Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File:                     qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier:          clRGSbdWVlyLddktvZy/HQBlA70bK46LuBvaHnmr5os=
Subject key identifier:   3E:50:06:56:15:BF:89:EE:9D:69:82:C4:E1:47:42:FE:EB:77:9D:40
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer:       /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial:       01903A3E019AA13332DAD629E7F458F38619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number:          11D3
Signing time:             Fri 21 Jun 2024 10:01:00 +0000
Manifest this update:     Fri 21 Jun 2024 10:01:00 +0000
Manifest next update:     Sat 22 Jun 2024 10:01:00 +0000
Files and hashes:         1: hvfevQextqnhtcXlfvezgrI9TM8.roa (hash: 1/zJYsn2r6w56sX8pYNz69jHYCUxlet3pIvRBhZdqNA=)
                          2: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: r89fKFswm7+le6pIw/jdF7WxfsacEW+gvUJNq9nef+0=)
                          3: sQNDcHW13J70rqzSh2ETUsIeDlg.roa (hash: m89L5xju804VLcf4HxXm5UNeOnrLAu9bigPb+VdTLQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:3e:01:9a:a1:33:32:da:d6:29:e7:f4:58:f3:86:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
        Validity
            Not Before: Jun 21 10:01:00 2024 GMT
            Not After : Jun 22 10:01:00 2024 GMT
        Subject: CN=3e50065615bf89ee9d6982c4e14742feeb779d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:be:ce:b8:18:fb:70:d4:c9:00:10:fb:f5:15:
                    c2:52:e0:ba:78:e9:3f:9d:7d:1b:0d:c5:f2:ea:ae:
                    25:fb:aa:ec:b3:30:23:1d:81:01:f1:37:55:75:a4:
                    28:ea:b1:15:94:32:53:f5:f3:c6:cf:6e:57:21:dc:
                    df:2c:73:e6:6b:e5:0b:2d:46:0a:75:d0:68:72:f7:
                    2c:d6:7a:2c:95:f5:9a:eb:7a:58:2c:e0:0e:6d:c7:
                    53:fc:c4:d3:c2:08:f1:f9:f4:d6:7a:32:fe:63:ef:
                    a3:59:18:17:d6:29:42:d2:c6:b1:f3:6a:a2:10:e9:
                    ba:78:0c:b8:6c:8a:41:8c:11:71:b2:37:ef:de:d9:
                    db:ac:fd:9c:4a:21:4f:2e:21:fd:13:c6:30:61:21:
                    0c:04:7b:38:0e:b1:16:9a:77:d9:7b:b9:ee:72:3f:
                    77:30:f7:e3:85:f2:08:c6:cc:7d:eb:69:26:0e:19:
                    97:84:71:34:1d:b4:b8:a9:96:de:9f:61:7c:03:22:
                    66:f0:e2:30:ef:de:e8:91:e2:7a:6a:f5:0d:43:72:
                    80:c5:0e:5b:47:af:79:25:b7:6f:79:97:10:4d:0f:
                    89:84:9b:75:d4:3d:fe:3c:0d:52:d7:84:a2:87:30:
                    42:0c:ea:d9:2d:32:3f:b2:fa:ad:c4:d3:cc:f8:7e:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:50:06:56:15:BF:89:EE:9D:69:82:C4:E1:47:42:FE:EB:77:9D:40
            X509v3 Authority Key Identifier:
                keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:99:7c:a2:49:74:51:9c:5d:9c:d7:cc:47:3d:b6:ee:ea:56:
         c5:74:12:b7:03:e1:87:8a:aa:ff:3f:9e:df:7d:56:ee:34:ed:
         b6:20:cd:18:9a:46:08:df:28:ab:dc:55:27:db:21:f9:18:30:
         51:04:3e:ca:63:e4:40:b4:6f:04:84:c8:3b:84:37:7d:d8:9c:
         e7:7f:46:32:08:f0:b7:aa:20:a1:70:5f:c3:96:5c:f6:07:d3:
         6f:ce:03:61:e1:8b:6f:e6:20:5d:8a:d7:b8:65:0a:0c:8b:cb:
         af:a6:84:3e:7e:44:a5:13:4d:65:a4:05:fc:6d:62:55:eb:cb:
         b5:3d:2a:62:92:53:96:11:da:72:0f:41:f9:f6:77:be:59:ae:
         71:21:8a:46:65:7f:96:38:21:59:fc:23:37:bf:70:5c:45:5b:
         93:70:d1:f4:19:15:27:ca:c5:ed:9a:46:4f:9d:7c:79:5b:23:
         f6:14:c1:18:53:81:73:0c:7f:53:db:34:97:dc:1c:0c:d4:5d:
         cc:e6:1b:04:28:24:e0:e0:34:cb:73:3c:cd:28:db:e9:6d:c7:
         1e:ce:c0:13:fb:23:c1:62:2a:9a:09:8b:24:79:30:ff:f2:6a:
         32:df:39:00:f0:20:45:3f:96:11:02:40:e4:e2:78:40:55:80:
         46:f4:93:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA6PgGaoTMy2tYp5/RY84YZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzVmOTA3ZWM3ZGJmOWM2NWI4MTVhYTNkNzIwMmI2ZGZh
ZTMxNDgwHhcNMjQwNjIxMTAwMTAwWhcNMjQwNjIyMTAwMTAwWjAzMTEwLwYDVQQD
EygzZTUwMDY1NjE1YmY4OWVlOWQ2OTgyYzRlMTQ3NDJmZWViNzc5ZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL7OuBj7cNTJABD79RXCUuC6eOk/
nX0bDcXy6q4l+6rsszAjHYEB8TdVdaQo6rEVlDJT9fPGz25XIdzfLHPma+ULLUYK
ddBocvcs1noslfWa63pYLOAObcdT/MTTwgjx+fTWejL+Y++jWRgX1ilC0sax82qi
EOm6eAy4bIpBjBFxsjfv3tnbrP2cSiFPLiH9E8YwYSEMBHs4DrEWmnfZe7nucj93
MPfjhfIIxsx962kmDhmXhHE0HbS4qZben2F8AyJm8OIw797okeJ6avUNQ3KAxQ5b
R695JbdveZcQTQ+JhJt11D3+PA1S14SihzBCDOrZLTI/svqtxNPM+H5kvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5QBlYVv4nunWmCxOFHQv7rd51AMB8GA1UdIwQY
MBaAFKo1+Qfsfb+cZbgVqj1yArbfrjFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMt
YjZmMWNmYWE2OTg1LzEvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMtYjZmMWNmYWE2OTg1
LzEvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJl8okl0
UZxdnNfMRz227upWxXQStwPhh4qq/z+e331W7jTttiDNGJpGCN8oq9xVJ9sh+Rgw
UQQ+ymPkQLRvBITIO4Q3fdic539GMgjwt6ogoXBfw5Zc9gfTb84DYeGLb+YgXYrX
uGUKDIvLr6aEPn5EpRNNZaQF/G1iVevLtT0qYpJTlhHacg9B+fZ3vlmucSGKRmV/
ljghWfwjN79wXEVbk3DR9BkVJ8rF7ZpGT518eVsj9hTBGFOBcwx/U9s0l9wcDNRd
zOYbBCgk4OA0y3M8zSjb6W3HHs7AE/sjwWIqmgmLJHkw//JqMt85APAgRT+WEQJA
5OJ4QFWARvSTpw==
-----END CERTIFICATE-----
Generated at Fri Jun 21 17:56:51 2024 by rpki-client on console-ams.rpki-client.org