Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
File:                     bOrnoCiJYKda-M6A54iFQ8f3fNc.mft (raw, json)
Hash identifier:          vO+PZ1Pc6n+HzzqnI3fTciTx+THxH2aJz/syd1TQ7go=
Subject key identifier:   96:9C:C5:B7:C8:F4:D3:7E:18:37:65:D1:9B:B2:A8:09:B3:F6:1E:A1
Authority key identifier: 6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
Certificate issuer:       /CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Certificate serial:       018F88242AAD273AA7AA96E479A30C6E41BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
Manifest number:          0E86
Signing time:             Fri 17 May 2024 20:00:22 +0000
Manifest this update:     Fri 17 May 2024 20:00:22 +0000
Manifest next update:     Sat 18 May 2024 20:00:22 +0000
Files and hashes:         1: bOrnoCiJYKda-M6A54iFQ8f3fNc.crl (hash: bFDwHwfm7PjSTSrazsS7cSNxQU5zkxjx7j8lVIueD7Y=)
                          2: m3yYaT-crvkasFnHS9hXwjRYX8M.roa (hash: XCPA6PCZpMdu7Fc634qKWq+ATc8ml9C/CIlkC61LfGU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:2a:ad:27:3a:a7:aa:96:e4:79:a3:0c:6e:41:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
        Validity
            Not Before: May 17 20:00:22 2024 GMT
            Not After : May 18 20:00:22 2024 GMT
        Subject: CN=969cc5b7c8f4d37e183765d19bb2a809b3f61ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:f4:a1:5d:75:af:37:89:2a:53:be:3e:b6:
                    c0:83:46:e2:fa:e0:ed:f6:3c:9f:66:1d:9e:ad:b8:
                    a5:18:0a:2a:02:7a:d8:c2:2f:22:08:e8:7f:de:57:
                    1b:9b:db:46:ef:57:87:db:02:81:66:df:f7:07:63:
                    84:36:7b:da:6f:69:56:3b:91:f5:63:9e:1b:5c:2e:
                    bc:17:2f:e9:b1:cf:54:01:e9:5d:10:16:ba:1f:65:
                    a3:9b:65:ef:e5:cc:fb:f8:90:57:10:87:e8:2b:7f:
                    58:20:17:26:13:43:f6:e7:41:d0:75:73:d6:08:b8:
                    19:ed:16:0b:6d:15:b3:8c:31:60:bf:cd:84:3e:68:
                    7b:8d:5e:96:d2:c8:65:d1:52:73:1b:60:6b:ed:0f:
                    c3:57:86:f4:13:36:e3:90:5f:c6:2d:bf:25:c5:64:
                    5e:72:b3:d1:c5:a2:ff:bc:fc:76:2f:0d:06:68:f1:
                    46:ef:10:b4:9a:bc:c6:7d:44:1d:05:8e:d7:25:11:
                    3f:f0:3e:da:d8:1f:e5:b4:4e:df:d6:12:95:97:49:
                    f5:af:5d:0f:0a:fa:92:6b:b7:e6:9f:00:8c:38:19:
                    d8:cd:d7:65:75:7c:53:91:d6:18:27:d6:df:7d:10:
                    83:a0:aa:23:17:76:63:76:81:a8:67:b0:02:85:95:
                    4a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9C:C5:B7:C8:F4:D3:7E:18:37:65:D1:9B:B2:A8:09:B3:F6:1E:A1
