Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft
File:                     eBmwlu34dg6OUA-UFpvAA3iulHU.mft (raw, json)
Hash identifier:          hXyRQFRM2e9KDrBfEC+FX/tOLIDuqdA2pdbYOkRmibo=
Subject key identifier:   7B:76:1C:32:2C:2A:90:88:B4:1C:1D:54:69:D2:1E:32:DF:3B:D5:D2
Authority key identifier: 78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75
Certificate issuer:       /CN=7819b096edf8760e8e500f94169bc00378ae9475
Certificate serial:       019040AEFD2E033FDD609D90818512438DFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft
Manifest number:          0D18
Signing time:             Sat 22 Jun 2024 16:02:08 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:08 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:08 +0000
Files and hashes:         1: A6_jirV_8Mn9bdpUsNl4pCnX8hU.roa (hash: kl7tu7HdegzG0NeV5s1+DgRpcao4RLkzQW53pVzyurU=)
                          2: eBmwlu34dg6OUA-UFpvAA3iulHU.crl (hash: Dv9uoo7vIAtoWMy07r7N8IFSBKTkruXc4gBLbRqsM8k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:fd:2e:03:3f:dd:60:9d:90:81:85:12:43:8d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7819b096edf8760e8e500f94169bc00378ae9475
        Validity
            Not Before: Jun 22 16:02:08 2024 GMT
            Not After : Jun 23 16:02:08 2024 GMT
        Subject: CN=7b761c322c2a9088b41c1d5469d21e32df3bd5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:28:5f:67:e4:de:83:9a:73:82:d8:5a:9b:
                    ad:f6:6e:b6:a8:72:8f:d8:b8:da:9f:a1:10:ee:79:
                    bd:2c:ca:11:ac:16:4c:08:7b:cc:ac:f8:b0:9b:09:
                    2b:28:56:af:b5:80:75:cb:22:6d:fa:7d:e2:26:9c:
                    ca:a9:ea:df:49:ad:34:3f:e6:82:86:d0:1c:c7:85:
                    64:af:ac:39:60:49:c7:c1:59:7c:8a:23:30:0a:91:
                    21:e1:39:a5:fd:75:d2:e7:02:99:4e:49:84:79:b6:
                    53:c3:84:5b:16:94:fb:e1:24:43:04:b7:64:f2:5f:
                    ae:66:a1:6b:77:e9:84:3e:3f:87:27:83:02:1a:e0:
                    88:b0:0a:f5:19:f9:72:be:9f:28:d0:1e:ec:c9:2e:
                    d8:69:b5:e9:d2:0b:3c:b5:c3:0c:9a:39:24:b2:88:
                    b4:07:1c:6c:f0:eb:40:5d:3a:3b:1c:5a:b8:63:1e:
                    e8:3f:87:4d:6c:46:52:ea:9d:44:a3:26:88:60:e5:
                    77:0a:0e:7e:51:fa:0a:5e:06:12:3c:74:df:b7:36:
                    c0:dd:6f:e6:04:53:61:c3:dd:f2:06:13:34:52:f8:
                    6b:d6:1c:5b:44:a3:85:bb:34:16:90:14:b0:b7:f6:
                    e9:1c:fc:19:2d:6a:67:22:c9:ef:4e:a5:af:f4:f5:
                    67:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:76:1C:32:2C:2A:90:88:B4:1C:1D:54:69:D2:1E:32:DF:3B:D5:D2
            X509v3 Authority Key Identifier:
