Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
File:                     eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft (raw, json)
Hash identifier:          jps6746cA4BdyY2U1DrgeeAC/XCenoEQX3CTeIK2vts=
Subject key identifier:   6D:AE:FA:DB:B4:0D:9E:93:9E:D3:8E:7B:85:20:20:99:17:1E:80:68
Authority key identifier: 79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2
Certificate issuer:       /CN=796d29ee381b51f645e05415668d92a9ce7a8dd2
Certificate serial:       01901E8FFF0AD67622421621D33BD6C1020C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 01:01:11 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:11 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:11 +0000
Files and hashes:         1: PyAKYVSicKvkylCE-YNZuEfxY0k.roa (hash: pzp1i6rnPpoGcAUagba0AFLjxJ/O4QFDR8S0Vyxpz78=)
                          2: eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl (hash: kXgtAfMMs07lDnRSzPV+NYR5ZmU0mz0pS46PV45pkI8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:ff:0a:d6:76:22:42:16:21:d3:3b:d6:c1:02:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796d29ee381b51f645e05415668d92a9ce7a8dd2
        Validity
            Not Before: Jun 16 01:01:11 2024 GMT
            Not After : Jun 17 01:01:11 2024 GMT
        Subject: CN=6daefadbb40d9e939ed38e7b85202099171e8068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:e1:31:93:db:4f:dd:63:0c:4b:05:fd:e2:
                    ad:c4:c6:c0:4a:8b:c7:ea:cb:e5:42:0a:61:67:d9:
                    85:fb:59:b5:cc:0a:81:da:74:95:ef:4c:4d:14:6b:
                    0d:c2:ea:c4:06:84:5e:27:98:8b:a7:89:b2:d8:95:
                    d1:e0:12:82:6c:79:8e:52:13:ab:53:9a:fc:92:39:
                    10:d9:27:9e:7a:e9:36:37:bb:14:d4:69:2c:c1:3f:
                    aa:08:3f:b5:5b:7d:55:3d:6c:16:33:63:29:3a:ef:
                    ab:1a:b8:58:8f:57:4a:6b:f4:4b:3f:59:7d:88:46:
                    da:fd:92:3d:ee:30:9e:30:60:d1:56:b3:a6:33:48:
                    8f:51:f0:81:a4:29:fa:1a:6e:be:f1:e9:7e:84:bc:
                    49:ec:13:75:16:76:7b:03:f3:c7:34:90:7b:7c:57:
                    68:14:18:c5:96:44:9f:c7:c5:9f:0a:1f:72:bd:11:
                    41:1e:c0:16:64:63:b9:65:24:80:08:47:95:12:44:
                    1e:13:7d:3e:2b:0b:58:43:d8:62:a2:2e:51:99:40:
                    2e:7b:a0:ff:a8:f3:7c:da:66:bc:6f:6b:40:58:41:
                    71:da:89:b2:a9:24:6f:57:00:5b:66:7b:e5:dd:57:
                    e5:37:dd:d5:ee:8a:6c:33:37:6c:ec:73:fe:99:3a:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AE:FA:DB:B4:0D:9E:93:9E:D3:8E:7B:85:20:20:99:17:1E:80:68
            X509v3 Authority Key Identifier:
                keyid:79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:21:13:b1:64:53:eb:a0:10:55:a7:f7:14:81:60:f4:5d:f8:
         83:07:7a:f1:f9:61:43:8a:cc:ed:2e:c3:f3:9a:03:24:52:d4:
         ce:ab:d1:7b:0d:fb:41:64:32:da:19:af:3a:62:96:07:e8:39:
         2b:ab:1f:cc:65:c1:c8:c5:65:bc:45:41:83:f5:46:9e:24:09:
         00:f9:12:59:8a:06:4a:a9:e0:5d:ae:d6:b7:86:9d:e0:18:8a:
         59:ef:9f:e9:9b:6c:4e:9e:7e:a5:80:6f:e5:60:19:5b:95:ea:
         2f:4b:b4:3c:59:08:b6:3a:ef:cd:4f:71:05:a2:d8:50:04:98:
         39:59:4e:5f:f9:1d:b8:0e:e9:62:1b:b0:ca:12:08:6d:58:7e:
         5e:87:6c:ad:cf:f0:fe:78:f6:fe:07:a5:bf:82:04:54:05:41:
         3a:d5:bd:a8:f3:62:5b:07:6f:fe:12:f4:ba:97:c6:31:fd:46:
         88:4a:d2:46:41:c1:48:9c:4a:23:aa:b4:8f:82:60:46:fc:3d:
         ce:51:f1:31:e5:aa:fc:aa:13:ea:81:e0:e3:d8:d5:74:00:30:
         01:b3:42:5d:28:f6:57:37:9c:9e:a0:4b:ad:93:6f:2a:f4:61:
         fd:7f:79:ac:72:c0:fc:74:9e:17:99:f9:1c:0f:61:91:58:c3:
         d8:76:a5:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej/8K1nYiQhYh0zvWwQIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NmQyOWVlMzgxYjUxZjY0NWUwNTQxNTY2OGQ5MmE5Y2U3
YThkZDIwHhcNMjQwNjE2MDEwMTExWhcNMjQwNjE3MDEwMTExWjAzMTEwLwYDVQQD
Eyg2ZGFlZmFkYmI0MGQ5ZTkzOWVkMzhlN2I4NTIwMjA5OTE3MWU4MDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwnhMZPbT91jDEsF/eKtxMbASovH
6svlQgphZ9mF+1m1zAqB2nSV70xNFGsNwurEBoReJ5iLp4my2JXR4BKCbHmOUhOr
U5r8kjkQ2Seeeuk2N7sU1GkswT+qCD+1W31VPWwWM2MpOu+rGrhYj1dKa/RLP1l9
iEba/ZI97jCeMGDRVrOmM0iPUfCBpCn6Gm6+8el+hLxJ7BN1FnZ7A/PHNJB7fFdo
FBjFlkSfx8WfCh9yvRFBHsAWZGO5ZSSACEeVEkQeE30+KwtYQ9hioi5RmUAue6D/
qPN82ma8b2tAWEFx2omyqSRvVwBbZnvl3VflN93V7opsMzds7HP+mToS+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2u+tu0DZ6TntOOe4UgIJkXHoBoMB8GA1UdIwQY
MBaAFHltKe44G1H2ReBUFWaNkqnOeo3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yYjhiMmQtYzAyMy00ZGZiLWE1MDQt
NDFmNjJkYTRlZGFiLzEvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8yYjhiMmQtYzAyMy00ZGZiLWE1MDQtNDFmNjJkYTRlZGFi
LzEvZVcwcDdqZ2JVZlpGNEZRVlpvMlNxYzU2amRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSETsWRT
66AQVaf3FIFg9F34gwd68flhQ4rM7S7D85oDJFLUzqvRew37QWQy2hmvOmKWB+g5
K6sfzGXByMVlvEVBg/VGniQJAPkSWYoGSqngXa7Wt4ad4BiKWe+f6ZtsTp5+pYBv
5WAZW5XqL0u0PFkItjrvzU9xBaLYUASYOVlOX/kduA7pYhuwyhIIbVh+Xodsrc/w
/nj2/gelv4IEVAVBOtW9qPNiWwdv/hL0upfGMf1GiErSRkHBSJxKI6q0j4JgRvw9
zlHxMeWq/KoT6oHg49jVdAAwAbNCXSj2VzecnqBLrZNvKvRh/X95rHLA/HSeF5n5
HA9hkVjD2Hal3w==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:59:11 2024 by rpki-client on console-ams.rpki-client.org