Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File:                     1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier:          iEPQ6I+bT/zIxT0GZydb0ipwIX8N6a6PB9DasZAvsms=
Subject key identifier:   75:54:93:7B:59:D7:65:DB:CD:2A:04:24:49:85:95:6D:AC:63:FE:9C
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer:       /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial:       018F8F04042BA0B96BA5FCCE7BB02B83E48C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number:          069B
Signing time:             Sun 19 May 2024 04:02:36 +0000
Manifest this update:     Sun 19 May 2024 04:02:36 +0000
Manifest next update:     Mon 20 May 2024 04:02:36 +0000
Files and hashes:         1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: rbMrnbB4iUwOaTqPfm62JRJsRnLwvdMUC1xDVw+FieQ=)
                          2: oRUxzVoH-ecaccAJbQnwtoBC8Jk.roa (hash: 3kWzs7eGQFJBiG0oD7/nKwti5bqZvVRKsEMCom1QtY8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:04:04:2b:a0:b9:6b:a5:fc:ce:7b:b0:2b:83:e4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
        Validity
            Not Before: May 19 04:02:36 2024 GMT
            Not After : May 20 04:02:36 2024 GMT
        Subject: CN=7554937b59d765dbcd2a04244985956dac63fe9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:67:9f:80:33:92:ea:2f:b0:02:d8:59:2b:32:
                    11:76:40:67:ed:e6:4e:43:62:49:67:af:52:73:19:
                    5c:f0:10:bf:a3:f8:89:5f:59:f0:4e:ca:4f:ed:54:
                    a0:b6:ca:05:95:7e:20:d8:f3:d1:ae:b7:c9:44:28:
                    4e:9b:e4:38:3c:54:d0:a0:68:95:fb:da:cf:58:9b:
                    0e:d2:61:f1:c4:71:cc:89:0c:36:ee:8e:0e:a0:c2:
                    b3:f0:b5:f7:22:b2:c6:bf:4c:1e:fa:a4:7a:71:57:
                    60:f6:8d:4a:94:ed:0d:f7:67:fc:16:71:d6:74:04:
                    7e:cb:23:e5:63:a4:f4:0a:82:e1:03:e5:da:80:18:
                    f4:20:60:f2:24:14:02:cd:87:c9:d5:03:74:ac:ac:
                    3f:ab:fa:5e:93:c6:20:8a:32:6e:61:ab:b2:89:79:
                    f8:15:fd:ad:a9:66:23:e1:b1:24:e1:b7:7b:da:9e:
                    90:c3:94:8a:cc:20:51:42:b1:83:c0:d0:5c:26:af:
                    cb:74:c8:66:25:3d:2d:df:a5:41:75:c2:ae:d5:de:
                    09:6b:83:4f:84:f7:7d:95:3d:b7:9e:86:b1:9e:4d:
                    4c:71:3b:54:fb:b5:99:ae:b0:b2:5f:4e:32:08:69:
                    19:5e:15:49:7b:c3:f3:e5:c5:29:c7:59:fe:0c:91:
                    23:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:54:93:7B:59:D7:65:DB:CD:2A:04:24:49:85:95:6D:AC:63:FE:9C
            X509v3 Authority Key Identifier:
                keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5a:ee:1d:ce:44:67:cb:e0:c4:1c:76:2a:44:57:7b:ba:7e:
         96:d3:27:4c:80:1c:44:50:04:8a:b0:7d:c1:67:ad:f3:64:0a:
         13:85:aa:01:e8:70:b0:50:4d:d8:21:0d:15:a0:14:1a:34:01:
         02:d4:0f:1f:79:95:0a:c5:8f:eb:e0:62:21:32:f7:f3:2d:58:
         be:0f:2c:22:67:13:31:f5:9e:b1:c2:98:f9:9b:a0:ec:08:f2:
         04:56:c8:96:a8:73:90:79:09:4d:05:dc:79:de:66:62:5d:b2:
         cf:32:44:e4:06:a5:65:59:d6:88:13:46:89:59:6d:4e:bf:55:
         d9:3a:57:7c:9c:ec:1d:91:77:f2:5d:0b:6a:a0:d2:0a:b2:47:
         3a:52:61:af:94:ab:78:7b:19:eb:f7:2a:69:d2:79:f3:c6:27:
         a7:36:c9:8c:30:44:b1:40:f9:73:4e:a1:62:de:20:e6:b1:a9:
         f7:5a:3e:b9:77:02:96:1b:a5:ad:8c:73:89:f2:84:00:c7:f7:
         61:e2:a9:40:57:61:24:61:bd:07:0f:a6:31:65:cd:7b:cb:66:
         14:ad:58:f2:6a:db:b1:9a:7c:2b:1a:39:64:ed:39:cd:e1:de:
         83:58:ea:1a:4e:07:74:00:e1:2c:0f:d3:7a:19:33:22:54:69:
         44:23:b7:9c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY+PBAQroLlrpfzOe7Arg+SMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWU5ODgxYmYxMTIwOThhMmJmZDQ5YTBiY2ZmZGNjY2U3
YmMyMDgwHhcNMjQwNTE5MDQwMjM2WhcNMjQwNTIwMDQwMjM2WjAzMTEwLwYDVQQD
Eyg3NTU0OTM3YjU5ZDc2NWRiY2QyYTA0MjQ0OTg1OTU2ZGFjNjNmZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGefgDOS6i+wAthZKzIRdkBn7eZO
Q2JJZ69Scxlc8BC/o/iJX1nwTspP7VSgtsoFlX4g2PPRrrfJRChOm+Q4PFTQoGiV
+9rPWJsO0mHxxHHMiQw27o4OoMKz8LX3IrLGv0we+qR6cVdg9o1KlO0N92f8FnHW
dAR+yyPlY6T0CoLhA+XagBj0IGDyJBQCzYfJ1QN0rKw/q/pek8YgijJuYauyiXn4
Ff2tqWYj4bEk4bd72p6Qw5SKzCBRQrGDwNBcJq/LdMhmJT0t36VBdcKu1d4Ja4NP
hPd9lT23noaxnk1McTtU+7WZrrCyX04yCGkZXhVJe8Pz5cUpx1n+DJEj8QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHVUk3tZ12XbzSoEJEmFlW2sY/6cMB8GA1UdIwQY
MBaAFPiumIG/ESCYor/UmgvP/czOe8IIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LNllnYjhSSUppaXY5U2FDOF85ek01N3dnZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNWQ5ZjU3LTBmMTAtNGUxNC1iNGFm
LTI1YTE1YTUyNGY4Ny8xLzEtSzZZZ2I4UklKaWl2OVNhQzhfOXpNNTd3Z2cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE0LzVkOWY1Ny0wZjEwLTRlMTQtYjRhZi0yNWExNWE1MjRm
ODcvMS8xLUs2WWdiOFJJSmlpdjlTYUM4Xzl6TTU3d2dnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlru
Hc5EZ8vgxBx2KkRXe7p+ltMnTIAcRFAEirB9wWet82QKE4WqAehwsFBN2CENFaAU
GjQBAtQPH3mVCsWP6+BiITL38y1Yvg8sImcTMfWescKY+Zug7AjyBFbIlqhzkHkJ
TQXced5mYl2yzzJE5AalZVnWiBNGiVltTr9V2TpXfJzsHZF38l0LaqDSCrJHOlJh
r5SreHsZ6/cqadJ588YnpzbJjDBEsUD5c06hYt4g5rGp91o+uXcClhulrYxzifKE
AMf3YeKpQFdhJGG9Bw+mMWXNe8tmFK1Y8mrbsZp8Kxo5ZO05zeHeg1jqGk4HdADh
LA/TehkzIlRpRCO3nA==
-----END CERTIFICATE-----
Generated at Sun May 19 06:19:16 2024 by rpki-client on console-ams.rpki-client.org