Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
File:                     2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft (raw, json)
Hash identifier:          iqsRouJr+REOy2WkrDec/40o+z6/jNfuwqTXzlNfmyY=
Subject key identifier:   A0:B8:90:94:DF:E0:93:A8:62:D4:3F:3B:73:5B:D4:A0:DD:BE:48:C3
Authority key identifier: D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1
Certificate issuer:       /CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
Certificate serial:       01901D468DDE8B70F327E8E1BDC9E512183E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
Manifest number:          08B8
Signing time:             Sat 15 Jun 2024 19:01:21 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:21 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:21 +0000
Files and hashes:         1: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl (hash: iTTVSaYdYNOVmJzs2kcrC9xk7L58QPoyNwqwbENVhWk=)
                          2: LU5TwDY-KxfbSDE1348CxGL2se0.roa (hash: mPhBdYAfFbtBD1vrPou7SXyt5ZQ0opQ/j/CdEJTxGLY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:8d:de:8b:70:f3:27:e8:e1:bd:c9:e5:12:18:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
        Validity
            Not Before: Jun 15 19:01:21 2024 GMT
            Not After : Jun 16 19:01:21 2024 GMT
        Subject: CN=a0b89094dfe093a862d43f3b735bd4a0ddbe48c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4a:65:8b:e4:21:2c:0a:f1:ad:b7:a1:e1:5a:
                    2a:3d:3e:b4:76:86:18:9e:01:d8:95:b1:e3:65:78:
                    3a:e2:f6:e7:27:dd:b4:a2:07:b3:d4:40:16:ca:39:
                    1b:d6:e9:db:ae:93:a9:1e:33:3f:4d:ba:c0:64:cd:
                    38:0a:f3:f7:34:02:fc:fa:7b:ad:47:a4:08:3b:2a:
                    5a:2c:2e:30:48:13:0a:47:97:1c:be:07:a1:9b:c2:
                    9d:5c:ba:74:4e:c9:53:d3:0e:48:d1:28:ed:22:34:
                    35:80:99:2c:f7:20:f8:ce:4a:39:7a:02:47:da:8c:
                    ed:a1:e8:77:66:3b:ff:e7:27:f9:3b:00:9d:e1:d9:
                    b5:c4:93:2a:e4:bf:33:ee:d7:a4:a1:1b:82:fe:96:
                    59:f9:a5:aa:99:0a:12:79:f1:d5:a0:61:c8:4b:2a:
                    35:31:89:01:90:19:0e:9f:e4:a8:85:ef:da:3a:0e:
                    f5:92:b3:e2:f0:3b:5e:09:75:2f:1a:76:d1:d5:1a:
                    c2:47:bd:9c:fc:86:6b:4a:88:49:ec:68:ae:16:86:
                    77:7b:3a:63:95:d4:25:bb:f6:f8:ef:2c:a0:fd:90:
                    de:87:8a:ab:cd:cb:5b:ca:be:b1:6b:6a:d3:35:4e:
                    f3:6c:03:6c:d8:78:38:7f:f3:53:79:ca:ed:f6:51:
                    93:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B8:90:94:DF:E0:93:A8:62:D4:3F:3B:73:5B:D4:A0:DD:BE:48:C3
            X509v3 Authority Key Identifier:
