Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File:                     EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier:          5MpQaeCKbDYZjqho6W7z6dF7f6fkHYc96jImf5WKy1M=
Subject key identifier:   D6:61:4D:D7:96:E8:4F:8A:44:55:D1:2E:21:0C:AB:39:D6:94:9F:B1
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer:       /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial:       01901C3360B1A179288B00FF41504312EDF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number:          11E1
Signing time:             Sat 15 Jun 2024 14:00:47 +0000
Manifest this update:     Sat 15 Jun 2024 14:00:47 +0000
Manifest next update:     Sun 16 Jun 2024 14:00:47 +0000
Files and hashes:         1: AqsRllF6BfolPNfM6mzErEmlRQk.roa (hash: tqbvjvhSRkP/WnV7XLpjkJlf38EZFOWqAphMpzkJdOc=)
                          2: Bo6KC96n6jwXQXyXuc9vZsaItKw.roa (hash: +jhpezPZHZDbqy+edCNhEg2g4YO3PFhg5/SJTUrCSA0=)
                          3: CbKykKohRfcy7GHb1vxKWME43FA.roa (hash: 9rG8c7Q01wMSxcDMrnR9wI2V00Mh8nMIRd0bdRZbz5Y=)
                          4: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: pGUtPHDwmBjzOG2R24nphkhvih6oK+KJQU9CSaL3WkQ=)
                          5: USE8fmbdLlNmgrapZ97XqT0klKs.roa (hash: ef1xKU3sz5lv2CcHm3HWPmIXwWyNc31Ir0iOT9hhqdY=)
                          6: i4VevhW18cfeW1ITCN4ThXh8PNM.roa (hash: OQ6RB4BEAjMf6sxcEH7YfDoMZJ6ePLkElDEI9eK9zXI=)
                          7: s-z8gs9eDqhL3L3Zzzp6INANBCw.roa (hash: od3Bpl6BnM+FnxHlS8LuIuBrqEOjGLrYQ6cpGVT360w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:33:60:b1:a1:79:28:8b:00:ff:41:50:43:12:ed:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
        Validity
            Not Before: Jun 15 14:00:47 2024 GMT
            Not After : Jun 16 14:00:47 2024 GMT
        Subject: CN=d6614dd796e84f8a4455d12e210cab39d6949fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d8:73:08:a8:1d:f9:0b:b2:aa:df:c6:b3:00:
                    ad:74:8c:83:16:52:e8:9d:55:55:54:a0:c9:79:c5:
                    35:19:aa:f5:1e:6e:4a:95:55:17:4a:4b:06:29:71:
                    e6:bc:56:fc:b0:5d:8b:30:14:f7:76:5d:21:c0:af:
                    45:bb:b1:cf:d4:12:a1:23:a5:f2:ad:c2:f7:84:6c:
                    95:13:e7:f5:b8:a4:fd:35:4e:29:30:d9:33:b4:b0:
                    61:74:69:94:3b:2e:f4:af:58:de:7d:49:dc:08:a3:
                    4e:93:17:1f:a7:79:b9:f9:46:93:93:88:68:52:c2:
                    7c:9b:b9:2f:5d:70:b2:9e:bb:27:1a:f3:d7:a7:4e:
                    c4:b3:7d:23:9b:5c:95:03:e5:e2:4a:11:73:b1:65:
                    45:20:d8:14:9c:46:e1:ee:f4:76:59:89:45:8a:15:
                    fc:22:a0:80:6d:9c:ee:67:53:a5:45:7d:d5:a9:bc:
                    eb:2b:56:d2:ed:ca:f8:df:f4:d4:06:fc:cc:90:7f:
                    1e:e9:a3:c9:0c:50:1b:b1:2c:26:3d:e2:74:a1:52:
                    0b:99:bf:b2:41:56:83:b5:72:20:40:58:88:3d:8f:
                    f4:82:35:1f:20:09:d6:1b:ba:1a:39:fa:78:9d:05:
                    a5:1e:17:5e:05:77:20:f8:b8:f1:8a:4f:7c:d5:d7:
                    83:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:61:4D:D7:96:E8:4F:8A:44:55:D1:2E:21:0C:AB:39:D6:94:9F:B1
            X509v3 Authority Key Identifier:
                keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:78:78:49:89:ff:d7:31:a8:6b:7b:8b:7e:c7:df:fe:bc:d3:
         c6:d5:11:f8:04:92:68:93:e9:61:ab:6d:be:1f:9a:95:74:76:
         c2:5b:0e:d2:4e:a7:d3:b5:9e:7b:94:10:19:11:5d:96:fb:c7:
         ed:fd:8e:59:1f:3c:a2:b4:b8:bd:dc:f7:64:42:7d:44:b5:a6:
         3a:c3:6a:c9:ee:1a:a7:cc:97:7a:96:53:37:11:e6:ab:8a:dc:
         a9:85:a6:8b:3b:b8:ff:79:69:cf:0e:cd:90:9b:e1:0c:bb:36:
         06:ed:65:08:5d:d3:7a:f5:79:84:25:09:87:96:54:95:84:5b:
         b7:7f:ee:0d:4c:27:d4:23:4a:c1:48:13:fe:ac:20:b3:47:43:
         78:cf:a1:b3:15:00:13:62:53:e8:22:a5:84:f5:2a:96:79:db:
         0b:47:ee:e9:66:4a:5d:c9:17:8b:a7:a1:69:1f:5b:ec:4b:ad:
         e9:97:27:df:a7:5a:7b:09:20:ab:f1:22:f2:46:27:ff:6a:0d:
         b5:b1:a1:9e:4d:43:c8:5c:db:03:f8:68:c9:69:06:9b:9d:95:
         4b:2f:d7:5f:27:e0:c3:68:15:99:43:f0:d0:d7:d1:5b:60:18:
         bd:65:03:e1:55:1e:ce:d2:24:0e:3d:4c:f4:0b:4e:aa:8d:c3:
         b8:0f:aa:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcM2CxoXkoiwD/QVBDEu35MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMzIzMDNkMTYzOGUwNzM1MjQwNDkxYWFhOWU0MmIxODg3
YWRhY2EwHhcNMjQwNjE1MTQwMDQ3WhcNMjQwNjE2MTQwMDQ3WjAzMTEwLwYDVQQD
EyhkNjYxNGRkNzk2ZTg0ZjhhNDQ1NWQxMmUyMTBjYWIzOWQ2OTQ5ZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9hzCKgd+Quyqt/GswCtdIyDFlLo
nVVVVKDJecU1Gar1Hm5KlVUXSksGKXHmvFb8sF2LMBT3dl0hwK9Fu7HP1BKhI6Xy
rcL3hGyVE+f1uKT9NU4pMNkztLBhdGmUOy70r1jefUncCKNOkxcfp3m5+UaTk4ho
UsJ8m7kvXXCynrsnGvPXp07Es30jm1yVA+XiShFzsWVFINgUnEbh7vR2WYlFihX8
IqCAbZzuZ1OlRX3VqbzrK1bS7cr43/TUBvzMkH8e6aPJDFAbsSwmPeJ0oVILmb+y
QVaDtXIgQFiIPY/0gjUfIAnWG7oaOfp4nQWlHhdeBXcg+Ljxik981deDkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZhTdeW6E+KRFXRLiEMqznWlJ+xMB8GA1UdIwQY
MBaAFBIyMD0WOOBzUkBJGqqeQrGIetrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEt
MDY0NDE0ZDAzNDBmLzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEtMDY0NDE0ZDAzNDBm
LzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3h4SYn/
1zGoa3uLfsff/rzTxtUR+ASSaJPpYattvh+alXR2wlsO0k6n07Wee5QQGRFdlvvH
7f2OWR88orS4vdz3ZEJ9RLWmOsNqye4ap8yXepZTNxHmq4rcqYWmizu4/3lpzw7N
kJvhDLs2Bu1lCF3TevV5hCUJh5ZUlYRbt3/uDUwn1CNKwUgT/qwgs0dDeM+hsxUA
E2JT6CKlhPUqlnnbC0fu6WZKXckXi6ehaR9b7Eut6Zcn36daewkgq/Ei8kYn/2oN
tbGhnk1DyFzbA/hoyWkGm52VSy/XXyfgw2gVmUPw0NfRW2AYvWUD4VUeztIkDj1M
9AtOqo3DuA+q2g==
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:32:43 2024 by rpki-client on console-ams.rpki-client.org