Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
File:                     pLZmyw5UlhFut65nFNkFUwm6aaw.mft (raw, json)
Hash identifier:          JXm0XvqhNeaH4gVNIoax9fojy8SPET6Un7u1lFUMPuw=
Subject key identifier:   BE:9A:8E:A9:6C:4B:78:F8:54:1D:DA:9D:E7:2D:6B:25:36:A9:E8:30
Authority key identifier: A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
Certificate issuer:       /CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Certificate serial:       01906E98C2DD1701CE0100F75CBE74638C81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
Manifest number:          1148
Signing time:             Mon 01 Jul 2024 14:00:23 +0000
Manifest this update:     Mon 01 Jul 2024 14:00:23 +0000
Manifest next update:     Tue 02 Jul 2024 14:00:23 +0000
Files and hashes:         1: NHX-TO-xQKO8-S8d5CUBSXmGbxM.roa (hash: MLTWXVtq/q5N2A5FbfaBc6P6kLXE4BmtVRNPsUPYfFI=)
                          2: POV38TVPq65_RPR1C6tCf4h8M50.roa (hash: 5Pqq2wvyB87XhBXckCcFxToxh+E8v01ve55fR3IC3oU=)
                          3: pLZmyw5UlhFut65nFNkFUwm6aaw.crl (hash: nP5u4xNOJMuZJJqbpXrTHszPXt7zeE/yYqer/7eyqrQ=)
                          4: vYxm-iJMI2aOB_j2dD8sH0keWxA.roa (hash: DBTVK1HuaxhQaW5ymFCwYzNE57RBVkuUVzZUxYfc7g4=)
                          5: w9hQFO30SgC_zoE8OFshkEWATeA.roa (hash: yIzcrPMZtZc73u6qMZhZ/zFpL/v/lTyIdruKxHZA4D8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 13:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6e:98:c2:dd:17:01:ce:01:00:f7:5c:be:74:63:8c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
        Validity
            Not Before: Jul  1 14:00:23 2024 GMT
            Not After : Jul  2 14:00:23 2024 GMT
        Subject: CN=be9a8ea96c4b78f8541dda9de72d6b2536a9e830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:35:47:84:e1:f3:c6:e6:ed:dd:f4:ff:43:
                    d2:43:6a:ce:6b:78:14:2b:9d:ac:eb:1f:f5:02:a2:
                    4f:15:7e:30:f5:20:75:d0:f8:63:05:48:39:65:e7:
                    a9:77:e7:7a:96:d9:6f:4c:30:98:ae:af:d2:67:c7:
                    1e:ce:40:37:9a:04:03:3d:45:47:63:ea:7e:49:7f:
                    83:3e:a2:40:56:d4:31:61:b8:67:f1:d5:fb:72:3d:
                    8c:b8:0b:f0:b1:77:35:46:1b:13:0f:ef:8c:46:5a:
                    fc:25:ad:a7:4c:d1:8a:6a:d2:7a:28:03:88:25:a2:
                    a6:b3:2a:e9:43:eb:00:e5:b5:5b:84:5d:f2:2f:85:
                    15:e5:ec:65:dd:69:27:56:ef:8f:18:c5:e9:f7:a5:
                    86:b8:bd:cc:dc:62:4c:9f:92:72:d8:2f:78:20:b0:
                    68:77:c4:a3:ac:b4:34:1b:7c:32:a0:93:f3:3e:5d:
                    e4:f3:8f:07:73:bc:1c:f6:af:7e:c4:87:95:23:54:
                    de:9e:b3:b5:9a:f4:43:4d:67:91:69:52:2d:b7:db:
                    f7:92:29:6a:e6:d3:48:3d:6a:50:8b:af:8e:65:6c:
                    8c:38:27:06:dc:84:9f:b5:6b:56:81:7d:6d:90:0b:
                    8c:8f:5b:61:1b:4b:82:8f:20:0e:96:63:0b:02:c6:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9A:8E:A9:6C:4B:78:F8:54:1D:DA:9D:E7:2D:6B:25:36:A9:E8:30
            X509v3 Authority Key Identifier:
                keyid:A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:78:34:b0:d0:37:c5:98:bd:ee:48:8b:19:02:d3:8b:d3:21:
         12:62:ec:85:33:22:61:66:09:d3:49:52:80:9d:ec:e4:bf:f6:
         80:6e:08:7d:e9:20:64:0a:7d:e8:ae:32:cc:8d:28:15:c6:88:
         3b:ff:1d:bb:f8:f0:1b:d8:a1:e0:1c:0d:72:af:0b:ae:71:f1:
         29:d3:1b:1f:25:86:cc:e7:27:ba:a8:c3:52:60:6b:24:f3:15:
         15:b3:ab:be:df:0b:76:0a:15:c6:23:29:07:85:13:31:1d:48:
         63:d0:05:be:2b:fa:5f:0c:13:6f:e6:37:d3:06:51:81:28:97:
         07:e4:d4:5e:ba:a9:f6:81:4f:46:cf:b9:b4:c4:02:02:53:ae:
         11:cd:72:5a:ab:20:7d:0a:38:85:51:ae:9e:84:25:f7:08:26:
         04:ff:17:1c:18:fd:bc:45:6c:54:73:4b:0f:3c:6c:0e:da:52:
         3d:6c:c8:8e:00:a3:e6:97:b6:e8:7e:9c:15:ce:b6:96:fd:48:
         be:26:6f:2a:6f:2d:b2:39:99:d6:b0:f2:bf:df:82:e8:af:db:
         fd:06:83:1d:8e:bb:de:f0:94:cc:11:5a:82:34:70:0b:92:bf:
         08:f3:8e:8b:69:dc:49:d0:f7:28:bd:48:ed:49:d9:88:05:6f:
         6c:5c:c4:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBumMLdFwHOAQD3XL50Y4yBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjY2NmNiMGU1NDk2MTE2ZWI3YWU2NzE0ZDkwNTUzMDli
YTY5YWMwHhcNMjQwNzAxMTQwMDIzWhcNMjQwNzAyMTQwMDIzWjAzMTEwLwYDVQQD
EyhiZTlhOGVhOTZjNGI3OGY4NTQxZGRhOWRlNzJkNmIyNTM2YTllODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTI1R4Th88bm7d30/0PSQ2rOa3gU
K52s6x/1AqJPFX4w9SB10PhjBUg5Zeepd+d6ltlvTDCYrq/SZ8cezkA3mgQDPUVH
Y+p+SX+DPqJAVtQxYbhn8dX7cj2MuAvwsXc1RhsTD++MRlr8Ja2nTNGKatJ6KAOI
JaKmsyrpQ+sA5bVbhF3yL4UV5exl3WknVu+PGMXp96WGuL3M3GJMn5Jy2C94ILBo
d8SjrLQ0G3wyoJPzPl3k848Hc7wc9q9+xIeVI1TenrO1mvRDTWeRaVItt9v3kilq
5tNIPWpQi6+OZWyMOCcG3ISftWtWgX1tkAuMj1thG0uCjyAOlmMLAsaQZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6ajqlsS3j4VB3anectayU2qegwMB8GA1UdIwQY
MBaAFKS2ZssOVJYRbreuZxTZBVMJummsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExabXl3NVVsaEZ1dDY1bkZOa0ZVd202YWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mNzQyODAtY2M2ZC00MWMxLTg1OGEt
YjUzNjgzMzBiYWYyLzEvcExabXl3NVVsaEZ1dDY1bkZOa0ZVd202YWF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9mNzQyODAtY2M2ZC00MWMxLTg1OGEtYjUzNjgzMzBiYWYy
LzEvcExabXl3NVVsaEZ1dDY1bkZOa0ZVd202YWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMng0sNA3
xZi97kiLGQLTi9MhEmLshTMiYWYJ00lSgJ3s5L/2gG4IfekgZAp96K4yzI0oFcaI
O/8du/jwG9ih4BwNcq8LrnHxKdMbHyWGzOcnuqjDUmBrJPMVFbOrvt8LdgoVxiMp
B4UTMR1IY9AFviv6XwwTb+Y30wZRgSiXB+TUXrqp9oFPRs+5tMQCAlOuEc1yWqsg
fQo4hVGunoQl9wgmBP8XHBj9vEVsVHNLDzxsDtpSPWzIjgCj5pe26H6cFc62lv1I
viZvKm8tsjmZ1rDyv9+C6K/b/QaDHY673vCUzBFagjRwC5K/CPOOi2ncSdD3KL1I
7UnZiAVvbFzEdw==
-----END CERTIFICATE-----
Generated at Mon Jul 1 16:15:40 2024 by rpki-client on console-ams.rpki-client.org