Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
File:                     43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json)
Hash identifier:          8HPKSw9a1HJAE5BzkvUBzJhA1YzBXKVXSZ2+EDyrdCs=
Subject key identifier:   0F:9B:A0:8B:10:B5:7D:E9:DC:5C:01:7C:63:24:B3:13:14:78:76:56
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Certificate issuer:       /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial:       019049435F6DE618DCD0B9C4B71720C85900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
Manifest number:          116B
Signing time:             Mon 24 Jun 2024 08:01:10 +0000
Manifest this update:     Mon 24 Jun 2024 08:01:10 +0000
Manifest next update:     Tue 25 Jun 2024 08:01:10 +0000
Files and hashes:         1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: mreSEOpvwJ2XK2MVirqes5skybJU4QI4Rnqd/RcDdXM=)
                          2: bcnXeI3HPbT9tqeLu2MyQifRtNA.roa (hash: xyLl5upVi7OYqR9KMSg2D+sX2GokIKwYHuQj3xDQIEY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 08:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:43:5f:6d:e6:18:dc:d0:b9:c4:b7:17:20:c8:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
        Validity
            Not Before: Jun 24 08:01:10 2024 GMT
            Not After : Jun 25 08:01:10 2024 GMT
        Subject: CN=0f9ba08b10b57de9dc5c017c6324b31314787656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0c:02:9f:5c:18:96:74:ce:e0:19:4e:fc:2a:
                    47:bf:2a:00:bd:d8:2a:91:08:c8:76:25:ae:13:f0:
                    41:2b:6a:5a:83:d8:27:9a:fa:ef:ea:be:29:8b:e9:
                    b4:ed:07:86:24:64:d8:c4:be:db:94:78:d5:30:1f:
                    88:ff:f9:d0:52:5c:12:fb:bf:fc:a3:99:59:72:f9:
                    e3:1b:c2:8c:19:3a:3b:85:26:3e:eb:25:db:5d:a6:
                    f3:4b:5d:32:01:9f:9b:f4:06:17:aa:ab:0b:88:44:
                    cc:20:eb:fe:b5:8d:76:59:05:a5:6f:93:0a:40:0e:
                    d0:9c:05:cc:d9:e1:c5:d7:2f:51:ae:38:42:21:c6:
                    d8:5e:55:45:5f:82:b8:16:e2:1c:f4:d6:fe:6a:23:
                    64:1e:19:a8:01:85:b4:83:b6:f5:8e:14:40:73:5e:
                    37:80:bb:c4:81:c3:78:7a:8c:46:32:09:fe:8d:bf:
                    af:db:73:e2:df:d7:47:0b:4f:77:27:3b:2f:6d:41:
                    a8:a0:c2:92:85:d5:5e:e9:f2:87:86:23:6c:06:4c:
                    a6:48:c5:87:b5:41:ab:1b:9d:19:bd:76:a6:9c:8a:
                    c8:9e:cc:07:96:bb:b2:29:eb:09:7b:53:2e:77:3a:
                    aa:ee:4f:3a:14:aa:bf:fb:a0:15:dc:16:d1:5a:dd:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9B:A0:8B:10:B5:7D:E9:DC:5C:01:7C:63:24:B3:13:14:78:76:56
