Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
File:                     l-rHUzef0i_2UVAz9RPcKCRjrS0.mft (raw, json)
Hash identifier:          89ncVlk/3VUdaUEB17OYxpV/64STjF9Y3wl4SlwNYLs=
Subject key identifier:   09:CF:EA:C3:3C:04:50:BC:DF:EC:CB:23:3F:91:0F:9C:73:ED:41:AC
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Certificate issuer:       /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial:       019060DDAC7E84D7A6C56EC99052A6007C32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
Manifest number:          06CA
Signing time:             Fri 28 Jun 2024 22:00:58 +0000
Manifest this update:     Fri 28 Jun 2024 22:00:58 +0000
Manifest next update:     Sat 29 Jun 2024 22:00:58 +0000
Files and hashes:         1: 17cVOKFfmwAIro_FC1Npp4dy3qE.roa (hash: r6P4GFMI7PqvEeSmFeQz/rQk0NsSHmm92e2FFsdFzHs=)
                          2: 8us9lNuzFZBx3E-2S3ti_3Cl4KQ.roa (hash: yGBp/f3DHOkOHYSYWiWUzrerW2qguA7fijUUFh4h9Pw=)
                          3: l-rHUzef0i_2UVAz9RPcKCRjrS0.crl (hash: oYewGHJ/mLjEJ9DsbDX+ix5kXTUMEydyt+3SNU08OXg=)
                          4: p2cmi4-szwuBRjunNqjqqW6Qbyw.roa (hash: b1A0/L2pixE5GgQ6nN5uzQLS9wTBw/uhAXwmlC42Gzs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Jun 2024 17:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:60:dd:ac:7e:84:d7:a6:c5:6e:c9:90:52:a6:00:7c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
        Validity
            Not Before: Jun 28 22:00:58 2024 GMT
            Not After : Jun 29 22:00:58 2024 GMT
        Subject: CN=09cfeac33c0450bcdfeccb233f910f9c73ed41ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:91:b0:24:00:6e:f2:ff:84:b0:cb:51:47:d3:
                    e5:e8:68:4f:d9:d7:93:95:10:7c:71:6a:4a:f3:f8:
                    56:01:df:49:b2:a8:9c:33:bd:0f:19:3f:da:f4:8c:
                    45:cb:16:b1:d5:87:f2:0a:96:b2:1d:39:57:50:36:
                    e4:48:b2:a4:94:64:9f:69:f7:ee:44:3b:e8:9e:f0:
                    8e:ea:61:6e:0d:59:83:ba:84:24:2e:2b:c1:9c:8c:
                    9e:92:9f:90:70:11:3d:67:41:08:92:f2:14:c1:40:
                    82:e3:ad:2c:2e:f6:2a:81:25:bf:f5:dd:96:d3:d3:
                    9d:26:db:3e:31:3f:32:fd:01:8f:ca:38:11:6e:44:
                    43:e1:46:7a:45:bc:b8:38:17:92:53:80:8f:65:9a:
                    53:0a:66:63:2b:4d:05:13:fb:06:fa:07:23:f5:92:
                    55:79:81:f7:a3:88:85:47:8f:9c:0e:6b:cb:27:8b:
                    11:c2:2e:4f:ac:56:48:e1:b8:8f:fb:13:1f:75:d0:
                    c5:f2:e1:5c:e0:28:ba:0d:52:0e:50:db:51:94:52:
                    01:1d:c3:17:76:ba:9d:f3:54:51:c5:34:ff:cd:6a:
                    fc:75:c6:0b:7f:bc:fe:0b:e2:20:ac:2e:4f:be:b8:
                    d6:b9:0b:0f:50:6a:8c:e7:fb:7e:f8:b1:e6:eb:3f:
