Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0846e2-337d-4f13-9fd3-651c939f30d6/1/eG1k6uSinGZdwGXVPjxg08MZDXM.mft
File:                     eG1k6uSinGZdwGXVPjxg08MZDXM.mft (raw, json)
Hash identifier:          itQcFVtQfKUo4+F8aC5PO4UFKLEpI/Gwsy+/k8S7NiI=
Subject key identifier:   EC:F7:1D:0E:8E:0C:12:6F:0B:8D:6B:34:AC:27:B6:9A:9E:AF:C6:95
Authority key identifier: 78:6D:64:EA:E4:A2:9C:66:5D:C0:65:D5:3E:3C:60:D3:C3:19:0D:73
Certificate issuer:       /CN=786d64eae4a29c665dc065d53e3c60d3c3190d73
Certificate serial:       0190158D00F42428138CC6A5F3E7F95FCB38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eG1k6uSinGZdwGXVPjxg08MZDXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/0846e2-337d-4f13-9fd3-651c939f30d6/1/eG1k6uSinGZdwGXVPjxg08MZDXM.mft
Manifest number:          0999
Signing time:             Fri 14 Jun 2024 07:01:20 +0000
Manifest this update:     Fri 14 Jun 2024 07:01:20 +0000
Manifest next update:     Sat 15 Jun 2024 07:01:20 +0000
Files and hashes:         1: eG1k6uSinGZdwGXVPjxg08MZDXM.crl (hash: 3lyWsu7VdS0zAsE8KNY8pI19uQ4snODRMtpgyStj+VY=)
                          2: uGBPF4acr18v0HJIv2tWyBJgxLk.roa (hash: z493XN3EeZQUQkSfFHeE59XtoHgJr+bwK51ivIMNDd4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/0846e2-337d-4f13-9fd3-651c939f30d6/1/eG1k6uSinGZdwGXVPjxg08MZDXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/0846e2-337d-4f13-9fd3-651c939f30d6/1/eG1k6uSinGZdwGXVPjxg08MZDXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eG1k6uSinGZdwGXVPjxg08MZDXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Jun 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:15:8d:00:f4:24:28:13:8c:c6:a5:f3:e7:f9:5f:cb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786d64eae4a29c665dc065d53e3c60d3c3190d73
        Validity
            Not Before: Jun 14 07:01:20 2024 GMT
            Not After : Jun 15 07:01:20 2024 GMT
        Subject: CN=ecf71d0e8e0c126f0b8d6b34ac27b69a9eafc695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:be:d7:1f:fb:5d:25:a3:7b:d6:9d:db:36:fb:
                    56:5c:c3:09:4a:09:c9:e9:29:ad:12:8c:75:38:54:
                    eb:d1:f3:4e:31:79:03:54:08:db:4f:56:7b:1c:7a:
                    e8:73:7b:df:58:df:58:f0:52:66:27:ae:cd:b3:bf:
                    fc:8e:3c:aa:25:d6:e6:6c:d6:ed:9c:9a:25:b8:71:
                    1a:3a:99:77:a1:d2:7f:ed:b8:c9:ba:98:05:d9:e6:
                    23:c0:ce:41:ea:28:2e:32:47:04:da:30:29:07:b9:
                    27:0f:1e:41:f1:3b:dd:a9:51:3f:3e:89:7e:41:2a:
                    d6:18:3d:50:89:19:20:fc:db:f1:fc:e2:c3:c6:93:
                    6a:ee:9e:05:e5:fb:59:5a:ed:19:ca:e4:c8:f2:ef:
                    23:0e:ca:61:a3:60:ad:6f:69:19:56:1c:0a:55:c8:
                    e0:51:e3:04:91:0d:68:77:20:11:f6:99:b3:bf:4a:
                    6f:04:31:48:11:da:65:4c:7f:6f:de:09:3e:3f:46:
                    06:c8:79:e9:64:ba:76:d4:80:ee:a6:8a:2d:cf:bb:
                    10:9e:e0:17:20:ff:ed:ff:7b:9c:04:6c:d2:3e:d5:
                    81:03:d4:c2:44:1a:fb:b8:e6:78:05:ea:06:cb:86:
                    e4:ac:5f:9d:d8:07:61:d9:d3:be:c0:70:d7:eb:b2:
                    65:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F7:1D:0E:8E:0C:12:6F:0B:8D:6B:34:AC:27:B6:9A:9E:AF:C6:95
            X509v3 Authority Key Identifier:
                keyid:78:6D:64:EA:E4:A2:9C:66:5D:C0:65:D5:3E:3C:60:D3:C3:19:0D:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eG1k6uSinGZdwGXVPjxg08MZDXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0846e2-337d-4f13-9fd3-651c939f30d6/1/eG1k6uSinGZdwGXVPjxg08MZDXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0846e2-337d-4f13-9fd3-651c939f30d6/1/eG1k6uSinGZdwGXVPjxg08MZDXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8e:72:71:07:f6:87:b1:69:9b:9f:b2:0d:da:4c:fd:10:46:
         13:50:31:58:ec:49:2d:db:65:53:f2:97:5a:11:c7:58:e9:85:
         42:bf:31:55:1c:ed:32:21:82:9f:75:85:60:c7:ce:1e:c3:5b:
         a7:1a:c5:1e:ed:15:d8:d5:1c:a1:da:60:8d:63:f4:97:97:f1:
         a3:d4:5e:d7:07:74:4a:70:b4:db:6b:9b:8e:6e:6e:2c:a6:3b:
         ba:74:f5:17:63:cf:dc:11:3b:cf:03:9b:f5:cc:9b:4d:e8:a0:
         6a:9d:04:bb:44:cf:f5:9c:e6:87:18:b0:3f:94:8b:8d:0f:9c:
         0a:54:00:e0:f1:34:83:2e:49:3d:58:3a:6b:59:1e:ad:26:2c:
         34:43:26:20:33:01:40:5c:d1:d9:b1:d6:6f:5a:90:a0:92:5a:
         44:09:c3:95:e6:5e:63:ed:73:7c:82:b4:fe:5a:d2:87:91:d7:
         7c:36:64:68:29:81:a0:e2:e2:a6:b4:bf:95:ed:10:7f:46:88:
         20:80:e6:ee:f4:63:18:d2:26:c2:c0:d6:71:19:03:e5:e5:34:
         77:2d:3a:79:35:39:13:88:3d:77:47:46:aa:ea:39:ce:b9:fd:
         57:d8:26:ae:19:73:a5:b7:33:a9:8b:c1:d4:c7:3b:22:6d:be:
         90:b9:c4:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAVjQD0JCgTjMal8+f5X8s4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NmQ2NGVhZTRhMjljNjY1ZGMwNjVkNTNlM2M2MGQzYzMx
OTBkNzMwHhcNMjQwNjE0MDcwMTIwWhcNMjQwNjE1MDcwMTIwWjAzMTEwLwYDVQQD
EyhlY2Y3MWQwZThlMGMxMjZmMGI4ZDZiMzRhYzI3YjY5YTllYWZjNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L7XH/tdJaN71p3bNvtWXMMJSgnJ
6SmtEox1OFTr0fNOMXkDVAjbT1Z7HHroc3vfWN9Y8FJmJ67Ns7/8jjyqJdbmbNbt
nJoluHEaOpl3odJ/7bjJupgF2eYjwM5B6iguMkcE2jApB7knDx5B8TvdqVE/Pol+
QSrWGD1QiRkg/Nvx/OLDxpNq7p4F5ftZWu0ZyuTI8u8jDspho2Ctb2kZVhwKVcjg
UeMEkQ1odyAR9pmzv0pvBDFIEdplTH9v3gk+P0YGyHnpZLp21IDupootz7sQnuAX
IP/t/3ucBGzSPtWBA9TCRBr7uOZ4BeoGy4bkrF+d2Adh2dO+wHDX67JlIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOz3HQ6ODBJvC41rNKwntpqer8aVMB8GA1UdIwQY
MBaAFHhtZOrkopxmXcBl1T48YNPDGQ1zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUcxazZ1U2luR1pkd0dYVlBqeGcwOE1aRFhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wODQ2ZTItMzM3ZC00ZjEzLTlmZDMt
NjUxYzkzOWYzMGQ2LzEvZUcxazZ1U2luR1pkd0dYVlBqeGcwOE1aRFhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wODQ2ZTItMzM3ZC00ZjEzLTlmZDMtNjUxYzkzOWYzMGQ2
LzEvZUcxazZ1U2luR1pkd0dYVlBqeGcwOE1aRFhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhY5ycQf2
h7Fpm5+yDdpM/RBGE1AxWOxJLdtlU/KXWhHHWOmFQr8xVRztMiGCn3WFYMfOHsNb
pxrFHu0V2NUcodpgjWP0l5fxo9Re1wd0SnC022ubjm5uLKY7unT1F2PP3BE7zwOb
9cybTeigap0Eu0TP9ZzmhxiwP5SLjQ+cClQA4PE0gy5JPVg6a1kerSYsNEMmIDMB
QFzR2bHWb1qQoJJaRAnDleZeY+1zfIK0/lrSh5HXfDZkaCmBoOLiprS/le0Qf0aI
IIDm7vRjGNImwsDWcRkD5eU0dy06eTU5E4g9d0dGquo5zrn9V9gmrhlzpbczqYvB
1Mc7Im2+kLnELA==
-----END CERTIFICATE-----
Generated at Fri Jun 14 09:10:56 2024 by rpki-client on console-ams.rpki-client.org