Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
File:                     Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json)
Hash identifier:          AmN7kTcTGOK7yXwnYyDXPdRKFxk0wwAQoMhtjIkYQHk=
Subject key identifier:   EF:FC:C2:32:FF:4E:9E:48:AD:4E:FC:D0:17:DD:FA:D6:49:84:05:68
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Certificate issuer:       /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial:       01901BFCFEE659D198CF70C5DDB8D4D8B2BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
Manifest number:          11C3
Signing time:             Sat 15 Jun 2024 13:01:23 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:23 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:23 +0000
Files and hashes:         1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: T0coJESekKJR9gSgfOyK7ycyChjnBs+xJ8URGsYOW/s=)
                          2: lM51EK62L5NDJWvbSorVxyi9txk.roa (hash: sTbWwKmSxyHOSNMJ+Bxdt/QGaF7KjaYPnMjFyNDiKu0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:fe:e6:59:d1:98:cf:70:c5:dd:b8:d4:d8:b2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
        Validity
            Not Before: Jun 15 13:01:23 2024 GMT
            Not After : Jun 16 13:01:23 2024 GMT
        Subject: CN=effcc232ff4e9e48ad4efcd017ddfad649840568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:35:2e:d8:d6:e0:98:59:1d:39:38:01:e1:
                    78:b5:2b:3b:e2:b6:2b:6f:90:63:f0:71:f9:72:99:
                    b7:3c:31:92:13:c5:84:d0:b8:2e:7b:28:c9:16:53:
                    12:de:b1:87:ee:15:6b:16:f8:6d:62:80:f3:36:ef:
                    bf:27:a5:1a:d9:91:01:59:19:a6:2f:0b:7b:4b:80:
                    0b:01:a7:dd:55:05:b3:6e:42:d0:5f:1e:c9:6b:da:
                    d5:06:ea:53:e5:82:fc:da:38:99:a3:6c:71:d0:1a:
                    86:ba:ca:a6:f3:bb:e9:a5:7b:a8:ee:2a:1b:df:55:
                    43:d5:3c:cc:e4:c3:4a:ea:2a:8a:ca:1c:00:bc:24:
                    38:ef:ad:c1:6d:34:69:54:a0:56:a2:4e:94:e6:1a:
                    40:b5:1e:77:b4:6b:ea:d5:6d:d2:69:52:d8:3c:4c:
                    d2:01:ba:83:18:d3:3e:d6:a8:d2:9c:43:0d:6c:63:
                    b3:81:4e:cf:c8:1c:5c:55:5d:54:08:e5:0e:d7:dd:
                    b2:59:49:e6:97:e3:4b:93:57:7c:b8:8d:d1:25:64:
                    ff:d9:b7:73:84:38:72:98:2f:c9:7f:7e:9b:ba:aa:
                    8c:fa:de:a2:95:15:59:9a:a6:ca:4f:56:40:e5:5d:
                    28:d2:5f:ed:ae:01:7c:dc:3c:ae:cc:19:08:e1:ab:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FC:C2:32:FF:4E:9E:48:AD:4E:FC:D0:17:DD:FA:D6:49:84:05:68
            X509v3 Authority Key Identifier:
                keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:62:8d:6a:06:49:62:00:89:4d:61:7f:f1:dc:09:92:02:c1:
         25:8b:c2:fa:a6:de:9d:14:39:f6:32:7a:9d:8b:4c:e7:da:75:
         6c:1c:f5:17:e2:9c:f7:72:b9:67:87:12:f8:6c:ab:c7:05:a6:
         08:d2:ff:c3:e9:d6:68:ed:1e:64:1d:a2:76:74:e7:f8:3d:9f:
         f7:24:d1:91:1e:97:8d:96:1d:be:19:72:dc:a6:87:dd:85:27:
         d4:4d:f4:fd:de:b9:42:99:e4:0c:92:dc:20:f5:c3:63:5f:bd:
         b0:38:2c:a9:c4:c8:71:21:cd:47:9f:2f:72:25:5f:ed:c6:36:
         f7:49:7a:e4:8c:73:ba:cd:35:40:55:d9:7d:6f:cc:d5:a7:c1:
         e3:a9:d2:28:84:31:4e:ff:ae:b7:bb:f9:6b:14:b4:b1:7f:c1:
         a1:41:52:c9:6d:bc:25:70:f9:2d:48:fa:6c:25:1f:37:7e:d0:
         e5:f4:1e:51:e8:e5:4c:fc:93:0d:e2:4e:ce:d2:f9:28:64:1e:
         4e:f7:00:aa:5c:55:fd:75:0d:39:66:65:f6:51:e9:3a:2d:a2:
         1b:4b:ee:f9:fb:46:4d:f1:10:48:24:11:39:32:63:b2:c9:f6:
         1f:48:06:7c:b2:6c:bd:9f:1e:89:6f:d6:e5:33:3c:4f:0b:8c:
         6f:b0:e4:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/P7mWdGYz3DF3bjU2LK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZWEyNWUzNTY5MzI4NzVjMDk2YTAzMTc1NTk4MDQxNTVm
NmM5OWQwHhcNMjQwNjE1MTMwMTIzWhcNMjQwNjE2MTMwMTIzWjAzMTEwLwYDVQQD
EyhlZmZjYzIzMmZmNGU5ZTQ4YWQ0ZWZjZDAxN2RkZmFkNjQ5ODQwNTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWU1LtjW4JhZHTk4AeF4tSs74rYr
b5Bj8HH5cpm3PDGSE8WE0LgueyjJFlMS3rGH7hVrFvhtYoDzNu+/J6Ua2ZEBWRmm
Lwt7S4ALAafdVQWzbkLQXx7Ja9rVBupT5YL82jiZo2xx0BqGusqm87vppXuo7iob
31VD1TzM5MNK6iqKyhwAvCQ4763BbTRpVKBWok6U5hpAtR53tGvq1W3SaVLYPEzS
AbqDGNM+1qjSnEMNbGOzgU7PyBxcVV1UCOUO192yWUnml+NLk1d8uI3RJWT/2bdz
hDhymC/Jf36buqqM+t6ilRVZmqbKT1ZA5V0o0l/trgF83DyuzBkI4aspVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/8wjL/Tp5IrU780Bfd+tZJhAVoMB8GA1UdIwQY
MBaAFALqJeNWkyh1wJagMXVZgEFV9smdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXVvbDQxYVRLSFhBbHFBeGRWbUFRVlgyeVowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85YjZiZTItZGE0NC00MmZjLTgxZTEt
ZDgxNGZkY2E1YmVkLzEvQXVvbDQxYVRLSFhBbHFBeGRWbUFRVlgyeVowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS85YjZiZTItZGE0NC00MmZjLTgxZTEtZDgxNGZkY2E1YmVk
LzEvQXVvbDQxYVRLSFhBbHFBeGRWbUFRVlgyeVowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2KNagZJ
YgCJTWF/8dwJkgLBJYvC+qbenRQ59jJ6nYtM59p1bBz1F+Kc93K5Z4cS+GyrxwWm
CNL/w+nWaO0eZB2idnTn+D2f9yTRkR6XjZYdvhly3KaH3YUn1E30/d65QpnkDJLc
IPXDY1+9sDgsqcTIcSHNR58vciVf7cY290l65Ixzus01QFXZfW/M1afB46nSKIQx
Tv+ut7v5axS0sX/BoUFSyW28JXD5LUj6bCUfN37Q5fQeUejlTPyTDeJOztL5KGQe
TvcAqlxV/XUNOWZl9lHpOi2iG0vu+ftGTfEQSCQROTJjssn2H0gGfLJsvZ8eiW/W
5TM8TwuMb7DkYA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 19:59:18 2024 by rpki-client on console-fra.rpki-client.org