Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File:                     XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier:          4+bS62fl6noymUPCfbe7alUMfPDEUjjZlVzBd0sWNps=
Subject key identifier:   05:E0:41:DB:11:97:F0:79:68:BB:D0:2B:17:19:31:B2:C6:8A:F1:97
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer:       /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial:       01901E8FA29F734026B0C4D4FEA498F56225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 01:00:48 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:48 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:48 +0000
Files and hashes:         1: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: BWNiwUUXuS+F0kIDvqGtsEhweu2VgSADiG0Y34wXvcU=)
                          2: pFbiqH-AVSDrlPibCAm8Tx_RqxA.roa (hash: vFuC/8HQDnoiduSFW3F9UL5SoiQWkcbKC8xi6F6oli4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:a2:9f:73:40:26:b0:c4:d4:fe:a4:98:f5:62:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
        Validity
            Not Before: Jun 16 01:00:48 2024 GMT
            Not After : Jun 17 01:00:48 2024 GMT
        Subject: CN=05e041db1197f07968bbd02b171931b2c68af197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:13:fb:0d:cf:53:26:c5:14:0c:9a:16:da:
                    c8:54:a2:c1:b3:fe:08:1b:5f:66:a9:c5:20:2f:d3:
                    f9:87:9e:70:12:68:70:04:b6:47:c1:02:54:78:8c:
                    e8:21:02:7b:a6:59:e9:47:ef:0e:74:6d:f1:9b:29:
                    16:0c:5a:99:a1:98:94:0a:8d:4a:d0:7a:cc:f9:10:
                    f5:08:88:69:52:13:28:a4:5d:35:b2:b2:25:11:41:
                    2b:78:75:88:76:cd:0f:f5:32:c8:51:09:a7:63:f1:
                    9d:68:6f:ea:78:13:f4:3b:c9:e2:22:99:f8:8c:c4:
                    57:42:44:06:2d:b0:53:55:d9:21:61:68:08:0c:f4:
                    c4:60:34:1b:de:13:78:8b:aa:9e:60:ac:9d:b1:5f:
                    63:15:65:28:e6:86:da:e5:60:30:e7:50:51:90:42:
                    72:97:0e:a9:8b:35:43:d8:44:37:33:0d:1b:11:a3:
                    4a:43:bb:a5:28:46:b5:ad:a9:8c:49:fe:f7:b3:09:
                    da:0c:c5:cb:e6:08:2c:18:c8:d4:5f:7b:03:34:90:
                    71:82:5a:c7:37:8f:9a:6b:73:0a:25:1c:60:54:1c:
                    75:2a:5d:60:2d:a4:14:66:ca:73:90:22:fb:31:24:
                    fb:8c:3a:88:c6:0f:27:00:41:8a:6d:3b:a1:e7:a7:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E0:41:DB:11:97:F0:79:68:BB:D0:2B:17:19:31:B2:C6:8A:F1:97
            X509v3 Authority Key Identifier:
                keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e0:68:a9:a0:c8:f0:ff:a0:78:c7:bc:75:d9:bf:33:de:e3:
         27:31:6f:cd:ec:74:77:72:a0:19:66:43:58:31:76:7f:cc:48:
         50:52:fa:76:3d:56:b9:e6:81:32:c6:8a:10:28:fb:e9:e6:ee:
         e8:9e:ad:89:f7:e4:4f:54:eb:7c:c4:53:63:82:da:62:bc:01:
         20:c0:41:1f:94:ec:bc:bd:c8:8b:b5:f3:e8:a3:1c:4e:98:0c:
         83:9d:93:68:51:71:9c:67:60:0d:35:0f:b8:92:61:e9:f6:3c:
         85:c1:a0:86:83:38:37:da:49:95:18:de:29:a0:9a:46:dc:48:
         c7:76:af:f8:1a:70:85:8d:04:6e:62:4b:5f:47:26:77:73:33:
         bb:af:47:32:dc:97:ab:71:05:fd:65:ae:34:4c:1c:9c:e7:32:
         19:80:f9:e1:e1:59:82:21:82:61:b1:d5:9e:73:b7:b0:6d:39:
         71:2a:38:4d:bc:2f:0d:3d:16:2b:59:a6:d3:a1:a5:e1:2d:e8:
         94:7a:54:fd:32:2b:85:2f:d9:dc:22:10:4b:62:4b:e6:95:b2:
         75:a6:bb:2d:d7:a4:e0:96:7f:04:c0:8d:28:e9:b0:0a:a1:18:
         df:d9:d1:74:21:1b:bc:9b:fe:77:8e:5a:e1:28:0b:38:f0:b0:
         33:fb:7f:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej6Kfc0AmsMTU/qSY9WIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZjVlZDA0MGVmZTJlNTgxNzU0ZGViNWMzY2Q4MmQ5OWRm
ZWU4ZDkwHhcNMjQwNjE2MDEwMDQ4WhcNMjQwNjE3MDEwMDQ4WjAzMTEwLwYDVQQD
EygwNWUwNDFkYjExOTdmMDc5NjhiYmQwMmIxNzE5MzFiMmM2OGFmMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk8T+w3PUybFFAyaFtrIVKLBs/4I
G19mqcUgL9P5h55wEmhwBLZHwQJUeIzoIQJ7plnpR+8OdG3xmykWDFqZoZiUCo1K
0HrM+RD1CIhpUhMopF01srIlEUEreHWIds0P9TLIUQmnY/GdaG/qeBP0O8niIpn4
jMRXQkQGLbBTVdkhYWgIDPTEYDQb3hN4i6qeYKydsV9jFWUo5oba5WAw51BRkEJy
lw6pizVD2EQ3Mw0bEaNKQ7ulKEa1ramMSf73swnaDMXL5ggsGMjUX3sDNJBxglrH
N4+aa3MKJRxgVBx1Kl1gLaQUZspzkCL7MST7jDqIxg8nAEGKbTuh56c2MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXgQdsRl/B5aLvQKxcZMbLGivGXMB8GA1UdIwQY
MBaAFF317QQO/i5YF1TetcPNgtmd/ujZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMt
YmVmZTRiMzRjNmYwLzEvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMtYmVmZTRiMzRjNmYw
LzEvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauBoqaDI
8P+geMe8ddm/M97jJzFvzex0d3KgGWZDWDF2f8xIUFL6dj1WueaBMsaKECj76ebu
6J6tiffkT1TrfMRTY4LaYrwBIMBBH5TsvL3Ii7Xz6KMcTpgMg52TaFFxnGdgDTUP
uJJh6fY8hcGghoM4N9pJlRjeKaCaRtxIx3av+BpwhY0EbmJLX0cmd3Mzu69HMtyX
q3EF/WWuNEwcnOcyGYD54eFZgiGCYbHVnnO3sG05cSo4TbwvDT0WK1mm06Gl4S3o
lHpU/TIrhS/Z3CIQS2JL5pWydaa7Ldek4JZ/BMCNKOmwCqEY39nRdCEbvJv+d45a
4SgLOPCwM/t/jA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:00:16 2024 by rpki-client on console-ams.rpki-client.org