Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
File:                     1-WoJAryYU7de0tsZaD7i86ImFUA.mft (raw, json)
Hash identifier:          Cz6F7CKd7xy7OLDyQOCJ0E1fmIHX/Hek4/vOmEw3C0U=
Subject key identifier:   07:BF:87:72:FC:25:0B:94:DF:E3:16:FC:B6:8F:34:48:1C:35:62:AD
Authority key identifier: F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40
Certificate issuer:       /CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
Certificate serial:       01901DECD6E6B073DFA74943AC2847FD6FA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
Manifest number:          023F
Signing time:             Sat 15 Jun 2024 22:02:59 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:59 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:59 +0000
Files and hashes:         1: 1-WoJAryYU7de0tsZaD7i86ImFUA.crl (hash: Rkf1VpRp5qznDwS8crMI69dxJbxWYVUeZEYsuKg5VKw=)
                          2: 25_2qjUSRK1c7GdgIbhxfH_w-nI.roa (hash: 9bBYXql/TDjp1wmMm+lHEG5kMcML3ydVa9rdQ80jLdE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:d6:e6:b0:73:df:a7:49:43:ac:28:47:fd:6f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
        Validity
            Not Before: Jun 15 22:02:59 2024 GMT
            Not After : Jun 16 22:02:59 2024 GMT
        Subject: CN=07bf8772fc250b94dfe316fcb68f34481c3562ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:ba:e4:01:c1:e9:00:a4:39:fd:66:bc:f5:
                    f0:f1:86:be:6d:e5:23:be:a9:36:0c:c9:e8:84:9d:
                    27:f5:78:63:34:bf:bd:ac:91:e6:e2:81:ee:78:c2:
                    bf:48:be:c0:14:2c:45:c1:e0:a9:08:20:e3:12:1e:
                    96:37:2c:17:97:36:8a:6d:28:14:66:69:df:fe:3c:
                    6b:9e:41:95:c9:98:31:03:92:73:ba:ad:01:14:31:
                    83:6a:3e:07:43:7d:ee:31:42:d7:8f:1b:b2:47:91:
                    b2:16:06:cc:11:76:82:e2:b0:88:ec:9e:83:b7:72:
                    be:38:5f:6c:7a:de:5c:35:de:06:fe:72:c7:50:67:
                    28:7f:3a:ea:2b:3c:67:99:ef:d4:c8:d7:b4:f6:a7:
                    10:9b:bd:be:5c:45:4b:6f:b3:fd:7f:df:56:f0:90:
                    ca:0b:f2:f9:61:38:4d:7c:51:45:7d:31:19:d1:2f:
                    94:69:17:70:6f:12:f2:f1:3f:29:a0:1c:0b:50:6d:
                    2f:46:22:40:61:18:3a:17:13:e2:ba:e0:d1:6b:06:
                    66:84:4d:2c:61:41:82:cd:1b:1b:2c:43:1c:00:a5:
                    c0:1b:1e:88:42:47:68:ed:7f:3b:22:c0:c6:5c:e8:
                    d7:33:0a:c7:66:12:00:c6:1a:30:1f:4b:61:8f:76:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BF:87:72:FC:25:0B:94:DF:E3:16:FC:B6:8F:34:48:1C:35:62:AD
            X509v3 Authority Key Identifier:
