Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.mft
File:                     2cm69G1slNJ84SjaO2W1o7Bts4s.mft (raw, json)
Hash identifier:          VpGUYoE6qCgXsir9bbN+EC12NTLTtrG+EozclB970us=
Subject key identifier:   FA:06:60:51:EA:E9:9B:DE:5B:3D:23:8E:4B:4C:F3:9E:A2:2D:5B:99
Authority key identifier: D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
Certificate issuer:       /CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
Certificate serial:       018FD909D4869558C30FE424DC646ADC4A24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.mft
Manifest number:          0C9D
Signing time:             Sun 02 Jun 2024 13:00:51 +0000
Manifest this update:     Sun 02 Jun 2024 13:00:51 +0000
Manifest next update:     Mon 03 Jun 2024 13:00:51 +0000
Files and hashes:         1: 1fDLN_MyUhTvDaxzFSRI6jq7IVM.roa (hash: BX9PvrpNKwJN1596bs5P4BJPJub0UvMag1Wg6OxrRKs=)
                          2: 2cm69G1slNJ84SjaO2W1o7Bts4s.crl (hash: Aldw9xi221UeH8tM2U7ZP1ytpJteR9+s2et7VwdSpNs=)
                          3: NRtX5PytUhX6g8zAH5EaJ2lFC8s.roa (hash: nJcUVx0K5LTBe87SBhS+loIvayQb53d+q5JUmxSKTy8=)
                          4: cMKquuX8Jl9j8IC3Jp_7Gvudiuo.roa (hash: x5qp4wA457EkOdZCr+IlIpsuqHrDIxLn8Z+g0r5K8S4=)
                          5: nVlby3mHYkAQ6aSHXyNWpeJaKMQ.roa (hash: 4YoAKVOr354PNcrAEVwTrxpW+gZhIQDVO7K+jh21bWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d9:09:d4:86:95:58:c3:0f:e4:24:dc:64:6a:dc:4a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
        Validity
            Not Before: Jun  2 13:00:51 2024 GMT
            Not After : Jun  3 13:00:51 2024 GMT
        Subject: CN=fa066051eae99bde5b3d238e4b4cf39ea22d5b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:b7:ce:00:0e:57:ca:1a:77:a7:31:9b:22:
                    d0:40:0a:fd:07:43:c1:f7:65:82:b9:09:1a:ae:c2:
                    49:2f:a0:f0:7a:35:1f:79:34:77:58:d0:f4:94:4e:
                    7b:10:74:58:b1:3c:59:2d:70:48:fe:58:8d:36:ca:
                    a0:30:3e:cb:ea:15:df:c7:81:b0:6b:db:65:aa:bd:
                    32:aa:28:7b:d2:d2:66:ac:46:0e:94:fe:e5:8a:39:
                    aa:a2:3f:0c:11:2e:f7:ab:b2:f6:0b:4c:31:ba:cc:
                    71:39:81:af:bf:f5:f4:73:74:ec:21:79:63:64:4e:
                    f9:0c:ce:95:0d:8a:ae:38:d9:2c:9c:3a:b0:90:ae:
                    dc:09:98:dc:6c:ac:b7:dc:f2:01:4d:44:7e:58:7d:
                    1c:56:64:bd:89:60:40:bc:a9:0a:ec:09:70:04:61:
                    f9:ce:70:a3:ad:bb:a5:0c:a7:6c:aa:e2:7b:94:3f:
                    3e:73:07:72:2d:b0:57:5c:66:73:97:98:a2:ba:11:
                    dd:9d:bc:2e:2c:16:b4:f2:ac:77:58:35:3b:a3:3c:
                    8e:87:77:5c:b0:b1:9c:e1:b2:5b:3d:a5:36:cf:2b:
                    f6:77:a1:85:54:43:68:e7:fe:b3:ee:98:f0:9e:73:
                    0c:38:3a:e7:84:f0:89:fc:10:a7:7e:48:3b:02:1e:
