Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.mft
File:                     XmaBWkYx0OeXwfNm5HvxURXJpPs.mft (raw, json)
Hash identifier:          b59ZZ5/pyJ8JHIzi6Hvpql1FEer2faIZamsSoYHcTgY=
Subject key identifier:   E5:94:6D:01:A2:4C:66:C9:4E:22:A6:84:BC:95:B1:E6:82:2B:07:D2
Authority key identifier: 5E:66:81:5A:46:31:D0:E7:97:C1:F3:66:E4:7B:F1:51:15:C9:A4:FB
Certificate issuer:       /CN=5e66815a4631d0e797c1f366e47bf15115c9a4fb
Certificate serial:       01901D468C1400EBBFE75BC5E09E57C17CC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XmaBWkYx0OeXwfNm5HvxURXJpPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.mft
Manifest number:          011F
Signing time:             Sat 15 Jun 2024 19:01:20 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:20 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:20 +0000
Files and hashes:         1: XmaBWkYx0OeXwfNm5HvxURXJpPs.crl (hash: Z+5GBfl22CxkIljyKyrABZyoRixKh5ZaknhfOBTsNY8=)
                          2: c4aA_bj6CzLF63YiADueMvFEAv0.roa (hash: VRbGz8ClnPlLevbRzlVSbiJGON4NA2s+QaK9DsNCxsg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XmaBWkYx0OeXwfNm5HvxURXJpPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:8c:14:00:eb:bf:e7:5b:c5:e0:9e:57:c1:7c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e66815a4631d0e797c1f366e47bf15115c9a4fb
        Validity
            Not Before: Jun 15 19:01:20 2024 GMT
            Not After : Jun 16 19:01:20 2024 GMT
        Subject: CN=e5946d01a24c66c94e22a684bc95b1e6822b07d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:50:9e:4a:33:4f:24:c5:b3:fe:52:8b:ba:
                    f1:7b:b2:8e:ea:22:a0:fb:af:af:9a:be:2a:ea:bf:
                    5a:6f:50:2c:ce:97:af:6f:2d:4a:30:d9:3b:80:8d:
                    d2:38:2c:a6:38:1a:3d:47:38:1b:92:dc:39:4e:a3:
                    be:a6:7e:28:62:b4:13:cd:c9:8d:d2:97:71:13:43:
                    56:74:30:9e:f8:de:0f:3c:e5:7a:d7:ef:d6:02:aa:
                    a0:1a:a4:d4:d7:08:02:e1:95:c0:49:dd:75:8e:0f:
                    9d:c4:2f:6e:db:dd:32:82:71:d8:eb:8a:8f:1c:c8:
                    0a:1d:56:77:21:8b:8f:11:9f:29:cf:4f:68:8b:c8:
                    72:9b:3b:98:f8:45:67:6a:9c:71:62:05:c1:05:fe:
                    b0:42:a1:de:d3:67:58:3d:6e:a5:70:bb:bf:60:a8:
                    9f:38:90:1e:92:66:a4:56:38:62:25:9c:2d:08:88:
                    af:3b:d4:b6:be:60:30:09:30:a8:e7:9b:47:cd:32:
                    cb:92:2c:93:ca:b6:86:93:76:f5:57:a8:d6:c7:6b:
                    96:68:a4:f2:9a:58:26:af:71:b7:a2:b4:a7:4f:6f:
                    78:a2:a5:5e:93:af:ff:c4:61:a9:f8:99:5b:98:e9:
                    85:e7:ab:7a:c4:3e:5c:a4:64:ba:df:ad:c5:d9:47:
                    a2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:94:6D:01:A2:4C:66:C9:4E:22:A6:84:BC:95:B1:E6:82:2B:07:D2
            X509v3 Authority Key Identifier:
                keyid:5E:66:81:5A:46:31:D0:E7:97:C1:F3:66:E4:7B:F1:51:15:C9:A4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmaBWkYx0OeXwfNm5HvxURXJpPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b9:77:7e:4e:37:b0:9f:22:21:2c:9e:a8:f1:56:30:8e:52:
         4f:3b:ba:d9:54:14:9f:a9:99:52:75:18:42:0c:30:6c:c1:24:
         c3:7b:c9:52:43:7d:08:89:75:76:5b:fc:58:e2:b2:4b:8a:97:
         c3:83:62:ea:42:b1:35:88:f5:d8:e2:df:80:ea:28:6e:ec:cb:
         e8:11:45:0b:14:4f:e7:c4:90:68:f9:e9:60:39:55:ed:43:9b:
         03:5c:5d:0e:e2:02:2a:c8:e4:18:bc:23:14:e8:e4:b7:38:4f:
         2f:aa:96:7a:2e:55:f7:c0:29:f4:6b:94:25:17:de:0a:07:95:
         8b:4d:fb:ab:f4:de:b7:46:2c:64:96:a0:d2:84:a3:ab:27:ac:
         b8:f2:dc:42:8b:84:60:f3:dd:e2:ec:03:d4:d8:06:bb:84:29:
         68:65:1d:51:49:f2:04:a7:a2:b7:ee:5e:be:0f:4b:ed:78:0e:
         67:a7:4a:ba:06:6c:23:ea:a5:a8:87:28:2b:7e:6d:f7:f8:d3:
         6d:21:79:6d:8f:43:c2:3f:1f:6a:32:69:1a:f6:ce:55:9a:d8:
         fa:db:c8:e1:9d:7d:40:04:a6:ce:63:27:d2:da:72:32:c9:72:
         9c:0b:87:f1:da:b1:3d:9a:7c:fc:fb:1d:e2:0f:3b:e0:20:59:
         4c:c5:c0:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRowUAOu/51vF4J5XwXzBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNjY4MTVhNDYzMWQwZTc5N2MxZjM2NmU0N2JmMTUxMTVj
OWE0ZmIwHhcNMjQwNjE1MTkwMTIwWhcNMjQwNjE2MTkwMTIwWjAzMTEwLwYDVQQD
EyhlNTk0NmQwMWEyNGM2NmM5NGUyMmE2ODRiYzk1YjFlNjgyMmIwN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2pQnkozTyTFs/5Si7rxe7KO6iKg
+6+vmr4q6r9ab1Aszpevby1KMNk7gI3SOCymOBo9Rzgbktw5TqO+pn4oYrQTzcmN
0pdxE0NWdDCe+N4PPOV61+/WAqqgGqTU1wgC4ZXASd11jg+dxC9u290ygnHY64qP
HMgKHVZ3IYuPEZ8pz09oi8hymzuY+EVnapxxYgXBBf6wQqHe02dYPW6lcLu/YKif
OJAekmakVjhiJZwtCIivO9S2vmAwCTCo55tHzTLLkiyTyraGk3b1V6jWx2uWaKTy
mlgmr3G3orSnT294oqVek6//xGGp+JlbmOmF56t6xD5cpGS6363F2UeiXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWUbQGiTGbJTiKmhLyVseaCKwfSMB8GA1UdIwQY
MBaAFF5mgVpGMdDnl8HzZuR78VEVyaT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG1hQldrWXgwT2VYd2ZObTVIdnhVUlhKcFBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8xODA5NTQtOGE0My00YWNjLThhN2It
MGFlYWM2NzBjNzFlLzEvWG1hQldrWXgwT2VYd2ZObTVIdnhVUlhKcFBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8xODA5NTQtOGE0My00YWNjLThhN2ItMGFlYWM2NzBjNzFl
LzEvWG1hQldrWXgwT2VYd2ZObTVIdnhVUlhKcFBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbl3fk43
sJ8iISyeqPFWMI5STzu62VQUn6mZUnUYQgwwbMEkw3vJUkN9CIl1dlv8WOKyS4qX
w4Ni6kKxNYj12OLfgOoobuzL6BFFCxRP58SQaPnpYDlV7UObA1xdDuICKsjkGLwj
FOjktzhPL6qWei5V98Ap9GuUJRfeCgeVi037q/Tet0YsZJag0oSjqyesuPLcQouE
YPPd4uwD1NgGu4QpaGUdUUnyBKeit+5evg9L7XgOZ6dKugZsI+qlqIcoK35t9/jT
bSF5bY9Dwj8fajJpGvbOVZrY+tvI4Z19QASmzmMn0tpyMslynAuH8dqxPZp8/Psd
4g874CBZTMXAHw==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:26:48 2024 by rpki-client on console-fra.rpki-client.org