Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File:                     b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier:          JCdNVbpz/AsK4jhYcBiO94o1FnJtLytk8SAItV+QCNw=
Subject key identifier:   78:9B:A5:67:63:DE:F5:3B:B8:EE:C9:27:D2:72:EB:CF:22:CF:C0:45
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer:       /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial:       01901C3364E7A182B13EC4A7980E192416D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number:          11F1
Signing time:             Sat 15 Jun 2024 14:00:48 +0000
Manifest this update:     Sat 15 Jun 2024 14:00:48 +0000
Manifest next update:     Sun 16 Jun 2024 14:00:48 +0000
Files and hashes:         1: O2nsO_zBTWwDn-2vm4XK9sP4KCE.roa (hash: nLg4kyNKM+4Qshfky2sOfNYg5aLUHgU0usxtk9d/KzM=)
                          2: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: oMFmoiMVTvp4o4X/xW2PW2+F2zF73jt2XBcEtFLEd5E=)
                          3: drGycoCjFZpiaBETqqTsTvtNmYU.roa (hash: ilnWuFckkCZOi6nFIQVcfv/JK8c2CTYUbcPx1fzLY94=)
                          4: eDd9SqgElFtOWHbQUFFgXN2mM8M.roa (hash: A4+aRVBhb8ovUfhm/RQlAi/l9uHJ2xyytcwmI7wJQ10=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:33:64:e7:a1:82:b1:3e:c4:a7:98:0e:19:24:16:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
        Validity
            Not Before: Jun 15 14:00:48 2024 GMT
            Not After : Jun 16 14:00:48 2024 GMT
        Subject: CN=789ba56763def53bb8eec927d272ebcf22cfc045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:13:8e:31:c5:1f:82:3d:e8:49:f5:15:da:5d:
                    7a:b8:74:ea:06:3b:b4:4c:59:56:8f:2f:8e:6e:c2:
                    c4:23:11:58:52:6a:43:24:b0:3c:55:e0:46:39:8e:
                    3b:8f:6a:0a:1f:60:8c:e9:fc:cf:14:37:0a:4b:02:
                    34:f0:8b:6e:e7:a7:33:f3:b6:5d:20:fb:91:fc:07:
                    0c:c2:b8:d6:f6:bb:1b:d1:9d:c7:00:1a:74:4b:91:
                    15:23:33:f4:1f:a0:ad:a0:b1:ff:1c:7d:82:76:d5:
                    63:9c:21:26:03:ae:6a:e7:30:68:db:31:c4:50:fb:
                    8d:9b:1c:3d:07:59:7a:04:51:9b:f9:59:e0:32:11:
                    ac:b1:d1:65:9a:46:48:e9:79:a5:a4:34:ca:c7:88:
                    4a:58:c3:ac:b8:8e:32:96:a3:44:43:d0:0e:8f:e6:
                    66:4c:7a:9d:1d:28:a6:f0:77:b3:04:81:01:0d:f6:
                    6a:c5:6b:24:14:89:8d:41:69:93:81:27:74:13:58:
                    a7:ce:0b:85:0d:1b:c0:e1:3b:c1:02:ca:8d:4e:d6:
                    b3:a5:16:04:24:20:7c:e9:33:a3:14:d9:16:0f:be:
                    e0:24:10:b5:e5:8c:2f:ce:69:cf:13:6d:c6:82:5f:
                    b5:ca:bd:6a:be:97:41:6c:03:f8:16:3e:d9:0b:40:
                    de:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9B:A5:67:63:DE:F5:3B:B8:EE:C9:27:D2:72:EB:CF:22:CF:C0:45
            X509v3 Authority Key Identifier:
                keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b7:4f:86:ad:71:fc:ac:bd:7e:4e:c4:f1:1e:0d:b7:73:f0:
         7f:9e:72:7a:28:e4:55:ca:e3:bb:27:e4:3b:19:7d:f5:59:4d:
         bb:a7:9b:73:51:d6:c9:df:a8:28:04:56:b7:93:18:e4:06:bb:
         3c:16:95:55:ef:e2:6e:6e:86:ad:1a:e7:70:ee:93:81:b0:9e:
         6c:83:d2:a3:99:b3:9c:c7:8f:41:6c:94:18:6e:40:7d:79:77:
         79:9a:e4:a1:ab:ae:70:88:bf:db:78:9b:d5:f0:50:74:a0:a4:
         a4:e0:ca:0f:71:4e:5b:8a:99:da:eb:7e:a2:f0:d3:54:30:2c:
         39:a5:28:91:18:84:51:a1:30:ee:85:0c:ca:8a:7d:de:b1:ac:
         39:db:70:3b:2f:23:0f:dc:19:17:5f:6b:7b:39:72:05:21:39:
         22:50:5d:1e:5e:6a:4e:bb:af:65:b5:31:1d:36:8a:e7:3c:cf:
         8c:b5:15:df:c2:10:a9:9d:b2:d5:a6:12:93:61:42:23:a5:62:
         d3:db:ba:62:14:a8:db:ed:83:92:76:98:b8:d1:b3:f0:e4:63:
         e1:03:1c:4f:08:8c:09:21:ff:04:de:8a:c6:b9:d5:83:2d:e9:
         3f:44:03:c6:ce:2e:2f:07:91:78:ff:93:d4:0e:a0:a9:d3:6c:
         3f:38:89:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcM2TnoYKxPsSnmA4ZJBbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0
OTRlMjAwHhcNMjQwNjE1MTQwMDQ4WhcNMjQwNjE2MTQwMDQ4WjAzMTEwLwYDVQQD
Eyg3ODliYTU2NzYzZGVmNTNiYjhlZWM5MjdkMjcyZWJjZjIyY2ZjMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xOOMcUfgj3oSfUV2l16uHTqBju0
TFlWjy+ObsLEIxFYUmpDJLA8VeBGOY47j2oKH2CM6fzPFDcKSwI08Itu56cz87Zd
IPuR/AcMwrjW9rsb0Z3HABp0S5EVIzP0H6CtoLH/HH2CdtVjnCEmA65q5zBo2zHE
UPuNmxw9B1l6BFGb+VngMhGssdFlmkZI6XmlpDTKx4hKWMOsuI4ylqNEQ9AOj+Zm
THqdHSim8HezBIEBDfZqxWskFImNQWmTgSd0E1inzguFDRvA4TvBAsqNTtazpRYE
JCB86TOjFNkWD77gJBC15YwvzmnPE23Ggl+1yr1qvpdBbAP4Fj7ZC0DejwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHibpWdj3vU7uO7JJ9Jy688iz8BFMB8GA1UdIwQY
MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt
YmE3YzdkODE5MGNhLzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh
LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLdPhq1x
/Ky9fk7E8R4Nt3Pwf55yeijkVcrjuyfkOxl99VlNu6ebc1HWyd+oKARWt5MY5Aa7
PBaVVe/ibm6GrRrncO6TgbCebIPSo5mznMePQWyUGG5AfXl3eZrkoauucIi/23ib
1fBQdKCkpODKD3FOW4qZ2ut+ovDTVDAsOaUokRiEUaEw7oUMyop93rGsOdtwOy8j
D9wZF19rezlyBSE5IlBdHl5qTruvZbUxHTaK5zzPjLUV38IQqZ2y1aYSk2FCI6Vi
09u6YhSo2+2DknaYuNGz8ORj4QMcTwiMCSH/BN6KxrnVgy3pP0QDxs4uLweReP+T
1A6gqdNsPziJRg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:57:16 2024 by rpki-client on console-fra.rpki-client.org