Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File:                     U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier:          n4ZKZ+Vu/BpHUMGdFuYpUV/8VTu4kD6t/PHHHrBnHQ4=
Subject key identifier:   EF:E7:B8:53:30:D9:42:5F:10:1B:75:49:1A:35:89:16:44:B7:61:7A
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer:       /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial:       01901AE9FD906044381DBD3908512C74E18F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 08:01:00 +0000
Manifest this update:     Sat 15 Jun 2024 08:01:00 +0000
Manifest next update:     Sun 16 Jun 2024 08:01:00 +0000
Files and hashes:         1: JPADrC7Y6Jxr3EOms000peLIR70.roa (hash: QqxDv0v13YU3Dy+Xuq6GmUB48lTvlEldUefBAEIfQDw=)
                          2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: NR5CobGKbK90A5lH2x+pY66pGDCZ18aUAA4TVmko42g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:e9:fd:90:60:44:38:1d:bd:39:08:51:2c:74:e1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
        Validity
            Not Before: Jun 15 08:01:00 2024 GMT
            Not After : Jun 16 08:01:00 2024 GMT
        Subject: CN=efe7b85330d9425f101b75491a35891644b7617a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0c:64:e6:a3:da:5d:86:73:1a:e0:ea:fe:f2:
                    72:a1:4f:68:2c:3d:bf:09:76:75:e9:06:8b:d5:37:
                    36:19:8a:ba:6a:6c:20:e0:69:b2:be:a0:54:b3:9a:
                    94:6a:bc:d7:81:8d:89:66:a4:48:8f:4c:93:a8:75:
                    44:78:b8:ad:b5:43:c2:45:8a:21:92:4c:5b:5f:07:
                    c5:d3:c3:e0:62:5c:ac:ae:4c:21:56:77:d9:66:1e:
                    3f:14:7a:a8:27:45:56:11:65:d2:55:71:f4:cd:7c:
                    c9:49:17:1f:21:b6:e2:bb:69:c1:8f:78:7c:d1:ab:
                    50:60:ce:66:2f:77:2c:24:26:68:f7:58:27:a4:6e:
                    9f:90:f0:d9:45:0a:51:5f:28:8e:9d:29:f6:c0:0a:
                    28:e3:d4:82:4e:6f:0b:b4:7a:3e:78:a7:3c:8d:d6:
                    85:e6:92:84:9c:44:e0:67:2a:6f:f8:2e:d7:25:f5:
                    ec:82:17:0f:e2:a6:f4:a4:b3:da:f6:f2:3f:7f:41:
                    a3:7a:93:ea:00:7f:15:c2:30:d0:65:1f:51:b7:d7:
                    25:28:63:a0:84:c3:c3:c5:50:9d:1e:23:7d:d9:7f:
                    7e:90:19:c0:16:64:df:ee:81:25:32:a4:21:e3:d2:
                    f8:ce:fe:cb:1c:40:f1:a3:f7:08:f3:c8:5d:f5:c2:
                    7d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E7:B8:53:30:D9:42:5F:10:1B:75:49:1A:35:89:16:44:B7:61:7A
            X509v3 Authority Key Identifier:
                keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:59:10:6d:81:df:b0:e6:c8:fa:0c:7f:b2:31:dd:53:e7:29:
