Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
File:                     aREkWuICUVXAm-wlqJkdVnrxhB0.mft (raw, json)
Hash identifier:          juv3KmXeeFuys//MQswEbEpzSTHt+W68vldCr/dbdiE=
Subject key identifier:   D1:6E:E9:1F:F8:80:C3:FC:6E:2D:8B:F0:7C:04:74:56:6A:D0:42:A4
Authority key identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
Certificate issuer:       /CN=6911245ae2025155c09bec25a8991d567af1841d
Certificate serial:       01901DED50A5F9E27421B61CDF467A1E00BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:03:30 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:30 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:30 +0000
Files and hashes:         1: QKgDF8e57QF3eXJrK-FiCPDHmfU.roa (hash: +E1BqSBrlnTbnzWLAAzKH9Q0vqlEI8vEJvPvq//8UvY=)
                          2: aREkWuICUVXAm-wlqJkdVnrxhB0.crl (hash: RakRAM2TngHm2PebYgXY7nXDz4PvK/sJCTDUYh1g9TY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:50:a5:f9:e2:74:21:b6:1c:df:46:7a:1e:00:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6911245ae2025155c09bec25a8991d567af1841d
        Validity
            Not Before: Jun 15 22:03:30 2024 GMT
            Not After : Jun 16 22:03:30 2024 GMT
        Subject: CN=d16ee91ff880c3fc6e2d8bf07c0474566ad042a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:5e:c3:50:6b:ae:ef:f0:1e:65:80:32:6e:
                    0b:21:37:07:57:d3:c0:f9:ba:b8:a2:fe:11:cd:b4:
                    34:79:72:e0:f8:58:ad:c2:26:bc:20:a5:fd:96:51:
                    84:2e:19:e3:04:ee:4d:a8:e2:06:93:8f:93:36:eb:
                    9e:ea:1d:8c:84:09:2c:0c:8c:9a:3f:1b:3c:78:40:
                    e0:4c:06:f5:6a:b3:be:6f:a8:bd:9c:58:91:87:ac:
                    da:8f:ae:76:0e:52:77:10:2c:87:49:a6:f1:70:fd:
                    86:0b:ec:74:a2:36:76:2f:e9:c2:bc:39:6a:a0:3c:
                    ed:fa:9f:2a:6b:6e:92:2d:05:97:07:a5:01:43:d1:
                    b8:a2:46:97:cb:73:08:59:6f:cb:8c:00:f9:2f:6c:
                    48:66:fc:6e:74:7a:7e:bb:3f:da:1e:f6:0f:a1:74:
                    64:55:42:df:63:3a:3c:52:14:6c:2d:a4:96:b2:4b:
                    03:0e:6f:b1:39:e3:84:de:7e:02:df:66:7a:f2:3a:
                    99:77:a5:9a:c4:6a:a2:9b:28:e4:12:27:af:5c:68:
                    76:fc:fc:88:0b:b2:8b:96:87:71:af:61:90:71:1f:
                    6d:80:62:09:83:ec:e5:4f:95:d1:fe:ba:5d:0e:65:
                    42:e2:08:af:a7:66:88:f1:a8:9e:a0:49:52:cc:66:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6E:E9:1F:F8:80:C3:FC:6E:2D:8B:F0:7C:04:74:56:6A:D0:42:A4
            X509v3 Authority Key Identifier:
                keyid:69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f4:f5:5c:05:2d:c5:3d:1a:e3:bc:26:40:0c:93:7e:45:b8:
         b7:14:48:74:37:e8:f8:62:d6:99:b6:e6:19:bf:f1:1e:1d:71:
         b6:93:e9:15:b8:ed:92:9f:a8:aa:f5:73:59:f5:14:2e:56:0e:
         e2:3c:98:87:6c:43:8e:9c:6e:2a:4c:0a:17:90:ad:61:02:9d:
         bb:78:ad:3b:cb:bb:fd:4d:fd:88:6c:20:e7:67:3d:7e:41:ea:
         3e:93:8b:e1:18:3e:e1:ba:05:9e:3b:3c:03:80:3b:84:a8:8c:
         c1:d6:97:e9:d3:25:24:3c:29:04:45:30:b5:b8:c5:9f:e4:40:
         8f:d1:3e:90:01:cc:45:f4:ae:06:11:6c:a8:6e:e6:0e:df:05:
         41:4d:12:75:bb:60:71:33:30:85:0c:25:f8:bc:5c:6f:c3:37:
         9e:d6:05:8d:e1:3a:76:ea:4f:a4:bb:94:e8:23:ef:fa:fb:7c:
         45:b0:63:4f:2d:66:dd:fb:e1:30:1a:c2:f8:12:1d:1f:38:d0:
         88:a9:15:4b:6c:b9:ae:7f:62:c2:2b:ed:8b:ec:73:02:7b:97:
         af:4b:2b:de:64:63:af:d8:53:d3:8e:eb:26:10:41:3b:a8:0f:
         7b:19:7a:8e:a4:60:cd:1e:ac:e1:fd:16:36:77:89:0d:75:d9:
         84:1f:7c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7VCl+eJ0IbYc30Z6HgC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTEyNDVhZTIwMjUxNTVjMDliZWMyNWE4OTkxZDU2N2Fm
MTg0MWQwHhcNMjQwNjE1MjIwMzMwWhcNMjQwNjE2MjIwMzMwWjAzMTEwLwYDVQQD
EyhkMTZlZTkxZmY4ODBjM2ZjNmUyZDhiZjA3YzA0NzQ1NjZhZDA0MmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8lew1Brru/wHmWAMm4LITcHV9PA
+bq4ov4RzbQ0eXLg+Fitwia8IKX9llGELhnjBO5NqOIGk4+TNuue6h2MhAksDIya
Pxs8eEDgTAb1arO+b6i9nFiRh6zaj652DlJ3ECyHSabxcP2GC+x0ojZ2L+nCvDlq
oDzt+p8qa26SLQWXB6UBQ9G4okaXy3MIWW/LjAD5L2xIZvxudHp+uz/aHvYPoXRk
VULfYzo8UhRsLaSWsksDDm+xOeOE3n4C32Z68jqZd6WaxGqimyjkEievXGh2/PyI
C7KLlodxr2GQcR9tgGIJg+zlT5XR/rpdDmVC4givp2aI8aieoElSzGYF6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFu6R/4gMP8bi2L8HwEdFZq0EKkMB8GA1UdIwQY
MBaAFGkRJFriAlFVwJvsJaiZHVZ68YQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJFa1d1SUNVVlhBbS13bHFKa2RWbnJ4aEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wZTRkZDUtOWM4Zi00ODU2LTkwZDct
MWUxZTljYmY0N2RhLzEvYVJFa1d1SUNVVlhBbS13bHFKa2RWbnJ4aEIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wZTRkZDUtOWM4Zi00ODU2LTkwZDctMWUxZTljYmY0N2Rh
LzEvYVJFa1d1SUNVVlhBbS13bHFKa2RWbnJ4aEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfT1XAUt
xT0a47wmQAyTfkW4txRIdDfo+GLWmbbmGb/xHh1xtpPpFbjtkp+oqvVzWfUULlYO
4jyYh2xDjpxuKkwKF5CtYQKdu3itO8u7/U39iGwg52c9fkHqPpOL4Rg+4boFnjs8
A4A7hKiMwdaX6dMlJDwpBEUwtbjFn+RAj9E+kAHMRfSuBhFsqG7mDt8FQU0Sdbtg
cTMwhQwl+Lxcb8M3ntYFjeE6dupPpLuU6CPv+vt8RbBjTy1m3fvhMBrC+BIdHzjQ
iKkVS2y5rn9iwivti+xzAnuXr0sr3mRjr9hT047rJhBBO6gPexl6jqRgzR6s4f0W
NneJDXXZhB98ow==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:11:38 2024 by rpki-client on console-fra.rpki-client.org