Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
File:                     ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft (raw, json)
Hash identifier:          PFS9rI7AnnafTLfC5DEs9PZy31t2TDXs6jTwVFc8BE4=
Subject key identifier:   EE:F4:A5:A5:D5:78:1D:E7:AF:3D:86:C0:6E:A4:1C:D1:AF:72:DE:BB
Authority key identifier: 72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
Certificate issuer:       /CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Certificate serial:       01901E8F8EDCF2D32506085562CA014B216F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
Manifest number:          11C7
Signing time:             Sun 16 Jun 2024 01:00:43 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:43 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:43 +0000
Files and hashes:         1: ORR2xlrxhGgbv04xpTdEmIm1wdo.roa (hash: wjnzYz92RrH8gchoTBMBWcZzKVL6neVyvShnEezsMLI=)
                          2: ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl (hash: YW+dvdPuhA6CAqGO9M+aL7S5OTaQh8P6zraZSKb8/yo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:8e:dc:f2:d3:25:06:08:55:62:ca:01:4b:21:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
        Validity
            Not Before: Jun 16 01:00:43 2024 GMT
            Not After : Jun 17 01:00:43 2024 GMT
        Subject: CN=eef4a5a5d5781de7af3d86c06ea41cd1af72debb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:31:2d:62:99:94:a6:dc:a0:5d:6f:68:78:9c:
                    fc:15:53:13:a6:52:2e:38:65:3e:76:df:d1:37:4c:
                    e0:8d:07:9e:47:02:3f:16:1a:63:ce:6f:a1:2a:b4:
                    85:b2:03:9f:44:41:88:aa:99:bc:87:40:ce:38:71:
                    c2:f2:6c:b0:02:79:98:29:4f:1a:09:c3:51:d9:3e:
                    87:93:92:58:f3:ba:37:1c:e7:02:49:e5:78:97:ca:
                    1b:63:da:f4:ad:18:f8:03:e1:a6:8f:03:bf:d7:1f:
                    00:91:74:63:40:2b:aa:50:4d:3e:71:71:bd:1d:2f:
                    73:21:c4:82:15:df:b3:b8:6d:82:22:e1:f4:b9:18:
                    b6:2e:80:7e:9c:42:18:e0:17:3e:4d:ef:50:c6:18:
                    e2:24:c2:a3:09:c8:12:21:2f:22:31:8b:c3:43:94:
                    7f:b5:29:cb:ce:68:d0:f4:38:b1:19:1f:7f:b7:a9:
                    b6:49:2e:81:40:a2:fa:7e:81:ce:35:ab:9c:07:01:
                    c3:61:d3:57:b4:74:74:a3:f7:ea:a2:d8:44:e3:64:
                    fe:b6:86:bc:c1:d4:5f:20:aa:48:3e:e5:1a:a2:ef:
                    dc:59:ec:55:06:69:28:ee:89:02:3f:6f:40:8b:e9:
                    dc:2a:d3:a8:1b:2a:7b:14:a6:32:4c:67:9e:5a:d8:
                    3c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F4:A5:A5:D5:78:1D:E7:AF:3D:86:C0:6E:A4:1C:D1:AF:72:DE:BB
            X509v3 Authority Key Identifier:
                keyid:72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:75:9c:49:3f:c7:67:57:c0:9b:ad:85:7e:e7:ad:c2:c4:3b:
         4c:c2:31:cf:64:2a:9b:00:2d:ae:a1:96:34:e8:37:30:0e:fd:
         98:96:ca:9e:1a:b2:26:b8:9e:6f:bf:2e:ba:cc:fe:9b:c9:e4:
         ef:43:b3:f8:f7:78:25:c3:c2:58:47:dc:f9:2c:44:24:67:0a:
         ff:55:08:5c:1e:de:c2:31:54:76:fe:62:59:4d:a7:cb:03:a1:
         c2:ea:78:e4:c7:d4:49:7a:f2:b4:78:39:11:4f:82:89:78:f7:
         a9:fa:aa:02:d7:0e:ce:3f:e6:f0:94:f9:df:2a:e0:4c:11:dc:
         42:b2:64:2b:96:67:57:74:80:be:fa:c4:ba:92:0b:4e:c1:46:
         ad:1d:a5:1e:74:bc:aa:2a:ee:0a:91:13:cf:ec:e7:19:a2:1d:
         53:11:0b:9d:0d:9b:2b:42:ba:42:a9:dc:e0:56:6a:9a:15:16:
         d4:fa:91:32:2c:32:d6:54:94:6a:8a:52:3c:61:e8:1d:42:92:
         29:19:46:28:d2:49:a4:c5:bb:d5:4f:83:83:44:e7:c7:fd:30:
         09:0e:07:98:28:b6:20:e0:2e:ca:31:84:18:f5:33:59:25:0d:
         0e:f9:a4:02:9a:e9:e6:d4:09:19:be:f1:7d:93:03:60:2a:7c:
         3a:58:fb:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej47c8tMlBghVYsoBSyFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDJhMTM3MTVmYzU1NzhjZGMwNWFhYWE2OGM2YTQxM2Nk
YmM5ZjUwHhcNMjQwNjE2MDEwMDQzWhcNMjQwNjE3MDEwMDQzWjAzMTEwLwYDVQQD
EyhlZWY0YTVhNWQ1NzgxZGU3YWYzZDg2YzA2ZWE0MWNkMWFmNzJkZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jEtYpmUptygXW9oeJz8FVMTplIu
OGU+dt/RN0zgjQeeRwI/Fhpjzm+hKrSFsgOfREGIqpm8h0DOOHHC8mywAnmYKU8a
CcNR2T6Hk5JY87o3HOcCSeV4l8obY9r0rRj4A+GmjwO/1x8AkXRjQCuqUE0+cXG9
HS9zIcSCFd+zuG2CIuH0uRi2LoB+nEIY4Bc+Te9QxhjiJMKjCcgSIS8iMYvDQ5R/
tSnLzmjQ9DixGR9/t6m2SS6BQKL6foHONaucBwHDYdNXtHR0o/fqothE42T+toa8
wdRfIKpIPuUaou/cWexVBmko7okCP29Ai+ncKtOoGyp7FKYyTGeeWtg8PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO70paXVeB3nrz2GwG6kHNGvct67MB8GA1UdIwQY
MBaAFHJCoTcV/FV4zcBaqqaMakE828n1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tLaE54WDhWWGpOd0ZxcXBveHFRVHpieWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85MGFhMWUtMDA5OC00ZmRhLTk4Mjkt
YTE1Y2NmNWI0MTNlLzEvY2tLaE54WDhWWGpOd0ZxcXBveHFRVHpieWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85MGFhMWUtMDA5OC00ZmRhLTk4MjktYTE1Y2NmNWI0MTNl
LzEvY2tLaE54WDhWWGpOd0ZxcXBveHFRVHpieWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXWcST/H
Z1fAm62FfuetwsQ7TMIxz2QqmwAtrqGWNOg3MA79mJbKnhqyJrieb78uusz+m8nk
70Oz+Pd4JcPCWEfc+SxEJGcK/1UIXB7ewjFUdv5iWU2nywOhwup45MfUSXrytHg5
EU+CiXj3qfqqAtcOzj/m8JT53yrgTBHcQrJkK5ZnV3SAvvrEupILTsFGrR2lHnS8
qiruCpETz+znGaIdUxELnQ2bK0K6Qqnc4FZqmhUW1PqRMiwy1lSUaopSPGHoHUKS
KRlGKNJJpMW71U+Dg0Tnx/0wCQ4HmCi2IOAuyjGEGPUzWSUNDvmkAprp5tQJGb7x
fZMDYCp8Olj7LA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:04:00 2024 by rpki-client on console-fra.rpki-client.org