                keyid:F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:27:2f:9a:e0:c9:42:0e:a3:08:fa:fc:26:3a:4f:5a:5c:b3:
         ac:3f:af:32:17:20:c2:e3:74:eb:93:22:84:9b:db:47:55:83:
         7f:03:aa:02:94:28:ed:6d:c0:75:f3:6f:46:01:66:b8:64:46:
         b9:a6:8a:64:c1:5b:2d:44:c3:e3:91:ac:bc:ca:cc:a5:af:3d:
         cf:cd:49:4e:20:dd:e5:51:c5:4f:77:2e:d2:9a:6b:ac:f1:0a:
         bb:27:a9:67:4f:04:62:66:0f:38:2b:c5:51:b9:f9:5c:71:ea:
         5e:fd:14:1c:4f:4b:45:ff:fd:84:df:f9:01:d8:17:75:ec:53:
         43:68:23:5a:63:39:fb:45:39:d3:6b:06:1c:bc:f2:e1:d9:b8:
         de:76:6a:f2:68:a3:00:9f:84:30:2d:d9:3d:13:00:9f:32:3e:
         44:57:3c:7a:c4:85:57:83:0b:e2:e2:c2:35:e6:a4:fd:30:e1:
         d0:0e:51:6f:80:eb:2b:88:db:48:4f:5a:d2:a1:59:3e:56:54:
         0e:db:35:1d:6d:80:bb:0e:fd:9f:8a:af:a1:32:33:c7:2a:81:
         f2:3d:2e:be:91:e3:72:bf:70:67:92:62:8a:60:da:bd:6a:84:
         9d:b5:1c:76:57:bb:64:e5:36:f7:b6:4b:22:2e:18:53:34:56:
         d4:fe:08:31
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZAd7NbmsHPfp0lDrChH/W+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NmEwOTAyYmM5ODUzYjc1ZWQyZGIxOTY4M2VlMmYzYTIy
NjE1NDAwHhcNMjQwNjE1MjIwMjU5WhcNMjQwNjE2MjIwMjU5WjAzMTEwLwYDVQQD
EygwN2JmODc3MmZjMjUwYjk0ZGZlMzE2ZmNiNjhmMzQ0ODFjMzU2MmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUy65AHB6QCkOf1mvPXw8Ya+beUj
vqk2DMnohJ0n9XhjNL+9rJHm4oHueMK/SL7AFCxFweCpCCDjEh6WNywXlzaKbSgU
Zmnf/jxrnkGVyZgxA5Jzuq0BFDGDaj4HQ33uMULXjxuyR5GyFgbMEXaC4rCI7J6D
t3K+OF9set5cNd4G/nLHUGcofzrqKzxnme/UyNe09qcQm72+XEVLb7P9f99W8JDK
C/L5YThNfFFFfTEZ0S+UaRdwbxLy8T8poBwLUG0vRiJAYRg6FxPiuuDRawZmhE0s
YUGCzRsbLEMcAKXAGx6IQkdo7X87IsDGXOjXMwrHZhIAxhowH0thj3YaCQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAe/h3L8JQuU3+MW/LaPNEgcNWKtMB8GA1UdIwQY
MBaAFPlqCQK8mFO3XtLbGWg+4vOiJhVAMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Xb0pBcnlZVTdkZTB0c1phRDdpODZJbUZVQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvZWI2ODY2LWJiNjAtNGM2Zi1hMDBk
LWM0YTc3YzE5MmFmMC8xLzEtV29KQXJ5WVU3ZGUwdHNaYUQ3aTg2SW1GVUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2ZlL2ViNjg2Ni1iYjYwLTRjNmYtYTAwZC1jNGE3N2MxOTJh
ZjAvMS8xLVdvSkFyeVlVN2RlMHRzWmFEN2k4NkltRlVBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJicv
muDJQg6jCPr8JjpPWlyzrD+vMhcgwuN065MihJvbR1WDfwOqApQo7W3AdfNvRgFm
uGRGuaaKZMFbLUTD45GsvMrMpa89z81JTiDd5VHFT3cu0pprrPEKuyepZ08EYmYP
OCvFUbn5XHHqXv0UHE9LRf/9hN/5AdgXdexTQ2gjWmM5+0U502sGHLzy4dm43nZq
8mijAJ+EMC3ZPRMAnzI+RFc8esSFV4ML4uLCNeak/TDh0A5Rb4DrK4jbSE9a0qFZ
PlZUDts1HW2Auw79n4qvoTIzxyqB8j0uvpHjcr9wZ5JiimDavWqEnbUcdle7ZOU2
97ZLIi4YUzRW1P4IMQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:34 2024 by rpki-client on console-fra.rpki-client.org