Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
File:                     4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json)
Hash identifier:          kxQ2z9c1HFIStAWO+I599NEJurFz3RSp8mjxkJTlqvU=
Subject key identifier:   F4:2B:F2:17:C4:28:B0:D7:2A:B8:8C:2C:D1:67:8F:7F:19:99:36:A4
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Certificate issuer:       /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial:       01901DECDFEA501CA3B606D8FDB14E63C81B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
Manifest number:          01A6
Signing time:             Sat 15 Jun 2024 22:03:01 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:01 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:01 +0000
Files and hashes:         1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: ejRkz+lSuxts9Ml1dYbKJRK5r6NLHnSYmcvgYvzbmXM=)
                          2: DAyOCTi2f9EadheTVrjpT2dEFK0.roa (hash: sb+5+X+/RMjuyHF3yAJUpgNXhapRBw1IqbKB9X8Quu0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:df:ea:50:1c:a3:b6:06:d8:fd:b1:4e:63:c8:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
        Validity
            Not Before: Jun 15 22:03:01 2024 GMT
            Not After : Jun 16 22:03:01 2024 GMT
        Subject: CN=f42bf217c428b0d72ab88c2cd1678f7f199936a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bf:f4:3a:84:73:95:41:03:c4:3e:07:72:1c:
                    05:aa:87:e6:13:97:14:65:e8:39:c7:83:ef:99:16:
                    1d:fc:03:26:98:1f:48:c2:c9:8b:29:12:7e:ae:53:
                    02:70:53:05:85:c6:a7:21:16:60:fc:d2:6e:ef:27:
                    b7:02:05:68:e3:4f:ce:eb:41:7c:4b:16:6e:33:48:
                    02:0b:d6:8d:28:7e:6c:7e:3a:09:75:78:23:b3:7a:
                    84:d4:cc:dc:bb:2d:2a:59:dc:27:84:b9:63:96:a1:
                    f1:00:63:47:a8:ee:33:d1:b4:eb:d7:93:f1:2c:1f:
                    5f:df:d7:9c:05:79:a3:fe:16:37:b8:9a:2e:7c:95:
                    44:2c:60:61:44:98:16:fd:c6:bb:ac:13:7f:2b:cb:
                    6b:b0:86:df:31:87:a6:65:2f:88:f9:fe:86:68:5a:
                    09:23:08:23:65:82:57:32:6f:d5:59:3e:0c:ba:ae:
                    5c:58:72:2a:2c:67:8e:52:c9:76:00:ff:ac:20:17:
                    e9:cb:1a:4c:8d:fd:0b:cb:30:fb:81:42:b1:69:6a:
                    44:53:4a:1e:3a:fe:7d:40:74:9c:9f:fc:fc:b9:00:
                    6a:e5:b6:1f:89:6e:a3:5d:85:99:52:eb:36:8a:f7:
                    a7:e8:96:1f:da:7f:76:f8:03:6e:0a:e4:0c:b9:23:
                    10:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2B:F2:17:C4:28:B0:D7:2A:B8:8C:2C:D1:67:8F:7F:19:99:36:A4
            X509v3 Authority Key Identifier:
                keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:9b:85:32:25:b0:41:84:8d:5a:76:2c:df:05:a6:c0:53:70:
         93:68:b4:04:70:37:de:0d:02:13:0a:a7:8e:e9:52:5c:67:40:
         67:2c:7a:f6:ca:c1:fd:46:75:e9:43:a9:e6:32:b6:1e:9d:62:
         96:84:90:2a:f1:0b:9f:9b:68:2d:d6:28:a2:28:32:43:c9:42:
         d2:c6:dc:ea:61:98:69:14:c1:24:0b:0b:a3:b2:17:de:95:cd:
         2a:c0:95:ee:36:fc:4c:fb:8e:03:19:76:44:46:0a:75:8c:1a:
         de:47:5a:a0:a4:4f:c1:ca:9d:c7:62:d6:02:83:82:bd:ec:47:
         5c:59:64:b5:84:c7:71:50:74:5f:02:e5:93:0a:30:18:22:d9:
         ce:c2:a9:52:66:5c:8f:56:d6:73:4f:a5:e5:08:39:b7:01:d9:
         65:f1:dc:20:e4:12:96:98:c5:e0:7f:a4:ed:0c:b3:e8:79:e6:
         98:8b:33:b3:fa:05:24:c8:a5:f2:2a:fd:e9:b7:41:84:52:48:
         0a:f3:65:20:92:08:4c:9e:62:89:f0:5c:9a:b1:da:7b:a0:3f:
         48:c2:04:e0:62:5f:dc:09:f0:d5:2f:34:93:ba:d2:fb:d5:6d:
         6a:48:bc:48:aa:39:99:a0:ff:55:93:21:23:da:76:6a:16:46:
         5a:20:5c:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7N/qUByjtgbY/bFOY8gbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWYzNjU2YzZlZDlhM2Y5YTQyYzY3OGE3OGEyZTM3NGY4
ZTU3ZDMwHhcNMjQwNjE1MjIwMzAxWhcNMjQwNjE2MjIwMzAxWjAzMTEwLwYDVQQD
EyhmNDJiZjIxN2M0MjhiMGQ3MmFiODhjMmNkMTY3OGY3ZjE5OTkzNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37/0OoRzlUEDxD4HchwFqofmE5cU
Zeg5x4PvmRYd/AMmmB9IwsmLKRJ+rlMCcFMFhcanIRZg/NJu7ye3AgVo40/O60F8
SxZuM0gCC9aNKH5sfjoJdXgjs3qE1Mzcuy0qWdwnhLljlqHxAGNHqO4z0bTr15Px
LB9f39ecBXmj/hY3uJoufJVELGBhRJgW/ca7rBN/K8trsIbfMYemZS+I+f6GaFoJ
IwgjZYJXMm/VWT4Muq5cWHIqLGeOUsl2AP+sIBfpyxpMjf0LyzD7gUKxaWpEU0oe
Ov59QHScn/z8uQBq5bYfiW6jXYWZUus2iven6JYf2n92+ANuCuQMuSMQgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQr8hfEKLDXKriMLNFnj38ZmTakMB8GA1UdIwQY
MBaAFOMfNlbG7Zo/mkLGeKeKLjdPjlfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wMmY4YTEtMzM4My00ZDIxLWFhMjUt
ZTczM2MyNjJhMzgyLzEvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8wMmY4YTEtMzM4My00ZDIxLWFhMjUtZTczM2MyNjJhMzgy
LzEvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpuFMiWw
QYSNWnYs3wWmwFNwk2i0BHA33g0CEwqnjulSXGdAZyx69srB/UZ16UOp5jK2Hp1i
loSQKvELn5toLdYooigyQ8lC0sbc6mGYaRTBJAsLo7IX3pXNKsCV7jb8TPuOAxl2
REYKdYwa3kdaoKRPwcqdx2LWAoOCvexHXFlktYTHcVB0XwLlkwowGCLZzsKpUmZc
j1bWc0+l5Qg5twHZZfHcIOQSlpjF4H+k7Qyz6HnmmIszs/oFJMil8ir96bdBhFJI
CvNlIJIITJ5iifBcmrHae6A/SMIE4GJf3Anw1S80k7rS+9Vtaki8SKo5maD/VZMh
I9p2ahZGWiBcsQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:48:02 2024 by rpki-client on console-fra.rpki-client.org