Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
File:                     mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft (raw, json)
Hash identifier:          U+ZvIT8V/vxhCnZVDVxdjU6Cry1dcOiafXJL0Dli4Xc=
Subject key identifier:   C5:D1:21:2D:B1:15:DA:B9:7A:A3:CC:FB:3A:47:E6:A2:76:25:E0:71
Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
Certificate issuer:       /CN=985d472fa538204f1c23e8b6a758073b80cfc199
Certificate serial:       019050232D6D058FF347019D386A715A24D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
Manifest number:          0DB1
Signing time:             Tue 25 Jun 2024 16:03:20 +0000
Manifest this update:     Tue 25 Jun 2024 16:03:20 +0000
Manifest next update:     Wed 26 Jun 2024 16:03:20 +0000
Files and hashes:         1: aHi7jn9xGqekI1y5YDaLXdVdO00.roa (hash: w3fIjy/SENIpRAJQv8zfTpc5W48FXtEJIMh7UrALvFE=)
                          2: mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl (hash: D310pFR6R6/bd3z1Fft8/o4xTV6cSjJWPlNNRw8D8+I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:50:23:2d:6d:05:8f:f3:47:01:9d:38:6a:71:5a:24:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199
        Validity
            Not Before: Jun 25 16:03:20 2024 GMT
            Not After : Jun 26 16:03:20 2024 GMT
        Subject: CN=c5d1212db115dab97aa3ccfb3a47e6a27625e071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:b2:85:ed:8f:08:c3:39:b7:c2:17:df:1e:
                    98:ea:2b:61:88:2f:17:52:eb:7b:47:e5:c3:69:d6:
                    81:74:c8:c5:93:c8:fd:4b:2d:6f:72:75:b7:ac:8a:
                    c9:0a:52:22:dc:2b:f9:8e:6c:cd:a0:55:c8:94:53:
                    8d:65:ad:04:10:b1:d5:ca:54:ac:c5:c0:42:37:70:
                    df:59:b5:5c:1e:12:04:84:6c:24:7a:2a:68:98:23:
                    78:b4:13:21:0b:34:2c:e9:be:a7:af:50:7c:23:e2:
                    52:3f:5d:6e:72:b5:97:13:87:cc:30:b4:1e:75:b5:
                    da:a6:99:9f:09:67:69:55:70:fb:39:fb:08:2c:75:
                    24:21:9a:1f:30:dc:4d:11:81:dd:a7:6e:4d:d9:4b:
                    bb:bc:8b:0d:2b:d2:a8:e8:88:54:ed:42:30:d9:ac:
                    ab:fa:3e:a1:94:e7:bb:73:0f:4c:42:eb:d3:0c:25:
                    15:7b:bf:b6:bd:94:43:b3:d0:a1:cd:31:fa:a5:07:
                    b0:e9:f1:81:bd:39:9e:4c:cf:28:2f:99:b7:0c:29:
                    32:a0:6f:64:76:71:ee:3d:93:d6:73:3c:be:d4:f8:
                    9b:17:fb:55:d4:1a:cd:38:b3:de:a5:b1:e3:65:58:
                    fd:f7:9b:24:7d:c4:dc:6a:38:59:fc:c7:99:21:2e:
                    70:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D1:21:2D:B1:15:DA:B9:7A:A3:CC:FB:3A:47:E6:A2:76:25:E0:71
