Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File:                     xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier:          U5g5xRAJjSaGKH5YMOWeXcOZeoCiRbSKPEmWvV/9jnI=
Subject key identifier:   85:6E:A0:FF:4A:97:06:FA:90:F5:C1:E5:DD:5B:8B:5F:0A:BD:78:B2
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer:       /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial:       01901E8FEA072159F82569B6375B41F55251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number:          0E27
Signing time:             Sun 16 Jun 2024 01:01:06 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:06 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:06 +0000
Files and hashes:         1: OOBDQXgnFgcKBNnHe0zNovyse9E.roa (hash: oAdjxHRnj1HQxI4LF46Vucze+3yHtiEZFXuRxOEId1w=)
                          2: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: znOo44amtd2V9lcEOyI9iJ/FDX4bbfke87NxWZ9QnoE=)
                          3: yDzxRDVDLfA4d6q4RWibqaKop1U.roa (hash: 3N8xRr8cjYZasUdpSTTtsCCDo/WTXLeLwTWluuViv90=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:ea:07:21:59:f8:25:69:b6:37:5b:41:f5:52:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
        Validity
            Not Before: Jun 16 01:01:06 2024 GMT
            Not After : Jun 17 01:01:06 2024 GMT
        Subject: CN=856ea0ff4a9706fa90f5c1e5dd5b8b5f0abd78b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:12:08:67:9a:c2:5f:91:5d:10:c2:54:5d:
                    bf:85:e1:b5:c2:0b:8f:04:41:b5:78:43:c9:2b:ec:
                    4e:a9:6d:98:f4:fc:c3:ba:46:ad:20:b7:2f:c7:b4:
                    aa:0a:e4:f6:a8:f3:d7:a2:0d:65:d4:24:f6:f7:41:
                    9a:f3:fd:b8:6d:40:42:5b:c5:05:1e:38:b7:87:3c:
                    63:8d:f5:be:1f:98:c7:73:97:79:64:8b:74:97:7e:
                    35:49:fb:5c:1f:7b:30:1e:40:71:fa:d6:cc:68:1c:
                    11:9d:8f:eb:ab:be:77:d8:84:56:53:6d:d6:2c:7d:
                    48:9d:b1:a3:3b:ad:17:06:6e:7f:0a:20:8f:4c:1e:
                    7b:2a:17:0f:e0:e6:2e:10:43:f7:2b:02:64:01:b2:
                    2d:74:60:d6:06:f5:0f:bc:3b:24:a5:43:00:a9:10:
                    58:c4:0c:d7:98:d8:86:d0:ad:9c:7c:a0:28:d4:cd:
                    46:0f:a5:d1:82:ec:97:04:29:83:f0:cf:f2:1d:00:
                    f2:ea:1d:ef:bb:0f:57:93:10:0a:a7:23:51:d6:84:
                    4e:9f:ad:11:bf:32:11:24:f0:28:0c:b2:9f:6e:a9:
                    37:b6:74:5c:2b:5d:60:32:f9:8c:12:97:bc:8a:9c:
                    51:d3:28:7e:40:2c:2b:78:4f:13:ed:69:50:71:9d:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6E:A0:FF:4A:97:06:FA:90:F5:C1:E5:DD:5B:8B:5F:0A:BD:78:B2
            X509v3 Authority Key Identifier:
                keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:61:52:a8:af:ea:5f:db:0e:6d:af:6d:de:26:4a:6d:68:37:
         a0:93:e8:5d:e4:d8:58:7d:9f:5d:30:24:59:8b:66:ed:1b:67:
         d1:f0:f5:5c:07:af:a9:98:f3:33:00:90:10:c4:6c:69:12:ce:
         76:57:9b:8e:4f:96:61:87:d5:e4:91:44:41:74:a8:90:72:08:
         42:b1:c6:28:91:67:ab:13:6b:f6:4c:10:cf:25:ef:e9:25:36:
         7f:f8:17:85:c1:06:3f:8a:2f:6e:46:df:d3:ac:60:c9:9a:11:
         fc:04:e5:ee:91:eb:9e:e1:a1:6c:89:5c:09:bb:dc:8c:93:8b:
         89:ba:28:73:b8:59:cd:07:15:4a:ed:bf:3e:8b:c1:c5:94:ef:
         0b:b1:e8:dd:fe:0b:1b:1f:9e:69:03:b2:d8:67:0f:f6:77:98:
         e4:62:87:f4:0c:8b:65:57:f8:a2:5f:5a:f1:27:90:6c:e7:6e:
         7d:b1:38:22:a9:9e:fd:80:ff:47:db:e3:30:65:c7:94:ac:3f:
         8f:5c:42:85:e2:2d:a0:01:e4:0f:39:8c:9c:94:5b:00:e5:84:
         e8:7d:66:59:96:6a:bd:82:f3:14:7c:ae:0e:94:9a:4e:2f:b4:
         de:ba:06:06:d1:bb:ca:77:a3:79:5f:2e:f6:cf:0a:e0:a1:54:
         20:d7:c4:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej+oHIVn4JWm2N1tB9VJRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTk2OGVkYjcyYzE1ZjVmOTU2N2ZkMzQyNjdiODc0ODVl
ZjM2ZDEwHhcNMjQwNjE2MDEwMTA2WhcNMjQwNjE3MDEwMTA2WjAzMTEwLwYDVQQD
Eyg4NTZlYTBmZjRhOTcwNmZhOTBmNWMxZTVkZDViOGI1ZjBhYmQ3OGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnkSCGeawl+RXRDCVF2/heG1wguP
BEG1eEPJK+xOqW2Y9PzDukatILcvx7SqCuT2qPPXog1l1CT290Ga8/24bUBCW8UF
Hji3hzxjjfW+H5jHc5d5ZIt0l341SftcH3swHkBx+tbMaBwRnY/rq7532IRWU23W
LH1InbGjO60XBm5/CiCPTB57KhcP4OYuEEP3KwJkAbItdGDWBvUPvDskpUMAqRBY
xAzXmNiG0K2cfKAo1M1GD6XRguyXBCmD8M/yHQDy6h3vuw9XkxAKpyNR1oROn60R
vzIRJPAoDLKfbqk3tnRcK11gMvmMEpe8ipxR0yh+QCwreE8T7WlQcZ2OkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVuoP9Klwb6kPXB5d1bi18KvXiyMB8GA1UdIwQY
MBaAFMWpaO23LBX1+VZ/00JnuHSF7zbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMt
YjJjMGRmYThhMGUxLzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMtYjJjMGRmYThhMGUx
LzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGFSqK/q
X9sOba9t3iZKbWg3oJPoXeTYWH2fXTAkWYtm7Rtn0fD1XAevqZjzMwCQEMRsaRLO
dlebjk+WYYfV5JFEQXSokHIIQrHGKJFnqxNr9kwQzyXv6SU2f/gXhcEGP4ovbkbf
06xgyZoR/ATl7pHrnuGhbIlcCbvcjJOLibooc7hZzQcVSu2/PovBxZTvC7Ho3f4L
Gx+eaQOy2GcP9neY5GKH9AyLZVf4ol9a8SeQbOdufbE4Iqme/YD/R9vjMGXHlKw/
j1xCheItoAHkDzmMnJRbAOWE6H1mWZZqvYLzFHyuDpSaTi+03roGBtG7ynejeV8u
9s8K4KFUINfEpg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:11:27 2024 by rpki-client on console-fra.rpki-client.org