Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
File:                     0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json)
Hash identifier:          0SbaBiNDk0m4QftwNkG/UjE8z9Rg/j3/y7GkJ6RSgU4=
Subject key identifier:   DB:CA:3E:A3:30:B8:34:E1:1D:96:2E:DD:0C:66:23:BD:54:9C:BD:C9
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Certificate issuer:       /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial:       01901E8F777362CA03DC057A79B2F2769921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
Manifest number:          0C00
Signing time:             Sun 16 Jun 2024 01:00:36 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:36 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:36 +0000
Files and hashes:         1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: Kt6xhO5Ii+1OOlSfx48n1KX4emlEMoARgO8I8Pvsbss=)
                          2: cHvMDZxW3jkwFHjCwDWguYX-USM.roa (hash: zgQlrfgNnCa12+fotmP5WYvLkMQBYHRfZUmqQgDE6OU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:77:73:62:ca:03:dc:05:7a:79:b2:f2:76:99:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
        Validity
            Not Before: Jun 16 01:00:36 2024 GMT
            Not After : Jun 17 01:00:36 2024 GMT
        Subject: CN=dbca3ea330b834e11d962edd0c6623bd549cbdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:1f:b4:7b:9b:25:4a:cb:25:1f:2b:82:57:
                    f3:06:9a:cb:76:11:ae:05:48:af:54:a1:3b:66:fd:
                    6b:9f:b8:3e:38:76:cb:b3:8a:14:d8:55:12:65:9c:
                    89:26:3c:9b:51:c6:66:e0:77:39:24:e9:84:dd:d1:
                    7d:84:88:eb:5c:da:20:c6:8a:8b:76:0d:f8:2f:ba:
                    47:98:38:33:b7:6d:3c:46:c7:9d:a4:95:5c:bd:cf:
                    1b:fb:0d:07:2c:90:a7:34:fe:d6:5a:74:60:da:9c:
                    b1:a2:c5:41:ec:ee:f4:7a:ab:86:2c:b3:4d:06:44:
                    a9:bf:c5:50:a6:42:44:ce:fb:e6:b4:72:46:98:dd:
                    6d:d1:4e:ab:ab:b8:b4:5d:58:5d:09:f2:df:4f:f7:
                    b8:53:6f:4d:35:90:ce:37:e7:fe:f7:fb:d8:a5:8b:
                    81:dd:98:69:89:03:3c:8f:e2:f5:8e:41:22:0d:94:
                    a0:51:31:59:52:a6:60:2e:46:5d:6a:b7:9c:39:e4:
                    cd:f6:2d:89:76:56:1a:55:3a:7b:ab:6a:a0:cb:f7:
                    ad:34:2a:5a:0e:06:7f:7a:9f:1e:cb:05:cf:a1:c2:
                    5a:e6:9d:b7:83:41:70:75:59:36:38:11:ec:d2:4c:
                    26:1b:d9:16:e8:6f:42:ef:b6:cc:ff:51:dc:b6:fa:
                    c6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CA:3E:A3:30:B8:34:E1:1D:96:2E:DD:0C:66:23:BD:54:9C:BD:C9
            X509v3 Authority Key Identifier:
                keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:27:5e:74:87:8c:43:43:5f:44:a6:17:ff:6c:73:79:a2:d9:
         e7:1f:e9:0b:7b:3e:58:f3:20:12:37:63:26:0f:c6:c5:de:fc:
         91:7b:58:52:e4:bd:d8:b2:e6:30:3d:84:0e:ff:44:69:3c:c1:
         ac:82:03:f9:4d:f4:12:a3:7c:9d:d7:ca:c0:9b:55:cf:a3:ec:
         f0:80:60:1b:50:39:c0:25:c9:66:25:fa:6b:ac:dd:e1:8e:75:
         d4:cf:fa:e1:ad:b1:71:9f:55:3a:93:79:3b:c3:56:70:73:90:
         d6:aa:04:26:1f:1f:6d:98:03:c3:59:73:03:f4:8d:f1:9d:6d:
         73:fe:c0:da:b4:89:b6:1c:74:fa:48:77:9d:d7:96:97:86:56:
         c7:ee:55:ce:a6:3d:0c:59:00:ce:9f:b5:c9:1e:2a:2f:86:8b:
         6d:5d:fd:a3:37:c3:0c:59:a7:f8:f6:54:13:0f:43:88:3a:7f:
         30:e0:0d:80:0d:1c:ba:cf:04:5f:9b:16:3c:27:14:05:fd:f4:
         19:40:43:88:d2:f7:69:e8:db:5f:e1:5d:13:a1:66:44:bd:71:
         e1:9b:31:bf:e0:7f:70:65:19:93:a9:d7:11:bb:ab:8d:b0:fb:
         6a:2e:ef:b2:36:6e:9a:49:b2:39:c3:12:ae:20:c6:99:6c:9c:
         86:50:a8:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAej3dzYsoD3AV6ebLydpkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTE2YmY3ZTBlM2I5MzMwYjU0NDgzZTE5ZjYxM2IwMmI2
MjdiZWYwHhcNMjQwNjE2MDEwMDM2WhcNMjQwNjE3MDEwMDM2WjAzMTEwLwYDVQQD
EyhkYmNhM2VhMzMwYjgzNGUxMWQ5NjJlZGQwYzY2MjNiZDU0OWNiZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUcftHubJUrLJR8rglfzBprLdhGu
BUivVKE7Zv1rn7g+OHbLs4oU2FUSZZyJJjybUcZm4Hc5JOmE3dF9hIjrXNogxoqL
dg34L7pHmDgzt208RsedpJVcvc8b+w0HLJCnNP7WWnRg2pyxosVB7O70equGLLNN
BkSpv8VQpkJEzvvmtHJGmN1t0U6rq7i0XVhdCfLfT/e4U29NNZDON+f+9/vYpYuB
3ZhpiQM8j+L1jkEiDZSgUTFZUqZgLkZdarecOeTN9i2JdlYaVTp7q2qgy/etNCpa
DgZ/ep8eywXPocJa5p23g0FwdVk2OBHs0kwmG9kW6G9C77bM/1HctvrGswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvKPqMwuDThHZYu3QxmI71UnL3JMB8GA1UdIwQY
MBaAFNCha/fg47kzC1RIPhn2E7ArYnvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2Mt
NGVmMDNjMTA4MWY4LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2MtNGVmMDNjMTA4MWY4
LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqidedIeM
Q0NfRKYX/2xzeaLZ5x/pC3s+WPMgEjdjJg/Gxd78kXtYUuS92LLmMD2EDv9EaTzB
rIID+U30EqN8ndfKwJtVz6Ps8IBgG1A5wCXJZiX6a6zd4Y511M/64a2xcZ9VOpN5
O8NWcHOQ1qoEJh8fbZgDw1lzA/SN8Z1tc/7A2rSJthx0+kh3ndeWl4ZWx+5VzqY9
DFkAzp+1yR4qL4aLbV39ozfDDFmn+PZUEw9DiDp/MOANgA0cus8EX5sWPCcUBf30
GUBDiNL3aejbX+FdE6FmRL1x4Zsxv+B/cGUZk6nXEburjbD7ai7vsjZumkmyOcMS
riDGmWychlCotA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:50:35 2024 by rpki-client on console-fra.rpki-client.org