Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
File:                     7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft (raw, json)
Hash identifier:          c67L9EUjZjNlZTcmCscOBKLkxnHuwK4EPgrRTl1yCJU=
Subject key identifier:   A3:A1:05:1C:E2:B8:05:78:07:EB:66:E0:5A:78:25:F9:EC:99:7F:23
Authority key identifier: EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
Certificate issuer:       /CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Certificate serial:       01901E58BF1BABF44D05605921C2EF57E0FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 00:00:50 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:50 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:50 +0000
Files and hashes:         1: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl (hash: vdJvcBmTqVaDiGT/Ul5h0nvQX+Xv2QtjMb12g5LJBOg=)
                          2: Oyb2jvlBpEFJaRJcilVS7M0RinQ.roa (hash: amwi0biJkfyXTYCvNWhejnSbHkumqzfgfl4EbVshDyc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:bf:1b:ab:f4:4d:05:60:59:21:c2:ef:57:e0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
        Validity
            Not Before: Jun 16 00:00:50 2024 GMT
            Not After : Jun 17 00:00:50 2024 GMT
        Subject: CN=a3a1051ce2b8057807eb66e05a7825f9ec997f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:ab:06:3c:7e:12:a3:f7:48:5e:d4:0e:8d:
                    08:f6:28:77:24:61:e0:5f:9a:30:7a:01:70:37:0c:
                    e2:d3:24:b6:6f:e2:12:3d:b6:eb:68:ab:06:47:ce:
                    18:2c:2c:20:f0:ce:8e:c6:00:2d:1a:3b:50:dd:65:
                    8a:07:cf:33:b3:0e:72:7b:75:f0:b4:5c:c3:79:c2:
                    10:33:22:4d:c9:cd:79:fd:46:70:23:58:cb:76:37:
                    a2:f3:8f:10:73:d3:bc:af:3b:68:8d:0c:53:47:b3:
                    2f:61:63:b9:f5:7b:1e:16:d1:bb:38:b7:42:28:d6:
                    cf:4a:8a:c4:a2:61:63:fd:c9:cd:49:ff:7b:a0:3f:
                    1e:32:c5:a9:3a:f9:a8:e0:14:39:29:09:2f:e1:e5:
                    9e:cc:f2:5c:cc:6d:09:71:71:65:9b:f2:5a:0a:7b:
                    57:9d:d1:2d:59:b1:0c:5f:8c:cd:89:03:8e:43:c2:
                    2d:28:07:ef:1a:6f:35:3c:62:0a:82:2e:89:aa:0d:
                    c3:65:56:be:ea:8d:83:2e:36:a7:d4:f1:a5:e0:83:
                    3c:36:c5:3d:33:94:d5:67:da:c5:f8:fd:5b:a9:ad:
                    fd:d9:23:82:39:1a:94:88:74:19:fb:8e:eb:2b:91:
                    c1:78:e3:db:c4:31:64:04:9f:85:ac:cc:9d:96:6e:
                    06:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A1:05:1C:E2:B8:05:78:07:EB:66:E0:5A:78:25:F9:EC:99:7F:23
            X509v3 Authority Key Identifier:
