Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
File:                     9lFtfyjNvos_VddTcqrU07EL4J8.mft (raw, json)
Hash identifier:          pOP/7dclCXhi/5NMORz/dUl/jPON1vKQBopLG6vrAZE=
Subject key identifier:   0B:0A:EA:8C:50:B7:01:E2:28:54:76:6E:C4:B2:DC:5A:F5:C3:19:CF
Authority key identifier: F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F
Certificate issuer:       /CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
Certificate serial:       01901CA11909A92C929392C6312224782F7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
Manifest number:          04BF
Signing time:             Sat 15 Jun 2024 16:00:38 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:38 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:38 +0000
Files and hashes:         1: 9lFtfyjNvos_VddTcqrU07EL4J8.crl (hash: vYUgGVz5wBDL4cv60CJPoEg4/tamhnDHmvWRZYESMh0=)
                          2: L_jbXJY_Ef1T0LlgFaHcsGkt6Go.roa (hash: 3twhBBWpizNts4ScIQkW6WxXkhj3TFkg6bidOHxk2QM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:19:09:a9:2c:92:93:92:c6:31:22:24:78:2f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
        Validity
            Not Before: Jun 15 16:00:38 2024 GMT
            Not After : Jun 16 16:00:38 2024 GMT
        Subject: CN=0b0aea8c50b701e22854766ec4b2dc5af5c319cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5f:ce:0d:10:c4:44:a1:b4:ce:69:6b:6c:d2:
                    1c:26:49:fa:83:3c:f0:4e:26:e4:76:88:73:78:91:
                    3a:f5:02:20:29:db:fb:36:71:ab:b8:18:be:1e:c2:
                    ab:d2:fd:50:b3:2d:05:fd:8d:f3:49:1c:79:9c:de:
                    f5:cb:ad:24:d9:61:1b:37:72:aa:5d:c4:0c:90:a9:
                    be:7a:9e:ac:51:2f:f2:78:a5:df:a0:b8:e0:ec:7e:
                    24:4d:61:42:f0:ad:e6:d6:ec:ea:e2:1b:69:88:b8:
                    49:6b:a8:a0:92:70:63:f6:21:af:ee:bb:f1:e5:0a:
                    dc:b4:b8:26:30:27:cb:b7:ad:e6:07:51:b0:8e:db:
                    17:8a:38:da:b4:1e:1c:64:00:66:7a:57:f4:95:c6:
                    0b:11:c9:a8:5b:4c:01:23:e4:d6:2d:5c:90:8b:aa:
                    58:e6:83:0b:81:4d:3a:72:ad:e0:c7:07:2f:13:95:
                    8a:91:bc:17:0c:3e:6c:af:9d:cd:28:68:15:61:7b:
                    36:12:f7:f8:eb:01:7a:a5:fe:09:32:79:50:59:6b:
                    f2:2e:69:d0:f8:c0:61:cf:db:8c:3e:b6:9a:ee:f4:
                    b5:42:5a:84:e3:08:3f:60:05:86:a9:6a:3e:2b:7d:
                    27:e1:9d:09:53:65:33:0c:af:82:f4:ad:d5:f5:71:
                    6a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0A:EA:8C:50:B7:01:E2:28:54:76:6E:C4:B2:DC:5A:F5:C3:19:CF
            X509v3 Authority Key Identifier:
                keyid:F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e7:b0:4f:95:6a:cf:a2:76:1a:6e:62:11:24:0a:36:b5:44:
         ab:5f:3b:50:d8:d6:48:d4:33:63:1f:77:9a:b4:79:57:71:5a:
         4a:23:53:a0:cc:52:9f:42:2a:0f:99:6d:86:5f:b3:86:8c:5a:
         d5:f5:8d:10:7a:c7:35:b7:7e:5c:ae:41:3d:0b:cc:e1:1e:39:
         b3:95:ab:39:42:1b:c4:c5:28:9b:89:c5:b0:de:a5:c7:54:45:
         11:51:16:4a:6b:e7:a1:1c:27:6b:0b:4d:c6:ec:ac:d5:10:fc:
         b5:04:7c:26:51:5e:b4:6d:d3:f8:f6:2b:07:61:89:98:a1:34:
         6b:0b:f8:cf:68:64:93:fe:62:5a:7e:58:5c:44:a1:e7:41:6a:
         8f:0b:6b:03:14:e8:ac:f8:79:c2:bc:3f:89:ea:7e:a1:ec:f6:
         6f:1e:67:c6:3b:be:3f:ff:13:9f:0d:e0:5c:70:fc:1d:55:b8:
         c1:cb:5a:d2:9c:60:5c:27:a5:59:fc:7c:03:13:66:68:3e:bf:
         3b:4e:f3:b9:d5:77:f5:e6:52:52:bf:9d:a2:f2:59:88:7e:f9:
         c0:f0:92:ce:15:0f:7c:2e:c8:95:53:18:a1:12:7f:0b:f2:62:
         7e:9b:2a:ba:55:72:d1:35:fa:ea:30:ab:94:36:74:b4:0f:a0:
         9a:4e:80:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcoRkJqSySk5LGMSIkeC9+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTE2ZDdmMjhjZGJlOGIzZjU1ZDc1MzcyYWFkNGQzYjEw
YmUwOWYwHhcNMjQwNjE1MTYwMDM4WhcNMjQwNjE2MTYwMDM4WjAzMTEwLwYDVQQD
EygwYjBhZWE4YzUwYjcwMWUyMjg1NDc2NmVjNGIyZGM1YWY1YzMxOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV/ODRDERKG0zmlrbNIcJkn6gzzw
TibkdohzeJE69QIgKdv7NnGruBi+HsKr0v1Qsy0F/Y3zSRx5nN71y60k2WEbN3Kq
XcQMkKm+ep6sUS/yeKXfoLjg7H4kTWFC8K3m1uzq4htpiLhJa6igknBj9iGv7rvx
5QrctLgmMCfLt63mB1GwjtsXijjatB4cZABmelf0lcYLEcmoW0wBI+TWLVyQi6pY
5oMLgU06cq3gxwcvE5WKkbwXDD5sr53NKGgVYXs2Evf46wF6pf4JMnlQWWvyLmnQ
+MBhz9uMPraa7vS1QlqE4wg/YAWGqWo+K30n4Z0JU2UzDK+C9K3V9XFqxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsK6oxQtwHiKFR2bsSy3Fr1wxnPMB8GA1UdIwQY
MBaAFPZRbX8ozb6LP1XXU3Kq1NOxC+CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hOGMzMTgtMzM4ZC00OTMyLThhY2It
ZTk3YWU1YzYwNTY4LzEvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9hOGMzMTgtMzM4ZC00OTMyLThhY2ItZTk3YWU1YzYwNTY4
LzEvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASeewT5Vq
z6J2Gm5iESQKNrVEq187UNjWSNQzYx93mrR5V3FaSiNToMxSn0IqD5lthl+zhoxa
1fWNEHrHNbd+XK5BPQvM4R45s5WrOUIbxMUom4nFsN6lx1RFEVEWSmvnoRwnawtN
xuys1RD8tQR8JlFetG3T+PYrB2GJmKE0awv4z2hkk/5iWn5YXESh50FqjwtrAxTo
rPh5wrw/iep+oez2bx5nxju+P/8Tnw3gXHD8HVW4wcta0pxgXCelWfx8AxNmaD6/
O07zudV39eZSUr+dovJZiH75wPCSzhUPfC7IlVMYoRJ/C/JifpsqulVy0TX66jCr
lDZ0tA+gmk6A7g==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:40:54 2024 by rpki-client on console-fra.rpki-client.org