Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
File:                     CEIhaO2oQjBU2C6wGMOD4tvor98.mft (raw, json)
Hash identifier:          QPb3LmrnrQANbZFkXh4VLkOTDjDim3/Ue3xSBOWYcog=
Subject key identifier:   11:D1:5A:9C:53:B9:02:6E:BD:50:E3:AC:FC:40:E8:FB:A3:62:1D:EC
Authority key identifier: 08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
Certificate issuer:       /CN=08422168eda8423054d82eb018c383e2dbe8afdf
Certificate serial:       01901E58F8B38D45D79FA3AB3BB85FB1639F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
Manifest number:          0EEF
Signing time:             Sun 16 Jun 2024 00:01:05 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:05 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:05 +0000
Files and hashes:         1: CEIhaO2oQjBU2C6wGMOD4tvor98.crl (hash: l0znmIQxG80qI4Tv5bwIoY9SltA3h+2K7EuaMszIBsc=)
                          2: Yn6dSZQ8Zouvxwjl_dCufmvVWpY.roa (hash: 9ozLp5nWMw+TjKqB1ttswlRDo14n6u/So7JgPK4+YK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:f8:b3:8d:45:d7:9f:a3:ab:3b:b8:5f:b1:63:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08422168eda8423054d82eb018c383e2dbe8afdf
        Validity
            Not Before: Jun 16 00:01:05 2024 GMT
            Not After : Jun 17 00:01:05 2024 GMT
        Subject: CN=11d15a9c53b9026ebd50e3acfc40e8fba3621dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7e:35:6b:73:74:a4:a6:e8:7e:c7:86:fb:f3:
                    3f:a4:29:8e:65:45:7d:cb:d0:fd:63:5c:d1:53:81:
                    6f:9e:c1:1f:25:f3:b2:79:f0:94:3e:90:ac:7d:a4:
                    57:ad:d7:44:49:d4:e7:b3:bd:87:2a:b5:0d:78:4a:
                    85:da:cb:e8:50:cd:c3:e2:75:27:c8:96:87:ce:d2:
                    b0:d8:e8:25:f9:ef:1e:e2:c2:57:ab:a0:e0:9f:bd:
                    5f:6c:8a:bd:94:ca:35:a8:1a:84:19:1d:2f:a8:2e:
                    74:ae:11:16:d9:79:b5:4a:1d:ae:b5:7f:84:0f:c0:
                    df:9e:19:ec:53:40:dc:e1:38:7b:49:68:12:c7:3f:
                    25:11:44:25:32:39:04:7a:b0:c3:dd:44:78:8d:be:
                    b5:73:54:b8:37:72:7e:76:b9:18:1f:9b:1b:2d:a1:
                    2f:8b:5e:b9:ad:cb:7e:93:78:c7:08:2a:1b:cd:1c:
                    b7:57:b4:1f:53:ea:dc:2b:d2:d5:88:52:cc:89:37:
                    ae:0f:f5:d7:46:a7:3f:aa:7e:b4:a1:4f:a3:57:cf:
                    29:06:3a:e1:79:01:d1:d0:c6:fd:bb:da:1a:60:8a:
                    79:a4:06:e5:3b:d1:43:a3:13:23:a0:47:58:95:44:
                    de:25:c9:c5:0f:2f:12:8d:1a:2e:84:74:27:7f:4e:
                    ed:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D1:5A:9C:53:B9:02:6E:BD:50:E3:AC:FC:40:E8:FB:A3:62:1D:EC