         5c:05:c1:10:8c:0d:81:94:06:51:20:13:d7:cf:a4:9c:67:4e:
         2f:ca:da:6d:87:5f:2f:3e:54:80:2d:10:3a:92:8d:3c:a9:24:
         95:4b:51:79:41:b8:24:aa:3f:67:a3:be:87:96:5a:21:cf:17:
         76:20:c1:f4:2c:21:f1:f4:4a:60:a8:ca:1f:25:a4:7a:2f:af:
         c7:e5:da:e1:98:1e:c6:e8:22:09:63:bd:7d:f0:75:9e:a6:7a:
         7f:2d:39:14:f5:e9:84:70:dc:f4:20:e9:6b:70:64:45:7f:ee:
         e2:6f:26:c8:b3:9b:99:88:95:2b:ba:8f:6c:e2:7a:a8:8c:e1:
         bc:bd:c2:99:61:cb:be:37:8c:5d:0e:a8:12:6b:ac:f2:75:a7:
         f3:b1:83:d1:03:a7:69:16:ac:ab:d7:be:40:6c:fb:de:cc:d0:
         e9:2f:da:d6:08:c5:8a:6a:25:50:c4:0a:19:ce:dd:7e:c5:54:
         4f:72:46:9f:f7:80:1b:f9:00:f6:28:f7:fc:be:fa:ee:e2:22:
         a3:5c:19:44:8e:e0:6d:72:0f:f4:4c:0e:a6:c1:cd:8e:29:3c:
         f4:7f:04:9b:d1:88:ef:4f:24:d7:49:37:9d:ca:4f:0f:55:dd:
         59:3a:5c:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAa6f2QYEQ4Hb05CFEsdOGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDZjNGQyMDBmZTUwMzVjNjFiMGM4OTRiOTQ1NGU3MmQy
N2M5MWYwHhcNMjQwNjE1MDgwMTAwWhcNMjQwNjE2MDgwMTAwWjAzMTEwLwYDVQQD
EyhlZmU3Yjg1MzMwZDk0MjVmMTAxYjc1NDkxYTM1ODkxNjQ0Yjc2MTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Axk5qPaXYZzGuDq/vJyoU9oLD2/
CXZ16QaL1Tc2GYq6amwg4GmyvqBUs5qUarzXgY2JZqRIj0yTqHVEeLittUPCRYoh
kkxbXwfF08PgYlysrkwhVnfZZh4/FHqoJ0VWEWXSVXH0zXzJSRcfIbbiu2nBj3h8
0atQYM5mL3csJCZo91gnpG6fkPDZRQpRXyiOnSn2wAoo49SCTm8LtHo+eKc8jdaF
5pKEnETgZypv+C7XJfXsghcP4qb0pLPa9vI/f0GjepPqAH8VwjDQZR9Rt9clKGOg
hMPDxVCdHiN92X9+kBnAFmTf7oElMqQh49L4zv7LHEDxo/cI88hd9cJ9lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/nuFMw2UJfEBt1SRo1iRZEt2F6MB8GA1UdIwQY
MBaAFFNGxNIA/lA1xhsMiUuUVOctJ8kfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBiRTBnRC1VRFhHR3d5SlM1UlU1eTBueVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81ODdhNzktMWI2Yy00YzJhLWIxMzkt
MjRhYWI0NGYyNTM5LzEvVTBiRTBnRC1VRFhHR3d5SlM1UlU1eTBueVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81ODdhNzktMWI2Yy00YzJhLWIxMzktMjRhYWI0NGYyNTM5
LzEvVTBiRTBnRC1VRFhHR3d5SlM1UlU1eTBueVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAolkQbYHf
sObI+gx/sjHdU+cpXAXBEIwNgZQGUSAT18+knGdOL8rabYdfLz5UgC0QOpKNPKkk
lUtReUG4JKo/Z6O+h5ZaIc8XdiDB9Cwh8fRKYKjKHyWkei+vx+Xa4ZgexugiCWO9
ffB1nqZ6fy05FPXphHDc9CDpa3BkRX/u4m8myLObmYiVK7qPbOJ6qIzhvL3CmWHL
vjeMXQ6oEmus8nWn87GD0QOnaRasq9e+QGz73szQ6S/a1gjFimolUMQKGc7dfsVU
T3JGn/eAG/kA9ij3/L767uIio1wZRI7gbXIP9EwOpsHNjik89H8Em9GI708k10k3
ncpPD1XdWTpcag==
-----END CERTIFICATE-----
Generated at Sat Jun 15 13:55:44 2024 by rpki-client on console-ams.rpki-client.org