Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/4997de-7df7-4c6d-a54a-42b73ee46b9c/1/xR_beDCP331mGfVO0hwC5bULKQU.mft
File:                     xR_beDCP331mGfVO0hwC5bULKQU.mft (raw, json)
Hash identifier:          y4KcpdksSx97mD6KfdQRWc0L9i/SKzyCIDYpxtV3LZk=
Subject key identifier:   1A:87:37:EC:F3:D1:05:55:1E:59:76:5F:76:55:0E:77:80:D6:90:4F
Authority key identifier: C5:1F:DB:78:30:8F:DF:7D:66:19:F5:4E:D2:1C:02:E5:B5:0B:29:05
Certificate issuer:       /CN=c51fdb78308fdf7d6619f54ed21c02e5b50b2905
Certificate serial:       01906C73CABA5A82EB361F6B322E5C7A15D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xR_beDCP331mGfVO0hwC5bULKQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/4997de-7df7-4c6d-a54a-42b73ee46b9c/1/xR_beDCP331mGfVO0hwC5bULKQU.mft
Manifest number:          06F5
Signing time:             Mon 01 Jul 2024 04:00:46 +0000
Manifest this update:     Mon 01 Jul 2024 04:00:46 +0000
Manifest next update:     Tue 02 Jul 2024 04:00:46 +0000
Files and hashes:         1: _GyP3pl3Kx0IYgI3mjFYONBXRg4.roa (hash: eMp3UfI+DVVzbkXTM0ZVpVifyc/C+PIWu1G+xcA4WUc=)
                          2: s1a_dhH0HMHZyb7TFK0uVs9kOBI.roa (hash: 6uUzjVmviywJurlH5+n5Y5Uq4aQwbmf5jKw1sMIDHvc=)
                          3: xR_beDCP331mGfVO0hwC5bULKQU.crl (hash: cHlZt3rjDyNndk9u6TnvsdAYWuDU+SoNGT9F/3BnOr0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/4997de-7df7-4c6d-a54a-42b73ee46b9c/1/xR_beDCP331mGfVO0hwC5bULKQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/4997de-7df7-4c6d-a54a-42b73ee46b9c/1/xR_beDCP331mGfVO0hwC5bULKQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xR_beDCP331mGfVO0hwC5bULKQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6c:73:ca:ba:5a:82:eb:36:1f:6b:32:2e:5c:7a:15:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51fdb78308fdf7d6619f54ed21c02e5b50b2905
        Validity
            Not Before: Jul  1 04:00:46 2024 GMT
            Not After : Jul  2 04:00:46 2024 GMT
        Subject: CN=1a8737ecf3d105551e59765f76550e7780d6904f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:e2:18:b0:b2:32:e9:ca:82:80:6f:18:2b:
                    95:59:18:20:db:f6:1b:1d:eb:b2:37:29:b7:36:3d:
                    b1:e5:3c:20:f5:d5:0a:99:f4:b4:f6:66:21:93:a6:
                    1d:0f:7d:7d:57:e5:3a:f2:f2:6f:88:db:a8:36:a5:
                    c3:21:4e:e0:df:31:51:2a:61:3a:6f:e1:9d:60:e8:
                    e3:e3:59:cd:76:23:28:85:ec:e4:2a:78:c7:91:2e:
                    4a:6e:2c:0a:ad:14:73:b7:56:5f:ea:bf:e4:65:3d:
                    66:e2:06:ad:3c:2d:96:bb:4e:15:85:09:fe:4b:22:
                    97:ce:f4:47:bf:96:2d:67:28:fb:c9:a4:a3:8b:3d:
                    f8:f6:e1:6b:38:16:0d:33:6f:1e:89:b4:47:a0:d2:
                    5b:b6:c0:e5:ea:8a:de:b8:d6:06:e2:69:d5:b9:44:
                    9f:8e:c7:0e:d4:8f:a0:68:f3:6b:96:21:5c:2c:55:
                    05:b6:a4:ec:73:f1:15:61:78:fc:1f:a4:6d:da:af:
                    ae:10:4d:d4:20:b6:f5:4c:93:db:9a:3d:29:d3:88:
                    ee:ec:ad:4c:0a:20:6d:d2:ff:83:23:75:37:f0:ac:
                    53:db:10:09:48:fe:47:9c:aa:79:8a:8a:24:3f:de:
                    ff:1f:08:47:05:5a:44:7b:af:cb:06:7c:a5:d1:ee:
