Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File:                     o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier:          Xc5WSXV3o5MAntDaUs/HNe8sTinTAd/RborvhO1Lgxw=
Subject key identifier:   A1:A1:EE:39:52:91:70:B4:97:E3:0A:29:00:AF:5D:70:29:DA:A5:BA
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer:       /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial:       01901CD8BCAA54899371796704A2356F377F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number:          11C9
Signing time:             Sat 15 Jun 2024 17:01:24 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:24 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:24 +0000
Files and hashes:         1: UzyrtJITbaxmk3q-4qbRm5zZyOs.roa (hash: EMBR0KrkyHE2wD3fz7drjZegJWFElmqH26VH9GCTemc=)
                          2: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: SX92XTU5lwNheNp6ITrqgX1ARKjZ9/CT4EPqI6K/ETc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:bc:aa:54:89:93:71:79:67:04:a2:35:6f:37:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
        Validity
            Not Before: Jun 15 17:01:24 2024 GMT
            Not After : Jun 16 17:01:24 2024 GMT
        Subject: CN=a1a1ee39529170b497e30a2900af5d7029daa5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:fc:16:7d:2a:62:0b:a8:6a:eb:ef:f1:1b:
                    b0:20:29:b8:2e:5d:7a:ba:4f:bf:74:d9:f7:c3:52:
                    fc:64:af:09:14:b5:07:4f:16:59:4c:1b:f4:15:45:
                    28:48:1e:11:7b:e1:b6:3e:98:87:b9:d0:a6:dd:1b:
                    bf:ef:04:4e:f2:e2:6d:3d:4f:d2:f1:cb:f4:bb:34:
                    5b:c3:05:53:cc:5b:17:c6:b0:41:46:c9:59:76:ed:
                    ce:b1:76:83:13:12:fb:fd:13:6c:74:ac:af:55:38:
                    6c:39:d6:3c:f4:2f:bf:0d:e9:75:52:b4:dc:f4:33:
                    96:c4:5a:ed:01:d2:99:8e:e1:17:3a:eb:a1:e9:a6:
                    11:0b:db:40:a0:3e:88:c9:9f:d5:40:32:99:c1:93:
                    65:3c:88:55:b4:c3:80:b8:ee:17:d9:f2:05:b4:c8:
                    ee:5f:0b:c1:3a:39:f4:85:42:fc:9b:ad:27:31:37:
                    45:69:8f:6b:b4:2a:a2:65:87:bc:02:23:88:14:78:
                    9f:a5:e6:b9:84:c2:1c:e1:ea:19:76:e1:c8:3c:8d:
                    70:59:95:89:ea:bc:1a:4e:ed:d7:4f:16:ca:9b:eb:
                    79:e8:e1:1a:75:a4:c5:7c:c1:b2:e8:92:e9:2c:7c:
                    0b:28:3e:42:ff:90:ab:4e:1b:99:11:e8:9c:21:32:
                    b1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A1:EE:39:52:91:70:B4:97:E3:0A:29:00:AF:5D:70:29:DA:A5:BA
            X509v3 Authority Key Identifier:
                keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e3:85:01:c2:21:f4:29:69:55:f7:27:b1:f2:df:1a:b6:68:
         29:3c:96:e3:71:a9:1f:51:7c:72:74:82:47:10:26:d3:a9:4b:
         27:d4:34:24:90:85:24:0a:ce:7e:c1:08:a2:32:4d:60:1a:94:
         97:41:c9:34:c4:d4:aa:5d:2c:ea:00:6f:f3:21:78:88:f8:ed:
         b3:fd:47:17:71:a6:e7:1e:bc:77:ba:40:9c:73:fa:a1:13:e9:
         a7:ea:84:ea:63:35:b5:93:ed:3e:8a:89:a1:e9:97:51:41:c7:
         2e:d8:59:b6:69:14:4a:02:46:05:f4:30:14:e2:c1:6f:d6:a0:
         c6:fd:c8:29:71:fe:e4:c1:27:18:2f:c1:de:85:db:4f:02:6e:
         0a:07:2d:0c:9b:45:0f:fa:21:6d:68:3d:24:a4:ea:fe:1c:ef:
         48:60:e5:f9:ba:b8:38:8d:bc:84:49:4b:84:4a:91:51:de:b2:
         d3:ea:3d:67:47:e8:d2:25:81:71:2b:5c:94:03:c7:b0:bf:dd:
         31:f0:26:6d:cd:5a:89:ca:26:8d:e2:2e:53:45:89:04:f1:28:
         83:49:62:c8:e6:40:23:24:2d:9e:ad:1a:cb:77:cb:60:53:ec:
         bb:04:d1:50:2a:7d:92:5c:5e:57:e9:9c:0f:fb:08:df:06:f9:
         9a:93:b6:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAc2LyqVImTcXlnBKI1bzd/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZTZlZDg3YjY2OWQwNWI0MjBkZjVhYTlhNjEzMmVhNmZi
NTFhNWEwHhcNMjQwNjE1MTcwMTI0WhcNMjQwNjE2MTcwMTI0WjAzMTEwLwYDVQQD
EyhhMWExZWUzOTUyOTE3MGI0OTdlMzBhMjkwMGFmNWQ3MDI5ZGFhNWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynj8Fn0qYguoauvv8RuwICm4Ll16
uk+/dNn3w1L8ZK8JFLUHTxZZTBv0FUUoSB4Re+G2PpiHudCm3Ru/7wRO8uJtPU/S
8cv0uzRbwwVTzFsXxrBBRslZdu3OsXaDExL7/RNsdKyvVThsOdY89C+/Del1UrTc
9DOWxFrtAdKZjuEXOuuh6aYRC9tAoD6IyZ/VQDKZwZNlPIhVtMOAuO4X2fIFtMju
XwvBOjn0hUL8m60nMTdFaY9rtCqiZYe8AiOIFHifpea5hMIc4eoZduHIPI1wWZWJ
6rwaTu3XTxbKm+t56OEadaTFfMGy6JLpLHwLKD5C/5CrThuZEeicITKxoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGh7jlSkXC0l+MKKQCvXXAp2qW6MB8GA1UdIwQY
MBaAFKPm7Ye2adBbQg31qpphMupvtRpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS84MTRjZWYtZDgyNS00ODdhLTk4ZWMt
N2I4ZWEwZjgzMDgxLzEvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS84MTRjZWYtZDgyNS00ODdhLTk4ZWMtN2I4ZWEwZjgzMDgx
LzEvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+OFAcIh
9ClpVfcnsfLfGrZoKTyW43GpH1F8cnSCRxAm06lLJ9Q0JJCFJArOfsEIojJNYBqU
l0HJNMTUql0s6gBv8yF4iPjts/1HF3Gm5x68d7pAnHP6oRPpp+qE6mM1tZPtPoqJ
oemXUUHHLthZtmkUSgJGBfQwFOLBb9agxv3IKXH+5MEnGC/B3oXbTwJuCgctDJtF
D/ohbWg9JKTq/hzvSGDl+bq4OI28hElLhEqRUd6y0+o9Z0fo0iWBcStclAPHsL/d
MfAmbc1aicomjeIuU0WJBPEog0liyOZAIyQtnq0ay3fLYFPsuwTRUCp9klxeV+mc
D/sI3wb5mpO21w==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:38:44 2024 by rpki-client on console-fra.rpki-client.org