Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
File:                     A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json)
Hash identifier:          eos8BqyK5ejisy7zSRY+HL/Or4fM9qtblUVWOQvoSYQ=
Subject key identifier:   CD:69:6A:04:94:92:25:A0:62:16:D3:EC:17:DC:0B:DB:7A:34:E8:40
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Certificate issuer:       /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial:       01901EC68D257320D91F2FF96E0F106DE184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
Manifest number:          0BC0
Signing time:             Sun 16 Jun 2024 02:00:46 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:46 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:46 +0000
Files and hashes:         1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: 934oxAqeMzxY6tNLcWTF4UFZIjguNHXRc9NAY/Phyw4=)
                          2: REcM1tZVxLJoXhs1p-nBsTmsWxo.roa (hash: gmLJ5AAEQWGAWXMZ78FYLEb7869uhdCGKs6yxHjx+y4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:8d:25:73:20:d9:1f:2f:f9:6e:0f:10:6d:e1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
        Validity
            Not Before: Jun 16 02:00:46 2024 GMT
            Not After : Jun 17 02:00:46 2024 GMT
        Subject: CN=cd696a04949225a06216d3ec17dc0bdb7a34e840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:35:6b:e0:c3:bc:63:79:16:c1:3a:d4:87:
                    89:48:3b:f5:ff:d0:ac:25:37:74:41:31:8b:fb:d1:
                    84:2a:10:1b:fd:1a:40:13:56:47:e6:ba:bb:a6:81:
                    30:0c:30:98:0e:3e:85:68:f7:d1:a8:d3:ae:e1:33:
                    34:5d:ef:ee:a8:d2:51:7a:c6:79:d7:79:70:6d:31:
                    0f:62:5e:8e:15:c1:fd:19:fa:8a:a1:0f:8e:d8:6d:
                    79:b7:64:d6:99:67:eb:7a:28:88:d3:c6:f2:3c:04:
                    66:f0:95:05:79:94:b4:60:41:44:d5:ea:4d:b5:d1:
                    85:06:db:d8:9d:f4:91:a1:13:a6:fd:9c:38:d6:97:
                    41:65:23:96:ac:f3:48:97:59:e4:9b:06:a4:14:f6:
                    26:0f:00:f7:a9:70:dd:a4:c1:c3:c2:71:27:84:dd:
                    56:0c:bc:52:78:cc:51:f2:14:55:82:a6:e3:14:bc:
                    52:ef:ce:31:df:4a:03:0f:35:e5:c3:e1:0f:78:ee:
                    f7:91:28:91:21:90:54:b3:6b:6f:52:b1:00:ab:e9:
                    a5:ae:b1:1a:aa:33:74:32:3a:36:ef:4d:94:58:27:
                    02:80:32:9c:dd:5d:14:69:2b:56:41:33:1e:51:80:
                    14:33:71:aa:f7:f3:ca:ac:5c:68:2d:94:ae:27:b8:
                    a9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:69:6A:04:94:92:25:A0:62:16:D3:EC:17:DC:0B:DB:7A:34:E8:40
            X509v3 Authority Key Identifier:
                keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f0:54:c8:4c:f7:29:7c:e6:2b:44:49:1c:58:a4:be:00:7c:
         c6:bc:f0:9b:32:53:d7:d0:37:2f:2c:b8:3a:d0:a4:9d:06:43:
         ef:69:0c:bd:e6:40:4a:8a:9f:3f:e9:ba:ec:4b:6a:23:f2:49:
         2a:e0:00:78:a1:ac:fd:57:3f:b9:17:38:40:1e:ab:35:81:39:
         ff:6c:f5:7d:10:4d:60:a8:8b:16:fe:b6:7b:ad:ce:01:35:5e:
         fb:da:ac:9f:55:e8:c4:8f:e4:09:89:e3:17:49:ff:98:c9:a6:
         02:63:59:e4:2b:3c:4a:84:2e:39:0e:79:3b:85:56:51:12:9c:
         a2:11:89:cd:0b:d7:63:c3:68:15:75:e0:6a:f4:42:56:d4:a7:
         93:b1:e6:89:78:c2:0c:60:85:13:9c:00:a8:f1:17:ad:5c:0f:
         05:ec:c3:9c:f5:c4:53:18:fa:ba:8c:a9:38:13:9c:c1:94:d4:
         56:32:2a:fb:ed:a3:36:5b:35:87:41:30:db:f6:62:2a:53:30:
         72:8e:8b:07:67:59:02:67:fb:aa:f7:6b:89:f2:78:21:e2:db:
         2b:c1:91:c6:9b:86:49:84:fa:e1:90:aa:6a:bf:74:21:77:c3:
         3f:6d:8d:ea:d5:18:d2:68:93:37:f5:32:e9:ce:66:c5:9c:36:
         90:36:a5:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexo0lcyDZHy/5bg8QbeGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYmNlZjk3NjY0MmQ1NGI0YjRhMTk5OGYwYjNmZjQ4ODQ1
YTkyNmQwHhcNMjQwNjE2MDIwMDQ2WhcNMjQwNjE3MDIwMDQ2WjAzMTEwLwYDVQQD
EyhjZDY5NmEwNDk0OTIyNWEwNjIxNmQzZWMxN2RjMGJkYjdhMzRlODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWM1a+DDvGN5FsE61IeJSDv1/9Cs
JTd0QTGL+9GEKhAb/RpAE1ZH5rq7poEwDDCYDj6FaPfRqNOu4TM0Xe/uqNJResZ5
13lwbTEPYl6OFcH9GfqKoQ+O2G15t2TWmWfreiiI08byPARm8JUFeZS0YEFE1epN
tdGFBtvYnfSRoROm/Zw41pdBZSOWrPNIl1nkmwakFPYmDwD3qXDdpMHDwnEnhN1W
DLxSeMxR8hRVgqbjFLxS784x30oDDzXlw+EPeO73kSiRIZBUs2tvUrEAq+mlrrEa
qjN0Mjo2702UWCcCgDKc3V0UaStWQTMeUYAUM3Gq9/PKrFxoLZSuJ7ipkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1pagSUkiWgYhbT7BfcC9t6NOhAMB8GA1UdIwQY
MBaAFAO875dmQtVLS0oZmPCz/0iEWpJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9jZjZiMDctMDNiMi00ZWJlLWI5NjYt
ZjFlOWJmMmJmZjIxLzEvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9jZjZiMDctMDNiMi00ZWJlLWI5NjYtZjFlOWJmMmJmZjIx
LzEvQTd6dmwyWkMxVXRMU2htWThMUF9TSVJha20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfBUyEz3
KXzmK0RJHFikvgB8xrzwmzJT19A3Lyy4OtCknQZD72kMveZASoqfP+m67EtqI/JJ
KuAAeKGs/Vc/uRc4QB6rNYE5/2z1fRBNYKiLFv62e63OATVe+9qsn1XoxI/kCYnj
F0n/mMmmAmNZ5Cs8SoQuOQ55O4VWURKcohGJzQvXY8NoFXXgavRCVtSnk7HmiXjC
DGCFE5wAqPEXrVwPBezDnPXEUxj6uoypOBOcwZTUVjIq++2jNls1h0Ew2/ZiKlMw
co6LB2dZAmf7qvdrifJ4IeLbK8GRxpuGSYT64ZCqar90IXfDP22N6tUY0miTN/Uy
6c5mxZw2kDalKg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:01:30 2024 by rpki-client on console-fra.rpki-client.org