Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File:                     L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier:          U17FFvsKB0aftw1cotVxEyIfLhrbA3NNPF+QyK5SWhc=
Subject key identifier:   51:0E:9A:F2:BA:E3:2F:0F:B3:07:16:81:53:D1:E7:19:FE:A7:58:CB
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer:       /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial:       01901D46709794CAA13E68D376DC1392D0DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number:          11AB
Signing time:             Sat 15 Jun 2024 19:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:13 +0000
Files and hashes:         1: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: 5ITPXkFn1be87it4U+ASrajChrKqRkbQiz7wt4IHD6M=)
                          2: nXcd68FA6wzEBrKowRhwqwGa0wc.roa (hash: COA2j9H9lF4n8M+o6lTXEow6KedsZ5b6uvstYrcIQWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:70:97:94:ca:a1:3e:68:d3:76:dc:13:92:d0:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
        Validity
            Not Before: Jun 15 19:01:13 2024 GMT
            Not After : Jun 16 19:01:13 2024 GMT
        Subject: CN=510e9af2bae32f0fb307168153d1e719fea758cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:56:c7:6b:a4:d2:ed:27:60:be:76:8d:d6:
                    93:d3:8a:ed:3b:65:e7:e6:42:85:03:cf:0f:f3:6e:
                    fe:98:68:bd:2b:ab:29:31:86:55:a3:65:df:10:40:
                    4e:cd:e5:84:b3:3c:78:c2:55:55:f1:53:98:85:f7:
                    43:60:28:9d:30:c4:ec:92:cc:6a:32:c2:9f:c6:23:
                    94:8f:67:6c:4a:9b:08:60:f4:55:e1:e5:5b:1c:10:
                    3e:6a:db:fa:14:b5:8d:e1:ee:bd:da:02:cc:1a:6f:
                    57:be:aa:4f:40:62:4d:02:fa:f3:a4:55:0c:46:52:
                    33:94:3f:9f:de:df:3b:e7:48:d0:26:06:41:15:9f:
                    49:cb:80:e6:80:7b:28:90:30:f0:88:5a:43:e7:e4:
                    49:93:bb:bd:86:3c:86:89:44:86:2f:3d:2f:e6:a7:
                    b8:98:aa:21:73:58:be:2a:48:5e:94:13:b9:6a:16:
                    5a:29:18:ab:0d:93:53:28:e9:4d:2a:e0:23:32:d6:
                    3e:1c:2e:65:6f:a1:8a:55:bc:8e:95:ef:91:42:8f:
                    41:14:af:30:2d:ba:53:5c:8e:6a:9d:94:a0:2f:f3:
                    ce:10:e7:e1:e3:33:59:34:7b:02:ef:02:7a:38:d6:
                    d8:1c:7a:15:6f:08:4b:87:88:8e:00:c7:a2:bb:15:
                    92:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0E:9A:F2:BA:E3:2F:0F:B3:07:16:81:53:D1:E7:19:FE:A7:58:CB
            X509v3 Authority Key Identifier:
                keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:eb:1b:94:77:13:c4:71:a8:27:c9:e9:b5:3d:80:5a:17:
         02:69:33:b2:ae:7c:93:6c:b1:9c:ed:95:2a:8c:a7:da:47:45:
         5c:e5:c6:69:28:18:e0:ec:fa:33:31:3e:dc:1c:dd:46:cf:3c:
         e6:b1:53:6a:4b:17:7c:1d:79:27:95:61:fb:87:ea:b5:d7:77:
         02:e7:e2:d3:c0:ef:4f:c9:d2:77:12:ed:04:d8:5d:89:b5:2d:
         fb:73:90:f3:95:3c:8f:69:5a:2c:2d:52:5d:fa:8b:7b:11:a2:
         81:3e:45:2e:7d:5e:c6:f8:13:0c:ce:ce:af:14:85:ae:b8:99:
         ec:a0:e1:dc:e4:b0:7a:7c:63:1a:92:ff:7b:bf:1c:51:1a:2b:
         6a:8f:e2:cb:eb:06:db:19:99:ef:fe:e7:f6:ce:c1:09:c8:47:
         4d:df:2f:4b:2f:fd:cf:4d:d5:a0:48:05:56:22:bb:c7:30:0e:
         44:5d:23:ac:89:d6:b5:ac:a6:9c:11:c9:31:75:de:fd:15:e5:
         44:55:df:57:26:4b:5b:09:4d:48:fa:df:00:00:13:3a:2b:5b:
         78:ce:ca:d3:40:e8:c2:70:52:73:52:c0:a7:24:e6:47:fd:1a:
         43:5a:c5:ec:02:2a:06:04:a8:0b:09:2a:90:47:99:d7:96:2c:
         c8:60:a4:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRnCXlMqhPmjTdtwTktDaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNDA3ZGVhNDk5ZDczZDdlYmQ0ZTY4ODI1MTg4Njg3NTU5
Y2IxZjkwHhcNMjQwNjE1MTkwMTEzWhcNMjQwNjE2MTkwMTEzWjAzMTEwLwYDVQQD
Eyg1MTBlOWFmMmJhZTMyZjBmYjMwNzE2ODE1M2QxZTcxOWZlYTc1OGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8JWx2uk0u0nYL52jdaT04rtO2Xn
5kKFA88P827+mGi9K6spMYZVo2XfEEBOzeWEszx4wlVV8VOYhfdDYCidMMTsksxq
MsKfxiOUj2dsSpsIYPRV4eVbHBA+atv6FLWN4e692gLMGm9XvqpPQGJNAvrzpFUM
RlIzlD+f3t8750jQJgZBFZ9Jy4DmgHsokDDwiFpD5+RJk7u9hjyGiUSGLz0v5qe4
mKohc1i+KkhelBO5ahZaKRirDZNTKOlNKuAjMtY+HC5lb6GKVbyOle+RQo9BFK8w
LbpTXI5qnZSgL/POEOfh4zNZNHsC7wJ6ONbYHHoVbwhLh4iOAMeiuxWS+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEOmvK64y8PswcWgVPR5xn+p1jLMB8GA1UdIwQY
MBaAFC9AfepJnXPX69TmiCUYhodVnLH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDct
MTkwMDVjYjk4OTg5LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDctMTkwMDVjYjk4OTg5
LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/TrG5R3
E8RxqCfJ6bU9gFoXAmkzsq58k2yxnO2VKoyn2kdFXOXGaSgY4Oz6MzE+3BzdRs88
5rFTaksXfB15J5Vh+4fqtdd3Aufi08DvT8nSdxLtBNhdibUt+3OQ85U8j2laLC1S
XfqLexGigT5FLn1exvgTDM7OrxSFrriZ7KDh3OSwenxjGpL/e78cURorao/iy+sG
2xmZ7/7n9s7BCchHTd8vSy/9z03VoEgFViK7xzAORF0jrInWtaymnBHJMXXe/RXl
RFXfVyZLWwlNSPrfAAATOitbeM7K00DownBSc1LApyTmR/0aQ1rF7AIqBgSoCwkq
kEeZ15YsyGCkow==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:11:53 2024 by rpki-client on console-ams.rpki-client.org