Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File:                     6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier:          HyUYjwVkj2YGgIGAb479gYFmHeOg2+8bxo98ezA9h3Q=
Subject key identifier:   0A:42:0C:25:ED:B8:C7:FD:13:F7:2B:7A:97:B4:3A:AD:6E:5E:E4:8D
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer:       /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial:       018F355168D5313AFB09EE1985009B5A0233
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number:          114C
Signing time:             Wed 01 May 2024 18:01:18 +0000
Manifest this update:     Wed 01 May 2024 18:01:18 +0000
Manifest next update:     Thu 02 May 2024 18:01:18 +0000
Files and hashes:         1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: XvdS5c5K2vmV1MMHb9BZr3KGaGqha65cYxbLAjN3g7w=)
                          2: lIQeK-SbHXSpZYYjlCvFF6fPDqU.roa (hash: c8h6/eLfYLAQPs+1s8qkelwZiRb7y7lnNNRDSGbRheQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:51:68:d5:31:3a:fb:09:ee:19:85:00:9b:5a:02:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
        Validity
            Not Before: May  1 18:01:18 2024 GMT
            Not After : May  2 18:01:18 2024 GMT
        Subject: CN=0a420c25edb8c7fd13f72b7a97b43aad6e5ee48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:b5:37:5d:4c:09:5b:cd:57:15:a9:03:4c:
                    8a:f7:02:64:11:f7:a0:d9:2b:aa:d4:c2:aa:cd:59:
                    a4:ee:d0:cc:32:73:e1:2e:f2:66:0d:53:ee:d7:3e:
                    22:de:bb:5b:89:d5:7b:29:e2:85:9c:26:9c:ad:c9:
                    15:8f:8a:95:86:51:e5:8b:45:0b:be:78:e9:df:28:
                    e3:c7:3d:32:16:4d:76:c9:a0:6f:2d:3d:81:ad:05:
                    d6:92:6a:32:03:be:75:e5:77:22:88:7a:3c:55:4c:
                    5c:28:46:b1:d5:65:ef:4a:0a:3e:94:28:b9:08:7f:
                    8f:8a:c6:9f:eb:0c:59:89:64:85:5f:e8:7e:b7:c1:
                    6d:64:9b:3e:7e:14:28:4d:38:93:17:c4:60:94:ff:
                    f0:e3:74:00:f2:cb:af:8b:94:bf:00:b2:33:a5:ee:
                    c1:68:90:4b:6b:c6:00:3b:8c:0e:83:8d:f9:70:5a:
                    cd:5f:fd:f9:de:40:86:dd:70:d2:e6:97:1b:8d:ac:
                    0d:eb:ac:30:5c:27:fe:22:cd:1f:a9:6c:7a:7c:33:
                    d4:93:48:8b:64:ac:86:fb:f9:a2:ed:69:21:0b:36:
                    22:ec:b0:ca:ab:ac:cb:2f:a2:eb:d2:43:23:1f:b9:
                    b0:f8:ac:84:bb:95:d5:aa:3f:9b:8b:4d:21:b1:02:
                    b6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:42:0C:25:ED:B8:C7:FD:13:F7:2B:7A:97:B4:3A:AD:6E:5E:E4:8D
