Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
File:                     MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft (raw, json)
Hash identifier:          ug9U1esNjtRO95oCI5oI2i9P1/H8Q34VrFtkefpoMUI=
Subject key identifier:   CE:3B:CD:C3:3D:C0:3A:94:90:CB:85:10:57:D7:45:72:98:7C:E6:97
Authority key identifier: 32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
Certificate issuer:       /CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Certificate serial:       01904F7C75E9E3926540BD30E1CF15C44791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
Manifest number:          093C
Signing time:             Tue 25 Jun 2024 13:01:14 +0000
Manifest this update:     Tue 25 Jun 2024 13:01:14 +0000
Manifest next update:     Wed 26 Jun 2024 13:01:14 +0000
Files and hashes:         1: MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl (hash: 5LL88mdET3gokg+4O1onnAJdgVDHgysNfLS6qDVW0UM=)
                          2: eYDBxTKrcaEFYFnlWLUsnIOsv3U.roa (hash: OfZoO6t0iyg5AXJF4WwUrvgzUmYDRfoo/QvhYXWGzUk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4f:7c:75:e9:e3:92:65:40:bd:30:e1:cf:15:c4:47:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
        Validity
            Not Before: Jun 25 13:01:14 2024 GMT
            Not After : Jun 26 13:01:14 2024 GMT
        Subject: CN=ce3bcdc33dc03a9490cb851057d74572987ce697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:42:e4:93:bd:d6:d1:66:be:9c:cb:e0:fa:84:
                    2e:62:46:68:e7:af:10:f1:7c:75:97:30:94:af:26:
                    93:27:75:55:df:ea:29:3b:53:93:a6:e4:7d:79:7a:
                    c6:f8:33:fc:99:6c:54:67:3d:b5:27:bb:45:74:0a:
                    16:54:0d:51:36:7b:e1:d2:bd:12:c9:92:5c:4e:ad:
                    85:fb:92:e4:fc:7e:8a:86:07:85:77:a4:30:cb:16:
                    e5:96:11:60:2f:76:94:ff:af:3c:9d:c1:f2:a1:78:
                    aa:ba:87:8c:41:ad:f9:4f:8e:72:8d:6a:be:7d:42:
                    49:7f:29:f3:16:b5:80:ca:f2:f9:e5:8e:82:ff:9f:
                    d5:a1:54:70:45:93:4e:82:d5:3d:68:bf:6e:01:14:
                    93:c5:71:29:d4:ad:1e:94:24:7c:80:48:ee:d9:e6:
                    7b:a0:41:8d:38:c1:e8:36:70:16:b2:96:a2:5e:d4:
                    94:89:e0:0f:a0:e1:7a:f8:8f:5c:3a:29:90:8a:bf:
                    df:6b:f2:97:d4:3c:1d:34:ab:8e:5a:b2:9d:6e:e1:
                    9f:79:6e:e0:5e:7a:66:d8:c5:b2:64:10:2f:07:03:
                    cc:15:5a:53:6c:df:99:66:7a:66:10:68:c9:d9:f3:
                    b6:ef:71:dc:67:0a:92:a4:99:e3:17:6f:f3:e3:21:
                    66:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3B:CD:C3:3D:C0:3A:94:90:CB:85:10:57:D7:45:72:98:7C:E6:97
