Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/0EOMFbwZI2ixByCmanlBCueHcks.mft
File:                     0EOMFbwZI2ixByCmanlBCueHcks.mft (raw, json)
Hash identifier:          W4W+JGh3BRlyqliltQlA0SzbREyF4tq9xUnzQUTOfZE=
Subject key identifier:   60:C9:42:D0:20:E0:92:D4:43:F0:55:D8:2C:93:A0:02:59:F8:02:14
Authority key identifier: D0:43:8C:15:BC:19:23:68:B1:07:20:A6:6A:79:41:0A:E7:87:72:4B
Certificate issuer:       /CN=d0438c15bc192368b10720a66a79410ae787724b
Certificate serial:       01901CD85AB71A6E4F3FEE686FD352D14B49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EOMFbwZI2ixByCmanlBCueHcks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/0EOMFbwZI2ixByCmanlBCueHcks.mft
Manifest number:          0A6A
Signing time:             Sat 15 Jun 2024 17:00:59 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:59 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:59 +0000
Files and hashes:         1: 0EOMFbwZI2ixByCmanlBCueHcks.crl (hash: szBJdglKhni37/g2bPW/urhffdDYGkYQPICjs82jA0E=)
                          2: T9GZsNWTiUG1ULcq6sYJBGikaz4.roa (hash: w7ShGAy2/gXZef9xBqiyA+Jyz2jj73RZ4vY/D/HtgQY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/0EOMFbwZI2ixByCmanlBCueHcks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/0EOMFbwZI2ixByCmanlBCueHcks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EOMFbwZI2ixByCmanlBCueHcks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:5a:b7:1a:6e:4f:3f:ee:68:6f:d3:52:d1:4b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0438c15bc192368b10720a66a79410ae787724b
        Validity
            Not Before: Jun 15 17:00:59 2024 GMT
            Not After : Jun 16 17:00:59 2024 GMT
        Subject: CN=60c942d020e092d443f055d82c93a00259f80214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b4:52:0c:e3:44:fb:84:41:08:1b:f3:fc:98:
                    87:6e:fd:4f:bd:8b:5f:d4:63:8d:18:9a:fe:36:a9:
                    69:a6:aa:0c:4a:9b:f6:6b:3b:03:4f:c7:d4:56:c4:
                    6e:4c:bd:4d:89:28:6f:46:07:63:65:06:ab:3a:81:
                    05:49:5c:01:a6:97:db:b8:80:6a:55:df:6d:19:92:
                    d5:b1:84:09:2c:12:bb:58:73:77:2c:bf:a1:5f:02:
                    20:a7:7b:6c:47:e1:0d:41:22:a5:e8:fc:32:8f:2e:
                    ec:f1:f0:a5:09:e3:d7:d9:15:ef:17:e6:4c:9f:8f:
                    98:ed:cd:f5:37:da:ac:4a:58:73:98:85:8a:51:74:
                    39:83:66:4d:d5:87:f1:9d:23:ee:98:39:1f:b1:55:
                    c4:de:9d:d4:6d:bd:4a:32:5e:23:20:e8:ff:e3:7c:
                    ca:fa:82:88:15:15:a9:34:22:4c:3e:a7:5c:ac:bf:
                    0a:5c:96:f8:f2:4e:0e:a8:78:78:70:57:95:79:66:
                    d6:f9:57:aa:e1:3e:e8:53:ea:7c:72:65:3b:15:58:
                    56:b0:b5:5b:c2:7a:00:79:85:73:53:ff:6a:61:de:
                    8d:c1:f5:d1:e5:70:a9:35:d6:63:e1:26:db:d0:20:
                    7f:bc:e4:7e:36:7f:6e:60:77:dc:a5:93:31:79:d7:
                    4d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C9:42:D0:20:E0:92:D4:43:F0:55:D8:2C:93:A0:02:59:F8:02:14
