Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File:                     bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier:          12vkBtPxIrFuFG9AtUqq6qeuAKJaGRoo4/Bk4ijb0+A=
Subject key identifier:   A0:AE:49:C3:FA:0E:A9:1D:31:15:86:3D:6D:56:47:4F:39:38:E2:82
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer:       /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial:       0190693CA634372A29AF697AB05C6A952E92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number:          11F3
Signing time:             Sun 30 Jun 2024 13:01:40 +0000
Manifest this update:     Sun 30 Jun 2024 13:01:40 +0000
Manifest next update:     Mon 01 Jul 2024 13:01:40 +0000
Files and hashes:         1: XaoSBMvoSmUyR1JPGkObullZ3DE.roa (hash: T57/kL+Cx/6RtQ9ybMrMhJPDSvQ435bNy6qighrywtA=)
                          2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: PcJkkp3icgvG51ErfHeR7etthAweoDzc3ADYAv3KwKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 13:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:69:3c:a6:34:37:2a:29:af:69:7a:b0:5c:6a:95:2e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
        Validity
            Not Before: Jun 30 13:01:40 2024 GMT
            Not After : Jul  1 13:01:40 2024 GMT
        Subject: CN=a0ae49c3fa0ea91d3115863d6d56474f3938e282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:18:2a:6a:22:a8:1b:04:d4:83:f1:64:7a:be:
                    36:27:6f:12:c7:88:7a:71:2c:a1:fc:b8:1b:16:30:
                    89:5e:5c:a5:c1:c9:37:1b:43:b3:ed:e7:b3:58:96:
                    49:fb:d9:e4:e9:ec:d3:c0:2f:c4:10:c6:0a:bc:ca:
                    73:b3:5d:d4:cc:77:8a:0d:64:cc:53:b9:2c:7f:5c:
                    1d:26:2a:fa:02:97:5c:96:a3:6d:50:a5:f5:41:05:
                    a1:2e:06:ed:7e:06:c7:33:91:e5:b5:38:d8:64:3c:
                    f9:67:24:3e:5f:c0:c4:d9:57:65:60:28:ce:af:6d:
                    c9:78:3c:39:ba:56:e8:25:67:e9:74:e7:72:92:a5:
                    89:c1:fd:80:87:03:b0:91:46:bd:03:ae:2c:d0:c7:
                    54:9f:3b:ab:ba:7f:a6:bd:4a:28:8b:15:00:29:e0:
                    44:44:03:b4:c5:1d:98:43:9a:37:c8:8b:20:e9:5d:
                    77:36:67:8d:cb:06:4a:06:fe:3a:aa:9d:3b:fd:35:
                    92:40:35:2b:f0:a2:e6:43:fd:08:57:96:b8:df:1d:
                    e6:41:e7:9c:60:71:d5:9f:5b:33:4c:84:2e:c1:18:
                    37:e6:97:0d:9d:b0:96:3f:2a:0b:5c:19:10:a5:ac:
                    17:aa:40:f2:3a:16:a6:78:71:0e:51:2b:09:c0:3e:
                    96:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AE:49:C3:FA:0E:A9:1D:31:15:86:3D:6D:56:47:4F:39:38:E2:82
            X509v3 Authority Key Identifier:
                keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:6b:17:c2:98:8e:91:27:f2:0b:b9:19:97:3f:bd:bf:07:87:
         0c:65:11:a5:0a:a6:32:67:3a:aa:90:a0:88:f4:4e:59:97:ef:
         0b:9e:a7:7d:9d:08:86:ac:0b:bf:46:ad:64:84:0e:33:af:98:
         17:91:30:da:fd:ff:2f:4f:38:0a:d0:ff:bb:2b:96:0d:aa:f3:
         ce:61:3b:e8:2f:e3:44:87:69:43:2c:79:46:54:14:bf:76:d6:
         e0:fd:c9:49:ba:21:03:30:60:bb:dd:3f:23:5f:36:93:a3:23:
         ee:40:dd:e3:e4:47:69:00:64:1d:b0:fb:5e:4a:cc:78:34:89:
         47:1f:66:44:ad:bd:97:cf:b4:1e:c5:a9:af:46:be:13:ac:cd:
         2c:df:02:34:dc:cd:ba:b2:69:8e:9f:9a:08:31:d7:a2:8b:d5:
         a6:03:cc:fd:09:f2:29:9d:e3:bc:f2:92:94:7d:f1:ad:1a:a8:
         b7:f1:17:be:2d:66:5d:c3:65:3d:40:eb:5f:9f:f4:64:e3:6e:
         0f:52:c9:42:07:ec:37:a2:07:ab:cf:25:6c:a5:2e:e5:11:6a:
         a2:a7:19:15:c6:2c:5c:cb:74:6e:f5:c6:98:31:99:08:3a:16:
         b1:cf:1b:e3:98:94:43:ee:62:ef:8c:f1:ae:51:82:3c:b5:6c:
         90:31:41:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBpPKY0Nyopr2l6sFxqlS6SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmM2Q4OWE4MWZjMjk5ZjM5YzA5MmU0ZjZkMDE3M2E5YTlj
ZmJjNjUwHhcNMjQwNjMwMTMwMTQwWhcNMjQwNzAxMTMwMTQwWjAzMTEwLwYDVQQD
EyhhMGFlNDljM2ZhMGVhOTFkMzExNTg2M2Q2ZDU2NDc0ZjM5MzhlMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxgqaiKoGwTUg/Fker42J28Sx4h6
cSyh/LgbFjCJXlylwck3G0Oz7eezWJZJ+9nk6ezTwC/EEMYKvMpzs13UzHeKDWTM
U7ksf1wdJir6ApdclqNtUKX1QQWhLgbtfgbHM5HltTjYZDz5ZyQ+X8DE2VdlYCjO
r23JeDw5ulboJWfpdOdykqWJwf2AhwOwkUa9A64s0MdUnzurun+mvUooixUAKeBE
RAO0xR2YQ5o3yIsg6V13NmeNywZKBv46qp07/TWSQDUr8KLmQ/0IV5a43x3mQeec
YHHVn1szTIQuwRg35pcNnbCWPyoLXBkQpawXqkDyOhameHEOUSsJwD6WrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCuScP6DqkdMRWGPW1WR085OOKCMB8GA1UdIwQY
MBaAFG89iagfwpnznAkuT20Bc6mpz7xlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnoySnFCX0NtZk9jQ1M1UGJRRnpxYW5QdkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wNWUwZWUtYWUwMy00MTI0LWI2NzAt
MzA5YjdiOTYwZDE0LzEvYnoySnFCX0NtZk9jQ1M1UGJRRnpxYW5QdkdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wNWUwZWUtYWUwMy00MTI0LWI2NzAtMzA5YjdiOTYwZDE0
LzEvYnoySnFCX0NtZk9jQ1M1UGJRRnpxYW5QdkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmsXwpiO
kSfyC7kZlz+9vweHDGURpQqmMmc6qpCgiPROWZfvC56nfZ0IhqwLv0atZIQOM6+Y
F5Ew2v3/L084CtD/uyuWDarzzmE76C/jRIdpQyx5RlQUv3bW4P3JSbohAzBgu90/
I182k6Mj7kDd4+RHaQBkHbD7XkrMeDSJRx9mRK29l8+0HsWpr0a+E6zNLN8CNNzN
urJpjp+aCDHXoovVpgPM/QnyKZ3jvPKSlH3xrRqot/EXvi1mXcNlPUDrX5/0ZONu
D1LJQgfsN6IHq88lbKUu5RFqoqcZFcYsXMt0bvXGmDGZCDoWsc8b45iUQ+5i74zx
rlGCPLVskDFBzw==
-----END CERTIFICATE-----
Generated at Sun Jun 30 20:42:08 2024 by rpki-client on console-ams.rpki-client.org