJpH+mHd0kgYVqd2JzVAgwCNCeOxAKqWoHxJ2CEND
LPRfWuBiJGsKxKb4TCUEBF7dIjJc5q/dXvGgHlz4Vf35UoAbZMtANiRgS3Bd6PLe
u0oxRaQROkieLQeeIy8Tp7db41Hm3Dn5EC/4ieWZBN5CSxSvZ2uAonCaEvo2xf3s
1CG0x5Odeq9pzQJM/EeQrOQOO263gcvEz7X87SywJSykTt8B2FUPRXlzfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHt+r8K6KPIVCCX9uw6fHp58v6XfMB8GA1UdIwQY
MBaAFJ+XTaRdWRTt4Tge6vnCuxZFtmQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81MWVhNDktNzEyOC00NmUwLTgzOGQt
N2Q1ZWNiNGYxODFmLzEvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81MWVhNDktNzEyOC00NmUwLTgzOGQtN2Q1ZWNiNGYxODFm
LzEvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeK/batZ6
p5HuHwojMcmXX9v0n6FL6satEMnDHhKLQmw5GZYH+V/jjPeIP0sPr4wxVEiDb/xq
U1V8SdMSAkIoegEuALfu8HoyppN5BTXeVM0siqNVZzeuVn/kXiH6KnswW9ePrD23
VNoN6Uxrif3p1FII9jhzgRt4efCLUiP4gEpd9foxaAqDFhjlJLRkTEIWVMu4ha//
KoakHXJt1glOhwAR6AEvlVVs1GjSiPfa2myyD1P+Tuw4oPov131IOoN8RKC8Ecxr
WojA1Q7pbRCj2rgmp2vZDcWDB7I/f4RaW3eZIwyUPiiurL8XjEdIdg8x3tjzc+HH
xPlg7W9lqaPIDQ==
-----END CERTIFICATE-----
Generated at Wed Jun 26 04:59:34 2024 by rpki-client on console-ams.rpki-client.org