Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
File:                     6hIZKS2GypY5e4qL0k4IsaiXwaM.mft (raw, json)
Hash identifier:          IaNsITnkhSMT4Y9kvK1yWyypK/ouYKm4OqG+MGyPHYg=
Subject key identifier:   91:24:84:03:95:74:AF:C2:56:4B:1A:8D:75:F4:75:84:E8:0A:B3:EC
Authority key identifier: EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3
Certificate issuer:       /CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
Certificate serial:       01901DEC8E06B6BD443655F2C272D20C4DAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
Manifest number:          11CE
Signing time:             Sat 15 Jun 2024 22:02:40 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:40 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:40 +0000
Files and hashes:         1: 6hIZKS2GypY5e4qL0k4IsaiXwaM.crl (hash: sbZWg9OAHXgm+x5AURIn++CusoMy/JoIlKrVgqKs5P0=)
                          2: llapNPL9DGx0qPng0fF9tpjao2o.roa (hash: u9bVmMP1x5/NE2SlQbyeQ69m7P2qQ7pRBIIvVZ5cfT8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:8e:06:b6:bd:44:36:55:f2:c2:72:d2:0c:4d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
        Validity
            Not Before: Jun 15 22:02:40 2024 GMT
            Not After : Jun 16 22:02:40 2024 GMT
        Subject: CN=912484039574afc2564b1a8d75f47584e80ab3ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:d6:32:9b:57:42:07:f9:77:4b:cc:f5:55:
                    69:6c:07:d0:27:12:d7:66:91:53:28:30:34:c3:40:
                    f6:d5:5d:28:5a:a1:a2:01:67:d0:dd:d6:18:f3:0d:
                    12:37:1e:df:8c:b1:63:6d:5b:42:d6:1a:14:b7:57:
                    6d:3c:52:84:c8:1d:bc:97:97:99:bd:ee:9d:e1:69:
                    37:a8:7e:cc:5c:44:21:cc:43:22:a2:e6:05:8f:d2:
                    9a:83:8b:d9:82:50:98:4e:6f:ff:bb:2a:f9:68:69:
                    93:0d:5e:f3:e6:66:e4:42:d3:a1:d0:21:74:b8:32:
                    00:ff:63:06:d0:e2:99:0f:06:38:ae:74:be:0f:8d:
                    0b:61:d7:ee:ef:9d:9e:11:72:e9:b9:f8:42:cf:2a:
                    e1:85:45:03:a4:83:7f:50:b4:11:5a:36:f6:ca:f0:
                    ac:14:c8:0c:de:78:36:9a:56:86:27:f7:a4:e9:8e:
                    48:14:53:be:78:fa:0f:54:60:a9:93:df:25:f8:89:
                    cc:b1:aa:1e:c6:fd:d6:16:38:ef:78:58:9c:76:f7:
                    65:89:91:c4:bb:19:28:30:38:7f:05:36:d4:7f:7f:
                    ea:6d:8a:5f:0c:1f:5c:7a:c4:4a:c9:73:8a:4f:00:
                    af:cd:88:38:5e:e1:9b:2f:c6:f2:08:47:e5:e3:b0:
                    88:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:24:84:03:95:74:AF:C2:56:4B:1A:8D:75:F4:75:84:E8:0A:B3:EC
            X509v3 Authority Key Identifier:
                keyid:EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3d:af:42:90:cd:12:67:ef:01:ed:da:5b:eb:8a:52:e6:6d:
         5b:b2:ea:d9:db:db:6e:1a:f2:d3:51:fc:4e:7d:d1:55:b1:26:
         26:e8:76:59:9c:d9:a1:40:ee:2a:b7:4f:c8:29:6b:55:fc:18:
         52:16:c1:8d:18:c1:4f:53:97:3e:56:fa:85:5f:bf:8d:78:db:
         ea:c7:5f:db:39:f8:16:3f:75:ce:5f:0a:3c:f0:c6:2d:73:c4:
         e9:ca:48:9c:44:e2:79:84:b5:96:fb:b0:b3:a6:da:cc:90:83:
         e8:4c:92:5f:c3:5b:99:f5:31:af:04:58:42:3c:f0:0b:91:37:
         07:a6:38:7e:a6:5a:f6:4a:96:e7:62:3d:2b:be:a1:69:32:d4:
         12:f2:8e:e0:07:ca:a4:4e:32:af:70:9f:d7:03:92:1f:0f:90:
         7c:66:ab:8c:9a:73:9f:b2:47:a3:28:1e:1d:ba:81:31:d6:14:
         d2:cb:d0:80:e9:c6:22:a3:89:25:44:c1:a5:9d:17:41:e8:de:
         5b:1b:99:3d:f4:0e:c6:93:ff:99:c4:58:e5:23:a6:a8:e7:2c:
         e2:3c:26:73:21:e1:d5:27:52:8c:18:0a:82:52:40:70:99:a7:
         63:f3:46:10:5c:c2:c0:69:a4:e8:8b:5d:67:44:f7:3f:fc:eb:
         49:59:5c:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7I4Gtr1ENlXywnLSDE2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMTIxOTI5MmQ4NmNhOTYzOTdiOGE4YmQyNGUwOGIxYTg5
N2MxYTMwHhcNMjQwNjE1MjIwMjQwWhcNMjQwNjE2MjIwMjQwWjAzMTEwLwYDVQQD
Eyg5MTI0ODQwMzk1NzRhZmMyNTY0YjFhOGQ3NWY0NzU4NGU4MGFiM2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxPWMptXQgf5d0vM9VVpbAfQJxLX
ZpFTKDA0w0D21V0oWqGiAWfQ3dYY8w0SNx7fjLFjbVtC1hoUt1dtPFKEyB28l5eZ
ve6d4Wk3qH7MXEQhzEMiouYFj9Kag4vZglCYTm//uyr5aGmTDV7z5mbkQtOh0CF0
uDIA/2MG0OKZDwY4rnS+D40LYdfu752eEXLpufhCzyrhhUUDpIN/ULQRWjb2yvCs
FMgM3ng2mlaGJ/ek6Y5IFFO+ePoPVGCpk98l+InMsaoexv3WFjjveFicdvdliZHE
uxkoMDh/BTbUf3/qbYpfDB9cesRKyXOKTwCvzYg4XuGbL8byCEfl47CIjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEkhAOVdK/CVksajXX0dYToCrPsMB8GA1UdIwQY
MBaAFOoSGSkthsqWOXuKi9JOCLGol8GjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUt
Yzk4YTFiZGU2NDc2LzEvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUtYzk4YTFiZGU2NDc2
LzEvNmhJWktTMkd5cFk1ZTRxTDBrNElzYWlYd2FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANj2vQpDN
EmfvAe3aW+uKUuZtW7Lq2dvbbhry01H8Tn3RVbEmJuh2WZzZoUDuKrdPyClrVfwY
UhbBjRjBT1OXPlb6hV+/jXjb6sdf2zn4Fj91zl8KPPDGLXPE6cpInETieYS1lvuw
s6bazJCD6EySX8NbmfUxrwRYQjzwC5E3B6Y4fqZa9kqW52I9K76haTLUEvKO4AfK
pE4yr3Cf1wOSHw+QfGarjJpzn7JHoygeHbqBMdYU0svQgOnGIqOJJUTBpZ0XQeje
WxuZPfQOxpP/mcRY5SOmqOcs4jwmcyHh1SdSjBgKglJAcJmnY/NGEFzCwGmk6Itd
Z0T3P/zrSVlcqg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:16:18 2024 by rpki-client on console-ams.rpki-client.org