            X509v3 Authority Key Identifier:
                keyid:32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:8c:7d:74:ed:a6:0f:db:67:e7:eb:44:43:ef:76:39:94:b9:
         f3:07:57:92:c3:c5:76:fd:7c:fe:9c:44:c2:b6:ae:e0:f1:47:
         3b:ce:47:d1:84:35:8d:61:bc:78:06:33:da:a1:00:7f:de:56:
         ad:ab:1d:af:77:7f:38:bb:8c:62:52:48:00:20:d8:c8:56:28:
         37:e9:80:b5:f7:e5:c6:27:42:e0:f7:80:d1:f4:99:f2:46:a0:
         ba:31:74:e1:cc:00:a6:d9:9d:ea:46:6f:24:85:eb:2e:8d:34:
         01:91:78:0f:54:99:5e:89:88:52:2b:79:c6:ee:5d:36:6b:81:
         57:37:76:b7:70:02:ad:96:0c:05:84:3b:68:e2:04:e0:7b:73:
         d3:c9:bf:3f:c1:92:d9:cf:2f:e2:4b:07:7c:66:ac:a1:23:04:
         50:70:d7:aa:5d:05:38:ef:40:d5:7f:ed:a0:4a:70:03:aa:13:
         23:dc:94:3d:41:e7:38:c5:e5:c5:ce:96:24:1c:de:5d:00:df:
         d5:f9:20:31:14:55:7c:0e:5e:52:11:be:ff:c6:4b:80:b4:b2:
         a7:75:77:ba:3a:0f:9c:f6:5c:c8:56:55:3b:94:9b:f3:52:01:
         96:fe:29:dc:52:6b:ee:5f:96:7e:b8:a5:19:48:9e:d2:09:45:
         05:5f:e4:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBPfHXp45JlQL0w4c8VxEeRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYTAzZmVkNWRjN2EwYzM0ZTRkODU3NzRmZjcwMDVkMzNl
NmVmMTMwHhcNMjQwNjI1MTMwMTE0WhcNMjQwNjI2MTMwMTE0WjAzMTEwLwYDVQQD
EyhjZTNiY2RjMzNkYzAzYTk0OTBjYjg1MTA1N2Q3NDU3Mjk4N2NlNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ELkk73W0Wa+nMvg+oQuYkZo568Q
8Xx1lzCUryaTJ3VV3+opO1OTpuR9eXrG+DP8mWxUZz21J7tFdAoWVA1RNnvh0r0S
yZJcTq2F+5Lk/H6KhgeFd6QwyxbllhFgL3aU/688ncHyoXiquoeMQa35T45yjWq+
fUJJfynzFrWAyvL55Y6C/5/VoVRwRZNOgtU9aL9uARSTxXEp1K0elCR8gEju2eZ7
oEGNOMHoNnAWspaiXtSUieAPoOF6+I9cOimQir/fa/KX1DwdNKuOWrKdbuGfeW7g
Xnpm2MWyZBAvBwPMFVpTbN+ZZnpmEGjJ2fO273HcZwqSpJnjF2/z4yFmowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM47zcM9wDqUkMuFEFfXRXKYfOaXMB8GA1UdIwQY
MBaAFDKgP+1dx6DDTk2Fd0/3AF0z5u8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xMjIxMjktMjIyNi00ZTk3LWIwYTct
MWFhNTAwYjk5NDhhLzEvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xMjIxMjktMjIyNi00ZTk3LWIwYTctMWFhNTAwYjk5NDhh
LzEvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYx9dO2m
D9tn5+tEQ+92OZS58wdXksPFdv18/pxEwrau4PFHO85H0YQ1jWG8eAYz2qEAf95W
rasdr3d/OLuMYlJIACDYyFYoN+mAtfflxidC4PeA0fSZ8kagujF04cwAptmd6kZv
JIXrLo00AZF4D1SZXomIUit5xu5dNmuBVzd2t3ACrZYMBYQ7aOIE4Htz08m/P8GS
2c8v4ksHfGasoSMEUHDXql0FOO9A1X/toEpwA6oTI9yUPUHnOMXlxc6WJBzeXQDf
1fkgMRRVfA5eUhG+/8ZLgLSyp3V3ujoPnPZcyFZVO5Sb81IBlv4p3FJr7l+Wfril
GUie0glFBV/kRA==
-----END CERTIFICATE-----
Generated at Tue Jun 25 23:53:50 2024 by rpki-client on console-ams.rpki-client.org