Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File:                     335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier:          +eORs7SVaFx5iacqsl3RYdrkRTWGP5V78+R9ZcnQxvI=
Subject key identifier:   0A:4A:58:D4:EB:F7:75:9F:3D:72:17:37:6C:C4:0C:42:88:A3:E4:5C
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer:       /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial:       0190452F56D7AFA473962485CEB28586BCFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number:          06E1
Signing time:             Sun 23 Jun 2024 13:00:48 +0000
Manifest this update:     Sun 23 Jun 2024 13:00:48 +0000
Manifest next update:     Mon 24 Jun 2024 13:00:48 +0000
Files and hashes:         1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: gItYq2qXz9Y6E5yTC0PzUOUp9qV0YNXCbgZ0Agneo3M=)
                          2: 7p0jrPtrY5O8m5LVE1ZmDLqGjMU.roa (hash: 4wPLhtc6OO53CJOQbUqoZTEHWrFtwTiurK7NjdKCpiM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:56:d7:af:a4:73:96:24:85:ce:b2:85:86:bc:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
        Validity
            Not Before: Jun 23 13:00:48 2024 GMT
            Not After : Jun 24 13:00:48 2024 GMT
        Subject: CN=0a4a58d4ebf7759f3d7217376cc40c4288a3e45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:53:2a:5e:28:b4:a3:11:af:09:55:d4:96:
                    7c:8d:3d:59:25:3b:a9:e6:44:a0:00:21:40:90:ac:
                    08:94:33:db:cc:af:81:ee:13:b8:3e:12:13:07:1f:
                    a4:93:a4:0d:cb:1e:17:ad:74:25:ea:07:75:d9:3e:
                    96:d8:e2:04:43:e3:a4:6e:af:a6:cd:70:62:a9:28:
                    6a:31:78:17:a0:6e:f4:56:bb:9d:b8:af:87:97:0c:
                    49:07:34:3a:11:ab:53:ca:bb:47:41:f2:4c:2c:97:
                    ef:cc:16:8d:7d:bf:64:5c:08:00:2d:4c:dd:be:be:
                    b9:8a:5d:97:b7:17:c9:2f:de:82:48:bf:8f:44:33:
                    f3:17:90:3b:1a:b2:00:d1:b9:55:da:75:56:f3:b4:
                    b3:82:3e:da:76:27:8e:ed:90:c7:51:58:10:98:7b:
                    5e:6b:2d:40:5a:24:2e:26:5b:af:10:73:3e:97:0f:
                    8d:bc:c8:82:cb:a1:fe:fa:93:fd:d9:9e:43:94:fc:
                    1f:17:f0:97:22:8c:82:79:f6:14:3c:6b:43:e9:93:
                    64:94:90:e4:7d:28:77:34:49:e2:15:4a:d1:37:c8:
                    fe:ea:a7:46:ad:eb:fb:3d:4b:76:81:41:2c:3e:04:
                    cf:07:92:be:0d:19:82:da:72:5a:0c:01:43:c5:25:
                    2a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4A:58:D4:EB:F7:75:9F:3D:72:17:37:6C:C4:0C:42:88:A3:E4:5C
            X509v3 Authority Key Identifier:
                keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:35:c9:7a:1d:70:cf:fb:3a:c2:5d:cc:59:f0:7c:e7:b4:10:
         e9:f6:2d:01:58:57:5a:5e:82:13:7c:30:92:a7:c8:08:61:65:
         a7:99:74:3d:62:72:de:cd:5e:22:78:a3:64:6d:dc:d2:62:0f:
         01:c6:94:0d:4c:03:9c:e3:1e:22:11:74:cb:b4:33:f3:84:43:
         e3:7c:da:77:ca:64:ea:5c:a1:4e:3a:b2:96:ce:1d:6a:49:7f:
         df:65:33:d2:e7:2f:4a:4a:dd:cf:34:75:85:75:a7:6d:5b:1e:
         58:f3:87:d7:10:29:ea:0c:7e:ed:18:56:13:30:6a:f7:cd:2a:
         c4:a7:4c:9b:5c:d7:64:70:68:11:0e:ed:ac:80:03:24:b8:37:
         fd:c2:4a:45:a5:84:39:5e:1c:c8:36:b0:32:38:df:ec:8d:b2:
         24:5d:ad:7e:47:0d:4d:d6:34:82:f6:e4:9b:0c:1c:4f:fd:23:
         52:31:e7:c7:45:39:ab:9d:b1:7f:32:ef:b1:b6:a9:f6:3a:75:
         fb:49:c5:ed:54:65:f4:ee:d9:69:f7:94:81:6f:96:a5:96:fc:
         13:2b:69:99:38:63:80:8c:ea:07:13:21:8e:b1:4e:0f:12:66:
         5c:bc:3e:e3:27:5b:bb:5b:36:b3:22:d6:99:c6:51:d2:86:ef:
         d6:4a:73:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBFL1bXr6RzliSFzrKFhrz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmN2U3MTY2NDlkYWNiZjZlYTk4NjAyMzUxNGRmZTQwZGYx
YTdjZjAwHhcNMjQwNjIzMTMwMDQ4WhcNMjQwNjI0MTMwMDQ4WjAzMTEwLwYDVQQD
EygwYTRhNThkNGViZjc3NTlmM2Q3MjE3Mzc2Y2M0MGM0Mjg4YTNlNDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGVTKl4otKMRrwlV1JZ8jT1ZJTup
5kSgACFAkKwIlDPbzK+B7hO4PhITBx+kk6QNyx4XrXQl6gd12T6W2OIEQ+Okbq+m
zXBiqShqMXgXoG70VruduK+HlwxJBzQ6EatTyrtHQfJMLJfvzBaNfb9kXAgALUzd
vr65il2XtxfJL96CSL+PRDPzF5A7GrIA0blV2nVW87Szgj7adieO7ZDHUVgQmHte
ay1AWiQuJluvEHM+lw+NvMiCy6H++pP92Z5DlPwfF/CXIoyCefYUPGtD6ZNklJDk
fSh3NEniFUrRN8j+6qdGrev7PUt2gUEsPgTPB5K+DRmC2nJaDAFDxSUq8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApKWNTr93WfPXIXN2zEDEKIo+RcMB8GA1UdIwQY
MBaAFN9+cWZJ2sv26phgI1FN/kDfGnzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lZWI3NTctNTA0MC00YmZiLWEzNWQt
YTY2Mjg5ODUxY2Q5LzEvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9lZWI3NTctNTA0MC00YmZiLWEzNWQtYTY2Mjg5ODUxY2Q5
LzEvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDXJeh1w
z/s6wl3MWfB857QQ6fYtAVhXWl6CE3wwkqfICGFlp5l0PWJy3s1eInijZG3c0mIP
AcaUDUwDnOMeIhF0y7Qz84RD43zad8pk6lyhTjqyls4dakl/32Uz0ucvSkrdzzR1
hXWnbVseWPOH1xAp6gx+7RhWEzBq980qxKdMm1zXZHBoEQ7trIADJLg3/cJKRaWE
OV4cyDawMjjf7I2yJF2tfkcNTdY0gvbkmwwcT/0jUjHnx0U5q52xfzLvsbap9jp1
+0nF7VRl9O7ZafeUgW+WpZb8EytpmThjgIzqBxMhjrFODxJmXLw+4ydbu1s2syLW
mcZR0obv1kpzug==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:39:57 2024 by rpki-client on console-ams.rpki-client.org