                    4a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CF:EA:C3:3C:04:50:BC:DF:EC:CB:23:3F:91:0F:9C:73:ED:41:AC
            X509v3 Authority Key Identifier:
                keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:95:35:e9:02:b7:42:c2:d1:87:b7:9b:da:09:45:37:db:1f:
         12:57:39:e3:3a:b8:08:d8:38:6c:b9:ce:5e:8b:e9:f3:a6:53:
         b0:4d:61:93:1a:38:d8:56:ff:1f:3d:32:d5:3d:7d:b8:09:c9:
         5b:f6:55:c0:fa:3d:0f:73:82:d2:99:a0:f7:e5:d5:a0:a0:39:
         34:e5:68:90:a3:e0:99:03:e1:62:1b:db:04:4f:74:f5:e6:75:
         fd:1a:af:b4:1b:77:7b:45:91:d5:b8:24:b7:85:10:e1:14:52:
         2c:3b:c4:b8:ba:7f:06:92:8f:2d:a8:79:e5:00:7d:76:f8:27:
         34:99:23:37:a8:4a:20:e8:a4:84:3f:f7:03:5a:6f:b8:38:38:
         28:96:ea:bb:45:14:d7:1d:1d:84:bc:94:70:b1:0f:5b:6c:41:
         3b:7b:39:3a:42:42:ff:32:cb:09:7d:50:54:2b:ba:d3:d7:a0:
         8d:91:84:bd:63:66:bc:ca:b4:99:05:b1:65:a9:c0:9e:fc:96:
         31:8c:ea:19:b9:7e:42:27:32:48:a1:9b:16:77:43:ea:7c:00:
         b8:e2:a8:cf:63:ba:27:7c:0c:f6:0d:50:5b:b5:2c:ff:9e:da:
         af:5f:6d:e4:57:21:23:42:84:18:50:f7:f7:16:dc:6d:04:fc:
         84:80:3e:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBg3ax+hNemxW7JkFKmAHwyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWFjNzUzMzc5ZmQyMmZmNjUxNTAzM2Y1MTNkYzI4MjQ2
M2FkMmQwHhcNMjQwNjI4MjIwMDU4WhcNMjQwNjI5MjIwMDU4WjAzMTEwLwYDVQQD
EygwOWNmZWFjMzNjMDQ1MGJjZGZlY2NiMjMzZjkxMGY5YzczZWQ0MWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZGwJABu8v+EsMtRR9Pl6GhP2deT
lRB8cWpK8/hWAd9JsqicM70PGT/a9IxFyxax1YfyCpayHTlXUDbkSLKklGSfaffu
RDvonvCO6mFuDVmDuoQkLivBnIyekp+QcBE9Z0EIkvIUwUCC460sLvYqgSW/9d2W
09OdJts+MT8y/QGPyjgRbkRD4UZ6Rby4OBeSU4CPZZpTCmZjK00FE/sG+gcj9ZJV
eYH3o4iFR4+cDmvLJ4sRwi5PrFZI4biP+xMfddDF8uFc4Ci6DVIOUNtRlFIBHcMX
drqd81RRxTT/zWr8dcYLf7z+C+IgrC5PvrjWuQsPUGqM5/t++LHm6z9K2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnP6sM8BFC83+zLIz+RD5xz7UGsMB8GA1UdIwQY
MBaAFJfqx1M3n9Iv9lFQM/UT3CgkY60tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80YjA4YWYtNjdkYi00MmRhLWEwOTQt
ZWY1OTBjMWM4ZTEyLzEvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80YjA4YWYtNjdkYi00MmRhLWEwOTQtZWY1OTBjMWM4ZTEy
LzEvbC1ySFV6ZWYwaV8yVVZBejlSUGNLQ1JqclMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJU16QK3
QsLRh7eb2glFN9sfElc54zq4CNg4bLnOXovp86ZTsE1hkxo42Fb/Hz0y1T19uAnJ
W/ZVwPo9D3OC0pmg9+XVoKA5NOVokKPgmQPhYhvbBE909eZ1/RqvtBt3e0WR1bgk
t4UQ4RRSLDvEuLp/BpKPLah55QB9dvgnNJkjN6hKIOikhD/3A1pvuDg4KJbqu0UU
1x0dhLyUcLEPW2xBO3s5OkJC/zLLCX1QVCu609egjZGEvWNmvMq0mQWxZanAnvyW
MYzqGbl+QicySKGbFndD6nwAuOKoz2O6J3wM9g1QW7Us/57ar19t5FchI0KEGFD3
9xbcbQT8hIA+wQ==
-----END CERTIFICATE-----
Generated at Sat Jun 29 01:44:18 2024 by rpki-client on console-fra.rpki-client.org