Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File:                     rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier:          6d6ZOwZMpXwYxWpPKAPt8qfOmr7KvCTFCLt2FOtHQtc=
Subject key identifier:   EB:4D:19:30:10:02:AA:9E:70:2D:13:AE:E0:D5:F3:BC:E8:DC:BB:04
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer:       /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial:       01901CA158831BAF21FF0E5177C4D964C2CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number:          AD
Signing time:             Sat 15 Jun 2024 16:00:54 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:54 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:54 +0000
Files and hashes:         1: VPtZEgucGmg1A6088IHIhJG8dtU.roa (hash: vB/KSn2KhPK8DuqClo57MQGkbcT9yRi50a7bSXneY84=)
                          2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: eW5AuUdhHjivluP0UFXhLmmzBl7ZpKfCfk6FXVztTKk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:58:83:1b:af:21:ff:0e:51:77:c4:d9:64:c2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
        Validity
            Not Before: Jun 15 16:00:54 2024 GMT
            Not After : Jun 16 16:00:54 2024 GMT
        Subject: CN=eb4d19301002aa9e702d13aee0d5f3bce8dcbb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:53:a7:dd:e9:85:2d:cb:b4:32:ed:af:8f:9b:
                    5c:49:a0:87:d1:aa:19:a2:f2:a1:a7:2a:7b:7c:f9:
                    df:65:da:63:b6:98:1a:5e:15:f6:53:92:73:0e:b7:
                    42:2a:93:b4:76:f2:ba:13:9a:d0:92:e7:5f:cf:5d:
                    22:3c:61:8a:40:d0:a0:59:5d:87:e4:b4:9a:ad:c5:
                    26:bc:b3:0e:e9:07:f7:ea:2d:90:77:51:99:8c:3b:
                    c5:f9:aa:32:b1:e6:72:71:ec:ad:e6:ac:90:e2:9c:
                    78:18:e6:0b:34:1e:70:a9:24:04:c7:9a:df:e0:cb:
                    6a:5e:d0:33:cf:3d:8e:b7:6a:53:77:2a:01:6f:8b:
                    e7:7a:cc:44:00:06:55:91:4c:ab:05:fe:15:6c:5e:
                    3a:72:82:a8:8c:3e:9c:e8:63:f4:73:ec:33:7c:8c:
                    f1:61:7b:48:a1:eb:10:ea:91:6c:db:08:42:50:78:
                    42:b3:64:51:e7:b4:c4:bd:9f:26:2c:b4:3d:6e:fd:
                    97:7c:0e:70:7d:d9:87:81:fd:8e:ad:9d:6b:dc:2d:
                    45:c3:d3:c9:56:66:7c:cd:0b:2c:cf:65:75:7d:fd:
                    1e:f9:eb:c4:f1:49:21:7b:81:28:3d:96:ea:6b:53:
                    ae:5e:a1:40:90:b0:87:22:60:3c:d9:7f:a0:43:bc:
                    23:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4D:19:30:10:02:AA:9E:70:2D:13:AE:E0:D5:F3:BC:E8:DC:BB:04
            X509v3 Authority Key Identifier:
                keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d0:8c:bf:60:ca:f7:0a:85:48:7b:c4:de:f5:dd:a1:68:72:
         c0:53:fc:67:fd:0c:52:91:b9:22:d9:a3:d1:73:be:dc:23:c8:
         33:3c:75:ff:9a:18:a4:eb:32:1a:c8:22:89:d5:68:e3:be:09:
         c6:89:b5:00:be:a0:9f:e2:5f:38:b7:93:38:4a:fb:f3:9e:10:
         41:15:8b:59:8e:8f:f6:ed:74:68:ec:10:c4:72:73:dd:8e:09:
         0f:5d:f6:6d:ac:9e:71:35:d8:87:32:dc:d2:1f:c4:9a:a1:9c:
         f3:63:6a:95:50:c3:87:ef:64:38:35:d3:3a:ea:cf:21:e9:ba:
         7e:1f:fc:ac:d3:d9:86:aa:34:57:5c:a3:da:37:99:60:21:4d:
         0b:72:f4:18:00:95:d2:95:f9:6f:37:28:56:2b:d8:ff:05:a4:
         42:f5:06:fc:a5:79:49:9c:cd:84:b9:14:c2:ee:65:9a:09:c2:
         73:84:a9:94:0b:02:10:34:3f:8e:60:7b:01:e8:1c:80:d7:95:
         b6:b2:32:7f:fb:a9:7b:46:5a:70:67:2e:1a:ae:b6:75:2d:8b:
         38:60:2b:b2:7a:91:45:65:38:72:b5:f1:e7:3c:af:44:6e:7a:
         5d:b3:ee:25:eb:98:62:1a:e6:63:33:16:f7:70:33:77:5f:e8:
         88:99:c5:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcoViDG68h/w5Rd8TZZMLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjFhMTEzZDFiYTAxZDEwN2ZkZjc5MTMwOGMwYTUxZjNk
MDZkZGEwHhcNMjQwNjE1MTYwMDU0WhcNMjQwNjE2MTYwMDU0WjAzMTEwLwYDVQQD
EyhlYjRkMTkzMDEwMDJhYTllNzAyZDEzYWVlMGQ1ZjNiY2U4ZGNiYjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFOn3emFLcu0Mu2vj5tcSaCH0aoZ
ovKhpyp7fPnfZdpjtpgaXhX2U5JzDrdCKpO0dvK6E5rQkudfz10iPGGKQNCgWV2H
5LSarcUmvLMO6Qf36i2Qd1GZjDvF+aoyseZyceyt5qyQ4px4GOYLNB5wqSQEx5rf
4MtqXtAzzz2Ot2pTdyoBb4vnesxEAAZVkUyrBf4VbF46coKojD6c6GP0c+wzfIzx
YXtIoesQ6pFs2whCUHhCs2RR57TEvZ8mLLQ9bv2XfA5wfdmHgf2OrZ1r3C1Fw9PJ
VmZ8zQssz2V1ff0e+evE8Ukhe4EoPZbqa1OuXqFAkLCHImA82X+gQ7wjnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtNGTAQAqqecC0TruDV87zo3LsEMB8GA1UdIwQY
MBaAFKwhoRPRugHRB/33kTCMClHz0G3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYt
ZmQ3M2I4MDgzM2I3LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYtZmQ3M2I4MDgzM2I3
LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdCMv2DK
9wqFSHvE3vXdoWhywFP8Z/0MUpG5Itmj0XO+3CPIMzx1/5oYpOsyGsgiidVo474J
xom1AL6gn+JfOLeTOEr7854QQRWLWY6P9u10aOwQxHJz3Y4JD132bayecTXYhzLc
0h/EmqGc82NqlVDDh+9kODXTOurPIem6fh/8rNPZhqo0V1yj2jeZYCFNC3L0GACV
0pX5bzcoVivY/wWkQvUG/KV5SZzNhLkUwu5lmgnCc4SplAsCEDQ/jmB7AegcgNeV
trIyf/upe0ZacGcuGq62dS2LOGArsnqRRWU4crXx5zyvRG56XbPuJeuYYhrmYzMW
93Azd1/oiJnFpg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 21:07:16 2024 by rpki-client on console-ams.rpki-client.org