Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File:                     2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier:          CrNGrBb/Bk5f3novL/foNvh78YgXAdE9tgPUwzbVjcg=
Subject key identifier:   19:BD:27:0C:A7:85:0B:9D:03:30:9C:76:77:3E:82:23:EF:95:5F:10
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer:       /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial:       01901C6A6FFD559E67A4243607B29EB11CB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number:          0852
Signing time:             Sat 15 Jun 2024 15:00:55 +0000
Manifest this update:     Sat 15 Jun 2024 15:00:55 +0000
Manifest next update:     Sun 16 Jun 2024 15:00:55 +0000
Files and hashes:         1: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: 4i9gsxrfrgpTHtAbeS3N9i6Kn1Ut2b4gKPDdGMkh7uo=)
                          2: pCOA0Rv_XVKsVV0sqQm08VkenfA.roa (hash: uw5q/lzqjphfRUWBEUa65wJcW6ndpO5WnC4IwS9nvR0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:6f:fd:55:9e:67:a4:24:36:07:b2:9e:b1:1c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
        Validity
            Not Before: Jun 15 15:00:55 2024 GMT
            Not After : Jun 16 15:00:55 2024 GMT
        Subject: CN=19bd270ca7850b9d03309c76773e8223ef955f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:bd:69:36:6d:d4:8c:20:9c:24:24:17:6f:
                    0b:0c:cc:4d:af:18:e3:a6:1d:6f:cb:db:61:bd:d7:
                    63:1d:b7:3d:90:1d:c8:fd:44:cf:95:2c:22:2f:e8:
                    e2:0c:ab:b8:a6:93:34:6b:36:9b:11:f2:68:40:32:
                    7e:db:a0:64:16:1b:e9:6d:9d:a3:40:e3:44:87:17:
                    61:ed:2f:cf:8d:7d:02:f3:6b:96:c8:df:34:aa:75:
                    bd:1a:cd:3f:1a:7f:d9:4f:51:6b:21:02:71:58:cb:
                    b2:9c:dd:a6:5e:85:d1:b2:c2:8e:24:48:fc:f0:dd:
                    33:13:25:c1:89:13:8b:5c:61:97:94:24:75:95:0f:
                    0c:d7:19:c3:33:8a:cf:d8:fb:69:f2:67:4b:f1:7b:
                    f0:d7:1f:17:67:1b:55:72:9e:b6:44:28:f3:5e:bd:
                    c4:5a:76:a4:e3:3f:9b:d6:aa:66:89:8f:98:d2:d7:
                    36:20:bb:d0:6f:d5:e7:77:ea:4f:be:19:dc:49:a2:
                    f8:82:73:a6:12:f6:b7:6c:17:b5:14:92:ca:67:96:
                    50:c5:92:c4:aa:5a:6c:e9:61:2c:63:93:15:61:c5:
                    c5:9f:58:05:5b:7c:cc:88:c9:90:45:3e:6e:fa:3c:
                    d6:9c:44:cb:7f:1e:1c:aa:b1:f9:f7:a6:b3:6f:15:
                    ac:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BD:27:0C:A7:85:0B:9D:03:30:9C:76:77:3E:82:23:EF:95:5F:10
            X509v3 Authority Key Identifier:
                keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:02:04:70:03:2a:9c:65:4e:a2:fb:8b:35:80:c1:c7:35:e3:
         a5:2a:cf:c7:f5:a7:65:68:df:3b:b8:97:37:13:76:e7:ba:58:
         cc:ad:30:c2:63:86:c5:d9:2c:73:6b:e0:18:80:73:ff:f5:81:
         f6:49:a3:e3:b7:74:17:4a:af:77:b2:22:bd:b5:83:28:33:ea:
         e6:ac:da:12:c7:40:f6:3a:95:48:3f:aa:35:82:88:18:7d:ad:
         49:5d:e8:d5:03:db:f6:cf:1a:97:c6:82:43:28:ac:ee:46:d0:
         ba:b2:ab:63:3a:cf:5b:65:02:a1:3c:44:5f:02:5c:d2:5f:54:
         d8:29:a6:d9:e0:b9:9c:01:7c:17:15:34:96:28:6a:a1:08:fe:
         09:6d:b2:30:58:c8:03:69:a6:99:09:ab:0b:0e:30:62:b5:06:
         cf:c3:d4:6b:c0:14:b4:7f:05:08:59:79:c4:63:ff:ff:f5:d5:
         4b:1d:a1:a9:cd:78:50:6d:1d:5e:ed:07:ad:75:5c:51:9f:23:
         d5:42:75:09:bc:d3:e5:8f:c5:de:0e:85:e7:6c:11:22:fe:d1:
         31:a5:1d:01:3a:51:67:23:06:4f:ee:af:71:4d:38:4a:87:20:
         f1:0e:9d:be:72:6f:91:67:86:e5:e9:43:68:40:01:e7:3c:08:
         97:88:2e:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcam/9VZ5npCQ2B7KesRy1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWQ0MmFhZTAxOWU0ZWE0NGE2MTYzNzhlYjY2YjM4OWRl
OGM1MTEwHhcNMjQwNjE1MTUwMDU1WhcNMjQwNjE2MTUwMDU1WjAzMTEwLwYDVQQD
EygxOWJkMjcwY2E3ODUwYjlkMDMzMDljNzY3NzNlODIyM2VmOTU1ZjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmK9aTZt1IwgnCQkF28LDMxNrxjj
ph1vy9thvddjHbc9kB3I/UTPlSwiL+jiDKu4ppM0azabEfJoQDJ+26BkFhvpbZ2j
QONEhxdh7S/PjX0C82uWyN80qnW9Gs0/Gn/ZT1FrIQJxWMuynN2mXoXRssKOJEj8
8N0zEyXBiROLXGGXlCR1lQ8M1xnDM4rP2Ptp8mdL8Xvw1x8XZxtVcp62RCjzXr3E
Wnak4z+b1qpmiY+Y0tc2ILvQb9Xnd+pPvhncSaL4gnOmEva3bBe1FJLKZ5ZQxZLE
qlps6WEsY5MVYcXFn1gFW3zMiMmQRT5u+jzWnETLfx4cqrH596azbxWsGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBm9JwynhQudAzCcdnc+giPvlV8QMB8GA1UdIwQY
MBaAFNgdQqrgGeTqRKYWN462azid6MURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjct
OTY4NTU1NTE5MGM0LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjctOTY4NTU1NTE5MGM0
LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgIEcAMq
nGVOovuLNYDBxzXjpSrPx/WnZWjfO7iXNxN257pYzK0wwmOGxdksc2vgGIBz//WB
9kmj47d0F0qvd7IivbWDKDPq5qzaEsdA9jqVSD+qNYKIGH2tSV3o1QPb9s8al8aC
Qyis7kbQurKrYzrPW2UCoTxEXwJc0l9U2Cmm2eC5nAF8FxU0lihqoQj+CW2yMFjI
A2mmmQmrCw4wYrUGz8PUa8AUtH8FCFl5xGP///XVSx2hqc14UG0dXu0HrXVcUZ8j
1UJ1CbzT5Y/F3g6F52wRIv7RMaUdATpRZyMGT+6vcU04Socg8Q6dvnJvkWeG5elD
aEAB5zwIl4guww==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:28:58 2024 by rpki-client on console-fra.rpki-client.org