            X509v3 Authority Key Identifier:
                keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:6f:4a:2f:c1:c6:e0:25:99:7a:53:28:4d:0a:dd:b9:4b:45:
         bb:d5:5a:b4:3e:21:73:87:9f:55:d4:77:e0:32:0d:be:70:d0:
         3c:f9:16:4c:9a:a0:e4:e2:d5:7c:eb:be:07:5b:13:e6:99:10:
         a2:aa:d5:df:d7:92:c8:99:1f:75:49:f4:b4:c7:4b:e3:0e:8d:
         4d:18:70:5a:c9:04:1e:5b:55:13:75:77:ac:0c:b1:35:9c:4a:
         5d:2b:2e:6f:f4:9d:c4:05:80:4f:a9:37:2a:c0:b8:4c:14:00:
         26:92:1c:21:69:bf:f2:36:c5:3a:3d:f1:4f:99:a4:fc:40:51:
         78:41:c8:9e:91:a6:a2:85:53:c3:c8:c1:a5:c2:29:27:8d:54:
         bb:8f:88:30:fe:a3:08:83:fb:b8:b0:09:d9:59:4a:d6:b1:9b:
         82:46:45:31:39:10:0b:0b:10:04:64:be:04:48:5b:b1:d6:ff:
         af:7a:b0:4e:f5:ed:86:80:d8:20:98:28:60:4f:66:a2:b5:2c:
         5c:fc:3f:17:34:1b:c9:13:e4:58:c8:4a:d5:de:fd:26:a6:cb:
         10:54:8b:cc:75:4c:5f:d0:28:01:c4:6e:c7:1a:84:ed:d0:69:
         0d:81:c1:86:f4:35:9e:08:0c:7f:72:b1:5a:69:e8:5c:e8:bf:
         3e:f6:b0:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBQIy1tBY/zRwGdOGpxWiTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NWQ0NzJmYTUzODIwNGYxYzIzZThiNmE3NTgwNzNiODBj
ZmMxOTkwHhcNMjQwNjI1MTYwMzIwWhcNMjQwNjI2MTYwMzIwWjAzMTEwLwYDVQQD
EyhjNWQxMjEyZGIxMTVkYWI5N2FhM2NjZmIzYTQ3ZTZhMjc2MjVlMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLuyhe2PCMM5t8IX3x6Y6ithiC8X
Uut7R+XDadaBdMjFk8j9Sy1vcnW3rIrJClIi3Cv5jmzNoFXIlFONZa0EELHVylSs
xcBCN3DfWbVcHhIEhGwkeipomCN4tBMhCzQs6b6nr1B8I+JSP11ucrWXE4fMMLQe
dbXappmfCWdpVXD7OfsILHUkIZofMNxNEYHdp25N2Uu7vIsNK9Ko6IhU7UIw2ayr
+j6hlOe7cw9MQuvTDCUVe7+2vZRDs9ChzTH6pQew6fGBvTmeTM8oL5m3DCkyoG9k
dnHuPZPWczy+1PibF/tV1BrNOLPepbHjZVj995skfcTcajhZ/MeZIS5wXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXRIS2xFdq5eqPM+zpH5qJ2JeBxMB8GA1UdIwQY
MBaAFJhdRy+lOCBPHCPotqdYBzuAz8GZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jMjhlYmMtNzQ5Zi00OGY2LTg5YTIt
ZWRjMzE2MjIyNjQ0LzEvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jMjhlYmMtNzQ5Zi00OGY2LTg5YTItZWRjMzE2MjIyNjQ0
LzEvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtG9KL8HG
4CWZelMoTQrduUtFu9VatD4hc4efVdR34DINvnDQPPkWTJqg5OLVfOu+B1sT5pkQ
oqrV39eSyJkfdUn0tMdL4w6NTRhwWskEHltVE3V3rAyxNZxKXSsub/SdxAWAT6k3
KsC4TBQAJpIcIWm/8jbFOj3xT5mk/EBReEHInpGmooVTw8jBpcIpJ41Uu4+IMP6j
CIP7uLAJ2VlK1rGbgkZFMTkQCwsQBGS+BEhbsdb/r3qwTvXthoDYIJgoYE9morUs
XPw/FzQbyRPkWMhK1d79JqbLEFSLzHVMX9AoAcRuxxqE7dBpDYHBhvQ1nggMf3Kx
WmnoXOi/Pvaw2g==
-----END CERTIFICATE-----
Generated at Tue Jun 25 23:08:25 2024 by rpki-client on console-ams.rpki-client.org