Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
File:                     zT5kktRzFSDB7tvNopZ5UArAg6s.mft (raw, json)
Hash identifier:          v5LunCNY3E78Z9AQn2W8ldlC7eurqvU4uMkZ4YBHxPU=
Subject key identifier:   1B:EE:98:CC:CA:27:E0:5C:EB:A1:FF:D8:9B:2C:A3:8E:BF:58:5D:7C
Authority key identifier: CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
Certificate issuer:       /CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Certificate serial:       0191F9D9E02B7ED21CD300C2F0E1513051A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
Manifest number:          0189
Signing time:             Mon 16 Sep 2024 08:01:30 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:30 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:30 +0000
Files and hashes:         1: E75uCUosMLgx3LN4pD6Cch6rlDM.roa (hash: NT3jH19vQOWSxIWZMgFgQsj4qRgaQMHInAyRLSS2H/E=)
                          2: zT5kktRzFSDB7tvNopZ5UArAg6s.crl (hash: NPmVDcpz5UGiWwucQJ4d07W/AZv/3zkJiiQ36dFJ88w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:e0:2b:7e:d2:1c:d3:00:c2:f0:e1:51:30:51:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd3e6492d4731520c1eedbcda29679500ac083ab
        Validity
            Not Before: Sep 16 08:01:30 2024 GMT
            Not After : Sep 17 08:01:30 2024 GMT
        Subject: CN=1bee98ccca27e05ceba1ffd89b2ca38ebf585d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:58:9c:8c:ad:e5:2d:86:d0:ee:61:89:2c:77:
                    31:2a:e3:c3:79:d9:fa:c3:59:dd:34:a3:33:b6:a3:
                    3d:24:0a:a9:25:74:c5:45:fd:33:25:94:d1:2d:17:
                    f6:6d:86:9c:65:0e:b7:75:38:e4:cb:83:a0:d8:46:
                    7f:99:f3:49:93:d7:85:fd:a1:7a:61:5a:f1:27:fd:
                    24:ad:90:ef:db:ed:69:8a:89:8c:1f:da:aa:97:ad:
                    f2:0c:b8:b6:23:e9:1d:c5:b7:4c:5d:e7:1a:57:2c:
                    f8:44:56:96:64:13:c8:61:4c:04:4b:e3:64:ca:c0:
                    57:3c:e0:1b:da:fe:cf:a5:10:83:c5:f2:8e:10:70:
                    fd:71:75:d6:db:9d:da:b4:d6:40:f4:b4:00:a6:9c:
                    dd:3a:a7:31:12:f1:d1:26:60:3e:b5:5c:a2:aa:89:
                    80:c3:ac:a8:c8:a8:24:62:67:05:61:45:44:26:39:
                    f6:a5:c5:ce:a3:d9:d9:cd:f8:14:42:d3:d2:95:c9:
                    dd:e4:89:ba:02:0d:c3:05:eb:cb:df:05:00:c2:23:
                    71:c2:41:96:ad:17:b6:16:4b:d3:15:47:42:a9:97:
                    9a:d4:5a:b9:ff:14:81:e8:79:fe:d0:7c:6b:ac:ac:
                    ec:34:e4:10:16:7b:e5:e2:11:10:11:f2:ad:d4:65:
                    ae:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EE:98:CC:CA:27:E0:5C:EB:A1:FF:D8:9B:2C:A3:8E:BF:58:5D:7C
            X509v3 Authority Key Identifier:
                keyid:CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2b:0f:8c:b0:96:35:31:cc:f4:4e:dd:3c:94:29:0f:54:47:
         bf:38:f6:54:2f:3b:ab:f9:d7:24:98:07:7a:7f:e0:5f:e6:15:
         e6:03:68:10:1a:3f:c5:7a:90:f8:ad:3e:ef:1d:f1:3d:c2:7b:
         b2:67:be:ac:68:a9:7e:f3:98:76:9e:2a:7c:6d:d0:e9:ba:c5:
         df:1c:d1:6e:b1:90:73:28:2c:4c:7a:5f:06:e5:e1:b3:2a:6b:
         21:fd:86:f4:32:51:82:6a:45:19:d9:8e:48:7a:77:b9:b6:b4:
         90:e2:b7:de:73:d3:05:c1:be:01:53:19:25:05:f8:96:6c:60:
         12:20:ab:79:98:f1:e9:91:6e:8c:52:45:82:e6:3f:d7:0c:12:
         0c:23:0e:75:23:6b:00:b5:4b:bf:87:c4:61:59:dc:5c:a0:fb:
         36:bc:7f:cf:70:c9:fe:b5:2c:d1:a1:26:92:22:83:71:21:7a:
         f1:a4:64:8e:59:cc:cd:6a:88:88:d8:9c:ac:60:4d:d7:0f:b5:
         b6:f6:70:04:80:e7:c8:54:f7:c9:01:f1:9e:e4:0c:ae:ba:a9:
         c8:48:63:87:ce:f2:74:6a:7b:b3:a7:bf:d9:6a:d1:52:75:e1:
         31:f9:cb:36:3f:a9:8f:db:35:dc:1e:6e:d4:60:e1:f1:3e:a1:
         1a:63:0c:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH52eArftIc0wDC8OFRMFGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkM2U2NDkyZDQ3MzE1MjBjMWVlZGJjZGEyOTY3OTUwMGFj
MDgzYWIwHhcNMjQwOTE2MDgwMTMwWhcNMjQwOTE3MDgwMTMwWjAzMTEwLwYDVQQD
EygxYmVlOThjY2NhMjdlMDVjZWJhMWZmZDg5YjJjYTM4ZWJmNTg1ZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVicjK3lLYbQ7mGJLHcxKuPDedn6
w1ndNKMztqM9JAqpJXTFRf0zJZTRLRf2bYacZQ63dTjky4Og2EZ/mfNJk9eF/aF6
YVrxJ/0krZDv2+1piomMH9qql63yDLi2I+kdxbdMXecaVyz4RFaWZBPIYUwES+Nk
ysBXPOAb2v7PpRCDxfKOEHD9cXXW253atNZA9LQAppzdOqcxEvHRJmA+tVyiqomA
w6yoyKgkYmcFYUVEJjn2pcXOo9nZzfgUQtPSlcnd5Im6Ag3DBevL3wUAwiNxwkGW
rRe2FkvTFUdCqZea1Fq5/xSB6Hn+0HxrrKzsNOQQFnvl4hEQEfKt1GWuGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvumMzKJ+Bc66H/2Jsso46/WF18MB8GA1UdIwQY
MBaAFM0+ZJLUcxUgwe7bzaKWeVAKwIOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelQ1a2t0UnpGU0RCN3R2Tm9wWjVVQXJBZzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YTEyNzQtMDNhYy00OTRkLWJhOGUt
Y2ZjZmZhM2MwNjY1LzEvelQ1a2t0UnpGU0RCN3R2Tm9wWjVVQXJBZzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83YTEyNzQtMDNhYy00OTRkLWJhOGUtY2ZjZmZhM2MwNjY1
LzEvelQ1a2t0UnpGU0RCN3R2Tm9wWjVVQXJBZzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICsPjLCW
NTHM9E7dPJQpD1RHvzj2VC87q/nXJJgHen/gX+YV5gNoEBo/xXqQ+K0+7x3xPcJ7
sme+rGipfvOYdp4qfG3Q6brF3xzRbrGQcygsTHpfBuXhsyprIf2G9DJRgmpFGdmO
SHp3uba0kOK33nPTBcG+AVMZJQX4lmxgEiCreZjx6ZFujFJFguY/1wwSDCMOdSNr
ALVLv4fEYVncXKD7Nrx/z3DJ/rUs0aEmkiKDcSF68aRkjlnMzWqIiNicrGBN1w+1
tvZwBIDnyFT3yQHxnuQMrrqpyEhjh87ydGp7s6e/2WrRUnXhMfnLNj+pj9s13B5u
1GDh8T6hGmMMsw==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:19:17 2024 by rpki-client on console-ams.rpki-client.org