                keyid:D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:fa:7c:64:9a:cf:0e:84:c0:74:e4:b7:6b:4a:c7:11:2d:aa:
         39:41:31:d9:1d:3f:12:48:42:31:b4:a0:a5:a5:e4:ca:36:ce:
         b8:c0:c8:5c:74:a1:03:78:45:fc:70:8c:49:67:7b:a5:0a:26:
         3d:b4:fa:16:ef:67:d5:88:95:23:d6:c2:ab:9b:63:51:a0:a5:
         d8:22:5b:1a:77:9a:79:50:56:a8:64:57:e7:45:21:af:e2:8f:
         1c:af:a9:6f:6e:7a:1f:a0:5a:df:bd:e0:d0:75:c7:5f:18:29:
         23:1c:93:39:fa:17:90:37:d3:95:4c:b1:60:2b:32:f5:fa:a8:
         e4:8b:e1:8e:f5:4e:a5:dd:c3:07:1b:ec:fe:a1:98:f5:cc:e0:
         a6:8a:db:b5:1d:43:30:fd:8a:1c:6e:b9:bc:92:ae:bd:d8:f7:
         7c:d8:8d:03:3d:6f:5b:d6:cd:83:05:95:59:da:a8:85:b8:19:
         77:59:a8:ed:55:e2:a3:58:e2:22:d0:2f:0a:f5:3f:94:55:5d:
         28:e6:f2:0c:80:2f:aa:3a:9e:a7:6d:40:a0:ce:b8:bd:8d:6a:
         d5:89:59:42:5d:68:f8:e0:85:4e:73:80:6a:1c:8b:e4:6e:77:
         1d:d5:f3:97:85:72:57:98:93:d1:49:66:35:5c:39:f3:e2:04:
         13:db:ee:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRo3ei3DzJ+jhvcnlEhg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzIwYmQ0ZWY4NThmZDYyYmIyNDg1ZDA4YjBhODY5MjBl
OTExYzEwHhcNMjQwNjE1MTkwMTIxWhcNMjQwNjE2MTkwMTIxWjAzMTEwLwYDVQQD
EyhhMGI4OTA5NGRmZTA5M2E4NjJkNDNmM2I3MzViZDRhMGRkYmU0OGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkpli+QhLArxrbeh4VoqPT60doYY
ngHYlbHjZXg64vbnJ920ogez1EAWyjkb1unbrpOpHjM/TbrAZM04CvP3NAL8+nut
R6QIOypaLC4wSBMKR5ccvgehm8KdXLp0TslT0w5I0SjtIjQ1gJks9yD4zko5egJH
2oztoeh3Zjv/5yf5OwCd4dm1xJMq5L8z7tekoRuC/pZZ+aWqmQoSefHVoGHISyo1
MYkBkBkOn+Sohe/aOg71krPi8DteCXUvGnbR1RrCR72c/IZrSohJ7GiuFoZ3ezpj
ldQlu/b47yyg/ZDeh4qrzctbyr6xa2rTNU7zbANs2Hg4f/NTecrt9lGTpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKC4kJTf4JOoYtQ/O3Nb1KDdvkjDMB8GA1UdIwQY
MBaAFNgyC9TvhY/WK7JIXQiwqGkg6RHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRJTDFPLUZqOVlyc2toZENMQ29hU0RwRWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iZDgxZTctMzk3ZS00ZDVkLWE1ZjEt
M2EwZmFhMjhiNWFjLzEvMkRJTDFPLUZqOVlyc2toZENMQ29hU0RwRWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9iZDgxZTctMzk3ZS00ZDVkLWE1ZjEtM2EwZmFhMjhiNWFj
LzEvMkRJTDFPLUZqOVlyc2toZENMQ29hU0RwRWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvp8ZJrP
DoTAdOS3a0rHES2qOUEx2R0/EkhCMbSgpaXkyjbOuMDIXHShA3hF/HCMSWd7pQom
PbT6Fu9n1YiVI9bCq5tjUaCl2CJbGneaeVBWqGRX50Uhr+KPHK+pb256H6Ba373g
0HXHXxgpIxyTOfoXkDfTlUyxYCsy9fqo5IvhjvVOpd3DBxvs/qGY9czgporbtR1D
MP2KHG65vJKuvdj3fNiNAz1vW9bNgwWVWdqohbgZd1mo7VXio1jiItAvCvU/lFVd
KObyDIAvqjqep21AoM64vY1q1YlZQl1o+OCFTnOAahyL5G53HdXzl4VyV5iT0Ulm
NVw58+IEE9vuxg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 21:57:51 2024 by rpki-client on console-ams.rpki-client.org