Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
File:                     azT6U9HYTbq-aY1bvMrt8QnRV64.mft (raw, json)
Hash identifier:          0Mh3Mf6WbMdpmT3it2oll3Cb6KTVQBTAR35OGZ/pwb0=
Subject key identifier:   96:5D:44:D6:5E:57:B8:33:DF:5D:D6:4D:74:72:98:0B:04:4A:4F:B7
Authority key identifier: 6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
Certificate issuer:       /CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Certificate serial:       01901CA1967A66BD7BD001AC31122849C701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
Manifest number:          11C9
Signing time:             Sat 15 Jun 2024 16:01:10 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:10 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:10 +0000
Files and hashes:         1: azT6U9HYTbq-aY1bvMrt8QnRV64.crl (hash: /H54fZquexnT57HOgvQJfBrqQ2lD8cFbVgRSGqSaiGo=)
                          2: sOvDv3wCW5e2CqTqXxS4K4_flZY.roa (hash: S7yS0c7GO1ELll/o8e5psNRgMd/YoRVZIaJ6BX8qYAk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:96:7a:66:bd:7b:d0:01:ac:31:12:28:49:c7:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
        Validity
            Not Before: Jun 15 16:01:10 2024 GMT
            Not After : Jun 16 16:01:10 2024 GMT
        Subject: CN=965d44d65e57b833df5dd64d7472980b044a4fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f1:84:8c:29:61:5b:2d:ef:37:c2:bb:53:02:
                    11:ac:9b:81:c1:e4:6c:32:04:fa:68:4d:c5:fb:7a:
                    b5:5d:82:e1:1a:b4:04:29:dd:bb:14:65:de:d1:50:
                    38:75:12:30:21:79:e6:35:8a:ff:31:8c:0a:71:41:
                    bb:47:34:2f:8e:45:f4:c5:23:0b:c6:df:32:a7:cc:
                    df:5b:25:50:44:fa:c4:c3:d2:74:9e:26:96:f3:1b:
                    11:8e:00:38:1d:2d:ff:fe:3a:86:dc:ec:eb:16:cc:
                    b6:8b:ce:7a:d8:59:da:a7:27:3f:d1:cb:c2:d2:40:
                    dd:68:23:84:fd:5b:9a:e7:ba:4c:da:4d:26:1c:12:
                    76:13:d7:0c:bf:4c:91:1a:83:01:a9:b9:23:ee:38:
                    15:9d:8b:cf:a6:62:7b:b3:33:f8:74:74:6b:59:b7:
                    10:e5:37:fe:e2:11:e3:4d:79:1a:15:74:5c:58:3a:
                    f7:95:77:95:f3:a7:42:9f:53:b0:c9:64:f3:16:e2:
                    82:e2:43:34:a9:3f:d8:19:5c:2b:41:f1:2e:12:5b:
                    71:0d:c5:56:75:af:76:b2:23:73:1d:9a:e6:bd:05:
                    b5:fb:58:63:90:6f:7b:d9:b7:1e:27:e6:7b:9a:b6:
                    92:02:1c:a4:31:f5:89:07:3d:fc:04:38:48:fb:dc:
                    29:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5D:44:D6:5E:57:B8:33:DF:5D:D6:4D:74:72:98:0B:04:4A:4F:B7