                keyid:EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:6b:fd:d2:63:a3:69:5b:bb:30:52:29:49:75:14:3e:15:f0:
         be:cd:da:98:a2:40:2b:78:b5:3f:cb:ef:74:a6:2d:47:f0:ff:
         68:88:19:37:ac:ca:b9:24:4b:30:f3:e8:2b:20:28:27:8e:e7:
         a8:47:76:1e:49:3e:52:fd:1a:14:d7:a0:20:1e:40:a3:bd:24:
         80:24:53:5d:2b:10:1f:98:ca:42:b1:17:63:f9:b2:1a:50:d7:
         6e:bb:ac:45:ca:4b:cc:1f:63:aa:9d:de:1b:19:8d:47:92:5d:
         66:c7:13:55:e9:db:87:e2:01:6b:db:40:ce:56:8a:c5:ff:3c:
         89:af:06:fd:b8:b2:52:d9:12:a9:f6:3b:8c:4c:6c:5b:7d:6d:
         44:4e:e5:a4:91:74:ef:c4:0d:ca:27:13:99:78:63:62:bb:ed:
         a8:c9:f3:a5:91:ed:37:e1:e4:1c:85:0a:22:93:cf:0f:2c:d8:
         fa:02:46:bc:b7:3c:82:96:7d:66:4d:f4:dd:34:59:64:f5:77:
         d2:7e:04:5f:d5:f4:50:f2:06:d2:57:48:2e:31:54:50:03:20:
         48:1d:e4:ab:e7:6d:f5:01:54:d0:87:23:da:27:56:3c:f1:8b:
         aa:eb:32:64:f8:ac:ad:0b:7a:39:13:6f:19:a3:e8:2e:4d:5f:
         4f:ee:6b:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWL8bq/RNBWBZIcLvV+D9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOTdiNzJkNWQ0Zjc1MGYxYjEzOGMyYTkwMWRkNjUxMDky
MWJlNDEwHhcNMjQwNjE2MDAwMDUwWhcNMjQwNjE3MDAwMDUwWjAzMTEwLwYDVQQD
EyhhM2ExMDUxY2UyYjgwNTc4MDdlYjY2ZTA1YTc4MjVmOWVjOTk3ZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvCrBjx+EqP3SF7UDo0I9ih3JGHg
X5owegFwNwzi0yS2b+ISPbbraKsGR84YLCwg8M6OxgAtGjtQ3WWKB88zsw5ye3Xw
tFzDecIQMyJNyc15/UZwI1jLdjei848Qc9O8rztojQxTR7MvYWO59XseFtG7OLdC
KNbPSorEomFj/cnNSf97oD8eMsWpOvmo4BQ5KQkv4eWezPJczG0JcXFlm/JaCntX
ndEtWbEMX4zNiQOOQ8ItKAfvGm81PGIKgi6Jqg3DZVa+6o2DLjan1PGl4IM8NsU9
M5TVZ9rF+P1bqa392SOCORqUiHQZ+47rK5HBeOPbxDFkBJ+FrMydlm4GTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOhBRziuAV4B+tm4Fp4JfnsmX8jMB8GA1UdIwQY
MBaAFOyXty1dT3UPGxOMKpAd1lEJIb5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0plM0xWMVBkUThiRTR3cWtCM1dVUWtodmtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lZjk4NjAtMjY1OC00NGRmLWIxNzIt
ODA2NmZhMjEyNDFhLzEvN0plM0xWMVBkUThiRTR3cWtCM1dVUWtodmtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lZjk4NjAtMjY1OC00NGRmLWIxNzItODA2NmZhMjEyNDFh
LzEvN0plM0xWMVBkUThiRTR3cWtCM1dVUWtodmtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwGv90mOj
aVu7MFIpSXUUPhXwvs3amKJAK3i1P8vvdKYtR/D/aIgZN6zKuSRLMPPoKyAoJ47n
qEd2Hkk+Uv0aFNegIB5Ao70kgCRTXSsQH5jKQrEXY/myGlDXbrusRcpLzB9jqp3e
GxmNR5JdZscTVenbh+IBa9tAzlaKxf88ia8G/biyUtkSqfY7jExsW31tRE7lpJF0
78QNyicTmXhjYrvtqMnzpZHtN+HkHIUKIpPPDyzY+gJGvLc8gpZ9Zk303TRZZPV3
0n4EX9X0UPIG0ldILjFUUAMgSB3kq+dt9QFU0Icj2idWPPGLqusyZPisrQt6ORNv
GaPoLk1fT+5rrA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:55:29 2024 by rpki-client on console-ams.rpki-client.org