            X509v3 Authority Key Identifier:
                keyid:08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:84:d6:d8:aa:a4:68:29:b0:e6:b1:78:e9:06:3f:5b:f3:a1:
         49:5f:ff:36:fc:ec:c8:5a:e3:01:1f:43:7e:29:a2:a3:14:4a:
         64:d8:7a:3e:cd:de:d9:88:be:9a:5f:70:c6:f9:d7:eb:c9:66:
         2d:0c:70:c0:dc:31:00:ec:24:81:db:b6:41:c5:38:5f:6e:b4:
         7c:27:75:c6:8d:ef:30:64:b9:25:be:95:93:fa:c1:c2:5f:42:
         3c:7a:eb:43:fe:03:03:c0:c6:f0:62:1a:b1:50:7a:25:65:4c:
         87:30:d2:5c:17:84:d4:51:e1:0d:b3:9f:32:18:8c:9b:b4:25:
         02:69:d1:d4:e8:d7:bf:d7:11:c8:c6:2d:c3:58:c2:d1:d8:3c:
         c1:a2:24:81:f7:9c:d4:aa:6b:4c:cd:7b:07:69:d3:2e:31:9c:
         de:3d:11:49:6b:0b:60:2c:d5:c5:bd:38:02:39:f3:11:1e:f6:
         23:23:14:73:bc:24:20:db:5c:7b:0d:f5:50:4c:d6:78:8f:eb:
         c9:e4:3f:e2:34:84:13:36:24:10:d3:34:ca:0a:01:d5:91:03:
         19:c4:f2:35:ff:fe:7e:a5:73:93:9a:d3:6d:54:78:c7:8a:12:
         b5:ff:d1:c2:f6:83:ec:3e:90:de:74:06:4d:93:cc:6e:b1:7a:
         ef:4e:86:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWPizjUXXn6OrO7hfsWOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDIyMTY4ZWRhODQyMzA1NGQ4MmViMDE4YzM4M2UyZGJl
OGFmZGYwHhcNMjQwNjE2MDAwMTA1WhcNMjQwNjE3MDAwMTA1WjAzMTEwLwYDVQQD
EygxMWQxNWE5YzUzYjkwMjZlYmQ1MGUzYWNmYzQwZThmYmEzNjIxZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH41a3N0pKbofseG+/M/pCmOZUV9
y9D9Y1zRU4FvnsEfJfOyefCUPpCsfaRXrddESdTns72HKrUNeEqF2svoUM3D4nUn
yJaHztKw2Ogl+e8e4sJXq6Dgn71fbIq9lMo1qBqEGR0vqC50rhEW2Xm1Sh2utX+E
D8DfnhnsU0Dc4Th7SWgSxz8lEUQlMjkEerDD3UR4jb61c1S4N3J+drkYH5sbLaEv
i165rct+k3jHCCobzRy3V7QfU+rcK9LViFLMiTeuD/XXRqc/qn60oU+jV88pBjrh
eQHR0Mb9u9oaYIp5pAblO9FDoxMjoEdYlUTeJcnFDy8SjRouhHQnf07t0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHRWpxTuQJuvVDjrPxA6PujYh3sMB8GA1UdIwQY
MBaAFAhCIWjtqEIwVNgusBjDg+Lb6K/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85NjBhMmItMzM3ZC00ZDAyLWJhODEt
NmUxOWY2NzlhNjIzLzEvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS85NjBhMmItMzM3ZC00ZDAyLWJhODEtNmUxOWY2NzlhNjIz
LzEvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0YTW2Kqk
aCmw5rF46QY/W/OhSV//NvzsyFrjAR9DfimioxRKZNh6Ps3e2Yi+ml9wxvnX68lm
LQxwwNwxAOwkgdu2QcU4X260fCd1xo3vMGS5Jb6Vk/rBwl9CPHrrQ/4DA8DG8GIa
sVB6JWVMhzDSXBeE1FHhDbOfMhiMm7QlAmnR1OjXv9cRyMYtw1jC0dg8waIkgfec
1KprTM17B2nTLjGc3j0RSWsLYCzVxb04AjnzER72IyMUc7wkINtcew31UEzWeI/r
yeQ/4jSEEzYkENM0ygoB1ZEDGcTyNf/+fqVzk5rTbVR4x4oStf/RwvaD7D6Q3nQG
TZPMbrF6706GOA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:34:17 2024 by rpki-client on console-ams.rpki-client.org