                    6b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:06:60:51:EA:E9:9B:DE:5B:3D:23:8E:4B:4C:F3:9E:A2:2D:5B:99
            X509v3 Authority Key Identifier:
                keyid:D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:09:6c:b6:48:35:b3:e0:3c:c5:88:2e:07:a1:7b:6f:7f:93:
         92:ac:64:40:9d:09:48:9e:a9:77:9b:44:38:d9:87:34:43:df:
         d9:4f:30:d8:2e:d3:d3:22:d9:9f:73:e3:00:a7:99:5a:b8:70:
         c6:f6:be:d7:3e:d6:b8:66:5b:bb:49:9e:67:78:81:2c:23:5e:
         a0:8c:4e:75:9c:88:17:42:a3:15:71:18:06:d3:3a:aa:f8:fe:
         b6:a7:2f:c8:f1:98:c5:24:62:da:7c:a1:5f:a8:7d:69:63:40:
         91:26:0d:54:1c:17:32:54:25:57:17:8e:c7:b4:8b:36:4e:42:
         93:85:66:cb:a6:4c:3e:46:c1:5d:c1:f0:af:65:06:0f:8b:7c:
         5b:f7:2b:ba:e3:21:c1:45:dd:fc:15:26:99:1e:9b:c8:91:81:
         ec:61:71:73:be:28:d3:0f:69:96:90:ae:d6:d5:af:ed:14:40:
         f3:f4:1f:f6:61:10:ac:5a:a9:ac:36:13:df:d1:f9:41:19:31:
         0a:95:f5:c2:33:d6:16:14:b4:c2:45:0a:87:ff:09:d7:be:60:
         61:6d:3a:c5:30:be:06:0f:c9:e6:45:d2:61:85:22:1d:57:2a:
         e2:77:7f:86:32:14:6c:d4:62:75:2b:49:ce:00:b1:ec:d3:1f:
         79:97:c9:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY/ZCdSGlVjDD+Qk3GRq3EokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YzliYWY0NmQ2Yzk0ZDI3Y2UxMjhkYTNiNjViNWEzYjA2
ZGIzOGIwHhcNMjQwNjAyMTMwMDUxWhcNMjQwNjAzMTMwMDUxWjAzMTEwLwYDVQQD
EyhmYTA2NjA1MWVhZTk5YmRlNWIzZDIzOGU0YjRjZjM5ZWEyMmQ1Yjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUC3zgAOV8oad6cxmyLQQAr9B0PB
92WCuQkarsJJL6DwejUfeTR3WND0lE57EHRYsTxZLXBI/liNNsqgMD7L6hXfx4Gw
a9tlqr0yqih70tJmrEYOlP7lijmqoj8MES73q7L2C0wxusxxOYGvv/X0c3TsIXlj
ZE75DM6VDYquONksnDqwkK7cCZjcbKy33PIBTUR+WH0cVmS9iWBAvKkK7AlwBGH5
znCjrbulDKdsquJ7lD8+cwdyLbBXXGZzl5iiuhHdnbwuLBa08qx3WDU7ozyOh3dc
sLGc4bJbPaU2zyv2d6GFVENo5/6z7pjwnnMMODrnhPCJ/BCnfkg7Ah5rjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoGYFHq6ZveWz0jjktM856iLVuZMB8GA1UdIwQY
MBaAFNnJuvRtbJTSfOEo2jtltaOwbbOLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmNtNjlHMXNsTko4NFNqYU8yVzFvN0J0czRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NGY5OGMtYzFkMS00ZmUyLTlhZGMt
YTAxMGQ4ZTRmYWYwLzEvMmNtNjlHMXNsTko4NFNqYU8yVzFvN0J0czRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85NGY5OGMtYzFkMS00ZmUyLTlhZGMtYTAxMGQ4ZTRmYWYw
LzEvMmNtNjlHMXNsTko4NFNqYU8yVzFvN0J0czRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwlstkg1
s+A8xYguB6F7b3+TkqxkQJ0JSJ6pd5tEONmHNEPf2U8w2C7T0yLZn3PjAKeZWrhw
xva+1z7WuGZbu0meZ3iBLCNeoIxOdZyIF0KjFXEYBtM6qvj+tqcvyPGYxSRi2nyh
X6h9aWNAkSYNVBwXMlQlVxeOx7SLNk5Ck4Vmy6ZMPkbBXcHwr2UGD4t8W/cruuMh
wUXd/BUmmR6byJGB7GFxc74o0w9plpCu1tWv7RRA8/Qf9mEQrFqprDYT39H5QRkx
CpX1wjPWFhS0wkUKh/8J175gYW06xTC+Bg/J5kXSYYUiHVcq4nd/hjIUbNRidStJ
zgCx7NMfeZfJMw==
-----END CERTIFICATE-----
Generated at Sun Jun 2 16:07:26 2024 by rpki-client on console-ams.rpki-client.org