            X509v3 Authority Key Identifier:
                keyid:D0:43:8C:15:BC:19:23:68:B1:07:20:A6:6A:79:41:0A:E7:87:72:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EOMFbwZI2ixByCmanlBCueHcks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/0EOMFbwZI2ixByCmanlBCueHcks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/0EOMFbwZI2ixByCmanlBCueHcks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:32:ac:ea:51:96:50:ca:3e:84:3b:eb:94:76:02:af:ba:6f:
         a4:d1:3a:c4:b2:ea:1d:bd:8b:51:3b:63:05:d8:c6:49:de:ae:
         b0:56:3f:cf:0c:eb:5f:17:c7:cd:09:62:97:1a:8d:8a:92:37:
         0f:b6:f9:0a:94:f5:75:5e:c8:38:8d:cf:f1:6e:c4:96:c9:1b:
         e8:8c:4e:ab:ea:75:44:39:7f:26:dc:25:1f:9d:49:52:1d:c1:
         e6:c4:4a:2b:fd:67:bc:28:d7:3b:ea:8b:70:53:1a:6d:b0:8c:
         00:c2:7a:98:b3:09:8d:d3:ab:8e:57:92:f2:ef:37:f1:dc:d2:
         84:2d:be:4c:e3:19:b1:22:61:82:fd:23:3c:45:4b:13:8a:d8:
         55:78:64:0a:58:48:af:ca:4b:bb:b2:a9:07:ea:2d:db:a1:3b:
         6e:11:c4:34:57:70:68:39:dd:8e:9d:aa:de:cb:54:d3:ba:9b:
         20:ae:b4:8b:10:8a:3f:61:5a:36:db:3c:27:3e:45:c5:54:1f:
         b7:4d:c0:71:ad:a8:5d:0c:46:91:46:9a:90:4c:4c:e0:86:20:
         67:2f:ef:e0:32:18:b9:80:ca:33:fe:8e:47:6c:11:f4:ce:1c:
         72:f8:26:cd:f0:d0:2a:65:4d:3b:c5:3f:72:fd:30:64:4b:71:
         47:03:47:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAc2Fq3Gm5PP+5ob9NS0UtJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDM4YzE1YmMxOTIzNjhiMTA3MjBhNjZhNzk0MTBhZTc4
NzcyNGIwHhcNMjQwNjE1MTcwMDU5WhcNMjQwNjE2MTcwMDU5WjAzMTEwLwYDVQQD
Eyg2MGM5NDJkMDIwZTA5MmQ0NDNmMDU1ZDgyYzkzYTAwMjU5ZjgwMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LRSDONE+4RBCBvz/JiHbv1PvYtf
1GONGJr+NqlppqoMSpv2azsDT8fUVsRuTL1NiShvRgdjZQarOoEFSVwBppfbuIBq
Vd9tGZLVsYQJLBK7WHN3LL+hXwIgp3tsR+ENQSKl6Pwyjy7s8fClCePX2RXvF+ZM
n4+Y7c31N9qsSlhzmIWKUXQ5g2ZN1YfxnSPumDkfsVXE3p3Ubb1KMl4jIOj/43zK
+oKIFRWpNCJMPqdcrL8KXJb48k4OqHh4cFeVeWbW+Veq4T7oU+p8cmU7FVhWsLVb
wnoAeYVzU/9qYd6NwfXR5XCpNdZj4Sbb0CB/vOR+Nn9uYHfcpZMxeddNcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDJQtAg4JLUQ/BV2CyToAJZ+AIUMB8GA1UdIwQY
MBaAFNBDjBW8GSNosQcgpmp5QQrnh3JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVPTUZid1pJMml4QnlDbWFubEJDdWVIY2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81YTczNTMtYzcyZi00MTdmLWFjOTAt
NjY1YTk4MzQ3YWM1LzEvMEVPTUZid1pJMml4QnlDbWFubEJDdWVIY2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81YTczNTMtYzcyZi00MTdmLWFjOTAtNjY1YTk4MzQ3YWM1
LzEvMEVPTUZid1pJMml4QnlDbWFubEJDdWVIY2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDKs6lGW
UMo+hDvrlHYCr7pvpNE6xLLqHb2LUTtjBdjGSd6usFY/zwzrXxfHzQlilxqNipI3
D7b5CpT1dV7IOI3P8W7Elskb6IxOq+p1RDl/JtwlH51JUh3B5sRKK/1nvCjXO+qL
cFMabbCMAMJ6mLMJjdOrjleS8u838dzShC2+TOMZsSJhgv0jPEVLE4rYVXhkClhI
r8pLu7KpB+ot26E7bhHENFdwaDndjp2q3stU07qbIK60ixCKP2FaNts8Jz5FxVQf
t03Aca2oXQxGkUaakExM4IYgZy/v4DIYuYDKM/6OR2wR9M4ccvgmzfDQKmVNO8U/
cv0wZEtxRwNHlQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:33:16 2024 by rpki-client on console-fra.rpki-client.org