Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
File:                     AyhzUYaXwj6cPjemRrrRISNa10Q.mft (raw, json)
Hash identifier:          dQS2CJHAAOY/Guei5/34Zubd/bytFlRp76Dc28ghB/w=
Subject key identifier:   FF:01:02:56:54:0D:F0:D9:2B:49:B0:3C:64:F1:80:13:97:64:72:28
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Certificate issuer:       /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial:       01901EC70F71513DD221BAD526BDA8C2F087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 02:01:20 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:20 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:20 +0000
Files and hashes:         1: AyhzUYaXwj6cPjemRrrRISNa10Q.crl (hash: 4nRRfcopa/WrRf9LZK1tLdGlQr10HbsVH2WKLesP90M=)
                          2: CtY1kk6SrmIGR2KvlRbqyX-EhaE.roa (hash: CiumMJrDIb+dFgkujqGoN/JY0Qu2eBMImM/1k5F435k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:0f:71:51:3d:d2:21:ba:d5:26:bd:a8:c2:f0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
        Validity
            Not Before: Jun 16 02:01:20 2024 GMT
            Not After : Jun 17 02:01:20 2024 GMT
        Subject: CN=ff010256540df0d92b49b03c64f1801397647228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b5:51:53:77:e3:eb:ab:16:7a:c5:33:a1:d8:
                    b8:e7:37:0c:41:e8:d9:5c:41:bd:d8:f5:3e:fc:f5:
                    ef:ce:7d:c4:a6:c2:62:46:d6:e3:b9:76:73:26:fb:
                    e1:9c:d0:00:2b:a6:5d:c9:f6:c3:79:30:7a:85:d2:
                    77:54:8b:c0:8d:1d:5f:d1:7a:f3:a7:77:94:17:d0:
                    f0:dd:e0:89:40:ce:77:8a:1b:0a:ee:c6:25:18:35:
                    49:c3:e1:95:aa:4f:da:25:e7:6b:b1:e7:07:5d:2b:
                    32:19:a9:02:ca:8b:77:d3:70:91:87:9a:2e:b7:63:
                    22:ff:34:00:b7:ca:df:8d:bd:5b:e8:2e:2e:f7:d5:
                    1e:ce:7a:e3:fc:e1:a2:4b:8e:dd:17:53:4b:ac:a1:
                    1d:c0:41:4c:18:b0:54:b2:b6:e0:85:84:f3:6c:a1:
                    76:23:32:e2:c3:73:90:eb:2f:3c:5e:b2:20:12:97:
                    f6:53:53:53:cd:21:d8:23:b6:37:a8:63:54:0e:fe:
                    58:63:e8:93:2e:1e:38:1c:b8:76:81:01:49:58:fa:
                    47:40:10:82:72:63:5d:7b:06:c9:e7:c6:5b:d6:ff:
                    ad:43:51:fe:90:d3:58:c2:25:dd:47:45:b1:66:65:
                    d1:32:b1:43:3b:09:fa:7a:49:0e:62:5c:c8:29:16:
                    42:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:01:02:56:54:0D:F0:D9:2B:49:B0:3C:64:F1:80:13:97:64:72:28
            X509v3 Authority Key Identifier:
                keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:cf:99:bb:04:52:47:ad:9d:43:4a:71:bd:c2:7e:4b:02:c9:
         52:79:1b:8e:03:0c:ff:fc:c7:45:e7:99:46:08:99:ed:b2:f8:
         58:95:ad:49:2d:35:65:aa:35:8c:98:2b:55:2c:81:43:e6:e8:
         7b:2a:27:f8:ad:0f:4e:ed:ac:a5:be:24:d3:17:32:eb:78:17:
         5f:65:31:79:e2:81:5a:a5:d0:26:73:13:35:6c:16:18:a4:a4:
         3e:fa:f0:6d:f7:2d:d1:08:ee:cd:bf:b0:e2:e6:bf:91:37:a3:
         d7:34:ce:55:7d:61:3e:ae:62:3f:b7:bd:f8:2a:2b:d1:3a:b0:
         1f:01:a1:9f:68:b6:de:0a:04:57:74:e6:55:47:af:67:dc:96:
         94:b5:b2:45:db:bf:39:4f:f8:8a:ef:7f:e4:2d:b5:dd:09:9e:
         1f:00:b9:83:95:9b:aa:a4:3e:68:2b:04:a8:c2:99:a8:0f:8c:
         36:d2:57:c9:b5:0b:3f:23:db:d3:51:7c:2e:4a:0c:5c:32:99:
         4d:da:72:59:0e:2c:da:e6:2b:db:a2:c0:75:50:cc:95:b2:06:
         c1:e9:e5:0d:4f:6a:7c:0e:08:18:c4:70:fb:62:0f:c4:b8:32:
         be:5f:02:af:35:5b:3f:2b:6a:a7:cc:14:88:e3:b0:41:fe:94:
         16:61:ef:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAexw9xUT3SIbrVJr2owvCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjg3MzUxODY5N2MyM2U5YzNlMzdhNjQ2YmFkMTIxMjM1
YWQ3NDQwHhcNMjQwNjE2MDIwMTIwWhcNMjQwNjE3MDIwMTIwWjAzMTEwLwYDVQQD
EyhmZjAxMDI1NjU0MGRmMGQ5MmI0OWIwM2M2NGYxODAxMzk3NjQ3MjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47VRU3fj66sWesUzodi45zcMQejZ
XEG92PU+/PXvzn3EpsJiRtbjuXZzJvvhnNAAK6ZdyfbDeTB6hdJ3VIvAjR1f0Xrz
p3eUF9Dw3eCJQM53ihsK7sYlGDVJw+GVqk/aJedrsecHXSsyGakCyot303CRh5ou
t2Mi/zQAt8rfjb1b6C4u99Ueznrj/OGiS47dF1NLrKEdwEFMGLBUsrbghYTzbKF2
IzLiw3OQ6y88XrIgEpf2U1NTzSHYI7Y3qGNUDv5YY+iTLh44HLh2gQFJWPpHQBCC
cmNdewbJ58Zb1v+tQ1H+kNNYwiXdR0WxZmXRMrFDOwn6ekkOYlzIKRZCMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8BAlZUDfDZK0mwPGTxgBOXZHIoMB8GA1UdIwQY
MBaAFAMoc1GGl8I+nD43pka60SEjWtdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lYmQwNWUtZjYwNy00YmZiLWE0MmIt
MTI3MDA4OTI0ZWVkLzEvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lYmQwNWUtZjYwNy00YmZiLWE0MmItMTI3MDA4OTI0ZWVk
LzEvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8+ZuwRS
R62dQ0pxvcJ+SwLJUnkbjgMM//zHReeZRgiZ7bL4WJWtSS01Zao1jJgrVSyBQ+bo
eyon+K0PTu2spb4k0xcy63gXX2UxeeKBWqXQJnMTNWwWGKSkPvrwbfct0Qjuzb+w
4ua/kTej1zTOVX1hPq5iP7e9+Cor0TqwHwGhn2i23goEV3TmVUevZ9yWlLWyRdu/
OU/4iu9/5C213QmeHwC5g5WbqqQ+aCsEqMKZqA+MNtJXybULPyPb01F8LkoMXDKZ
TdpyWQ4s2uYr26LAdVDMlbIGwenlDU9qfA4IGMRw+2IPxLgyvl8CrzVbPytqp8wU
iOOwQf6UFmHvzQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:08:37 2024 by rpki-client on console-fra.rpki-client.org