Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
File:                     AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft (raw, json)
Hash identifier:          vYKVmhqLr6QqxpVInkXFL9N/uxAu3s91MPXSrf/bOJo=
Subject key identifier:   AC:83:A8:11:50:FC:A4:2A:84:6B:02:46:27:14:1C:5E:C8:88:04:4E
Authority key identifier: 01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
Certificate issuer:       /CN=01538851167b4e3d6f64d53797b08cb41371870f
Certificate serial:       01901BFC5C1E793BC63DF73E70A2B12F9046
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 13:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 13:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 13:00:41 +0000
Files and hashes:         1: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl (hash: GroGu7cxpufuu5FjOa0yeI6Cog2N5IVu98Q0nuPGHq4=)
                          2: udY2sbJt-uRqMVg-0S1_W1YwP3A.roa (hash: TutDCwnsEl0pUQ6XDxvpjMnfDS+Vt48gzzvIA4uZ5Wo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:5c:1e:79:3b:c6:3d:f7:3e:70:a2:b1:2f:90:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01538851167b4e3d6f64d53797b08cb41371870f
        Validity
            Not Before: Jun 15 13:00:41 2024 GMT
            Not After : Jun 16 13:00:41 2024 GMT
        Subject: CN=ac83a81150fca42a846b024627141c5ec888044e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:23:e5:ae:eb:e9:00:77:f2:ad:36:82:88:e1:
                    e7:09:27:0a:d1:31:fb:9d:97:34:80:f6:20:04:b6:
                    2d:e8:d7:16:48:5c:2d:d0:a8:41:7c:8a:0d:07:33:
                    a2:9f:69:64:bb:b4:b0:a4:25:56:8d:26:76:8c:af:
                    b6:0c:10:4a:67:66:5b:fa:87:e4:7e:ab:b6:11:8f:
                    0c:b6:12:8b:8e:15:1b:8a:c1:1e:f8:b3:b1:23:38:
                    eb:2e:2b:72:34:22:30:50:54:8c:ce:90:5c:58:c0:
                    4d:f0:ca:7d:26:65:36:1e:4c:e3:ad:5e:1c:d5:dc:
                    fe:af:12:8d:e2:b7:be:14:05:e7:10:ae:94:40:97:
                    17:70:c0:3a:ec:b2:1d:0b:9c:91:f6:6d:e4:dd:73:
                    f9:ff:53:0c:5f:8e:62:1f:55:ba:50:7f:3f:20:5a:
                    21:92:b8:6e:42:04:4e:ae:71:11:a5:aa:07:6a:0b:
                    af:98:2b:32:be:ef:1c:5d:4b:31:62:72:d3:95:db:
                    b2:62:d3:e0:94:45:00:24:94:af:b0:39:b2:8b:f0:
                    c3:4d:86:8e:46:0c:07:f7:3c:f9:4d:fe:de:a6:99:
                    f1:22:e4:87:de:1c:38:ad:c0:26:73:08:2b:08:0e:
                    e3:cb:7d:9c:14:42:ec:67:26:0a:ad:ed:ea:a7:90:
                    1d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:83:A8:11:50:FC:A4:2A:84:6B:02:46:27:14:1C:5E:C8:88:04:4E
            X509v3 Authority Key Identifier:
                keyid:01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:15:92:46:cc:f6:7e:e3:fe:08:ef:ca:c0:4b:a4:b3:f9:1c:
         98:d6:48:1f:de:d0:cb:08:f4:3e:b3:ff:f3:cf:8c:ea:65:37:
         cf:21:f5:68:e2:20:fb:73:fc:cb:e5:80:92:e6:3a:06:d3:1e:
         0b:6f:fd:f9:d9:93:88:8f:23:8d:00:72:e1:10:38:81:e2:6b:
         53:0d:d6:cc:2d:00:8b:4e:6e:54:21:45:ce:73:a8:eb:06:d4:
         84:41:c5:41:34:c5:e3:81:c6:c1:bb:bf:d1:0a:ca:4b:cb:ad:
         f4:52:80:a4:8a:5f:70:ed:b4:ab:ec:4f:b0:a9:ff:ff:a9:1f:
         29:ee:1f:80:53:94:18:d0:51:22:f2:69:08:ac:15:ab:49:b9:
         2e:e2:71:48:9b:a1:05:ae:61:da:70:e6:7a:15:27:82:ff:50:
         ff:9f:a7:ce:d7:4b:52:7e:c5:15:5b:d2:bc:11:78:aa:4a:74:
         69:10:bb:be:c7:89:b1:77:63:20:08:77:32:2a:da:25:d8:9d:
         c6:aa:bc:1f:66:0e:a2:4b:f3:94:e1:2c:41:af:5f:44:80:75:
         67:c1:45:e2:96:aa:63:5e:ef:d0:fe:7e:5d:34:e3:60:6b:da:
         d7:a1:26:16:e1:18:9c:2d:0e:ec:c8:8d:1e:38:e6:b7:18:75:
         ee:61:7f:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/FweeTvGPfc+cKKxL5BGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNTM4ODUxMTY3YjRlM2Q2ZjY0ZDUzNzk3YjA4Y2I0MTM3
MTg3MGYwHhcNMjQwNjE1MTMwMDQxWhcNMjQwNjE2MTMwMDQxWjAzMTEwLwYDVQQD
EyhhYzgzYTgxMTUwZmNhNDJhODQ2YjAyNDYyNzE0MWM1ZWM4ODgwNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9iPlruvpAHfyrTaCiOHnCScK0TH7
nZc0gPYgBLYt6NcWSFwt0KhBfIoNBzOin2lku7SwpCVWjSZ2jK+2DBBKZ2Zb+ofk
fqu2EY8MthKLjhUbisEe+LOxIzjrLityNCIwUFSMzpBcWMBN8Mp9JmU2HkzjrV4c
1dz+rxKN4re+FAXnEK6UQJcXcMA67LIdC5yR9m3k3XP5/1MMX45iH1W6UH8/IFoh
krhuQgROrnERpaoHaguvmCsyvu8cXUsxYnLTlduyYtPglEUAJJSvsDmyi/DDTYaO
RgwH9zz5Tf7eppnxIuSH3hw4rcAmcwgrCA7jy32cFELsZyYKre3qp5AdMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyDqBFQ/KQqhGsCRicUHF7IiAROMB8GA1UdIwQY
MBaAFAFTiFEWe049b2TVN5ewjLQTcYcPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVZPSVVSWjdUajF2Wk5VM2w3Q010Qk54aHc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iZjQyNjMtZmZhZS00MmQ3LWJlMGYt
NjI5NWI4NTRkZjg2LzEvQVZPSVVSWjdUajF2Wk5VM2w3Q010Qk54aHc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9iZjQyNjMtZmZhZS00MmQ3LWJlMGYtNjI5NWI4NTRkZjg2
LzEvQVZPSVVSWjdUajF2Wk5VM2w3Q010Qk54aHc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhWSRsz2
fuP+CO/KwEuks/kcmNZIH97Qywj0PrP/88+M6mU3zyH1aOIg+3P8y+WAkuY6BtMe
C2/9+dmTiI8jjQBy4RA4geJrUw3WzC0Ai05uVCFFznOo6wbUhEHFQTTF44HGwbu/
0QrKS8ut9FKApIpfcO20q+xPsKn//6kfKe4fgFOUGNBRIvJpCKwVq0m5LuJxSJuh
Ba5h2nDmehUngv9Q/5+nztdLUn7FFVvSvBF4qkp0aRC7vseJsXdjIAh3MiraJdid
xqq8H2YOokvzlOEsQa9fRIB1Z8FF4paqY17v0P5+XTTjYGva16EmFuEYnC0O7MiN
Hjjmtxh17mF/nw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 14:35:48 2024 by rpki-client on console-fra.rpki-client.org