Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
File:                     HtVdI1ecZBJxVa72UGlueVMdUI0.mft (raw, json)
Hash identifier:          0k9ItYPCeNsdfC6NAjHggDC3Vc+Z8shno8g6hhVfEFw=
Subject key identifier:   89:5E:B2:F5:09:93:0F:71:99:04:72:0F:51:FA:0B:17:ED:A3:E0:21
Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
Certificate issuer:       /CN=1ed55d23579c64127155aef650696e79531d508d
Certificate serial:       01901E8FF3298A88A81A0B68D3640E3F364B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
Manifest number:          0E14
Signing time:             Sun 16 Jun 2024 01:01:08 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:08 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:08 +0000
Files and hashes:         1: HtVdI1ecZBJxVa72UGlueVMdUI0.crl (hash: xQ+D8R+EpFDpt+cjXTBHLcuc2KHj/do/rK34gjqq/T8=)
                          2: _p1REnvTwxPVgwkfSseWI_paejg.roa (hash: LcCpfdwyxrmyDtkePKtd55r7JQkFyxhTXkoetAE6qos=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:f3:29:8a:88:a8:1a:0b:68:d3:64:0e:3f:36:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed55d23579c64127155aef650696e79531d508d
        Validity
            Not Before: Jun 16 01:01:08 2024 GMT
            Not After : Jun 17 01:01:08 2024 GMT
        Subject: CN=895eb2f509930f719904720f51fa0b17eda3e021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:17:6b:23:9a:04:14:bc:57:c6:fe:73:04:
                    4e:76:ce:56:88:e9:10:22:86:8a:c7:a9:d1:18:9c:
                    90:29:bd:31:52:f7:c1:a0:71:61:cd:d3:c6:ad:70:
                    c6:15:c0:3b:1e:71:17:a5:b7:80:e5:9c:c1:48:f2:
                    62:67:08:71:c4:06:4a:a0:1c:81:14:0c:ec:cf:fe:
                    01:19:5a:01:e6:e1:e1:ff:9f:92:77:c5:ce:ce:9f:
                    af:e7:58:c3:8f:47:92:50:6f:f5:33:97:81:cc:7b:
                    81:7a:62:7e:93:ae:e5:b9:1e:c0:a0:90:80:5e:dc:
                    49:12:95:65:0a:ba:ef:f6:77:58:1b:c1:43:77:53:
                    fa:d6:46:94:3e:e7:96:26:72:71:49:9d:3c:bb:fb:
                    f1:f4:e2:f7:4d:71:a1:0f:9f:d2:d4:42:0e:99:07:
                    24:40:0b:2c:c9:fd:60:22:5a:12:bb:b5:87:46:46:
                    f3:99:23:d0:08:91:ac:27:60:bb:d4:77:50:f6:ec:
                    c5:e0:bf:27:34:c2:3f:f0:2e:81:c4:bc:55:16:d8:
                    c4:a2:4e:1a:83:b5:da:9b:b8:96:05:d8:de:1a:ce:
                    aa:5a:59:d9:b6:18:6f:df:f9:32:c3:03:46:53:5e:
                    3c:bb:66:d8:7c:47:54:c7:cb:19:3b:71:88:b0:2a:
                    6b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5E:B2:F5:09:93:0F:71:99:04:72:0F:51:FA:0B:17:ED:A3:E0:21
            X509v3 Authority Key Identifier:
                keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:12:8d:19:0f:d3:21:f1:8c:54:48:0e:66:13:c3:ad:9a:fb:
         aa:07:99:b4:5b:34:a1:1e:b8:e0:08:8a:ea:7f:5b:f6:0e:b3:
         a2:72:5e:57:84:66:a6:65:97:0f:1a:cb:93:fb:5e:b4:c5:2c:
         80:bd:e9:17:f6:6a:de:a0:c4:59:d9:79:c8:6f:14:07:65:f5:
         05:2a:99:83:85:37:64:7b:1d:31:14:b8:56:5b:a3:82:d3:6c:
         e3:4e:31:bb:c2:bf:a5:a3:64:b4:47:46:51:9a:13:37:a4:37:
         66:d5:6a:be:81:0b:4a:b9:3d:bf:bd:d5:4b:d1:23:6a:9b:94:
         53:3a:06:01:08:41:cf:49:7d:1b:d4:79:9e:c6:1f:d8:64:0a:
         58:da:52:66:5a:27:d3:da:1e:63:6a:75:a2:16:68:10:b8:8b:
         2a:6e:64:a2:e9:01:55:6e:18:63:4c:c7:dd:9c:3b:82:a1:a7:
         77:58:83:32:67:fd:f1:22:17:f7:f4:7d:01:47:b1:71:f2:88:
         95:9d:28:b8:51:e3:82:24:23:69:26:6a:fb:c0:e0:1f:3a:6f:
         68:96:62:b7:67:c0:59:00:1b:71:b4:8c:6c:f9:ea:9f:50:da:
         21:8a:fb:d4:0f:d5:24:79:7b:96:1e:8e:c1:da:87:6f:a5:52:
         36:11:f7:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej/MpioioGgto02QOPzZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZDU1ZDIzNTc5YzY0MTI3MTU1YWVmNjUwNjk2ZTc5NTMx
ZDUwOGQwHhcNMjQwNjE2MDEwMTA4WhcNMjQwNjE3MDEwMTA4WjAzMTEwLwYDVQQD
Eyg4OTVlYjJmNTA5OTMwZjcxOTkwNDcyMGY1MWZhMGIxN2VkYTNlMDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSkXayOaBBS8V8b+cwROds5WiOkQ
IoaKx6nRGJyQKb0xUvfBoHFhzdPGrXDGFcA7HnEXpbeA5ZzBSPJiZwhxxAZKoByB
FAzsz/4BGVoB5uHh/5+Sd8XOzp+v51jDj0eSUG/1M5eBzHuBemJ+k67luR7AoJCA
XtxJEpVlCrrv9ndYG8FDd1P61kaUPueWJnJxSZ08u/vx9OL3TXGhD5/S1EIOmQck
QAssyf1gIloSu7WHRkbzmSPQCJGsJ2C71HdQ9uzF4L8nNMI/8C6BxLxVFtjEok4a
g7Xam7iWBdjeGs6qWlnZthhv3/kywwNGU148u2bYfEdUx8sZO3GIsCpriQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlesvUJkw9xmQRyD1H6Cxfto+AhMB8GA1UdIwQY
MBaAFB7VXSNXnGQScVWu9lBpbnlTHVCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHRWZEkxZWNaQkp4VmE3MlVHbHVlVk1kVUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ZmIyNzQtZDg0Zi00ZmJhLTkzOGUt
MWU5ZmY5MTgwOGMyLzEvSHRWZEkxZWNaQkp4VmE3MlVHbHVlVk1kVUkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80ZmIyNzQtZDg0Zi00ZmJhLTkzOGUtMWU5ZmY5MTgwOGMy
LzEvSHRWZEkxZWNaQkp4VmE3MlVHbHVlVk1kVUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBKNGQ/T
IfGMVEgOZhPDrZr7qgeZtFs0oR644AiK6n9b9g6zonJeV4RmpmWXDxrLk/tetMUs
gL3pF/Zq3qDEWdl5yG8UB2X1BSqZg4U3ZHsdMRS4VlujgtNs404xu8K/paNktEdG
UZoTN6Q3ZtVqvoELSrk9v73VS9EjapuUUzoGAQhBz0l9G9R5nsYf2GQKWNpSZlon
09oeY2p1ohZoELiLKm5koukBVW4YY0zH3Zw7gqGnd1iDMmf98SIX9/R9AUexcfKI
lZ0ouFHjgiQjaSZq+8DgHzpvaJZit2fAWQAbcbSMbPnqn1DaIYr71A/VJHl7lh6O
wdqHb6VSNhH3WQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:54:12 2024 by rpki-client on console-fra.rpki-client.org