            X509v3 Authority Key Identifier:
                keyid:6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:59:cb:44:43:bd:53:2e:51:a5:35:43:c7:53:c3:66:fb:5b:
         a3:f3:ea:74:f1:dc:a1:c8:52:6d:ce:6f:b6:2a:a3:0b:5d:f5:
         19:f4:a5:11:89:fd:a6:9f:8d:b5:c9:41:8d:29:6f:b5:8f:87:
         ff:60:b9:a7:83:8a:c8:0f:b7:f4:6c:fc:86:f1:71:c6:81:19:
         d9:da:f4:ac:28:54:26:b3:9d:cb:32:9f:a4:5e:42:44:f8:5a:
         65:e9:63:5d:88:7d:bd:05:a9:0b:1c:8b:83:1e:db:04:28:cc:
         11:a9:30:cf:3e:ba:1b:57:c1:7a:25:58:7b:12:12:20:a7:b1:
         ee:b0:8e:bf:e2:32:16:0e:a1:d3:62:57:1a:bd:a0:d9:ba:70:
         87:66:c9:f6:5e:bb:ab:a1:a7:58:4c:7e:5a:a4:00:aa:cb:69:
         30:4c:16:da:0c:06:2c:ae:00:05:18:11:26:b9:26:4a:30:17:
         26:6a:b8:33:bd:b5:5b:aa:d8:2e:4e:49:bf:af:ea:f6:c7:f0:
         94:b1:11:0e:0c:ff:23:90:f2:49:a0:df:b1:81:00:1c:4c:6b:
         92:7c:77:9b:6b:b7:cf:a6:7f:7f:d9:23:6c:35:41:46:4c:e7:
         08:05:ba:49:7b:1a:34:0e:9f:70:ec:4f:b7:c1:84:2d:9b:fa:
         94:94:ef:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcoZZ6Zr170AGsMRIoSccBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMzRmYTUzZDFkODRkYmFiZTY5OGQ1YmJjY2FlZGYxMDlk
MTU3YWUwHhcNMjQwNjE1MTYwMTEwWhcNMjQwNjE2MTYwMTEwWjAzMTEwLwYDVQQD
Eyg5NjVkNDRkNjVlNTdiODMzZGY1ZGQ2NGQ3NDcyOTgwYjA0NGE0ZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vGEjClhWy3vN8K7UwIRrJuBweRs
MgT6aE3F+3q1XYLhGrQEKd27FGXe0VA4dRIwIXnmNYr/MYwKcUG7RzQvjkX0xSML
xt8yp8zfWyVQRPrEw9J0niaW8xsRjgA4HS3//jqG3OzrFsy2i8562Fnapyc/0cvC
0kDdaCOE/Vua57pM2k0mHBJ2E9cMv0yRGoMBqbkj7jgVnYvPpmJ7szP4dHRrWbcQ
5Tf+4hHjTXkaFXRcWDr3lXeV86dCn1OwyWTzFuKC4kM0qT/YGVwrQfEuEltxDcVW
da92siNzHZrmvQW1+1hjkG972bceJ+Z7mraSAhykMfWJBz38BDhI+9wp9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZdRNZeV7gz313WTXRymAsESk+3MB8GA1UdIwQY
MBaAFGs0+lPR2E26vmmNW7zK7fEJ0VeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81MjhkZTEtOGY2OC00Y2I5LWI2Y2Ut
ZmZhYWEyOTlhZjYxLzEvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi81MjhkZTEtOGY2OC00Y2I5LWI2Y2UtZmZhYWEyOTlhZjYx
LzEvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVnLREO9
Uy5RpTVDx1PDZvtbo/PqdPHcochSbc5vtiqjC131GfSlEYn9pp+NtclBjSlvtY+H
/2C5p4OKyA+39Gz8hvFxxoEZ2dr0rChUJrOdyzKfpF5CRPhaZeljXYh9vQWpCxyL
gx7bBCjMEakwzz66G1fBeiVYexISIKex7rCOv+IyFg6h02JXGr2g2bpwh2bJ9l67
q6GnWEx+WqQAqstpMEwW2gwGLK4ABRgRJrkmSjAXJmq4M721W6rYLk5Jv6/q9sfw
lLERDgz/I5DySaDfsYEAHExrknx3m2u3z6Z/f9kjbDVBRkznCAW6SXsaNA6fcOxP
t8GELZv6lJTvHg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:58:11 2024 by rpki-client on console-fra.rpki-client.org