Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
File:                     15ToHXL1nGWg0YFEobJgeYNTa0o.mft (raw, json)
Hash identifier:          Fa9JqoA0/8+hVqTSMwQcMzxVS7bLAhr0Hwuk5aVPQpY=
Subject key identifier:   29:FC:B2:36:1A:C1:02:5D:1E:F0:83:8D:D9:D3:6C:EF:61:6F:E0:64
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Certificate issuer:       /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial:       01901C33407071C00DF8EC2BF7674D96C96C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
Manifest number:          08C9
Signing time:             Sat 15 Jun 2024 14:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 14:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 14:00:39 +0000
Files and hashes:         1: 15ToHXL1nGWg0YFEobJgeYNTa0o.crl (hash: kC16FXbCjsnfJ3BaJat4+hKzOwna5Hfn98Bi/TrSx3I=)
                          2: N-HIR8tb2G84PV5sJjY95rZvucM.roa (hash: DEZVBHtG/qqJmsooBl/1qs4w1TSw5XdxadxCcTiPJ0o=)
                          3: ngNMLN1cHJEpMxk7VWISUFedbpg.roa (hash: 31Gsm7cNM0AwryRfEUH1yivQZrbsKuJvYAse/z/ksyQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:33:40:70:71:c0:0d:f8:ec:2b:f7:67:4d:96:c9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
        Validity
            Not Before: Jun 15 14:00:39 2024 GMT
            Not After : Jun 16 14:00:39 2024 GMT
        Subject: CN=29fcb2361ac1025d1ef0838dd9d36cef616fe064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:8e:d7:6d:c3:92:9e:84:bb:70:be:f7:3c:
                    4b:fc:eb:76:0b:a6:41:86:cc:e4:6a:59:b2:b2:2d:
                    cc:01:62:cb:fb:c7:7a:ab:4e:0c:85:ba:6d:b9:ff:
                    8b:8b:c5:13:45:70:19:2c:8e:90:94:3f:b0:7d:22:
                    4b:9d:2a:e6:c0:20:84:d5:4c:05:ff:f5:a5:44:3a:
                    5a:5e:38:92:6e:d9:60:1f:51:02:e2:ab:03:31:47:
                    ab:08:f9:24:cf:db:0b:56:c1:e7:65:af:3d:3e:d2:
                    3c:91:f8:42:e0:1d:ac:9c:3a:c9:84:0a:a8:2a:90:
                    f3:29:92:b2:40:af:f8:8c:c5:b5:32:a0:60:36:d7:
                    d7:c1:51:c3:77:3c:0e:29:1e:5b:55:89:26:53:36:
                    2a:aa:90:1c:ac:81:17:8c:a1:63:86:a0:e9:2f:93:
                    85:31:65:b5:83:24:6b:53:7f:a8:ef:f0:04:25:c9:
                    ff:7a:3e:08:89:b7:8b:51:0b:d5:22:f4:d2:88:db:
                    b1:79:2b:81:57:69:2b:2f:0e:b6:32:63:b0:9f:03:
                    3c:ac:94:fb:c9:b8:41:24:b2:7e:e2:df:17:06:c3:
                    45:3d:2e:75:70:a1:71:44:86:a0:8d:12:ca:41:fb:
                    62:30:03:2d:82:ad:a8:6f:6f:30:fb:2e:f3:be:fe:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FC:B2:36:1A:C1:02:5D:1E:F0:83:8D:D9:D3:6C:EF:61:6F:E0:64
