Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File:                     TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier:          1ef72Mz9K31dQzSm0zXISL4CCUOkdGru95USB+fiLyU=
Subject key identifier:   E7:FB:7E:93:EA:E6:8D:B4:6E:24:39:23:46:33:F3:22:25:B6:5C:98
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer:       /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial:       01901DEB88F601A27FBED728857C1755FDAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:01:33 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:33 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:33 +0000
Files and hashes:         1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: VZzCJ+y4DkR13H/CB6vfxlOUGL1yWECbPPTqrxLL8Uc=)
                          2: h-agl-nn-RYaXQsR1RlcsPU7MBg.roa (hash: HAXg0eWi0I6Qj/d0VEPEsXLgnx+ATW5qZpnKGGRFZ8k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:88:f6:01:a2:7f:be:d7:28:85:7c:17:55:fd:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
        Validity
            Not Before: Jun 15 22:01:33 2024 GMT
            Not After : Jun 16 22:01:33 2024 GMT
        Subject: CN=e7fb7e93eae68db46e2439234633f32225b65c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:f0:7c:de:3e:a1:ac:45:46:8a:98:d1:7a:
                    6e:e1:7c:bc:02:aa:04:a1:ee:63:66:2e:f5:de:b8:
                    2e:4a:48:b1:70:46:79:15:f1:56:3f:86:75:d5:1a:
                    cc:13:b7:23:11:57:42:5c:2c:22:8c:c6:a9:6c:8b:
                    cb:f8:64:b2:d5:ab:70:8d:18:9c:29:ee:80:2d:9c:
                    86:ae:bf:fe:10:cd:05:0a:cf:be:89:d8:db:3a:ea:
                    c5:cd:4b:fc:d0:e0:05:c4:f6:25:98:06:7d:58:1d:
                    1e:4d:b9:ca:b6:70:c5:a2:12:da:c1:46:f7:44:3c:
                    e0:6c:77:e1:c8:9b:28:05:f0:c9:36:5d:32:50:e9:
                    9d:e9:8b:e2:f7:e1:85:d9:cd:a0:41:98:c5:56:9c:
                    1f:1d:f6:b2:ce:e0:34:03:60:a1:45:27:ab:25:b7:
                    c0:1c:b4:24:a3:1e:1c:b4:2b:d3:ae:ce:24:ec:11:
                    be:da:09:ea:16:b5:77:22:01:99:51:ac:f9:38:d4:
                    f5:f6:4d:32:dc:a3:fa:7f:4c:e2:b3:f9:1e:c4:ca:
                    83:5a:d1:85:f1:9c:b3:07:99:82:30:f4:e1:a2:de:
                    f2:ed:a7:9c:9b:02:0d:40:ef:57:71:88:25:d2:17:
                    83:70:ff:15:01:8f:ee:6d:74:c8:a7:88:70:ea:dd:
                    ee:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FB:7E:93:EA:E6:8D:B4:6E:24:39:23:46:33:F3:22:25:B6:5C:98
            X509v3 Authority Key Identifier:
                keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:19:29:68:c4:c8:51:f6:2a:6f:4e:7a:a2:69:16:81:45:6c:
         16:f5:22:49:68:e8:59:0f:ec:3d:3c:1a:fd:9e:63:4e:27:ed:
         17:d2:d7:dc:ff:52:1a:1f:94:f0:fd:3d:63:49:76:62:ae:0b:
         3c:c0:85:ba:55:f3:eb:d6:b1:90:5a:f8:55:f6:ea:5a:04:f0:
         42:62:e4:c0:cb:a2:a3:72:73:10:25:8c:9d:ea:04:18:2c:e8:
         53:3b:f7:16:22:12:ff:2b:18:e8:6f:a4:eb:0f:be:b5:ba:78:
         0c:eb:77:e9:0a:9b:75:ae:a2:6e:c1:35:ab:8c:2b:5f:65:89:
         f7:5f:61:a5:df:f7:f0:fa:10:28:2e:7f:7b:9c:d3:f1:0b:60:
         b0:00:e6:5f:d8:47:26:15:d7:75:54:d7:fb:89:17:c8:0a:6e:
         c8:88:17:e6:c6:6b:d7:33:f1:11:05:a3:5e:1e:59:d6:ac:0d:
         de:f5:15:20:d6:91:31:f6:d4:76:2f:b3:12:5d:9b:92:ed:0a:
         d0:d7:28:ee:e4:5f:c7:3e:8d:d3:2d:0b:07:5e:c3:bc:59:37:
         b9:cf:eb:ef:95:db:28:58:80:5a:1c:56:58:a9:1e:96:70:12:
         0f:13:7f:3c:78:85:18:fd:a5:90:40:7b:aa:84:da:a4:2b:af:
         9e:93:f1:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd64j2AaJ/vtcohXwXVf2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTA0MzJmNTQyOWQ4NjFkNzc0M2JmYzMxZDdhZDAxOTYy
OGE1ZWIwHhcNMjQwNjE1MjIwMTMzWhcNMjQwNjE2MjIwMTMzWjAzMTEwLwYDVQQD
EyhlN2ZiN2U5M2VhZTY4ZGI0NmUyNDM5MjM0NjMzZjMyMjI1YjY1Yzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+jwfN4+oaxFRoqY0Xpu4Xy8AqoE
oe5jZi713rguSkixcEZ5FfFWP4Z11RrME7cjEVdCXCwijMapbIvL+GSy1atwjRic
Ke6ALZyGrr/+EM0FCs++idjbOurFzUv80OAFxPYlmAZ9WB0eTbnKtnDFohLawUb3
RDzgbHfhyJsoBfDJNl0yUOmd6Yvi9+GF2c2gQZjFVpwfHfayzuA0A2ChRSerJbfA
HLQkox4ctCvTrs4k7BG+2gnqFrV3IgGZUaz5ONT19k0y3KP6f0zis/kexMqDWtGF
8ZyzB5mCMPThot7y7aecmwINQO9XcYgl0heDcP8VAY/ubXTIp4hw6t3utQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf7fpPq5o20biQ5I0Yz8yIltlyYMB8GA1UdIwQY
MBaAFE7gQy9UKdhh13Q7/DHXrQGWKKXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUt
NzcyNTdlMDQ3NjVmLzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUtNzcyNTdlMDQ3NjVm
LzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRkpaMTI
UfYqb056omkWgUVsFvUiSWjoWQ/sPTwa/Z5jTiftF9LX3P9SGh+U8P09Y0l2Yq4L
PMCFulXz69axkFr4VfbqWgTwQmLkwMuio3JzECWMneoEGCzoUzv3FiIS/ysY6G+k
6w++tbp4DOt36Qqbda6ibsE1q4wrX2WJ919hpd/38PoQKC5/e5zT8QtgsADmX9hH
JhXXdVTX+4kXyApuyIgX5sZr1zPxEQWjXh5Z1qwN3vUVINaRMfbUdi+zEl2bku0K
0Nco7uRfxz6N0y0LB17DvFk3uc/r75XbKFiAWhxWWKkelnASDxN/PHiFGP2lkEB7
qoTapCuvnpPx9w==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:19 2024 by rpki-client on console-ams.rpki-client.org