Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File:                     totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier:          SN68EEkh0sFvZs7A/XMv5gDkGVRFJdm7N63FKDJmKBI=
Subject key identifier:   0D:F9:81:C7:09:A3:F5:BE:EB:13:6C:90:4E:54:6B:CB:5B:81:F1:33
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer:       /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial:       01901E5921BA8D675A89325102A58AE04840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 00:01:15 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:15 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:15 +0000
Files and hashes:         1: HDHdBYh2AggwY4LsFRWqEG2nSHU.roa (hash: dhSjzSEAgo/VRzwhI5/r7xrxZR7zNY0KlwHOR2uSwrM=)
                          2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: sVpEzS+4pszrpFUIMtmwMj4lL2oVy90k7cxFMCfnMsA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:21:ba:8d:67:5a:89:32:51:02:a5:8a:e0:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
        Validity
            Not Before: Jun 16 00:01:15 2024 GMT
            Not After : Jun 17 00:01:15 2024 GMT
        Subject: CN=0df981c709a3f5beeb136c904e546bcb5b81f133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:47:16:ac:00:d9:ec:06:a3:4e:67:41:09:
                    f9:f8:80:90:7f:ef:58:24:93:6b:03:d2:6e:f4:33:
                    26:5e:15:06:9f:d3:1a:f4:27:d3:99:75:cf:9d:96:
                    b0:42:6c:07:22:1b:d1:d0:66:32:5a:4d:ec:03:00:
                    bc:1f:2b:15:0a:07:c9:21:89:86:d8:30:0d:5f:e9:
                    be:27:fe:88:48:0a:fe:b5:29:36:05:24:8f:30:eb:
                    88:b7:52:e5:3c:50:3f:c6:53:a9:40:0f:71:9e:9b:
                    bd:60:a1:69:19:f5:47:7f:fb:92:9a:5e:8d:36:e9:
                    9d:ec:46:38:99:e6:f6:d3:5c:f0:28:ed:25:a8:dc:
                    34:2c:b7:14:da:16:80:a1:dc:fb:4b:56:cb:a1:c1:
                    67:63:bc:da:00:5c:e4:44:5a:52:df:af:34:c1:d9:
                    9e:7d:a5:99:57:50:57:99:96:f8:0b:df:29:0e:31:
                    26:38:7d:19:fa:52:4d:a8:8b:63:ac:8a:57:d0:d4:
                    f7:e7:65:0b:11:0c:e1:21:c9:5b:02:90:12:49:13:
                    87:85:39:09:f6:0c:0b:c1:a3:03:51:54:f8:e0:65:
                    30:78:8b:03:7f:0a:71:45:47:ab:72:ab:29:1e:0c:
                    c0:6d:c0:10:3a:44:7a:5a:8a:eb:37:fb:2b:db:14:
                    e2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F9:81:C7:09:A3:F5:BE:EB:13:6C:90:4E:54:6B:CB:5B:81:F1:33
            X509v3 Authority Key Identifier:
                keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:64:91:7a:7a:c4:d1:10:c0:b1:f5:1b:d8:57:c6:d1:68:ca:
         c8:9d:3f:dd:61:e8:fe:6b:f1:a0:48:a4:0e:82:1d:b2:7a:cc:
         4c:bd:e6:85:f0:7a:e4:15:40:6d:f3:23:88:dd:08:22:2b:30:
         53:7f:3e:9f:d2:d2:fb:45:29:23:bb:fb:e6:23:c1:a1:7c:d1:
         b3:3f:af:f2:f5:21:94:b1:63:9f:78:a3:16:ae:90:36:c0:f6:
         f5:a1:33:f3:34:40:ef:08:31:7c:38:54:b7:17:66:3e:54:7e:
         c8:0c:1e:6c:5e:cf:14:00:87:ce:1e:99:dc:b3:c1:33:e5:a5:
         07:9f:98:56:a4:94:e2:5e:38:34:01:d3:a2:40:6c:9e:dc:11:
         9d:01:4b:74:f1:ca:b5:b0:1a:a5:9f:33:5e:c3:c0:19:0e:67:
         27:3e:ce:6c:fb:6d:08:e9:bb:40:94:20:0e:38:c7:ba:a9:45:
         0b:f8:01:7d:15:cd:22:1c:2d:fa:8d:c9:c6:8b:1a:af:fb:0d:
         22:93:bd:68:7d:50:7c:de:56:f3:a5:8e:45:4f:54:70:1b:07:
         b7:8c:49:3f:c7:95:64:9c:63:5e:a1:a5:4b:66:d6:9e:84:6e:
         e7:b9:7f:e9:28:5b:46:63:f9:13:25:62:f8:fc:d9:7a:ea:33:
         cf:a7:c8:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWSG6jWdaiTJRAqWK4EhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OGI0MjkyMmQzODdjNTc4ZmE1NzY5MjQ4N2YyYTE5MDY4
NTg5YmEwHhcNMjQwNjE2MDAwMTE1WhcNMjQwNjE3MDAwMTE1WjAzMTEwLwYDVQQD
EygwZGY5ODFjNzA5YTNmNWJlZWIxMzZjOTA0ZTU0NmJjYjViODFmMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjxHFqwA2ewGo05nQQn5+ICQf+9Y
JJNrA9Ju9DMmXhUGn9Ma9CfTmXXPnZawQmwHIhvR0GYyWk3sAwC8HysVCgfJIYmG
2DANX+m+J/6ISAr+tSk2BSSPMOuIt1LlPFA/xlOpQA9xnpu9YKFpGfVHf/uSml6N
Numd7EY4meb201zwKO0lqNw0LLcU2haAodz7S1bLocFnY7zaAFzkRFpS3680wdme
faWZV1BXmZb4C98pDjEmOH0Z+lJNqItjrIpX0NT352ULEQzhIclbApASSROHhTkJ
9gwLwaMDUVT44GUweIsDfwpxRUercqspHgzAbcAQOkR6WorrN/sr2xTi1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA35gccJo/W+6xNskE5Ua8tbgfEzMB8GA1UdIwQY
MBaAFLaLQpItOHxXj6V2kkh/KhkGhYm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zMzYxOTgtM2U3Yi00NjE1LWJjZWEt
NGE1NDViMTE2ODgwLzEvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zMzYxOTgtM2U3Yi00NjE1LWJjZWEtNGE1NDViMTE2ODgw
LzEvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2SRenrE
0RDAsfUb2FfG0WjKyJ0/3WHo/mvxoEikDoIdsnrMTL3mhfB65BVAbfMjiN0IIisw
U38+n9LS+0UpI7v75iPBoXzRsz+v8vUhlLFjn3ijFq6QNsD29aEz8zRA7wgxfDhU
txdmPlR+yAwebF7PFACHzh6Z3LPBM+WlB5+YVqSU4l44NAHTokBsntwRnQFLdPHK
tbAapZ8zXsPAGQ5nJz7ObPttCOm7QJQgDjjHuqlFC/gBfRXNIhwt+o3Jxosar/sN
IpO9aH1QfN5W86WORU9UcBsHt4xJP8eVZJxjXqGlS2bWnoRu57l/6ShbRmP5EyVi
+PzZeuozz6fIxg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 01:06:16 2024 by rpki-client on console-fra.rpki-client.org