Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
File:                     Emcb67isPjC118PSU3NXo7JUbVs.mft (raw, json)
Hash identifier:          vWPtQ4/L6RaSWwVDIYVtMrw0QOFW1Nk2qBuH20Jy5xI=
Subject key identifier:   47:C6:1F:01:8A:7A:E9:E3:23:C8:14:BE:0D:69:1B:24:06:A5:03:9D
Authority key identifier: 12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
Certificate issuer:       /CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Certificate serial:       01901D7CD5DEC6F832CE0154DF123BBCDD6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
Manifest number:          0100
Signing time:             Sat 15 Jun 2024 20:00:38 +0000
Manifest this update:     Sat 15 Jun 2024 20:00:38 +0000
Manifest next update:     Sun 16 Jun 2024 20:00:38 +0000
Files and hashes:         1: 8PswYenOQp1zq7MQHtOjqmh5zrI.roa (hash: 3s5GSMgwpU6PoAfahwISrnPfvLVmi+M5uZu7Fn+dB6g=)
                          2: Emcb67isPjC118PSU3NXo7JUbVs.crl (hash: CrWZ082G+X3hJkn3QfSEB/p5mpjSrP8zAjMrIwwuW3g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:7c:d5:de:c6:f8:32:ce:01:54:df:12:3b:bc:dd:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
        Validity
            Not Before: Jun 15 20:00:38 2024 GMT
            Not After : Jun 16 20:00:38 2024 GMT
        Subject: CN=47c61f018a7ae9e323c814be0d691b2406a5039d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:0b:03:a4:68:67:87:8c:1b:a5:7e:47:7e:
                    86:a1:43:f3:9b:9c:29:93:80:68:4a:18:49:3c:63:
                    78:c1:c5:9c:84:1a:92:21:23:a3:f0:bc:3d:1a:da:
                    bd:20:3d:7a:22:37:3d:0a:34:ef:8e:2c:03:b4:4a:
                    83:66:5d:e0:f6:d7:60:4b:19:46:4b:6e:07:50:d6:
                    d9:e2:dd:2e:10:cd:53:d9:d4:0b:b9:68:0f:45:d3:
                    54:fa:8d:fd:70:a7:a2:11:fe:37:a4:d0:d7:60:28:
                    59:ac:c8:c9:ab:ba:00:fd:7d:45:43:ca:3a:6d:80:
                    81:10:d1:99:29:a2:78:e3:ce:27:78:b9:d2:b4:cb:
                    c5:9a:69:bd:a7:cd:d6:c3:59:f5:7f:95:5d:78:d5:
                    b1:a1:a2:6c:46:e6:9d:91:c7:a2:44:02:d6:08:cc:
                    0c:41:26:9d:d4:92:96:57:4f:2e:ec:67:1d:bd:8d:
                    2a:97:77:b6:42:3f:81:63:3d:4d:af:80:74:9a:67:
                    1e:c0:ef:3f:63:47:4a:78:5b:27:f2:03:1d:7a:56:
                    53:28:75:33:68:c8:c5:c4:71:6b:cf:5e:a3:91:5c:
                    c8:f4:a7:7f:d1:76:c6:d1:69:1e:59:94:2b:6d:47:
                    30:aa:0e:37:4c:49:36:bd:4b:24:c6:ad:3a:7b:44:
                    aa:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C6:1F:01:8A:7A:E9:E3:23:C8:14:BE:0D:69:1B:24:06:A5:03:9D
            X509v3 Authority Key Identifier:
                keyid:12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7d:98:52:27:a3:3b:ce:e5:57:1b:34:a3:b8:ec:f6:d0:23:
         2e:4d:fb:84:57:43:82:86:0d:20:75:f6:cd:c2:d0:8a:6a:35:
         66:9b:62:cb:4f:61:d3:92:a4:de:c7:32:17:cb:7f:15:13:65:
         ed:d9:ec:92:52:60:69:2f:72:7e:7f:54:fd:f0:4e:18:9f:6d:
         8a:29:1d:df:8d:38:a5:e4:d1:fa:1c:91:65:61:a8:47:16:30:
         4c:39:e2:bf:83:dd:d9:22:93:47:8d:69:4e:c2:76:99:8a:3f:
         52:d5:1e:ee:d2:4b:6f:c7:47:29:c4:6d:4c:80:c2:99:10:8a:
         86:6d:74:07:12:b6:15:1c:15:88:72:d7:5e:b3:c2:e5:8d:af:
         5a:38:46:d3:7b:73:35:21:07:a9:ff:37:74:04:c0:ce:19:13:
         d4:3b:e1:11:f9:16:18:79:56:76:6d:1f:1c:02:71:e1:9b:d3:
         2b:90:a3:c4:db:58:4b:11:b5:58:ce:c4:5a:f3:90:9e:6d:5b:
         b5:b1:12:eb:41:a6:24:f3:9f:15:fe:77:0a:d3:41:fa:7b:98:
         fb:c1:24:51:bd:d7:c1:ea:15:d1:a2:4f:40:7d:e2:4b:6e:76:
         2d:cf:81:db:cf:dd:6d:e4:70:90:1a:a5:0c:8d:1f:95:bb:ef:
         1c:76:c0:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdfNXexvgyzgFU3xI7vN1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjcxYmViYjhhYzNlMzBiNWQ3YzNkMjUzNzM1N2EzYjI1
NDZkNWIwHhcNMjQwNjE1MjAwMDM4WhcNMjQwNjE2MjAwMDM4WjAzMTEwLwYDVQQD
Eyg0N2M2MWYwMThhN2FlOWUzMjNjODE0YmUwZDY5MWIyNDA2YTUwMzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqoLA6RoZ4eMG6V+R36GoUPzm5wp
k4BoShhJPGN4wcWchBqSISOj8Lw9Gtq9ID16Ijc9CjTvjiwDtEqDZl3g9tdgSxlG
S24HUNbZ4t0uEM1T2dQLuWgPRdNU+o39cKeiEf43pNDXYChZrMjJq7oA/X1FQ8o6
bYCBENGZKaJ4484neLnStMvFmmm9p83Ww1n1f5VdeNWxoaJsRuadkceiRALWCMwM
QSad1JKWV08u7GcdvY0ql3e2Qj+BYz1Nr4B0mmcewO8/Y0dKeFsn8gMdelZTKHUz
aMjFxHFrz16jkVzI9Kd/0XbG0WkeWZQrbUcwqg43TEk2vUskxq06e0SqdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfGHwGKeunjI8gUvg1pGyQGpQOdMB8GA1UdIwQY
MBaAFBJnG+u4rD4wtdfD0lNzV6OyVG1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMt
ZDQyODY5NzhhODBhLzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMtZDQyODY5NzhhODBh
LzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgX2YUiej
O87lVxs0o7js9tAjLk37hFdDgoYNIHX2zcLQimo1Zptiy09h05Kk3scyF8t/FRNl
7dnsklJgaS9yfn9U/fBOGJ9tiikd3404peTR+hyRZWGoRxYwTDniv4Pd2SKTR41p
TsJ2mYo/UtUe7tJLb8dHKcRtTIDCmRCKhm10BxK2FRwViHLXXrPC5Y2vWjhG03tz
NSEHqf83dATAzhkT1DvhEfkWGHlWdm0fHAJx4ZvTK5CjxNtYSxG1WM7EWvOQnm1b
tbES60GmJPOfFf53CtNB+nuY+8EkUb3XweoV0aJPQH3iS252Lc+B28/dbeRwkBql
DI0flbvvHHbAbg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:43:47 2024 by rpki-client on console-ams.rpki-client.org