Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File:                     2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier:          yVhY6aAzB8KZrXFLEnyZJvBc1RpQu6qtYvHboaXEf+E=
Subject key identifier:   28:C9:64:76:B3:85:91:6F:03:30:A0:EC:84:48:27:6D:62:61:06:53
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer:       /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial:       01901EC6A032B21CB9581C8312729554E062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number:          02EB
Signing time:             Sun 16 Jun 2024 02:00:51 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:51 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:51 +0000
Files and hashes:         1: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: A+Dkv9atnc/ByV2m8J2iKyCJJ/026eXfG/UECvr2+Ls=)
                          2: EG5hXkfnCx69G2LzumAxiWKN9ms.roa (hash: 3kJIgQxOl65B6VANA7tqvV4dS+VVwwDWirt8+6BmkaE=)
                          3: fIRU7Arx9qD9Y5ur2tEu2WRvr7I.roa (hash: ZlPk8Ajz/Qmyp1KRTC6xj2h/U9Da0PFCpMNUA88HDtk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:a0:32:b2:1c:b9:58:1c:83:12:72:95:54:e0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
        Validity
            Not Before: Jun 16 02:00:51 2024 GMT
            Not After : Jun 17 02:00:51 2024 GMT
        Subject: CN=28c96476b385916f0330a0ec8448276d62610653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f8:af:9c:a9:08:90:ca:78:13:fb:91:82:88:
                    bb:60:30:97:3d:9c:49:04:01:57:4c:23:32:c0:8c:
                    97:c6:4b:03:ae:43:e5:0e:b3:62:ce:aa:76:81:96:
                    47:bb:b6:06:f3:90:67:26:2e:df:5c:83:47:1e:7f:
                    f7:1c:d5:64:3b:af:d4:8c:4d:0d:9c:16:b4:a5:fc:
                    cf:1c:67:43:a5:9f:ae:e9:f8:3e:db:07:ea:a1:6e:
                    06:8c:ef:00:4e:cc:7c:34:d2:c7:90:85:eb:86:b7:
                    88:71:ac:e1:58:fa:9c:38:b7:f5:17:dc:fc:9a:1f:
                    1a:65:cd:cc:4b:ae:72:37:ca:7d:a9:4c:e1:99:3e:
                    f0:7e:4a:4c:2f:0e:f5:30:97:88:6a:84:76:59:95:
                    0f:6b:02:c3:1c:c6:53:9c:bf:4f:0f:07:21:f6:04:
                    d1:07:a8:9c:f9:63:cf:3e:bc:dc:5b:34:a0:d9:f1:
                    cd:d4:96:71:d7:31:b5:49:7e:13:cb:1c:88:07:5e:
                    c4:02:36:4e:5b:51:74:47:36:c1:d8:87:30:20:cc:
                    70:93:9f:0f:b0:73:79:67:b4:f6:ae:07:0f:31:73:
                    83:37:51:bc:ea:6d:f2:9f:43:01:d7:e0:56:54:4f:
                    f3:3c:6b:cf:74:5e:b8:f4:cc:48:64:92:e9:a9:dd:
                    54:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C9:64:76:B3:85:91:6F:03:30:A0:EC:84:48:27:6D:62:61:06:53
            X509v3 Authority Key Identifier:
                keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5f:66:e7:b5:bd:0a:c4:89:d5:56:36:8e:38:22:3e:4e:39:
         1d:3b:f1:9a:dc:6d:c0:f3:7b:30:87:96:55:3b:09:f3:70:29:
         e7:0a:d4:d5:ae:84:1f:a8:0b:a1:c0:f4:0d:31:eb:50:19:19:
         62:77:8c:00:33:44:6b:12:e6:36:99:88:9d:c8:27:d8:37:66:
         aa:33:09:ce:a9:fa:0f:2f:e4:7c:a5:bb:9b:29:6b:cd:92:e8:
         8a:39:78:bd:69:73:4c:98:b2:21:d9:85:5d:58:13:b9:0f:c9:
         76:15:69:b1:d5:63:88:86:6a:f3:0f:df:49:b7:20:61:c2:c2:
         89:7b:20:8a:a1:99:85:25:68:74:8a:98:e0:ac:9c:97:5b:9d:
         15:4f:a8:95:74:98:95:1a:6e:be:be:b6:4a:da:8e:13:c9:10:
         11:64:9c:b3:71:71:78:73:cf:08:82:2a:c4:fd:bb:4c:2d:fc:
         94:97:5f:a3:d5:b5:67:2d:28:cb:80:56:17:23:89:c3:54:74:
         97:cd:cf:d7:24:12:5e:91:a9:04:db:36:7d:1e:8a:fb:74:d7:
         8d:a9:cc:c9:28:04:b6:78:c2:56:2a:1e:b1:96:f5:b1:d9:b9:
         2b:70:f7:3b:0e:f5:07:45:a6:ab:6a:80:ef:86:ea:3b:08:66:
         41:72:51:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexqAyshy5WByDEnKVVOBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWQ3YzU3NzE0ZWY0MGZkYjAxNjVkYzE5ODQ1ODBjZTFk
NTkwNmIwHhcNMjQwNjE2MDIwMDUxWhcNMjQwNjE3MDIwMDUxWjAzMTEwLwYDVQQD
EygyOGM5NjQ3NmIzODU5MTZmMDMzMGEwZWM4NDQ4Mjc2ZDYyNjEwNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fivnKkIkMp4E/uRgoi7YDCXPZxJ
BAFXTCMywIyXxksDrkPlDrNizqp2gZZHu7YG85BnJi7fXINHHn/3HNVkO6/UjE0N
nBa0pfzPHGdDpZ+u6fg+2wfqoW4GjO8ATsx8NNLHkIXrhreIcazhWPqcOLf1F9z8
mh8aZc3MS65yN8p9qUzhmT7wfkpMLw71MJeIaoR2WZUPawLDHMZTnL9PDwch9gTR
B6ic+WPPPrzcWzSg2fHN1JZx1zG1SX4TyxyIB17EAjZOW1F0RzbB2IcwIMxwk58P
sHN5Z7T2rgcPMXODN1G86m3yn0MB1+BWVE/zPGvPdF649MxIZJLpqd1UHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjJZHazhZFvAzCg7IRIJ21iYQZTMB8GA1UdIwQY
MBaAFNudfFdxTvQP2wFl3BmEWAzh1ZBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUt
ZjA3ODFhNjNlNDQwLzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUtZjA3ODFhNjNlNDQw
LzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADV9m57W9
CsSJ1VY2jjgiPk45HTvxmtxtwPN7MIeWVTsJ83Ap5wrU1a6EH6gLocD0DTHrUBkZ
YneMADNEaxLmNpmIncgn2DdmqjMJzqn6Dy/kfKW7mylrzZLoijl4vWlzTJiyIdmF
XVgTuQ/JdhVpsdVjiIZq8w/fSbcgYcLCiXsgiqGZhSVodIqY4Kycl1udFU+olXSY
lRpuvr62StqOE8kQEWScs3FxeHPPCIIqxP27TC38lJdfo9W1Zy0oy4BWFyOJw1R0
l83P1yQSXpGpBNs2fR6K+3TXjanMySgEtnjCVioesZb1sdm5K3D3Ow71B0Wmq2qA
74bqOwhmQXJRFg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:04:10 2024 by rpki-client on console-ams.rpki-client.org