            X509v3 Authority Key Identifier:
                keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:16:8d:17:b3:6b:ea:a7:14:a7:36:b0:10:3c:ae:68:7d:5b:
         2f:c1:cd:44:90:be:a8:41:d8:d2:1c:f6:36:ca:6f:d3:bc:e2:
         1b:1e:c6:e2:f3:21:1b:5f:68:54:6b:b9:72:ce:cd:d4:53:68:
         7c:e0:82:94:53:00:c2:51:71:5d:00:56:88:d7:ee:b0:b4:85:
         d0:a8:2f:ca:77:a7:3d:4f:10:f2:7a:76:14:3a:bd:f3:21:ea:
         9e:0d:8e:28:10:91:48:eb:19:a2:ae:d9:a1:39:a6:af:27:c2:
         3b:fa:58:7a:37:77:cc:12:2d:05:05:c3:39:d9:11:b1:23:4f:
         ab:47:06:76:7e:eb:1d:bd:dc:01:08:ba:b6:49:3e:57:c2:d3:
         d9:65:2a:37:d3:80:bb:c5:ef:52:7a:c8:27:3a:e3:f2:6b:f4:
         8f:30:8c:2d:fc:52:cd:83:16:22:c8:98:d6:bf:e4:19:7a:72:
         88:46:ab:10:b1:77:ff:9c:b5:ad:a2:a2:de:c9:8d:b6:a8:d7:
         8e:70:cd:13:33:ac:e2:69:c1:f5:59:7f:6c:44:de:58:b1:65:
         6e:ca:67:25:57:7b:19:2e:fd:d3:45:44:33:11:6b:d7:7a:a7:
         73:f2:d4:d8:95:10:94:d7:d3:c6:c9:04:47:1e:7e:56:41:b9:
         33:f8:ab:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBJQ19t5hjc0LnEtxcgyFkAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzhhOTRiOTk2NGVhNWU5ZjhiMDU5Mzg3MDJiYTU4MzE2
YjUwMGYwHhcNMjQwNjI0MDgwMTEwWhcNMjQwNjI1MDgwMTEwWjAzMTEwLwYDVQQD
EygwZjliYTA4YjEwYjU3ZGU5ZGM1YzAxN2M2MzI0YjMxMzE0Nzg3NjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwwCn1wYlnTO4BlO/CpHvyoAvdgq
kQjIdiWuE/BBK2pag9gnmvrv6r4pi+m07QeGJGTYxL7blHjVMB+I//nQUlwS+7/8
o5lZcvnjG8KMGTo7hSY+6yXbXabzS10yAZ+b9AYXqqsLiETMIOv+tY12WQWlb5MK
QA7QnAXM2eHF1y9RrjhCIcbYXlVFX4K4FuIc9Nb+aiNkHhmoAYW0g7b1jhRAc143
gLvEgcN4eoxGMgn+jb+v23Pi39dHC093JzsvbUGooMKShdVe6fKHhiNsBkymSMWH
tUGrG50ZvXamnIrInswHlruyKesJe1Mudzqq7k86FKq/+6AV3BbRWt3NdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+boIsQtX3p3FwBfGMksxMUeHZWMB8GA1UdIwQY
MBaAFON4qUuZZOpen4sFk4cCulgxa1APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YTVlOGMtZDgzMS00MWUzLTg0ZTUt
ZjQyMTc2Y2QwNDQ1LzEvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy82YTVlOGMtZDgzMS00MWUzLTg0ZTUtZjQyMTc2Y2QwNDQ1
LzEvNDNpcFM1bGs2bDZmaXdXVGh3SzZXREZyVUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxaNF7Nr
6qcUpzawEDyuaH1bL8HNRJC+qEHY0hz2Nspv07ziGx7G4vMhG19oVGu5cs7N1FNo
fOCClFMAwlFxXQBWiNfusLSF0KgvynenPU8Q8np2FDq98yHqng2OKBCRSOsZoq7Z
oTmmryfCO/pYejd3zBItBQXDOdkRsSNPq0cGdn7rHb3cAQi6tkk+V8LT2WUqN9OA
u8XvUnrIJzrj8mv0jzCMLfxSzYMWIsiY1r/kGXpyiEarELF3/5y1raKi3smNtqjX
jnDNEzOs4mnB9Vl/bETeWLFlbspnJVd7GS7900VEMxFr13qnc/LU2JUQlNfTxskE
Rx5+VkG5M/irMg==
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:05:57 2024 by rpki-client on console-ams.rpki-client.org