Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File:                     eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier:          AfCcSy3S4J0jMPY3WZFaxKcgWnb3zf3qnnOBYqTysb0=
Subject key identifier:   E9:4D:63:3F:30:64:7E:1C:E7:1D:0B:0E:FE:86:E0:10:92:D1:4D:D7
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer:       /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial:       01901D0F65A0BE62FB68E8526D02E7D95D67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number:          0CEF
Signing time:             Sat 15 Jun 2024 18:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:06 +0000
Files and hashes:         1: R72GYrk4HwBQWQe_AsSO2kZ6u58.roa (hash: L2G9HPx42ifnYP123qAw3CGoLvdoH6OsKvgkGESdv+c=)
                          2: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: BojsF2X7FX0mUDtUNTC1ohgHrCVHj+hZmaTBSq31++k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:65:a0:be:62:fb:68:e8:52:6d:02:e7:d9:5d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
        Validity
            Not Before: Jun 15 18:01:06 2024 GMT
            Not After : Jun 16 18:01:06 2024 GMT
        Subject: CN=e94d633f30647e1ce71d0b0efe86e01092d14dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a3:51:38:33:41:7c:ad:61:78:77:65:be:2c:
                    37:61:35:d0:fa:78:59:48:b7:5e:b5:52:60:75:bd:
                    39:28:04:7e:b8:9e:8a:b7:c7:de:da:08:c0:99:4e:
                    19:e3:d2:18:4d:40:6d:a7:bc:96:e4:b8:a1:52:07:
                    7d:36:c3:21:66:04:8a:b3:40:96:4c:34:95:e1:69:
                    cb:3e:6e:6c:33:05:4b:93:d6:11:c8:3f:3c:15:29:
                    18:a7:a5:6c:18:ff:d9:21:02:c3:92:d8:0e:bc:20:
                    d8:20:cf:cb:d3:8c:cf:bc:39:e5:cc:45:97:1c:26:
                    b0:28:1b:a5:88:e4:f5:a7:57:33:51:d8:3e:fb:65:
                    a4:c6:d4:4b:4e:8b:6d:3c:23:00:e4:5c:92:ca:8e:
                    82:8a:98:d2:f0:18:00:ad:2a:06:28:f3:f2:8c:5d:
                    81:f9:46:f7:16:64:7f:be:2c:b5:40:02:08:5d:b7:
                    49:68:da:ca:8a:f1:d1:4b:51:42:43:f3:20:15:bd:
                    2c:9a:b2:71:07:8a:eb:69:40:41:eb:31:62:26:da:
                    7c:61:11:18:ee:6f:9d:2c:26:0b:32:5d:ae:bc:dc:
                    ce:f2:e4:1d:fb:fb:a1:05:c5:a0:2a:4e:b9:0a:1e:
                    00:d8:e5:95:38:2e:6b:53:10:e4:79:1e:1b:b4:70:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4D:63:3F:30:64:7E:1C:E7:1D:0B:0E:FE:86:E0:10:92:D1:4D:D7
            X509v3 Authority Key Identifier:
                keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8d:5c:37:2a:d8:f4:24:10:cd:5e:45:b0:f4:63:fc:fe:40:
         08:18:3e:dd:72:5d:6e:4a:fc:b0:02:c8:f7:07:ae:5e:86:7d:
         fd:3b:da:21:30:1b:b6:16:91:9e:79:a9:28:ca:4c:ae:57:f1:
         08:a4:01:bc:cf:49:2c:e0:a4:58:99:fb:c6:f3:82:c6:c6:4a:
         a5:f8:1d:60:2f:e0:41:d9:6b:7a:1f:cc:77:2e:84:e5:f7:70:
         74:00:39:bf:a3:33:dc:01:93:1d:32:98:e8:8f:7a:d8:86:0d:
         59:17:50:c3:a1:d1:1c:15:0e:c0:af:5b:98:93:59:ba:5b:0f:
         d7:36:47:b1:1e:25:91:88:19:c4:e9:98:fe:8e:14:b5:92:b8:
         d4:64:ca:54:c2:0e:f2:36:b0:9f:4a:fb:e5:43:0b:a6:56:05:
         c4:e9:1b:ba:b5:81:ae:b7:39:c1:db:34:f7:8a:45:6d:2b:ad:
         0f:32:0b:36:4c:21:81:68:01:4f:f1:6b:eb:c5:e2:a5:2d:ba:
         d3:72:a2:a7:ab:04:3f:5b:d2:a1:04:46:15:76:80:9b:29:e7:
         0a:5c:fb:12:91:aa:66:20:65:b1:fb:49:56:8c:f0:c9:6f:33:
         54:bd:22:a3:9c:31:e3:33:b7:bb:d0:db:9e:75:29:5c:8b:64:
         2e:10:f4:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdD2WgvmL7aOhSbQLn2V1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGQ3MDEzYTdmZGJiNTY2M2ZkMzg0YTRmZWQxMjMwMzE0
NWUzY2UwHhcNMjQwNjE1MTgwMTA2WhcNMjQwNjE2MTgwMTA2WjAzMTEwLwYDVQQD
EyhlOTRkNjMzZjMwNjQ3ZTFjZTcxZDBiMGVmZTg2ZTAxMDkyZDE0ZGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qNRODNBfK1heHdlviw3YTXQ+nhZ
SLdetVJgdb05KAR+uJ6Kt8fe2gjAmU4Z49IYTUBtp7yW5LihUgd9NsMhZgSKs0CW
TDSV4WnLPm5sMwVLk9YRyD88FSkYp6VsGP/ZIQLDktgOvCDYIM/L04zPvDnlzEWX
HCawKBuliOT1p1czUdg++2WkxtRLTottPCMA5FySyo6CipjS8BgArSoGKPPyjF2B
+Ub3FmR/viy1QAIIXbdJaNrKivHRS1FCQ/MgFb0smrJxB4rraUBB6zFiJtp8YREY
7m+dLCYLMl2uvNzO8uQd+/uhBcWgKk65Ch4A2OWVOC5rUxDkeR4btHARAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlNYz8wZH4c5x0LDv6G4BCS0U3XMB8GA1UdIwQY
MBaAFHmNcBOn/btWY/04Sk/tEjAxRePOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82N2E0Y2UtYjhiYS00NTYyLTlhMzct
MjRkODE4YmE3ZjI5LzEvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS82N2E0Y2UtYjhiYS00NTYyLTlhMzctMjRkODE4YmE3ZjI5
LzEvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI41cNyrY
9CQQzV5FsPRj/P5ACBg+3XJdbkr8sALI9weuXoZ9/TvaITAbthaRnnmpKMpMrlfx
CKQBvM9JLOCkWJn7xvOCxsZKpfgdYC/gQdlreh/Mdy6E5fdwdAA5v6Mz3AGTHTKY
6I962IYNWRdQw6HRHBUOwK9bmJNZulsP1zZHsR4lkYgZxOmY/o4UtZK41GTKVMIO
8jawn0r75UMLplYFxOkburWBrrc5wds094pFbSutDzILNkwhgWgBT/Fr68XipS26
03Kip6sEP1vSoQRGFXaAmynnClz7EpGqZiBlsftJVozwyW8zVL0io5wx4zO3u9Db
nnUpXItkLhD0eg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:22:48 2024 by rpki-client on console-ams.rpki-client.org