Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
File:                     1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft (raw, json)
Hash identifier:          a0MEvCuNBp2MdBKMWCRd1zBV0CIC/SM6vqhkRnO3PdE=
Subject key identifier:   70:3B:89:FD:E0:B1:CA:AC:0F:9E:23:98:4D:9B:57:15:08:A1:4C:80
Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
Certificate issuer:       /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Certificate serial:       01901EC68DA0A7F8705E2F7AB86220CABAC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
Manifest number:          0A5E
Signing time:             Sun 16 Jun 2024 02:00:47 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:47 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:47 +0000
Files and hashes:         1: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl (hash: 74oEJJWlX2qQpCHVyPzBMWGVWQmZBtEBWNSviOp5cZ8=)
                          2: g0__6BBFfo7aQSIuRLzSVMD5UTc.roa (hash: YWtCHQ9aJOWhdQAQBGxDwLnEUXap2MkIlaG2/TXmEEg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:8d:a0:a7:f8:70:5e:2f:7a:b8:62:20:ca:ba:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
        Validity
            Not Before: Jun 16 02:00:47 2024 GMT
            Not After : Jun 17 02:00:47 2024 GMT
        Subject: CN=703b89fde0b1caac0f9e23984d9b571508a14c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:67:b7:cb:2d:f1:09:b2:f2:e1:10:43:13:
                    b4:42:ff:07:f6:c7:08:3a:15:f3:3c:15:ee:b6:63:
                    00:53:b4:78:ad:e8:43:ee:8c:5a:b6:c4:6a:56:3e:
                    d0:0b:3b:ad:02:2d:21:59:bc:48:ee:a6:43:85:af:
                    95:e2:61:ca:4d:3e:aa:9f:5b:41:b5:74:b0:8b:53:
                    83:40:cf:38:87:47:92:fb:92:ad:6b:b1:b4:b5:1d:
                    b9:2b:51:c8:00:f2:d5:5e:d3:0e:37:de:41:4a:b3:
                    c5:69:c9:00:22:cc:57:c4:cc:84:e9:5c:96:1b:44:
                    89:86:91:9e:6b:cd:23:68:ec:b0:1a:65:ea:0d:d5:
                    3e:73:fd:cf:8b:06:88:7b:0b:ae:0e:70:ad:c0:aa:
                    24:dd:ec:e1:2d:02:8b:76:67:56:ed:c1:e0:4e:2c:
                    c5:49:df:13:d3:81:d8:66:85:83:6a:0f:a7:d7:45:
                    8f:a6:7b:40:9a:d9:39:1b:d2:5f:da:15:95:60:28:
                    31:ff:a6:b2:c4:d9:25:f7:10:d6:a0:e2:22:7c:74:
                    1b:ea:bb:ef:fe:e8:22:74:ce:4c:2a:13:eb:2d:a1:
                    3a:fb:41:25:18:14:7c:8c:33:ec:6a:a6:44:25:82:
                    2b:02:6c:b4:e8:66:ee:c2:0e:b7:fc:73:95:47:72:
                    10:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3B:89:FD:E0:B1:CA:AC:0F:9E:23:98:4D:9B:57:15:08:A1:4C:80
            X509v3 Authority Key Identifier:
                keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5b:22:b6:43:66:9b:c3:cf:63:f2:7e:27:c2:26:26:8c:b7:
         07:14:ae:94:d0:12:8f:58:73:0e:f5:7d:d9:8f:a0:cc:4e:32:
         85:a0:ec:53:36:f7:85:20:7e:61:18:16:d3:83:5f:b4:8b:e4:
         20:02:9f:0a:39:28:0e:32:52:08:c1:df:58:6c:2c:a1:17:c6:
         c8:ed:2e:11:81:23:73:e3:78:37:9b:e7:bd:57:ef:02:cd:f4:
         82:bb:b5:0f:d1:a8:41:24:7e:89:ae:89:b2:2a:a2:b2:fc:66:
         92:ff:37:5c:ad:6a:e4:58:84:91:88:f2:6f:17:1c:c2:91:5f:
         c3:db:e8:13:dc:89:e1:7f:03:d2:f8:f7:79:39:21:f1:40:b1:
         eb:2b:30:e7:09:dd:56:42:49:67:02:4c:ea:0d:d9:5e:aa:74:
         35:ec:32:fd:58:60:dd:c4:27:e8:33:aa:bf:2a:ef:22:26:55:
         99:0f:c8:d5:5c:82:cb:62:68:2d:56:94:48:c3:f8:88:e7:9d:
         df:2c:79:b6:2c:e3:2b:cd:0b:eb:99:d0:6c:fe:00:c1:99:39:
         93:72:ad:62:dc:35:83:d4:be:86:d0:7d:4a:ad:dd:05:46:4b:
         51:31:9c:f5:be:e3:67:0e:e0:58:76:22:ce:6e:70:ad:f8:df:
         75:35:53:f0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZAexo2gp/hwXi96uGIgyrrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NDRlMWVhZmFhZDNjYjA5MWYyMGVlNWJmMWMwNDgyNDg3
YzMwNmUwHhcNMjQwNjE2MDIwMDQ3WhcNMjQwNjE3MDIwMDQ3WjAzMTEwLwYDVQQD
Eyg3MDNiODlmZGUwYjFjYWFjMGY5ZTIzOTg0ZDliNTcxNTA4YTE0YzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+dnt8st8Qmy8uEQQxO0Qv8H9scI
OhXzPBXutmMAU7R4rehD7oxatsRqVj7QCzutAi0hWbxI7qZDha+V4mHKTT6qn1tB
tXSwi1ODQM84h0eS+5Kta7G0tR25K1HIAPLVXtMON95BSrPFackAIsxXxMyE6VyW
G0SJhpGea80jaOywGmXqDdU+c/3PiwaIewuuDnCtwKok3ezhLQKLdmdW7cHgTizF
Sd8T04HYZoWDag+n10WPpntAmtk5G9Jf2hWVYCgx/6ayxNkl9xDWoOIifHQb6rvv
/ugidM5MKhPrLaE6+0ElGBR8jDPsaqZEJYIrAmy06Gbuwg63/HOVR3IQjQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHA7if3gscqsD54jmE2bVxUIoUyAMB8GA1UdIwQY
MBaAFPhE4er6rTywkfIO5b8cBIJIfDBuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FVGg2dnF0UExDUjhnN2x2eHdFZ2toOE1HNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZjNjYTIzLTg2ZWMtNDBkMC1hNTIw
LTY5YTM2NGU1NjI5ZS8xLzEtRVRoNnZxdFBMQ1I4Zzdsdnh3RWdraDhNRzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFlL2YzY2EyMy04NmVjLTQwZDAtYTUyMC02OWEzNjRlNTYy
OWUvMS8xLUVUaDZ2cXRQTENSOGc3bHZ4d0Vna2g4TUc0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVsi
tkNmm8PPY/J+J8ImJoy3BxSulNASj1hzDvV92Y+gzE4yhaDsUzb3hSB+YRgW04Nf
tIvkIAKfCjkoDjJSCMHfWGwsoRfGyO0uEYEjc+N4N5vnvVfvAs30gru1D9GoQSR+
ia6Jsiqisvxmkv83XK1q5FiEkYjybxccwpFfw9voE9yJ4X8D0vj3eTkh8UCx6ysw
5wndVkJJZwJM6g3ZXqp0Newy/Vhg3cQn6DOqvyrvIiZVmQ/I1VyCy2JoLVaUSMP4
iOed3yx5tizjK80L65nQbP4AwZk5k3KtYtw1g9S+htB9Sq3dBUZLUTGc9b7jZw7g
WHYizm5wrfjfdTVT8A==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:52:38 2024 by rpki-client on console-fra.rpki-client.org