                keyid:78:19:B0:96:ED:F8:76:0E:8E:50:0F:94:16:9B:C0:03:78:AE:94:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBmwlu34dg6OUA-UFpvAA3iulHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1bca6a-511e-4150-9cfa-c52c6c0e3a8a/1/eBmwlu34dg6OUA-UFpvAA3iulHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:50:47:55:5e:a8:d2:23:54:ed:9c:3b:6c:0a:19:eb:98:2a:
         23:cd:07:c9:49:89:98:d1:ac:67:6a:d6:6e:7c:f7:77:d6:3c:
         8a:fa:9d:44:26:42:17:0a:8d:ac:57:28:a0:8f:a5:c3:3c:af:
         f7:02:22:b0:c6:39:44:3d:f8:7b:57:d9:8b:44:d2:d5:ed:42:
         e2:62:e0:e0:1d:07:a1:f4:c4:1c:71:ea:ce:d8:7b:18:14:dc:
         5b:1d:d3:63:34:18:f2:2e:74:27:92:53:4c:72:1b:d5:57:4a:
         f7:19:cd:50:73:a6:43:42:f9:45:d8:b7:5a:c1:d6:4e:ae:75:
         60:96:91:cc:3a:61:9c:09:39:15:79:03:df:52:c5:0f:be:3a:
         9d:37:29:2f:ef:43:0e:c4:83:58:44:bc:0e:34:5c:bf:68:98:
         8e:de:2c:d5:ed:58:01:05:65:96:c3:8e:36:46:e7:d7:38:e2:
         75:98:31:c0:e1:5a:dc:ca:5e:81:df:d8:88:a4:cb:35:de:a9:
         ee:c8:d7:b7:96:b8:18:74:40:d4:0c:bf:4c:78:19:9a:53:ef:
         b8:2b:26:85:aa:10:2c:61:a7:d2:8a:68:40:41:55:18:f8:9e:
         a9:3e:ee:2f:85:cb:5d:d0:20:f5:18:89:d2:5f:a8:80:06:b6:
         ff:91:bb:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBArv0uAz/dYJ2QgYUSQ437MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MTliMDk2ZWRmODc2MGU4ZTUwMGY5NDE2OWJjMDAzNzhh
ZTk0NzUwHhcNMjQwNjIyMTYwMjA4WhcNMjQwNjIzMTYwMjA4WjAzMTEwLwYDVQQD
Eyg3Yjc2MWMzMjJjMmE5MDg4YjQxYzFkNTQ2OWQyMWUzMmRmM2JkNWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnYoX2fk3oOac4LYWput9m62qHKP
2Ljan6EQ7nm9LMoRrBZMCHvMrPiwmwkrKFavtYB1yyJt+n3iJpzKqerfSa00P+aC
htAcx4Vkr6w5YEnHwVl8iiMwCpEh4Tml/XXS5wKZTkmEebZTw4RbFpT74SRDBLdk
8l+uZqFrd+mEPj+HJ4MCGuCIsAr1Gflyvp8o0B7syS7YabXp0gs8tcMMmjkksoi0
Bxxs8OtAXTo7HFq4Yx7oP4dNbEZS6p1EoyaIYOV3Cg5+UfoKXgYSPHTftzbA3W/m
BFNhw93yBhM0Uvhr1hxbRKOFuzQWkBSwt/bpHPwZLWpnIsnvTqWv9PVn+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHt2HDIsKpCItBwdVGnSHjLfO9XSMB8GA1UdIwQY
MBaAFHgZsJbt+HYOjlAPlBabwAN4rpR1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUJtd2x1MzRkZzZPVUEtVUZwdkFBM2l1bEhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xYmNhNmEtNTExZS00MTUwLTljZmEt
YzUyYzZjMGUzYThhLzEvZUJtd2x1MzRkZzZPVUEtVUZwdkFBM2l1bEhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8xYmNhNmEtNTExZS00MTUwLTljZmEtYzUyYzZjMGUzYThh
LzEvZUJtd2x1MzRkZzZPVUEtVUZwdkFBM2l1bEhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlBHVV6o
0iNU7Zw7bAoZ65gqI80HyUmJmNGsZ2rWbnz3d9Y8ivqdRCZCFwqNrFcooI+lwzyv
9wIisMY5RD34e1fZi0TS1e1C4mLg4B0HofTEHHHqzth7GBTcWx3TYzQY8i50J5JT
THIb1VdK9xnNUHOmQ0L5Rdi3WsHWTq51YJaRzDphnAk5FXkD31LFD746nTcpL+9D
DsSDWES8DjRcv2iYjt4s1e1YAQVllsOONkbn1zjidZgxwOFa3Mpegd/YiKTLNd6p
7sjXt5a4GHRA1Ay/THgZmlPvuCsmhaoQLGGn0opoQEFVGPieqT7uL4XLXdAg9RiJ
0l+ogAa2/5G7dQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:38:03 2024 by rpki-client on console-ams.rpki-client.org