Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
File:                     eCa2BPb4wD_p32yY5h856u11VaU.mft (raw, json)
Hash identifier:          kC5izesjb1o38X6mxfIhUFN7X7qM2AOoJvE/LnJizdk=
Subject key identifier:   45:EA:A8:99:50:4E:66:91:4D:13:CD:3D:60:4E:99:E2:80:EF:9E:63
Authority key identifier: 78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
Certificate issuer:       /CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Certificate serial:       01901DB3C32544CD561008C2C135EB6A6158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 21:00:38 +0000
Manifest this update:     Sat 15 Jun 2024 21:00:38 +0000
Manifest next update:     Sun 16 Jun 2024 21:00:38 +0000
Files and hashes:         1: WLfD3f_wPcSu5gqD9860-DOJE9M.roa (hash: TxPuFOeC1aZvErBpm37eJjERV3eUo0+Dw/jP0MXbvn4=)
                          2: eCa2BPb4wD_p32yY5h856u11VaU.crl (hash: kHMQ4vDuuDDxZkkAhfpam3KI4dA3q627z39LyGsr/5Y=)
                          3: pUDo5Xdse1PXgUnaODg2gCpamv4.roa (hash: nYhA2TvJ3pWh5tbCP3FhoKaQVqbJbuk7g/ayP4DU7PY=)
                          4: qQdpKRvtsAVixbsNhd2UJOERc_4.roa (hash: OfEL+FX/tpOQM1QKE2YFEF2CslW9Y0Lk32RIXu7DUt8=)
                          5: u5h42nF_zanN1CnICnl5HdlM6r4.roa (hash: iIOnijJFKn+E4K/cJCLUkm2Y4mgEzXwzGjxysCld8QE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:b3:c3:25:44:cd:56:10:08:c2:c1:35:eb:6a:61:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
        Validity
            Not Before: Jun 15 21:00:38 2024 GMT
            Not After : Jun 16 21:00:38 2024 GMT
        Subject: CN=45eaa899504e66914d13cd3d604e99e280ef9e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:15:e4:0e:33:6f:04:57:50:e5:8e:69:9e:
                    63:1e:2d:11:10:04:0d:c3:70:dd:23:cd:d0:bc:c3:
                    bc:d0:b5:39:b5:59:d1:49:7e:70:55:8a:18:99:60:
                    e9:f8:ab:04:67:f3:89:e7:f5:25:ea:87:ee:a6:59:
                    76:a6:6c:66:e7:8d:4c:41:ba:ba:e4:01:b3:58:b9:
                    02:83:2e:3c:03:e5:dd:0c:84:da:4d:d7:4e:f1:5f:
                    cd:d8:ed:5c:0f:e7:16:4f:ad:ce:78:44:49:6c:d4:
                    5a:e5:ce:34:d7:85:03:3b:ea:ff:b8:ff:8b:3d:56:
                    e3:9e:63:cf:b7:0d:10:55:4f:85:04:10:55:e8:41:
                    e0:e6:52:a2:90:b6:80:d5:55:c0:14:29:a4:b7:86:
                    5e:64:d8:20:84:e5:07:59:eb:25:79:35:be:91:eb:
                    a3:40:01:30:4e:81:b6:23:bd:35:2b:3c:ee:32:4e:
                    03:83:2c:e0:3f:40:cb:5f:e7:17:fd:75:5e:24:e7:
                    ca:4d:75:ad:d8:2c:9a:9b:cf:2b:48:52:f1:92:9f:
                    25:9e:2e:27:f1:63:14:4a:e5:37:e9:42:8d:62:5c:
                    9b:49:1d:fa:12:40:2c:66:78:8c:1b:d0:3a:07:de:
                    c9:e6:26:bd:3e:25:2b:2e:e1:95:4f:28:3f:1e:0a:
                    da:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EA:A8:99:50:4E:66:91:4D:13:CD:3D:60:4E:99:E2:80:EF:9E:63
            X509v3 Authority Key Identifier:
                keyid:78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:a0:51:b7:f4:29:7b:39:65:0a:fa:a2:a4:d4:2b:e6:a4:84:
         af:bb:69:66:cd:45:a1:d7:08:00:d9:7f:37:b1:c2:e4:e2:32:
         5b:22:b3:a8:88:97:6c:0d:83:b2:d3:81:7c:50:9a:fd:5c:2e:
         dc:3d:f4:5a:1d:5c:23:3f:77:eb:80:62:96:03:a5:e2:85:0f:
         31:31:14:a6:c3:3d:02:aa:35:7d:ea:d6:a4:49:56:d5:c7:ee:
         17:c3:07:a4:22:47:9b:86:00:f4:63:b0:f8:0e:2e:76:d1:74:
         79:05:55:01:d2:bd:a9:37:dd:c2:e8:47:5c:9e:51:5a:74:87:
         ce:8e:15:9f:d7:24:77:0e:c8:11:05:67:f2:a3:19:e8:ab:93:
         0e:72:50:39:18:b4:06:12:42:02:c1:47:60:29:2d:01:e0:3c:
         70:51:df:35:e9:85:ed:6c:a3:12:e0:48:94:8b:7d:90:f3:a2:
         4b:5d:15:ed:06:b7:04:f6:65:5e:ea:cb:c9:2d:7c:d9:eb:3f:
         92:e3:a1:31:09:52:4d:c2:e7:0f:19:51:ad:75:4f:13:b4:26:
         6d:f4:80:24:3d:73:6d:a5:77:2d:15:b9:9a:8a:e7:1c:5d:19:
         ec:fa:73:3b:51:a1:fe:93:44:be:85:c2:d6:0b:03:08:68:92:
         24:a3:9e:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAds8MlRM1WEAjCwTXramFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MjZiNjA0ZjZmOGMwM2ZlOWRmNmM5OGU2MWYzOWVhZWQ3
NTU1YTUwHhcNMjQwNjE1MjEwMDM4WhcNMjQwNjE2MjEwMDM4WjAzMTEwLwYDVQQD
Eyg0NWVhYTg5OTUwNGU2NjkxNGQxM2NkM2Q2MDRlOTllMjgwZWY5ZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14UV5A4zbwRXUOWOaZ5jHi0REAQN
w3DdI83QvMO80LU5tVnRSX5wVYoYmWDp+KsEZ/OJ5/Ul6ofupll2pmxm541MQbq6
5AGzWLkCgy48A+XdDITaTddO8V/N2O1cD+cWT63OeERJbNRa5c4014UDO+r/uP+L
PVbjnmPPtw0QVU+FBBBV6EHg5lKikLaA1VXAFCmkt4ZeZNgghOUHWesleTW+keuj
QAEwToG2I701KzzuMk4DgyzgP0DLX+cX/XVeJOfKTXWt2Cyam88rSFLxkp8lni4n
8WMUSuU36UKNYlybSR36EkAsZniMG9A6B97J5ia9PiUrLuGVTyg/HgraMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXqqJlQTmaRTRPNPWBOmeKA755jMB8GA1UdIwQY
MBaAFHgmtgT2+MA/6d9smOYfOertdVWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jOTRjNjUtZWEwMi00MDVhLWJiYTct
Y2EwNDc0YWRmMzczLzEvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jOTRjNjUtZWEwMi00MDVhLWJiYTctY2EwNDc0YWRmMzcz
LzEvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvKBRt/Qp
ezllCvqipNQr5qSEr7tpZs1FodcIANl/N7HC5OIyWyKzqIiXbA2DstOBfFCa/Vwu
3D30Wh1cIz9364BilgOl4oUPMTEUpsM9Aqo1ferWpElW1cfuF8MHpCJHm4YA9GOw
+A4udtF0eQVVAdK9qTfdwuhHXJ5RWnSHzo4Vn9ckdw7IEQVn8qMZ6KuTDnJQORi0
BhJCAsFHYCktAeA8cFHfNemF7WyjEuBIlIt9kPOiS10V7Qa3BPZlXurLyS182es/
kuOhMQlSTcLnDxlRrXVPE7QmbfSAJD1zbaV3LRW5mornHF0Z7PpzO1Gh/pNEvoXC
1gsDCGiSJKOefw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:16:03 2024 by rpki-client on console-fra.rpki-client.org