Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
File:                     EEXazIN3mMPmzzH00nlGozsN5mE.mft (raw, json)
Hash identifier:          QByiCw/82/XM2zAQQi0vGY/yPM6V1AZBo+EKUfJTFP8=
Subject key identifier:   7F:AE:B1:0C:8E:33:08:35:FF:94:6C:48:26:72:A5:D9:94:55:3D:45
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       01901B20920002570D00FD5934F335915480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
Manifest number:          11E1
Signing time:             Sat 15 Jun 2024 09:00:37 +0000
Manifest this update:     Sat 15 Jun 2024 09:00:37 +0000
Manifest next update:     Sun 16 Jun 2024 09:00:37 +0000
Files and hashes:         1: CA02NgGe58Fexwh3aXKQmfruw-k.roa (hash: TWusG1KXb1aMiQHxxtkPoIKAcF6Y2yNK+n9B6pl++n4=)
                          2: EEXazIN3mMPmzzH00nlGozsN5mE.crl (hash: kG5KJ/xmtOwSd962/RBG2vjCI5PUrXeAwJPtofSpzZ8=)
                          3: WDV0aDV0yHz7GT0tYmrPP4xdiS8.roa (hash: LMRXU93EeDgZxFEGNfrR2ef3CkmKLSntZz3lKflK0bI=)
                          4: c3wyjfEkokEBm3KzKtgY1iPm1s8.roa (hash: jL54HVCO26iAEcUmoA5fwftOHWmMpu7cqkk6jAEq7XU=)
                          5: iWF3oW-0qa-6pTRJrKXDbcWm5aM.roa (hash: +4gZpmXvQ/2OpYo0fPwjEci7ki2oH1dnoNLCruJ5UQ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:20:92:00:02:57:0d:00:fd:59:34:f3:35:91:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: Jun 15 09:00:37 2024 GMT
            Not After : Jun 16 09:00:37 2024 GMT
        Subject: CN=7faeb10c8e330835ff946c482672a5d994553d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d7:51:57:69:f4:72:e1:25:7c:42:87:09:e9:
                    9b:2a:24:f6:43:ad:bc:a2:41:27:61:20:9a:b4:13:
                    39:83:7b:7e:62:58:a3:ac:7b:cc:77:c2:e3:c8:6e:
                    ab:b3:a0:8f:51:d5:2d:94:e6:f5:94:c2:3e:b8:03:
                    63:a9:e5:3e:41:40:bc:96:95:a3:fe:3e:64:7f:36:
                    1e:c1:1d:e6:70:49:4a:7d:5d:54:21:0e:6c:7d:0f:
                    1b:a7:41:24:da:6d:70:90:84:55:a9:3a:1c:7c:27:
                    7c:13:82:33:3a:8f:37:ee:f4:47:5e:e3:1c:5b:2d:
                    73:56:84:75:ce:77:e9:73:98:b0:62:08:48:e8:82:
                    c5:45:11:7c:10:f5:31:60:8c:0f:3b:c6:20:51:21:
                    30:23:d4:b6:b3:d9:91:e8:9f:64:e2:49:0e:61:a3:
                    66:89:5a:4f:10:e6:dd:71:00:88:0e:e3:62:e3:6e:
                    78:12:d4:ea:92:5c:82:0b:75:c0:cd:cb:99:5b:88:
                    5d:b1:71:44:65:e1:fc:b5:f3:aa:1f:11:f1:84:69:
                    55:bb:7b:ec:b7:07:cf:28:1b:0e:53:4b:4d:5b:f1:
                    9a:f3:56:c8:b3:5f:9f:06:65:58:45:cd:22:34:cf:
