Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
File:                     l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft (raw, json)
Hash identifier:          LN8EMaynZKdWPH52G/kOKn0CPFE8Sgjif8HOKdkqXD0=
Subject key identifier:   B0:C0:90:78:F1:C7:D5:4A:40:E7:93:12:92:D9:58:B9:F4:4D:AA:78
Authority key identifier: 97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
Certificate issuer:       /CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Certificate serial:       01901E59553B38ADB71FE99304F5259E24B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 00:01:29 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:29 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:29 +0000
Files and hashes:         1: V-g3LbOj_UbC65nDbmxSTZRJmzE.roa (hash: 8ikq2bXxjqygwdJ7YlOhnqhZ9H7rVR904gHfg2C3B9M=)
                          2: l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl (hash: SxuwoqODSijpKNPnrd8v4ycaao+7Fb6WvlnkLfVHkC8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:55:3b:38:ad:b7:1f:e9:93:04:f5:25:9e:24:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97a23bb0aca9d226d05adfac08554181c48ef82e
        Validity
            Not Before: Jun 16 00:01:29 2024 GMT
            Not After : Jun 17 00:01:29 2024 GMT
        Subject: CN=b0c09078f1c7d54a40e7931292d958b9f44daa78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:67:fe:2d:68:0b:45:f1:f5:f3:7d:21:cd:
                    8a:29:d9:e5:e7:da:e6:1e:80:bd:91:4c:62:17:91:
                    b0:38:3e:bb:bd:ed:42:ec:e2:9a:39:d3:0a:28:b1:
                    ab:56:bc:95:32:49:e1:d4:cc:03:6a:5b:a9:fa:8e:
                    49:ed:33:ba:96:88:fb:9f:de:04:5f:f3:47:43:01:
                    d8:7d:ea:35:8d:7a:dd:66:7e:d5:4b:b7:fd:8d:03:
                    93:8b:3b:05:71:1b:48:e2:3b:b1:b2:44:f8:cc:40:
                    53:6b:47:a7:1a:1d:6d:8a:f3:3d:70:cf:9e:74:70:
                    23:bf:90:e1:f7:4e:52:c3:28:bd:84:19:f5:53:44:
                    50:07:83:2e:59:9a:86:c6:92:0c:5a:c2:94:7f:e0:
                    0f:8f:87:57:7c:87:5e:4d:bc:7b:04:0c:8d:9c:f4:
                    1f:60:9a:2e:44:5a:98:52:d1:11:6f:96:86:01:d6:
                    4b:82:27:93:d9:95:ac:a4:40:39:b7:fa:75:fb:c3:
                    d2:2e:af:35:33:db:44:5b:d3:58:71:80:4f:f9:da:
                    fa:9e:56:39:57:85:6c:fc:d9:86:8f:dc:96:06:4c:
                    15:17:b2:56:43:59:f9:24:2e:1a:c9:c7:b9:50:94:
                    da:b7:f3:0d:9d:79:bc:85:43:75:89:aa:f2:e4:d1:
                    73:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C0:90:78:F1:C7:D5:4A:40:E7:93:12:92:D9:58:B9:F4:4D:AA:78
            X509v3 Authority Key Identifier:
                keyid:97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c7:43:63:85:c2:09:d2:3b:65:e3:02:03:d1:70:5c:3a:aa:
         8d:4c:5b:71:2f:83:72:77:3e:ed:94:d4:5e:4d:45:d0:94:f8:
         79:f7:f4:56:ec:38:74:a0:2e:b6:cb:4d:b4:48:2c:52:83:ea:
         78:86:3b:31:f3:e0:b1:b4:ec:13:ff:8c:1a:59:51:a7:0e:bc:
         61:87:79:84:4d:17:38:96:fa:2a:c4:53:6d:45:15:78:c1:ea:
         23:79:a8:fc:fd:d0:3f:14:bc:5f:d2:af:c0:20:23:31:40:93:
         0a:cf:e6:2c:1c:b5:50:66:11:97:d1:2c:72:69:ba:68:2f:61:
         71:e8:e2:0f:7f:ac:9f:1e:d0:7c:a7:ad:20:4a:f0:3c:7b:89:
         6e:4d:8b:80:da:3f:90:b6:49:42:56:47:da:ab:af:44:ee:6f:
         a5:0e:9c:98:9c:29:9f:b7:9d:ef:86:7d:f6:0f:5f:90:f7:74:
         7f:ae:5d:e5:31:6b:1a:22:56:0c:88:a9:ef:4b:0b:5d:4d:29:
         a5:08:06:74:a4:bb:23:9d:3f:1b:9f:48:ac:59:ba:2c:19:cd:
         a8:b9:ad:44:91:a7:47:d8:83:f4:0d:c5:d7:06:f1:3a:0f:ae:
         dc:9d:3f:67:85:0b:fa:df:a7:e6:51:da:2d:65:43:3e:d7:ab:
         b0:05:71:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWVU7OK23H+mTBPUlniS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YTIzYmIwYWNhOWQyMjZkMDVhZGZhYzA4NTU0MTgxYzQ4
ZWY4MmUwHhcNMjQwNjE2MDAwMTI5WhcNMjQwNjE3MDAwMTI5WjAzMTEwLwYDVQQD
EyhiMGMwOTA3OGYxYzdkNTRhNDBlNzkzMTI5MmQ5NThiOWY0NGRhYTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpBn/i1oC0Xx9fN9Ic2KKdnl59rm
HoC9kUxiF5GwOD67ve1C7OKaOdMKKLGrVryVMknh1MwDalup+o5J7TO6loj7n94E
X/NHQwHYfeo1jXrdZn7VS7f9jQOTizsFcRtI4juxskT4zEBTa0enGh1tivM9cM+e
dHAjv5Dh905Swyi9hBn1U0RQB4MuWZqGxpIMWsKUf+APj4dXfIdeTbx7BAyNnPQf
YJouRFqYUtERb5aGAdZLgieT2ZWspEA5t/p1+8PSLq81M9tEW9NYcYBP+dr6nlY5
V4Vs/NmGj9yWBkwVF7JWQ1n5JC4ayce5UJTat/MNnXm8hUN1iary5NFzZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDAkHjxx9VKQOeTEpLZWLn0Tap4MB8GA1UdIwQY
MBaAFJeiO7CsqdIm0FrfrAhVQYHEjvguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDZJN3NLeXAwaWJRV3Qtc0NGVkJnY1NPLUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jNTg2NzEtM2Q0ZS00Nzc1LWFmMjEt
MjBhZjNkMWI4ZWY5LzEvbDZJN3NLeXAwaWJRV3Qtc0NGVkJnY1NPLUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jNTg2NzEtM2Q0ZS00Nzc1LWFmMjEtMjBhZjNkMWI4ZWY5
LzEvbDZJN3NLeXAwaWJRV3Qtc0NGVkJnY1NPLUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsdDY4XC
CdI7ZeMCA9FwXDqqjUxbcS+Dcnc+7ZTUXk1F0JT4eff0Vuw4dKAutstNtEgsUoPq
eIY7MfPgsbTsE/+MGllRpw68YYd5hE0XOJb6KsRTbUUVeMHqI3mo/P3QPxS8X9Kv
wCAjMUCTCs/mLBy1UGYRl9Escmm6aC9hcejiD3+snx7QfKetIErwPHuJbk2LgNo/
kLZJQlZH2quvRO5vpQ6cmJwpn7ed74Z99g9fkPd0f65d5TFrGiJWDIip70sLXU0p
pQgGdKS7I50/G59IrFm6LBnNqLmtRJGnR9iD9A3F1wbxOg+u3J0/Z4UL+t+n5lHa
LWVDPtersAVxEg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 01:05:25 2024 by rpki-client on console-fra.rpki-client.org