Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.mft
File:                     m5baKyu6VqAZuAS3zQDlFDcJd6U.mft (raw, json)
Hash identifier:          OVTwbh7cPHZSm4O28SAwYEIb9f2+LefV7jexagXzUKE=
Subject key identifier:   9D:7F:07:CA:78:5D:E4:36:9F:AF:E5:FA:B3:9A:4E:9C:97:AA:DE:DB
Authority key identifier: 9B:96:DA:2B:2B:BA:56:A0:19:B8:04:B7:CD:00:E5:14:37:09:77:A5
Certificate issuer:       /CN=9b96da2b2bba56a019b804b7cd00e514370977a5
Certificate serial:       01901E9000080B42F19569D8FF74812E297C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.mft
Manifest number:          0451
Signing time:             Sun 16 Jun 2024 01:01:11 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:11 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:11 +0000
Files and hashes:         1: M_9hdRL7V-BsKRjo2UDxxRfYAeY.roa (hash: xXDPfnmgQBj9wb0/IHG7zEUaXvoc2FKejACXF5xKnBs=)
                          2: m5baKyu6VqAZuAS3zQDlFDcJd6U.crl (hash: 7tehqS6dwU39GWqn5NsUpf/fMLE2nTH5fR/HsmRhbjY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:00:08:0b:42:f1:95:69:d8:ff:74:81:2e:29:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b96da2b2bba56a019b804b7cd00e514370977a5
        Validity
            Not Before: Jun 16 01:01:11 2024 GMT
            Not After : Jun 17 01:01:11 2024 GMT
        Subject: CN=9d7f07ca785de4369fafe5fab39a4e9c97aadedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:51:b5:3d:6c:af:c7:3c:24:6b:66:3c:48:
                    63:3b:da:c4:2e:d2:fd:d2:b8:d6:2a:4b:b3:09:5c:
                    2d:04:2b:14:be:9d:3a:a8:e4:6f:aa:b3:b9:5c:06:
                    40:46:bf:61:87:aa:96:6d:83:c9:c3:b5:d0:70:2c:
                    40:19:59:22:7a:4b:b5:e7:40:81:18:32:5a:86:11:
                    64:68:95:78:ac:cf:ed:9e:5d:3e:e5:5f:78:d1:f5:
                    55:49:f6:d1:96:ca:95:54:15:02:83:69:cb:eb:de:
                    f1:7d:20:70:10:e3:e7:67:9a:1c:ec:be:c6:af:96:
                    09:d2:8a:85:59:8b:b3:ef:07:1f:4f:0b:d0:ba:cc:
                    72:8b:85:1b:1c:ae:ac:8b:e7:45:12:9d:a1:4e:55:
                    36:ba:59:a8:14:ad:6e:61:e6:68:0e:b8:77:fd:3e:
                    77:86:6a:da:40:4d:08:4e:a4:9b:3d:63:e9:ad:8b:
                    50:66:cd:b0:6d:f8:3f:f7:9b:2e:84:75:aa:5b:c4:
                    f9:08:85:99:b3:dc:e1:89:26:95:a3:57:b6:5a:12:
                    28:c9:1f:47:eb:ab:c2:95:48:ed:1e:8c:a2:65:e0:
                    20:d1:2e:e4:7e:70:c3:b4:d1:10:d5:b4:c1:67:1f:
                    98:10:d8:e9:79:26:5d:80:89:62:7a:bd:cb:ab:af:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7F:07:CA:78:5D:E4:36:9F:AF:E5:FA:B3:9A:4E:9C:97:AA:DE:DB
            X509v3 Authority Key Identifier:
                keyid:9B:96:DA:2B:2B:BA:56:A0:19:B8:04:B7:CD:00:E5:14:37:09:77:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8b:4c:70:c8:02:14:46:fc:a8:bd:b1:85:12:fd:e0:ad:33:
         9a:cb:a6:03:ab:a5:19:d9:53:b9:37:79:1b:53:86:49:da:7c:
         54:fd:72:30:eb:16:16:33:3f:69:4d:0f:e0:86:43:87:48:36:
         98:41:d1:6e:86:53:69:97:d4:cc:ef:6f:4a:80:19:66:ef:65:
         a1:4f:02:d5:bf:27:f6:b1:36:17:b8:87:8b:b3:e5:0c:f2:e5:
         57:e0:e9:10:9e:18:a5:d9:d6:ff:35:c9:7b:b0:bf:bf:7f:05:
         ca:c2:fa:c0:75:f4:5e:53:68:38:85:be:fc:28:33:76:2a:78:
         8b:08:04:c9:c7:ec:28:ea:67:b6:13:7b:73:18:49:94:94:24:
         64:55:0d:c4:15:ad:9c:ed:91:25:ce:e6:ef:56:8d:3e:d5:5a:
         89:dc:c0:52:20:c5:19:d9:9d:68:1d:00:75:11:8a:c4:f5:5f:
         df:bf:b1:dc:5e:b3:a4:37:d4:d4:a2:99:a1:6b:85:7b:4d:de:
         6e:7d:09:12:4b:7c:cd:3a:b0:46:6d:40:97:fb:96:84:d2:6e:
         fc:7e:5f:bd:b2:6a:6c:d3:15:b9:6c:03:4f:21:2f:3b:39:e6:
         d6:86:8c:c5:c4:88:a2:79:ed:7c:d2:ca:d3:9c:e4:7c:ae:a5:
         00:24:75:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAekAAIC0LxlWnY/3SBLil8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliOTZkYTJiMmJiYTU2YTAxOWI4MDRiN2NkMDBlNTE0Mzcw
OTc3YTUwHhcNMjQwNjE2MDEwMTExWhcNMjQwNjE3MDEwMTExWjAzMTEwLwYDVQQD
Eyg5ZDdmMDdjYTc4NWRlNDM2OWZhZmU1ZmFiMzlhNGU5Yzk3YWFkZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKhRtT1sr8c8JGtmPEhjO9rELtL9
0rjWKkuzCVwtBCsUvp06qORvqrO5XAZARr9hh6qWbYPJw7XQcCxAGVkieku150CB
GDJahhFkaJV4rM/tnl0+5V940fVVSfbRlsqVVBUCg2nL697xfSBwEOPnZ5oc7L7G
r5YJ0oqFWYuz7wcfTwvQusxyi4UbHK6si+dFEp2hTlU2ulmoFK1uYeZoDrh3/T53
hmraQE0ITqSbPWPprYtQZs2wbfg/95suhHWqW8T5CIWZs9zhiSaVo1e2WhIoyR9H
66vClUjtHoyiZeAg0S7kfnDDtNEQ1bTBZx+YENjpeSZdgIlier3Lq68LHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1/B8p4XeQ2n6/l+rOaTpyXqt7bMB8GA1UdIwQY
MBaAFJuW2isrulagGbgEt80A5RQ3CXelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTViYUt5dTZWcUFadUFTM3pRRGxGRGNKZDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8yODc5OTgtYzQ3Yi00OTcxLTk4ZjEt
NTFlOTk1MTM3Njc3LzEvbTViYUt5dTZWcUFadUFTM3pRRGxGRGNKZDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8yODc5OTgtYzQ3Yi00OTcxLTk4ZjEtNTFlOTk1MTM3Njc3
LzEvbTViYUt5dTZWcUFadUFTM3pRRGxGRGNKZDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkotMcMgC
FEb8qL2xhRL94K0zmsumA6ulGdlTuTd5G1OGSdp8VP1yMOsWFjM/aU0P4IZDh0g2
mEHRboZTaZfUzO9vSoAZZu9loU8C1b8n9rE2F7iHi7PlDPLlV+DpEJ4YpdnW/zXJ
e7C/v38FysL6wHX0XlNoOIW+/Cgzdip4iwgEycfsKOpnthN7cxhJlJQkZFUNxBWt
nO2RJc7m71aNPtVaidzAUiDFGdmdaB0AdRGKxPVf37+x3F6zpDfU1KKZoWuFe03e
bn0JEkt8zTqwRm1Al/uWhNJu/H5fvbJqbNMVuWwDTyEvOznm1oaMxcSIonntfNLK
05zkfK6lACR1sg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:33:57 2024 by rpki-client on console-ams.rpki-client.org