                    95:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:87:37:EC:F3:D1:05:55:1E:59:76:5F:76:55:0E:77:80:D6:90:4F
            X509v3 Authority Key Identifier:
                keyid:C5:1F:DB:78:30:8F:DF:7D:66:19:F5:4E:D2:1C:02:E5:B5:0B:29:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xR_beDCP331mGfVO0hwC5bULKQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/4997de-7df7-4c6d-a54a-42b73ee46b9c/1/xR_beDCP331mGfVO0hwC5bULKQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/4997de-7df7-4c6d-a54a-42b73ee46b9c/1/xR_beDCP331mGfVO0hwC5bULKQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:98:65:47:14:7f:b4:fa:20:34:89:6a:e8:31:a5:89:30:a1:
         75:33:cb:53:b9:81:7c:e7:2a:57:1e:bd:56:dd:59:9e:48:b9:
         48:fa:86:8d:a0:2f:35:a1:24:fc:c4:1e:80:5d:86:dc:39:57:
         dc:02:53:1a:26:3a:49:78:15:e7:8b:de:91:a7:52:1b:94:0f:
         cb:a7:70:80:16:d1:df:0f:a1:06:30:bc:72:5b:ea:77:1e:22:
         47:f2:cc:08:60:85:99:e5:b9:52:eb:8c:d9:17:31:6b:fc:01:
         f2:98:1d:1b:09:c7:dd:81:44:95:cf:89:9f:3b:c6:4e:4c:e2:
         78:e0:f5:2d:0c:b4:68:d6:5a:b7:02:35:c5:27:d5:80:54:fd:
         1a:a6:59:57:74:9d:86:0a:3d:9c:14:00:39:b3:68:00:9d:70:
         f0:37:5d:43:6e:fb:69:bb:69:37:a1:41:b1:28:64:dc:2d:9f:
         4e:cd:f5:45:f6:f4:31:0d:45:93:2e:58:9e:4a:84:0e:74:50:
         be:17:64:ff:ec:47:f7:fe:a6:3f:12:fa:93:98:51:4c:c2:8e:
         54:6d:d8:0a:f5:12:4b:84:22:c6:3f:a4:cc:07:29:61:0b:27:
         3e:be:6c:fe:91:fe:25:78:44:97:63:6a:aa:f2:1b:5d:9c:ca:
         66:e9:6d:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBsc8q6WoLrNh9rMi5cehXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MWZkYjc4MzA4ZmRmN2Q2NjE5ZjU0ZWQyMWMwMmU1YjUw
YjI5MDUwHhcNMjQwNzAxMDQwMDQ2WhcNMjQwNzAyMDQwMDQ2WjAzMTEwLwYDVQQD
EygxYTg3MzdlY2YzZDEwNTU1MWU1OTc2NWY3NjU1MGU3NzgwZDY5MDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsniGLCyMunKgoBvGCuVWRgg2/Yb
HeuyNym3Nj2x5Twg9dUKmfS09mYhk6YdD319V+U68vJviNuoNqXDIU7g3zFRKmE6
b+GdYOjj41nNdiMohezkKnjHkS5KbiwKrRRzt1Zf6r/kZT1m4gatPC2Wu04VhQn+
SyKXzvRHv5YtZyj7yaSjiz349uFrOBYNM28eibRHoNJbtsDl6oreuNYG4mnVuUSf
jscO1I+gaPNrliFcLFUFtqTsc/EVYXj8H6Rt2q+uEE3UILb1TJPbmj0p04ju7K1M
CiBt0v+DI3U38KxT2xAJSP5HnKp5iookP97/HwhHBVpEe6/LBnyl0e6V/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqHN+zz0QVVHll2X3ZVDneA1pBPMB8GA1UdIwQY
MBaAFMUf23gwj999Zhn1TtIcAuW1CykFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJfYmVEQ1AzMzFtR2ZWTzBod0M1YlVMS1FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80OTk3ZGUtN2RmNy00YzZkLWE1NGEt
NDJiNzNlZTQ2YjljLzEveFJfYmVEQ1AzMzFtR2ZWTzBod0M1YlVMS1FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80OTk3ZGUtN2RmNy00YzZkLWE1NGEtNDJiNzNlZTQ2Yjlj
LzEveFJfYmVEQ1AzMzFtR2ZWTzBod0M1YlVMS1FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZhlRxR/
tPogNIlq6DGliTChdTPLU7mBfOcqVx69Vt1Znki5SPqGjaAvNaEk/MQegF2G3DlX
3AJTGiY6SXgV54vekadSG5QPy6dwgBbR3w+hBjC8clvqdx4iR/LMCGCFmeW5UuuM
2Rcxa/wB8pgdGwnH3YFElc+JnzvGTkzieOD1LQy0aNZatwI1xSfVgFT9GqZZV3Sd
hgo9nBQAObNoAJ1w8DddQ277abtpN6FBsShk3C2fTs31Rfb0MQ1Fky5YnkqEDnRQ
vhdk/+xH9/6mPxL6k5hRTMKOVG3YCvUSS4Qixj+kzAcpYQsnPr5s/pH+JXhEl2Nq
qvIbXZzKZultFA==
-----END CERTIFICATE-----
Generated at Mon Jul 1 08:00:47 2024 by rpki-client on console.sobornost.net