            X509v3 Authority Key Identifier:
                keyid:6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e7:5d:08:e3:f4:94:1f:a7:95:de:d7:ed:3c:b7:dd:ff:1f:
         88:9d:bd:a2:3b:9d:63:74:ee:7d:7f:a2:39:23:0e:fc:e8:bc:
         e2:a5:0d:0c:00:70:cf:72:10:b4:43:b9:41:72:3c:00:86:37:
         5f:57:2b:63:da:42:ea:30:b9:36:b3:80:f7:e3:9e:f1:cb:61:
         b6:5a:66:e6:f7:e2:c2:dd:d3:c1:35:f0:96:d9:78:c2:21:59:
         5c:73:52:06:44:75:e9:66:62:9d:ec:67:34:bc:c1:a3:05:3e:
         a2:55:de:83:72:34:a6:5f:28:56:65:b0:62:76:f9:d4:ac:d3:
         dc:71:ec:c4:96:5b:ed:d5:5f:fa:68:63:ad:22:16:2b:d9:c4:
         25:11:57:e4:a0:a6:c8:c0:b9:4b:a5:a8:b2:9e:83:19:f5:ff:
         85:63:f8:fa:33:45:2b:f2:b2:44:6c:a0:a0:38:67:90:43:9f:
         ea:e8:13:a1:cc:8c:10:33:f1:86:75:42:b1:15:fb:57:1c:33:
         54:6c:98:8c:04:d5:3b:09:e1:01:2c:ed:df:6f:ba:9e:be:8c:
         f3:a7:9b:92:d7:ba:7c:c4:73:5c:24:e3:83:17:1b:07:bf:d3:
         c7:10:d3:b3:85:37:87:18:e3:a0:66:6a:2a:43:f5:ac:b8:00:
         a8:e9:e9:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJCqtJzqnqpbkeaMMbkG8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZWFlN2EwMjg4OTYwYTc1YWY4Y2U4MGU3ODg4NTQzYzdm
NzdjZDcwHhcNMjQwNTE3MjAwMDIyWhcNMjQwNTE4MjAwMDIyWjAzMTEwLwYDVQQD
Eyg5NjljYzViN2M4ZjRkMzdlMTgzNzY1ZDE5YmIyYTgwOWIzZjYxZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/L0oV11rzeJKlO+PrbAg0bi+uDt
9jyfZh2erbilGAoqAnrYwi8iCOh/3lcbm9tG71eH2wKBZt/3B2OENnvab2lWO5H1
Y54bXC68Fy/psc9UAeldEBa6H2Wjm2Xv5cz7+JBXEIfoK39YIBcmE0P250HQdXPW
CLgZ7RYLbRWzjDFgv82EPmh7jV6W0shl0VJzG2Br7Q/DV4b0EzbjkF/GLb8lxWRe
crPRxaL/vPx2Lw0GaPFG7xC0mrzGfUQdBY7XJRE/8D7a2B/ltE7f1hKVl0n1r10P
CvqSa7fmnwCMOBnYzddldXxTkdYYJ9bffRCDoKojF3ZjdoGoZ7AChZVK5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJacxbfI9NN+GDdl0ZuyqAmz9h6hMB8GA1UdIwQY
MBaAFGzq56AoiWCnWvjOgOeIhUPH93zXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83MDhmNzYtNTZlZi00MzNmLTllYWMt
NGE0YTNiMDQwOGE2LzEvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS83MDhmNzYtNTZlZi00MzNmLTllYWMtNGE0YTNiMDQwOGE2
LzEvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOddCOP0
lB+nld7X7Ty33f8fiJ29ojudY3TufX+iOSMO/Oi84qUNDABwz3IQtEO5QXI8AIY3
X1crY9pC6jC5NrOA9+Oe8cthtlpm5vfiwt3TwTXwltl4wiFZXHNSBkR16WZinexn
NLzBowU+olXeg3I0pl8oVmWwYnb51KzT3HHsxJZb7dVf+mhjrSIWK9nEJRFX5KCm
yMC5S6Wosp6DGfX/hWP4+jNFK/KyRGygoDhnkEOf6ugTocyMEDPxhnVCsRX7Vxwz
VGyYjATVOwnhASzt32+6nr6M86ebkte6fMRzXCTjgxcbB7/TxxDTs4U3hxjjoGZq
KkP1rLgAqOnp3A==
-----END CERTIFICATE-----
Generated at Fri May 17 21:11:13 2024 by rpki-client on console-ams.rpki-client.org