Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File:                     0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier:          NxSJOdCrlDzJRcuobDruGjpXQcRTpvYScqAtqD+Oqxw=
Subject key identifier:   78:B4:9E:BE:63:A2:9A:75:EF:59:D5:3D:40:79:6E:0E:AF:A3:75:49
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer:       /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial:       01901DED90622C872EFB65B0A52B4676E71C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number:          0B01
Signing time:             Sat 15 Jun 2024 22:03:46 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:46 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:46 +0000
Files and hashes:         1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: Jil7gjpOJg5TF9oLAA+nrn8r8+78jKRdnapWH8Ys4XA=)
                          2: XiRArs40bpmK80U0U3QnyZP5ncA.roa (hash: rI+ccKxm7CsxHnkOJwtIy3iwiYHb87oKetEQWxtOOy4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:90:62:2c:87:2e:fb:65:b0:a5:2b:46:76:e7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
        Validity
            Not Before: Jun 15 22:03:46 2024 GMT
            Not After : Jun 16 22:03:46 2024 GMT
        Subject: CN=78b49ebe63a29a75ef59d53d40796e0eafa37549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:fe:8b:5f:64:e7:93:a1:af:aa:fe:5b:76:
                    cd:fb:1c:87:59:d8:0b:ce:77:53:a5:97:37:a2:b9:
                    bb:12:70:93:4a:d2:db:9b:7a:ec:70:ba:de:2b:34:
                    f0:12:4a:54:4f:c1:0f:4b:73:5d:6f:bb:18:f9:27:
                    86:96:a4:4b:48:73:94:36:88:aa:e1:ca:61:52:37:
                    9a:30:36:db:ad:3d:7b:df:b6:e3:71:90:35:64:43:
                    bf:89:15:d5:b2:17:48:56:f5:3d:61:b7:27:28:be:
                    62:f4:a1:9a:14:31:4f:a9:10:f0:63:39:af:fb:ad:
                    d0:d0:f6:db:21:f7:3b:7f:80:d3:1a:d1:32:83:68:
                    1b:e7:60:70:cf:aa:cd:b3:fd:2f:e2:01:d6:c6:7b:
                    fc:5a:9e:c0:cd:d7:a2:82:a1:c9:14:db:5e:92:42:
                    ee:9f:5d:6e:43:0c:cb:dd:2c:bc:bb:be:c6:4f:05:
                    89:09:93:4f:85:50:04:4f:b4:a7:4a:56:c1:b1:1c:
                    28:6c:e3:43:43:93:dc:4a:ef:8e:82:e4:71:01:ec:
                    08:0c:ef:63:14:c8:8b:ee:da:ca:7a:b6:5d:b4:31:
                    80:54:6d:0b:72:3b:72:48:5e:45:64:fd:e1:f4:8d:
                    d8:39:b4:4c:2a:02:18:3e:d0:25:5b:5c:cd:d0:bf:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B4:9E:BE:63:A2:9A:75:EF:59:D5:3D:40:79:6E:0E:AF:A3:75:49
            X509v3 Authority Key Identifier:
                keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:2a:d3:1a:ac:c5:ce:4d:0f:8a:13:1b:6d:1a:bf:0e:a2:4f:
         53:fb:8d:91:01:88:23:89:48:72:e0:cc:43:c8:15:5c:16:5a:
         11:f0:6b:2d:48:ef:33:fa:e8:3d:70:32:04:0a:0c:a3:b3:71:
         0a:8b:dd:7e:ee:13:84:de:bb:62:81:04:6a:0c:dd:68:04:89:
         0e:4e:1f:91:91:97:b3:db:15:79:31:cc:80:9f:08:94:66:7e:
         9d:f1:9a:df:3f:d7:5f:5e:fc:46:16:0f:df:63:88:d0:d5:3a:
         58:d4:bb:1d:25:41:d8:7f:3d:06:87:7d:bb:f9:45:46:54:12:
         98:33:1c:b9:60:b1:9a:0b:8b:a8:b3:fe:2d:19:e8:23:97:a0:
         32:89:ff:16:ad:11:6b:57:61:bc:d6:f5:14:6c:b3:a0:4e:9a:
         e6:f0:b8:4e:1f:78:5c:f5:c1:e0:8d:44:5f:4a:97:bd:fd:82:
         f8:a0:07:f9:bc:58:3f:8d:55:b6:c6:60:72:cd:85:9d:bf:58:
         c3:23:15:31:b3:1b:e3:74:2d:83:2a:04:7b:51:a9:da:95:1d:
         e9:34:88:be:60:9c:7f:2a:60:1f:ef:36:d8:c8:e1:12:52:51:
         23:ce:ce:6c:08:25:43:1c:da:ed:e1:df:e9:f8:e8:ad:7c:c4:
         29:7b:bb:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7ZBiLIcu+2WwpStGduccMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMDEyYmY4ZjU3MjQ4NGE2ZjYwNjg1NjJjYTk5MTljNmRh
NTQ0NmYwHhcNMjQwNjE1MjIwMzQ2WhcNMjQwNjE2MjIwMzQ2WjAzMTEwLwYDVQQD
Eyg3OGI0OWViZTYzYTI5YTc1ZWY1OWQ1M2Q0MDc5NmUwZWFmYTM3NTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDT+i19k55Ohr6r+W3bN+xyHWdgL
zndTpZc3orm7EnCTStLbm3rscLreKzTwEkpUT8EPS3Ndb7sY+SeGlqRLSHOUNoiq
4cphUjeaMDbbrT1737bjcZA1ZEO/iRXVshdIVvU9YbcnKL5i9KGaFDFPqRDwYzmv
+63Q0PbbIfc7f4DTGtEyg2gb52Bwz6rNs/0v4gHWxnv8Wp7AzdeigqHJFNtekkLu
n11uQwzL3Sy8u77GTwWJCZNPhVAET7SnSlbBsRwobONDQ5PcSu+OguRxAewIDO9j
FMiL7trKerZdtDGAVG0LcjtySF5FZP3h9I3YObRMKgIYPtAlW1zN0L+waQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHi0nr5jopp171nVPUB5bg6vo3VJMB8GA1UdIwQY
MBaAFNABK/j1ckhKb2BoViypkZxtpURvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQt
ODQ3N2I2NjM4ZjMxLzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQtODQ3N2I2NjM4ZjMx
LzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSrTGqzF
zk0PihMbbRq/DqJPU/uNkQGII4lIcuDMQ8gVXBZaEfBrLUjvM/roPXAyBAoMo7Nx
Covdfu4ThN67YoEEagzdaASJDk4fkZGXs9sVeTHMgJ8IlGZ+nfGa3z/XX178RhYP
32OI0NU6WNS7HSVB2H89Bod9u/lFRlQSmDMcuWCxmguLqLP+LRnoI5egMon/Fq0R
a1dhvNb1FGyzoE6a5vC4Th94XPXB4I1EX0qXvf2C+KAH+bxYP41VtsZgcs2Fnb9Y
wyMVMbMb43QtgyoEe1Gp2pUd6TSIvmCcfypgH+822MjhElJRI87ObAglQxza7eHf
6fjorXzEKXu7qA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:51:42 2024 by rpki-client on console-fra.rpki-client.org