                    60:59:ce:b8:13:2c:ab:b3:33:a8:1d:e9:53:e9:55:
                    73:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AE:B1:0C:8E:33:08:35:FF:94:6C:48:26:72:A5:D9:94:55:3D:45
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a2:07:a8:e5:55:b4:94:7c:a8:51:35:0e:a7:2f:6c:39:0b:
         1f:46:bb:83:09:57:28:4c:7f:c9:85:4c:1f:8b:cc:25:17:62:
         6f:88:61:e0:c5:0b:0f:6f:44:98:42:69:f9:8d:07:97:ac:ec:
         a5:42:1c:57:a3:e4:47:47:10:3c:0a:2a:9f:08:c9:8b:d0:10:
         e5:d5:f0:cb:ef:23:c1:5d:32:8b:2b:34:88:ef:0e:da:a7:7d:
         bf:ba:4b:e3:c1:a2:6f:f3:c8:54:b8:3d:c9:36:78:05:d5:4b:
         7c:cd:cb:76:40:97:ed:99:fd:bc:14:af:b3:eb:bf:d6:80:c3:
         1b:7e:87:af:60:1f:4e:7a:c7:af:fb:94:47:ca:53:09:83:2d:
         db:25:05:63:21:b3:18:98:b7:2c:04:07:04:99:08:3f:6b:6d:
         e0:22:b0:3b:f7:42:26:07:ac:89:8a:b8:6d:18:3b:07:ae:86:
         37:27:fa:aa:73:e0:67:9a:c5:75:c6:83:69:fb:2a:f8:45:8c:
         f8:e1:68:48:7a:8b:1e:db:6b:87:42:78:20:80:e8:29:ba:de:
         b3:49:49:c4:fb:93:fa:da:95:70:49:ae:64:9c:02:b3:1f:0b:
         c3:ad:7a:ef:49:e3:bf:ef:9b:71:c6:fc:7d:7c:4b:b7:0b:9d:
         e4:ca:76:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAbIJIAAlcNAP1ZNPM1kVSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNDVkYWNjODM3Nzk4YzNlNmNmMzFmNGQyNzk0NmEzM2Iw
ZGU2NjEwHhcNMjQwNjE1MDkwMDM3WhcNMjQwNjE2MDkwMDM3WjAzMTEwLwYDVQQD
Eyg3ZmFlYjEwYzhlMzMwODM1ZmY5NDZjNDgyNjcyYTVkOTk0NTUzZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tdRV2n0cuElfEKHCembKiT2Q628
okEnYSCatBM5g3t+YlijrHvMd8LjyG6rs6CPUdUtlOb1lMI+uANjqeU+QUC8lpWj
/j5kfzYewR3mcElKfV1UIQ5sfQ8bp0Ek2m1wkIRVqTocfCd8E4IzOo837vRHXuMc
Wy1zVoR1znfpc5iwYghI6ILFRRF8EPUxYIwPO8YgUSEwI9S2s9mR6J9k4kkOYaNm
iVpPEObdcQCIDuNi4254EtTqklyCC3XAzcuZW4hdsXFEZeH8tfOqHxHxhGlVu3vs
twfPKBsOU0tNW/Ga81bIs1+fBmVYRc0iNM9gWc64EyyrszOoHelT6VVzdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+usQyOMwg1/5RsSCZypdmUVT1FMB8GA1UdIwQY
MBaAFBBF2syDd5jD5s8x9NJ5RqM7DeZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEt
OWMxNzRlNTNlNGZlLzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEtOWMxNzRlNTNlNGZl
LzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKIHqOVV
tJR8qFE1DqcvbDkLH0a7gwlXKEx/yYVMH4vMJRdib4hh4MULD29EmEJp+Y0Hl6zs
pUIcV6PkR0cQPAoqnwjJi9AQ5dXwy+8jwV0yiys0iO8O2qd9v7pL48Gib/PIVLg9
yTZ4BdVLfM3LdkCX7Zn9vBSvs+u/1oDDG36Hr2AfTnrHr/uUR8pTCYMt2yUFYyGz
GJi3LAQHBJkIP2tt4CKwO/dCJgesiYq4bRg7B66GNyf6qnPgZ5rFdcaDafsq+EWM
+OFoSHqLHttrh0J4IIDoKbres0lJxPuT+tqVcEmuZJwCsx8Lw61670njv++bccb8
fXxLtwud5Mp22w==
-----END CERTIFICATE-----
Generated at Sat Jun 15 15:18:56 2024 by rpki-client on console-ams.rpki-client.org