Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File:                     70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier:          M2oheD+wSCd+iFakyp+UhqcH6LXz/hONTGLBnW9S6mM=
Subject key identifier:   A6:C7:53:A7:7B:BD:27:57:9B:30:27:69:9B:10:A5:32:80:44:6D:A4
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer:       /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial:       01901F34D384494860587C52723972A35132
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number:          11C4
Signing time:             Sun 16 Jun 2024 04:01:13 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:13 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:13 +0000
Files and hashes:         1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: zdZQtpIQhmd5PlRa0tDF43G/oJlHQReAQizOwZ+1U7M=)
                          2: ackA7jXS5Z9Pz-5Zxgsfx61Ke58.roa (hash: ixJTggagT/nnyOWjEHOLzbGwziW1jOLS5sFJwMifay8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:d3:84:49:48:60:58:7c:52:72:39:72:a3:51:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
        Validity
            Not Before: Jun 16 04:01:13 2024 GMT
            Not After : Jun 17 04:01:13 2024 GMT
        Subject: CN=a6c753a77bbd27579b3027699b10a53280446da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:10:f9:4d:cd:a5:31:00:2c:4e:f0:ad:b0:c7:
                    f9:65:14:c2:1a:f6:29:fb:c6:96:b8:e1:79:c1:65:
                    ca:b8:07:57:51:6f:0f:58:da:c4:66:92:5d:a6:f4:
                    8c:d8:0f:9d:01:fb:9b:a3:84:ab:f2:d6:6e:fc:fe:
                    d0:de:6e:d4:ae:f0:04:21:a7:89:ae:f8:24:be:ff:
                    07:7b:28:a6:ae:49:63:94:52:1c:20:9d:d8:68:e8:
                    e4:64:c8:02:9d:31:63:6d:03:b7:a2:34:e8:77:78:
                    e9:c8:b2:9b:f1:42:0a:f4:b8:4c:e9:1d:ce:7f:53:
                    04:e3:9d:a3:bf:37:a4:73:b9:9d:22:67:02:85:90:
                    40:63:28:b0:56:24:58:ca:00:37:8e:26:9b:b3:4e:
                    b8:a9:7a:a8:00:81:bc:43:a2:d9:38:2f:ce:29:fe:
                    c3:83:8c:ac:aa:f5:5b:6d:f1:0f:a2:83:02:3b:ab:
                    d6:ec:3c:7c:aa:a6:03:f5:bb:f9:36:26:01:18:dc:
                    7e:cb:40:0c:37:e9:43:33:3e:9e:d6:ff:c8:43:a2:
                    98:47:0b:a0:86:c0:3f:a0:aa:5d:eb:61:2f:52:14:
                    c8:31:ae:df:2e:72:66:b8:3e:3a:04:2e:51:37:45:
                    c5:51:93:8d:5c:53:fb:eb:3e:e2:e4:e9:b5:9f:b6:
                    14:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C7:53:A7:7B:BD:27:57:9B:30:27:69:9B:10:A5:32:80:44:6D:A4
            X509v3 Authority Key Identifier:
                keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9a:07:5f:27:e7:95:8f:6b:af:58:8c:a6:3b:99:b3:b5:85:
         6e:6b:03:8a:e7:46:79:fe:08:00:33:64:9a:6b:29:ed:dd:60:
         0c:a0:de:f4:04:b1:7c:76:d8:4a:3c:d4:bd:ac:bc:d3:7d:ea:
         13:5b:98:87:d0:9c:40:85:fc:23:40:98:25:4d:3c:99:5e:27:
         3a:8a:b7:05:36:02:85:ae:ab:3b:e8:3d:d6:a4:ff:38:95:f7:
         fa:6c:1f:23:95:bc:59:66:00:d0:45:57:73:2e:83:81:a9:7c:
         96:b3:05:62:5d:fc:95:08:3c:c8:6d:21:56:78:1d:06:70:f9:
         a9:b3:69:63:82:6b:df:23:49:1f:9b:0e:41:d9:84:bb:97:cf:
         a5:77:5a:ff:14:8d:85:cb:86:cc:ff:c3:de:2a:6d:3a:9b:46:
         55:e2:95:ee:86:4f:7e:35:6a:ee:75:bf:a7:63:65:71:d8:5f:
         13:15:76:4a:78:27:04:36:87:fe:ba:ce:f4:0c:13:11:50:3b:
         13:00:99:12:25:2b:11:21:56:76:58:51:00:5a:87:56:72:6d:
         22:86:62:e8:5c:ba:cd:5a:71:cb:a0:9c:95:90:2f:36:c9:7e:
         9e:6b:33:e1:32:44:51:78:97:76:1a:3b:cf:6e:a7:27:3f:de:
         82:39:e2:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAfNNOESUhgWHxScjlyo1EyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDc4MDIxZjcyYTIxYjc3MTQyYTQ0ZDgxNWRkZTllZjI2
ODRjYmMwHhcNMjQwNjE2MDQwMTEzWhcNMjQwNjE3MDQwMTEzWjAzMTEwLwYDVQQD
EyhhNmM3NTNhNzdiYmQyNzU3OWIzMDI3Njk5YjEwYTUzMjgwNDQ2ZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhD5Tc2lMQAsTvCtsMf5ZRTCGvYp
+8aWuOF5wWXKuAdXUW8PWNrEZpJdpvSM2A+dAfubo4Sr8tZu/P7Q3m7UrvAEIaeJ
rvgkvv8HeyimrkljlFIcIJ3YaOjkZMgCnTFjbQO3ojTod3jpyLKb8UIK9LhM6R3O
f1ME452jvzekc7mdImcChZBAYyiwViRYygA3jiabs064qXqoAIG8Q6LZOC/OKf7D
g4ysqvVbbfEPooMCO6vW7Dx8qqYD9bv5NiYBGNx+y0AMN+lDMz6e1v/IQ6KYRwug
hsA/oKpd62EvUhTIMa7fLnJmuD46BC5RN0XFUZONXFP76z7i5Om1n7YUiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbHU6d7vSdXmzAnaZsQpTKARG2kMB8GA1UdIwQY
MBaAFO9HgCH3KiG3cUKkTYFd3p7yaEy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEt
MzQ0MzQ2NGI5MjA5LzEvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEtMzQ0MzQ2NGI5MjA5
LzEvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZoHXyfn
lY9rr1iMpjuZs7WFbmsDiudGef4IADNkmmsp7d1gDKDe9ASxfHbYSjzUvay8033q
E1uYh9CcQIX8I0CYJU08mV4nOoq3BTYCha6rO+g91qT/OJX3+mwfI5W8WWYA0EVX
cy6Dgal8lrMFYl38lQg8yG0hVngdBnD5qbNpY4Jr3yNJH5sOQdmEu5fPpXda/xSN
hcuGzP/D3iptOptGVeKV7oZPfjVq7nW/p2NlcdhfExV2SngnBDaH/rrO9AwTEVA7
EwCZEiUrESFWdlhRAFqHVnJtIoZi6Fy6zVpxy6CclZAvNsl+nmsz4TJEUXiXdho7
z26nJz/egjniZg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:03 2024 by rpki-client on console-fra.rpki-client.org