Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
File:                     _xwhiBHZKUrWMSU6RF7R05WpY58.mft (raw, json)
Hash identifier:          XyD0+sjIT7FG37itpOX/SnG0Ud77+Ipo6z83JQZie+4=
Subject key identifier:   DC:C1:E3:96:8A:1F:FF:EB:B9:38:3C:2E:47:A5:36:5B:B5:88:A9:33
Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
Certificate issuer:       /CN=ff1c218811d9294ad631253a445ed1d395a9639f
Certificate serial:       01901DEBDABBE5593D21C9A5874836FD344A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
Manifest number:          1020
Signing time:             Sat 15 Jun 2024 22:01:54 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:54 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:54 +0000
Files and hashes:         1: _xwhiBHZKUrWMSU6RF7R05WpY58.crl (hash: CrcfRqY4I6NTKAoLSZO4jRZRIkIpBknxFk/unKHii8w=)
                          2: lHd7xqftLAEpkoOWzQgys_oMo1o.roa (hash: QV+zHFcW4RwbAVZAzU7oK7t9vsa1pYMso+duAWIlBCs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:da:bb:e5:59:3d:21:c9:a5:87:48:36:fd:34:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f
        Validity
            Not Before: Jun 15 22:01:54 2024 GMT
            Not After : Jun 16 22:01:54 2024 GMT
        Subject: CN=dcc1e3968a1fffebb9383c2e47a5365bb588a933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:25:e9:1b:bf:a6:0e:09:eb:0a:f7:09:87:29:
                    f6:77:eb:e3:87:a8:08:8b:77:aa:b0:f4:74:d2:78:
                    30:cf:99:e4:0f:81:20:3a:98:cf:78:43:0f:85:e1:
                    14:6b:5e:34:49:cf:cf:f7:b9:43:6d:89:45:bd:df:
                    10:e8:36:e0:e5:a0:36:20:1f:f6:da:ec:54:ef:cc:
                    86:43:c8:f1:24:3f:33:2e:e2:cf:27:ef:9f:ac:55:
                    f6:82:66:f0:79:fc:d6:8a:e8:ee:90:e7:f2:d7:5c:
                    34:5a:ac:d2:25:6d:33:a5:e8:45:71:bc:11:93:19:
                    04:fa:f8:9e:a0:b4:1a:69:58:a2:e0:87:9f:01:91:
                    14:7c:c3:26:e0:44:a5:8d:c0:7e:1a:59:5d:4c:97:
                    b9:98:d1:4e:c3:04:62:cb:7e:c2:e8:4f:fc:4e:57:
                    11:7c:77:cf:f7:b4:25:ad:1d:0e:5c:d1:c6:87:1e:
                    59:48:12:51:ca:44:c8:8b:84:5e:2b:8c:e9:cb:af:
                    da:4e:24:1e:86:37:aa:90:6b:0b:c4:db:1d:a7:92:
                    42:ca:a9:8e:66:b6:3e:33:ac:cc:68:de:20:a8:c6:
                    28:90:d5:e2:53:43:b1:27:f7:8e:da:7d:95:5d:f9:
                    7c:f9:a9:cb:93:3a:c7:c5:a3:72:b0:e8:d2:f6:b9:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C1:E3:96:8A:1F:FF:EB:B9:38:3C:2E:47:A5:36:5B:B5:88:A9:33
            X509v3 Authority Key Identifier:
                keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:92:5a:43:9f:33:6e:73:52:be:39:44:5a:d8:25:d3:88:ca:
         a9:c9:df:8d:a6:6c:f6:77:5f:b8:73:06:87:e6:08:64:df:dd:
         06:b7:86:21:a3:66:b0:cc:64:f5:25:90:3d:eb:3a:a8:9c:01:
         ea:d4:9a:26:b8:7a:ae:47:a3:c8:1b:57:e0:17:35:c9:0f:0a:
         b1:fa:df:1d:56:93:51:ee:c6:d2:18:24:96:b9:b0:4c:40:cb:
         e6:c6:7b:64:5f:ef:d1:e6:bb:7b:11:1f:7c:af:88:80:5d:c8:
         88:fb:53:f1:f9:1c:90:67:5e:40:06:71:1e:89:1b:d2:29:25:
         67:89:88:70:b8:f3:44:1e:c5:e3:cf:57:b1:a2:e9:b7:8c:ac:
         b2:dc:d7:5b:ed:3f:a7:6d:7c:c8:e5:aa:a9:b9:b1:1c:29:c1:
         5a:dc:9c:11:aa:cc:04:51:36:10:1f:df:b8:ef:27:b5:7d:2c:
         17:de:25:61:3f:b8:93:5e:19:93:06:cc:de:e4:65:66:b0:64:
         da:5a:c3:fc:73:cb:6c:90:5c:4c:8f:99:f4:28:7f:2d:85:d6:
         67:bb:f6:60:2a:28:34:56:bf:62:fd:c1:dd:07:a8:2b:d9:a8:
         52:fa:08:b0:1e:6e:53:23:79:4f:16:91:75:6f:02:47:68:10:
         28:06:09:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd69q75Vk9Icmlh0g2/TRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWMyMTg4MTFkOTI5NGFkNjMxMjUzYTQ0NWVkMWQzOTVh
OTYzOWYwHhcNMjQwNjE1MjIwMTU0WhcNMjQwNjE2MjIwMTU0WjAzMTEwLwYDVQQD
EyhkY2MxZTM5NjhhMWZmZmViYjkzODNjMmU0N2E1MzY1YmI1ODhhOTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCXpG7+mDgnrCvcJhyn2d+vjh6gI
i3eqsPR00ngwz5nkD4EgOpjPeEMPheEUa140Sc/P97lDbYlFvd8Q6Dbg5aA2IB/2
2uxU78yGQ8jxJD8zLuLPJ++frFX2gmbwefzWiujukOfy11w0WqzSJW0zpehFcbwR
kxkE+vieoLQaaVii4IefAZEUfMMm4ESljcB+GlldTJe5mNFOwwRiy37C6E/8TlcR
fHfP97QlrR0OXNHGhx5ZSBJRykTIi4ReK4zpy6/aTiQehjeqkGsLxNsdp5JCyqmO
ZrY+M6zMaN4gqMYokNXiU0OxJ/eO2n2VXfl8+anLkzrHxaNysOjS9rksqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzB45aKH//ruTg8LkelNlu1iKkzMB8GA1UdIwQY
MBaAFP8cIYgR2SlK1jElOkRe0dOVqWOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYzZiMTQtN2U4Ny00OWM3LWEzYjMt
YTBhNjBiYjljZDliLzEvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yYzZiMTQtN2U4Ny00OWM3LWEzYjMtYTBhNjBiYjljZDli
LzEvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpJaQ58z
bnNSvjlEWtgl04jKqcnfjaZs9ndfuHMGh+YIZN/dBreGIaNmsMxk9SWQPes6qJwB
6tSaJrh6rkejyBtX4Bc1yQ8KsfrfHVaTUe7G0hgklrmwTEDL5sZ7ZF/v0ea7exEf
fK+IgF3IiPtT8fkckGdeQAZxHokb0iklZ4mIcLjzRB7F489XsaLpt4ysstzXW+0/
p218yOWqqbmxHCnBWtycEarMBFE2EB/fuO8ntX0sF94lYT+4k14ZkwbM3uRlZrBk
2lrD/HPLbJBcTI+Z9Ch/LYXWZ7v2YCooNFa/Yv3B3QeoK9moUvoIsB5uUyN5TxaR
dW8CR2gQKAYJnQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:13:14 2024 by rpki-client on console-fra.rpki-client.org