Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File:                     CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier:          SD0wfrbMGwWyz5eiLdFRj5Pga3dVy0V/EW+8wS4yn5E=
Subject key identifier:   D7:06:5B:5D:0A:CE:BE:4B:F8:6E:D1:01:63:78:6B:20:21:41:91:7E
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer:       /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial:       01901E9022EF0D03ADEE354E1ECAA4C841C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number:          0EDE
Signing time:             Sun 16 Jun 2024 01:01:20 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:20 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:20 +0000
Files and hashes:         1: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: 4JmGZj8NigI/7lMtuUS4e1NxocPHU3hyCoGMxKGaGn4=)
                          2: nlmP7pjabv-6CREPPLzW0oB-JcY.roa (hash: aozceqUheL9kWi6RIa8xM4ehcgYsA0Kqs773oBsQu0Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:22:ef:0d:03:ad:ee:35:4e:1e:ca:a4:c8:41:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
        Validity
            Not Before: Jun 16 01:01:20 2024 GMT
            Not After : Jun 17 01:01:20 2024 GMT
        Subject: CN=d7065b5d0acebe4bf86ed10163786b202141917e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:88:1a:53:14:16:34:09:1b:20:0d:5b:a0:
                    c8:45:03:bb:25:8a:b2:8c:ad:51:57:86:2d:b4:9c:
                    6d:3d:3a:f5:29:c5:02:95:d9:7f:ab:26:b6:f0:26:
                    fa:e6:64:a2:4b:ad:bd:2a:78:e2:68:9d:10:86:2a:
                    3d:05:2a:42:88:2e:d8:06:9e:93:3b:fb:6e:b3:92:
                    12:2f:cd:c2:0b:6e:1b:8e:5d:b4:ba:ad:02:39:85:
                    83:9a:9b:17:e9:22:7c:7e:97:2b:7d:7a:33:46:90:
                    80:31:7a:71:29:8d:96:d5:7f:9f:18:19:93:83:03:
                    e6:3f:ce:a2:7e:f8:86:5e:a2:a9:2e:67:d3:9a:d6:
                    38:31:db:99:9f:bf:8e:2f:07:63:0f:b6:4c:f7:49:
                    12:37:cf:af:7a:fe:29:82:c6:f8:1c:58:bb:5c:c3:
                    07:7b:fc:d9:5e:f0:ba:88:6e:72:13:c2:b5:97:39:
                    b2:88:33:79:8b:b3:d2:cb:f1:7b:d7:61:5a:0d:ff:
                    2e:21:7c:b4:fe:29:e0:ab:61:6d:8e:85:54:70:65:
                    25:5b:a9:1f:9a:e4:b9:fa:18:f9:ea:3e:e1:ea:aa:
                    a2:1e:dc:fa:92:1f:bf:6c:3c:a0:23:7a:ae:10:37:
                    f3:bd:a9:3a:51:d0:9f:d1:a1:ff:69:7b:41:f9:4e:
                    1a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:06:5B:5D:0A:CE:BE:4B:F8:6E:D1:01:63:78:6B:20:21:41:91:7E
            X509v3 Authority Key Identifier:
                keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:85:33:07:fb:6c:78:7c:b5:bb:2e:61:ad:3e:cc:51:6b:5c:
         c8:4d:b1:0d:2f:b1:68:e3:0a:ba:99:9a:8d:3a:9f:20:97:e5:
         e3:44:08:29:d9:13:2d:a9:67:11:66:75:78:79:8e:c4:a2:ee:
         35:8c:99:e6:f3:00:a4:53:8d:ef:02:39:e7:d0:d7:82:fe:e4:
         af:25:46:bf:2c:8f:bb:76:3c:bc:0e:ea:a8:61:47:61:5c:10:
         36:d8:92:df:3b:41:1c:e7:f0:24:98:fd:d5:e9:3e:fd:70:0d:
         67:90:fc:86:88:83:a1:eb:f7:e1:2b:da:f9:25:09:be:a4:40:
         7a:03:eb:a5:92:60:68:11:ff:a6:4d:0d:37:14:19:27:3f:ff:
         cf:03:f3:5b:fc:72:58:e8:cc:3b:1e:68:c8:9b:97:78:c3:4a:
         f1:d4:a6:ee:f8:80:95:5b:82:9d:33:1e:5b:69:93:db:3e:eb:
         10:db:51:ec:83:fc:96:66:67:f4:54:50:3e:2d:01:6d:b1:54:
         41:39:1b:7e:52:32:48:a2:59:86:a6:67:fd:81:1c:cc:6e:d7:
         71:12:54:99:9b:00:42:cf:5e:00:ba:f8:31:b0:b2:c8:1f:96:
         57:5a:26:68:f2:85:d4:3d:95:3a:ce:f7:a9:26:cf:2f:f4:dc:
         92:87:db:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAekCLvDQOt7jVOHsqkyEHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDkyZDI3NDc4MTQzYzZhZTM5MDVjNDdmNTg0N2RmOWMw
MmY0MTMwHhcNMjQwNjE2MDEwMTIwWhcNMjQwNjE3MDEwMTIwWjAzMTEwLwYDVQQD
EyhkNzA2NWI1ZDBhY2ViZTRiZjg2ZWQxMDE2Mzc4NmIyMDIxNDE5MTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+WIGlMUFjQJGyANW6DIRQO7JYqy
jK1RV4YttJxtPTr1KcUCldl/qya28Cb65mSiS629KnjiaJ0Qhio9BSpCiC7YBp6T
O/tus5ISL83CC24bjl20uq0COYWDmpsX6SJ8fpcrfXozRpCAMXpxKY2W1X+fGBmT
gwPmP86ifviGXqKpLmfTmtY4MduZn7+OLwdjD7ZM90kSN8+vev4pgsb4HFi7XMMH
e/zZXvC6iG5yE8K1lzmyiDN5i7PSy/F712FaDf8uIXy0/ingq2FtjoVUcGUlW6kf
muS5+hj56j7h6qqiHtz6kh+/bDygI3quEDfzvak6UdCf0aH/aXtB+U4akwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcGW10Kzr5L+G7RAWN4ayAhQZF+MB8GA1UdIwQY
MBaAFAgJLSdHgUPGrjkFxH9YR9+cAvQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FrdEowZUJROGF1T1FYRWYxaEgzNXdDOUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hYTk1ZTMtNTA4Mi00ZmE3LWE3YWIt
OTRjZjNhMzViZjhjLzEvQ0FrdEowZUJROGF1T1FYRWYxaEgzNXdDOUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hYTk1ZTMtNTA4Mi00ZmE3LWE3YWItOTRjZjNhMzViZjhj
LzEvQ0FrdEowZUJROGF1T1FYRWYxaEgzNXdDOUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4UzB/ts
eHy1uy5hrT7MUWtcyE2xDS+xaOMKupmajTqfIJfl40QIKdkTLalnEWZ1eHmOxKLu
NYyZ5vMApFON7wI559DXgv7kryVGvyyPu3Y8vA7qqGFHYVwQNtiS3ztBHOfwJJj9
1ek+/XANZ5D8hoiDoev34Sva+SUJvqRAegPrpZJgaBH/pk0NNxQZJz//zwPzW/xy
WOjMOx5oyJuXeMNK8dSm7viAlVuCnTMeW2mT2z7rENtR7IP8lmZn9FRQPi0BbbFU
QTkbflIySKJZhqZn/YEczG7XcRJUmZsAQs9eALr4MbCyyB+WV1omaPKF1D2VOs73
qSbPL/TckofbUQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:01:55 2024 by rpki-client on console-ams.rpki-client.org