Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
File:                     BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json)
Hash identifier:          2UdicQFF6xiK0cD39ZuHmrrwKmAb44vOFT5Y9NU+Sq4=
Subject key identifier:   86:82:2E:F8:46:46:46:62:81:F6:E5:D4:20:18:A3:88:BF:24:73:1A
Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
Certificate issuer:       /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Certificate serial:       01901DED79488C71B3475975D5BEB3126E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 22:03:40 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:40 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:40 +0000
Files and hashes:         1: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: SMwa73kO2Uq2LizHipOaVuO8thJeAPCrmy7DvEPxHOs=)
                          2: DA-nG2qYoNaaAXsMEsfrN5Ia7fI.roa (hash: luCtxZU9xLle1nqx6VdPadkV42KLEpL+a14SwEQG4UQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:79:48:8c:71:b3:47:59:75:d5:be:b3:12:6e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
        Validity
            Not Before: Jun 15 22:03:40 2024 GMT
            Not After : Jun 16 22:03:40 2024 GMT
        Subject: CN=86822ef84646466281f6e5d42018a388bf24731a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:54:f6:f2:60:17:a2:bc:eb:37:e4:92:d1:c7:
                    9f:c0:71:e1:df:af:8b:8f:dd:92:a7:6f:2d:b5:67:
                    36:c6:30:73:69:a0:97:82:cd:f8:7b:55:43:49:81:
                    3d:57:97:03:43:1a:9a:f7:4c:ca:12:af:16:e1:7f:
                    27:16:c4:9e:38:24:c0:36:01:ce:87:4a:d6:ad:74:
                    42:d7:56:2e:4a:4f:11:75:cf:ff:40:19:4d:9a:40:
                    a5:f9:c2:2a:a0:46:6b:20:b7:9f:be:90:ae:55:02:
                    4d:d6:dd:f8:19:58:88:7c:91:e7:d6:ce:53:68:48:
                    c4:99:2b:0c:27:68:94:55:3f:09:33:3d:96:b0:ac:
                    b6:ab:f0:9e:44:01:cc:0b:2c:86:dd:e9:94:71:39:
                    90:a4:c7:ca:9c:75:81:84:73:08:20:3d:03:2d:a0:
                    77:51:8e:1d:c2:a3:23:97:98:7e:4f:c3:94:bf:cc:
                    8e:c8:a3:cc:db:49:d1:22:64:a9:47:5b:31:3c:90:
                    a7:bf:8b:c0:ea:80:74:b1:45:7b:67:a9:fc:1c:13:
                    93:82:38:43:0b:ab:89:35:3e:e4:ca:3a:17:53:1d:
                    e9:f4:11:7f:2a:e5:89:1b:9e:f8:b3:07:06:1e:c1:
                    ec:ed:65:f4:1b:01:38:eb:c8:79:93:a1:a0:aa:73:
                    69:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:82:2E:F8:46:46:46:62:81:F6:E5:D4:20:18:A3:88:BF:24:73:1A
            X509v3 Authority Key Identifier:
                keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:46:e3:be:59:58:a8:32:91:72:e0:cf:d0:a8:53:c4:c4:14:
         ea:41:14:e2:ed:d3:85:b4:df:9f:70:58:0f:66:50:42:df:d9:
         53:9d:15:6d:c4:2a:fd:67:a1:b0:1a:7d:20:27:37:c0:2f:52:
         ee:88:90:28:d6:b7:a5:fe:60:a8:38:e0:34:56:19:80:c2:69:
         4d:34:8a:d5:40:97:46:b8:45:a5:76:f6:83:b0:ed:ad:23:ba:
         38:0e:17:90:e4:3b:1e:d8:10:f5:8b:e1:af:d8:02:d1:da:3f:
         cb:d1:e7:74:cd:73:36:ad:5e:b1:e6:e0:77:b0:03:98:1d:6b:
         69:49:5e:9f:b2:18:24:39:9f:72:5e:c7:d6:59:01:b1:78:28:
         37:de:d5:1b:80:82:89:0f:da:02:c1:97:37:18:80:52:6d:bc:
         e8:90:3f:80:91:41:d0:a2:b0:b5:75:96:2d:de:5e:4a:79:b2:
         0b:6f:8e:69:78:6b:32:db:73:67:e1:df:7f:1f:3e:a5:0a:16:
         06:1d:81:50:b2:38:d1:a2:b5:74:bb:3f:31:f5:83:91:80:dd:
         6f:49:ab:a3:48:73:ca:21:a0:2b:f0:9b:25:bb:9b:39:bb:84:
         a7:4d:c5:d3:4a:93:5d:ce:d8:2c:6f:22:07:99:1c:79:f0:45:
         d0:50:06:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7XlIjHGzR1l11b6zEm4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZTFkMDdkZTZmMTI4ZjQ2OWM0YzNiMzAyOGFkZjhkNGQz
N2UyZDkwHhcNMjQwNjE1MjIwMzQwWhcNMjQwNjE2MjIwMzQwWjAzMTEwLwYDVQQD
Eyg4NjgyMmVmODQ2NDY0NjYyODFmNmU1ZDQyMDE4YTM4OGJmMjQ3MzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFT28mAXorzrN+SS0cefwHHh36+L
j92Sp28ttWc2xjBzaaCXgs34e1VDSYE9V5cDQxqa90zKEq8W4X8nFsSeOCTANgHO
h0rWrXRC11YuSk8Rdc//QBlNmkCl+cIqoEZrILefvpCuVQJN1t34GViIfJHn1s5T
aEjEmSsMJ2iUVT8JMz2WsKy2q/CeRAHMCyyG3emUcTmQpMfKnHWBhHMIID0DLaB3
UY4dwqMjl5h+T8OUv8yOyKPM20nRImSpR1sxPJCnv4vA6oB0sUV7Z6n8HBOTgjhD
C6uJNT7kyjoXUx3p9BF/KuWJG574swcGHsHs7WX0GwE468h5k6GgqnNpZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaCLvhGRkZigfbl1CAYo4i/JHMaMB8GA1UdIwQY
MBaAFAXh0H3m8Sj0acTDswKK341NN+LZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85Y2U4ZjUtZmVkMi00N2VhLTgzYjMt
OGQxM2Y3YjNmMTQyLzEvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85Y2U4ZjUtZmVkMi00N2VhLTgzYjMtOGQxM2Y3YjNmMTQy
LzEvQmVIUWZlYnhLUFJweE1PekFvcmZqVTAzNHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUbjvllY
qDKRcuDP0KhTxMQU6kEU4u3ThbTfn3BYD2ZQQt/ZU50VbcQq/WehsBp9ICc3wC9S
7oiQKNa3pf5gqDjgNFYZgMJpTTSK1UCXRrhFpXb2g7DtrSO6OA4XkOQ7HtgQ9Yvh
r9gC0do/y9HndM1zNq1esebgd7ADmB1raUlen7IYJDmfcl7H1lkBsXgoN97VG4CC
iQ/aAsGXNxiAUm286JA/gJFB0KKwtXWWLd5eSnmyC2+OaXhrMttzZ+Hffx8+pQoW
Bh2BULI40aK1dLs/MfWDkYDdb0mro0hzyiGgK/CbJbubObuEp03F00qTXc7YLG8i
B5kcefBF0FAGjw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:04:49 2024 by rpki-client on console-fra.rpki-client.org