Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File:                     0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier:          O65lWV8jp0ucJKex6uvnhvUXIe6jIwQKG6RP5n3f+TQ=
Subject key identifier:   EF:CA:8A:EE:2F:3B:C1:C0:C5:46:0B:B1:BD:FC:F3:87:AB:82:5F:1B
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer:       /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial:       01901E58ED78F27ECC5A7B13F6A67D3EA213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number:          1117
Signing time:             Sun 16 Jun 2024 00:01:02 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:02 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:02 +0000
Files and hashes:         1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: RCvz3QmfvNoRfEs4K388L/4fhGNX2Si3c3uVxti2+no=)
                          2: BKamLT6J3W3jMfhFJIrTkjKxg4Q.roa (hash: QFlXkpDyyLpeETj+1uj4l9CiHACkyE5O+uGAWPDQk40=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:ed:78:f2:7e:cc:5a:7b:13:f6:a6:7d:3e:a2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
        Validity
            Not Before: Jun 16 00:01:02 2024 GMT
            Not After : Jun 17 00:01:02 2024 GMT
        Subject: CN=efca8aee2f3bc1c0c5460bb1bdfcf387ab825f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:e5:25:3c:cb:5a:3c:1e:0d:21:0b:67:73:
                    ca:85:da:da:fa:64:ed:ab:b2:d5:1c:7c:1d:e2:81:
                    dd:dc:28:70:2f:53:84:7c:2d:87:52:92:86:47:3d:
                    2c:ee:28:9d:69:2d:a9:8b:cc:3f:c7:d0:b4:ce:21:
                    6c:67:82:64:3c:60:82:f8:28:e0:7b:30:42:b9:c1:
                    98:fb:af:68:fe:d4:7b:40:e4:b7:98:22:83:d7:86:
                    1a:c4:3a:f6:bd:b8:92:b2:49:bb:4f:37:19:cb:8f:
                    25:4b:fe:49:45:d2:34:8a:2b:a6:97:b7:21:c8:56:
                    f4:6e:59:88:ab:81:17:ce:0a:67:8d:e6:52:67:18:
                    6d:c1:88:54:24:74:69:2c:29:03:4c:f7:05:05:b5:
                    85:a1:69:14:f1:77:e5:26:f7:8f:40:92:35:a5:0b:
                    d5:21:ff:f2:ec:bf:e7:c4:92:a6:f4:22:3a:b3:94:
                    63:49:86:28:c7:5c:30:c2:5f:d3:b4:d8:92:ec:8c:
                    c2:89:4d:10:d3:70:c5:55:7a:d6:d3:fa:1b:6d:2e:
                    77:89:92:01:ba:78:40:b6:40:26:ca:37:65:18:c3:
                    34:e5:62:d1:08:da:e1:ec:71:a8:cc:48:dc:85:41:
                    2b:06:cf:7e:8c:ba:a3:8e:0e:d7:83:93:16:9e:27:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CA:8A:EE:2F:3B:C1:C0:C5:46:0B:B1:BD:FC:F3:87:AB:82:5F:1B
            X509v3 Authority Key Identifier:
                keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d8:fc:a9:54:fe:0a:49:5b:12:87:9a:38:30:a5:f8:5f:2c:
         c9:ad:5d:fe:4a:a9:c6:32:76:f4:2d:58:3d:eb:77:2a:b7:31:
         d4:60:4d:16:d3:9c:40:a1:fc:55:d0:3c:71:be:71:dc:39:7e:
         28:f0:57:ef:62:d6:eb:62:8f:64:fd:fc:ca:61:aa:b9:6c:81:
         3a:22:94:8b:ad:35:46:8c:ad:e6:40:33:82:fb:1d:1a:cb:6d:
         19:d0:9c:c2:e7:66:5d:37:f6:7c:a7:32:2f:0b:0f:9a:21:ab:
         24:8c:a9:76:d5:c7:25:94:c1:b7:3b:67:2c:8d:84:ea:66:1a:
         2a:ef:d4:ed:52:d0:f1:4f:7e:56:91:d0:5c:68:68:f2:5e:eb:
         6f:d1:40:e1:ec:69:c1:29:9d:40:2c:08:c5:2b:de:9c:1a:6a:
         d3:4e:e6:e5:e1:46:e4:b7:cb:44:22:14:2d:4f:c7:07:58:4e:
         21:81:b7:bb:65:04:78:50:1d:7e:47:58:e2:4a:01:4b:a8:94:
         ef:19:15:9e:7d:7b:bb:ac:19:c4:b2:17:40:49:a0:4a:26:1a:
         3b:3d:ae:17:e2:30:b7:26:b1:ca:88:99:46:3b:d7:be:9b:dd:
         09:ca:ad:25:eb:d9:c4:8d:42:33:5e:88:73:cd:32:24:e4:80:
         0d:33:2e:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWO148n7MWnsT9qZ9PqITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTE3OGJiNGE2MTE0ZWFiOThiZTAwNDc4Y2M3ZjEzYjBh
ZDIwMmEwHhcNMjQwNjE2MDAwMTAyWhcNMjQwNjE3MDAwMTAyWjAzMTEwLwYDVQQD
EyhlZmNhOGFlZTJmM2JjMWMwYzU0NjBiYjFiZGZjZjM4N2FiODI1ZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt3lJTzLWjweDSELZ3PKhdra+mTt
q7LVHHwd4oHd3ChwL1OEfC2HUpKGRz0s7iidaS2pi8w/x9C0ziFsZ4JkPGCC+Cjg
ezBCucGY+69o/tR7QOS3mCKD14YaxDr2vbiSskm7TzcZy48lS/5JRdI0iiuml7ch
yFb0blmIq4EXzgpnjeZSZxhtwYhUJHRpLCkDTPcFBbWFoWkU8XflJvePQJI1pQvV
If/y7L/nxJKm9CI6s5RjSYYox1wwwl/TtNiS7IzCiU0Q03DFVXrW0/obbS53iZIB
unhAtkAmyjdlGMM05WLRCNrh7HGozEjchUErBs9+jLqjjg7Xg5MWniekfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/Kiu4vO8HAxUYLsb3884ergl8bMB8GA1UdIwQY
MBaAFNGReLtKYRTquYvgBHjMfxOwrSAqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpGNHUwcGhGT3E1aS1BRWVNeF9FN0N0SUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85MzY5MTUtMjEzYS00MGQ5LTk3OGIt
N2Y3YmFiODNiZGEwLzEvMFpGNHUwcGhGT3E1aS1BRWVNeF9FN0N0SUNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85MzY5MTUtMjEzYS00MGQ5LTk3OGItN2Y3YmFiODNiZGEw
LzEvMFpGNHUwcGhGT3E1aS1BRWVNeF9FN0N0SUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNj8qVT+
CklbEoeaODCl+F8sya1d/kqpxjJ29C1YPet3Krcx1GBNFtOcQKH8VdA8cb5x3Dl+
KPBX72LW62KPZP38ymGquWyBOiKUi601Royt5kAzgvsdGsttGdCcwudmXTf2fKcy
LwsPmiGrJIypdtXHJZTBtztnLI2E6mYaKu/U7VLQ8U9+VpHQXGho8l7rb9FA4exp
wSmdQCwIxSvenBpq007m5eFG5LfLRCIULU/HB1hOIYG3u2UEeFAdfkdY4koBS6iU
7xkVnn17u6wZxLIXQEmgSiYaOz2uF+IwtyaxyoiZRjvXvpvdCcqtJevZxI1CM16I
c80yJOSADTMu2Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:41:05 2024 by rpki-client on console-fra.rpki-client.org