            X509v3 Authority Key Identifier:
                keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2b:fd:48:e1:d9:a4:d2:b6:a6:8f:b2:d2:b9:bf:a6:36:ec:
         34:2e:36:8f:d1:64:22:f5:0d:4a:a1:05:a0:82:6a:94:9d:d7:
         7d:57:5f:44:e0:55:2d:47:fa:3b:6e:4f:88:1a:ab:91:ca:fe:
         af:39:83:b3:76:6f:e5:15:f6:b9:f1:c2:53:85:d3:e1:82:25:
         e7:38:c4:71:9c:ad:22:f3:d6:5a:58:5f:90:be:43:48:bc:ab:
         2c:2e:7f:51:4a:53:19:56:d9:0d:af:b1:c4:5f:97:b7:99:51:
         d5:20:ec:a7:40:f9:b9:80:e9:e1:7f:45:8e:8e:32:34:12:7f:
         84:a1:1f:7f:1d:a0:78:07:08:4d:a6:90:75:9f:d3:28:59:c5:
         fb:4e:5f:95:33:f5:bb:e0:99:e6:0c:d0:60:54:fc:e6:81:31:
         cc:44:4c:c1:06:8c:93:50:28:d1:24:fd:50:24:e0:53:f1:cf:
         32:d7:19:6a:36:98:f6:aa:15:93:17:22:f4:22:5f:8b:6d:80:
         2b:e9:81:96:6a:9a:cf:09:d3:af:2b:03:8c:e3:1e:25:31:cb:
         0a:3b:9f:00:30:84:22:00:fd:94:cf:75:62:5b:17:3a:b0:12:
         41:62:ee:d6:f3:5c:f2:0d:fa:6d:a7:8b:fd:71:cf:ed:68:f3:
         b3:69:54:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcM0BwccAN+Owr92dNlslsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTRlODFkNzJmNTljNjVhMGQxODE0NGExYjI2MDc5ODM1
MzZiNGEwHhcNMjQwNjE1MTQwMDM5WhcNMjQwNjE2MTQwMDM5WjAzMTEwLwYDVQQD
EygyOWZjYjIzNjFhYzEwMjVkMWVmMDgzOGRkOWQzNmNlZjYxNmZlMDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFGO123Dkp6Eu3C+9zxL/Ot2C6ZB
hszkalmysi3MAWLL+8d6q04Mhbptuf+Li8UTRXAZLI6QlD+wfSJLnSrmwCCE1UwF
//WlRDpaXjiSbtlgH1EC4qsDMUerCPkkz9sLVsHnZa89PtI8kfhC4B2snDrJhAqo
KpDzKZKyQK/4jMW1MqBgNtfXwVHDdzwOKR5bVYkmUzYqqpAcrIEXjKFjhqDpL5OF
MWW1gyRrU3+o7/AEJcn/ej4IibeLUQvVIvTSiNuxeSuBV2krLw62MmOwnwM8rJT7
ybhBJLJ+4t8XBsNFPS51cKFxRIagjRLKQftiMAMtgq2ob28w+y7zvv41fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCn8sjYawQJdHvCDjdnTbO9hb+BkMB8GA1UdIwQY
MBaAFNeU6B1y9ZxloNGBRKGyYHmDU2tKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYt
Y2NhNTJiNjI2ZmNhLzEvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYtY2NhNTJiNjI2ZmNh
LzEvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICv9SOHZ
pNK2po+y0rm/pjbsNC42j9FkIvUNSqEFoIJqlJ3XfVdfROBVLUf6O25PiBqrkcr+
rzmDs3Zv5RX2ufHCU4XT4YIl5zjEcZytIvPWWlhfkL5DSLyrLC5/UUpTGVbZDa+x
xF+Xt5lR1SDsp0D5uYDp4X9Fjo4yNBJ/hKEffx2geAcITaaQdZ/TKFnF+05flTP1
u+CZ5gzQYFT85oExzERMwQaMk1Ao0ST9UCTgU/HPMtcZajaY9qoVkxci9CJfi22A
K+mBlmqazwnTrysDjOMeJTHLCjufADCEIgD9lM91YlsXOrASQWLu1vNc8g36baeL
/XHP7Wjzs2lUpQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:06:20 2024 by rpki-client on console-fra.rpki-client.org