            X509v3 Authority Key Identifier:
                keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c5:11:eb:6b:b9:19:c2:ba:47:26:69:5d:2a:e5:dd:7f:f7:
         a0:2d:96:ab:1f:51:be:ea:b6:c2:84:ca:e4:54:49:f5:4e:f3:
         76:2a:fd:75:8c:7d:5e:3d:78:21:f4:43:3c:08:ac:cb:d2:ed:
         b3:a6:a5:cb:3d:43:64:11:88:c4:00:b7:45:72:25:e1:f4:37:
         cb:5d:8d:7d:dc:03:e5:39:ff:90:b0:f6:e6:31:18:d2:23:a3:
         21:76:6e:57:97:07:d6:0a:c1:9b:b4:05:66:55:16:f8:1c:bb:
         f8:1a:c2:7e:d2:b8:ac:25:76:13:02:5e:c1:40:28:e5:34:60:
         ee:d7:1c:6a:a1:6a:ca:00:88:99:28:c1:f3:34:24:58:e5:5d:
         0e:43:ef:5e:7f:29:88:8a:eb:5e:ce:d8:82:52:ba:0f:dd:ac:
         2d:58:cd:d3:a5:ac:2e:68:2a:d5:d3:92:56:f7:8c:48:1b:aa:
         f0:b2:38:c3:3a:91:6d:08:7e:c1:e4:5a:bb:dd:f8:5c:91:74:
         8f:05:b7:7f:79:10:e3:9e:7a:c3:56:f7:b6:d2:fa:8e:1a:47:
         cb:cd:9b:64:50:f6:6e:04:b0:c3:54:6a:82:76:d5:d9:5e:6e:
         28:8c:e9:0d:8e:fe:27:c4:dd:74:f4:b4:49:50:9f:e1:d0:bd:
         60:dd:2d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY81UWjVMTr7Ce4ZhQCbWgIzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMGYwOGQ0ZWUxZjk0Zjk4NDQ5M2I0NjdiZDhhY2EyYWRm
YTI4NjYwHhcNMjQwNTAxMTgwMTE4WhcNMjQwNTAyMTgwMTE4WjAzMTEwLwYDVQQD
EygwYTQyMGMyNWVkYjhjN2ZkMTNmNzJiN2E5N2I0M2FhZDZlNWVlNDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10e1N11MCVvNVxWpA0yK9wJkEfeg
2Suq1MKqzVmk7tDMMnPhLvJmDVPu1z4i3rtbidV7KeKFnCacrckVj4qVhlHli0UL
vnjp3yjjxz0yFk12yaBvLT2BrQXWkmoyA7515XciiHo8VUxcKEax1WXvSgo+lCi5
CH+Pisaf6wxZiWSFX+h+t8FtZJs+fhQoTTiTF8RglP/w43QA8suvi5S/ALIzpe7B
aJBLa8YAO4wOg435cFrNX/353kCG3XDS5pcbjawN66wwXCf+Is0fqWx6fDPUk0iL
ZKyG+/mi7WkhCzYi7LDKq6zLL6Lr0kMjH7mw+KyEu5XVqj+bi00hsQK2fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApCDCXtuMf9E/crepe0Oq1uXuSNMB8GA1UdIwQY
MBaAFOoPCNTuH5T5hEk7RnvYrKKt+ihmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUt
MmVmYjQ2MWZkNDEzLzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82N2ViNDktZmYwOC00ZWE0LWJiOWUtMmVmYjQ2MWZkNDEz
LzEvNmc4STFPNGZsUG1FU1R0R2U5aXNvcTM2S0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsUR62u5
GcK6RyZpXSrl3X/3oC2Wqx9Rvuq2woTK5FRJ9U7zdir9dYx9Xj14IfRDPAisy9Lt
s6alyz1DZBGIxAC3RXIl4fQ3y12NfdwD5Tn/kLD25jEY0iOjIXZuV5cH1grBm7QF
ZlUW+By7+BrCftK4rCV2EwJewUAo5TRg7tccaqFqygCImSjB8zQkWOVdDkPvXn8p
iIrrXs7YglK6D92sLVjN06WsLmgq1dOSVveMSBuq8LI4wzqRbQh+weRau934XJF0
jwW3f3kQ4556w1b3ttL6jhpHy82bZFD2bgSww1RqgnbV2V5uKIzpDY7+J8TddPS0
SVCf4dC9YN0tWg==
-----END CERTIFICATE-----
Generated at Wed May 1 22:31:17 2024 by rpki-client on console-fra.rpki-client.org