Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft
File:                     6eWwFOVpGG-4SiAklUzMyckbHj8.mft (raw, json)
Hash identifier:          OoSK5ZTFde9gS+LuThQUbAoqylWfuIw8+2C0VNwyMtg=
Subject key identifier:   90:06:4A:D2:6D:1A:60:FB:AF:A6:97:4B:BD:24:15:DB:5A:29:D3:96
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Certificate issuer:       /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial:       018F3C2F130662C3409F9F7980148D67169E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft
Manifest number:          1160
Signing time:             Fri 03 May 2024 02:01:08 +0000
Manifest this update:     Fri 03 May 2024 02:01:08 +0000
Manifest next update:     Sat 04 May 2024 02:01:08 +0000
Files and hashes:         1: 6eWwFOVpGG-4SiAklUzMyckbHj8.crl (hash: GNnMgHra5Z/p24eiOv/JR3Ff660z6DoFAg7WRAdmjtc=)
                          2: qh4niq8Va-L_BIqb1nN0aFng2tg.roa (hash: T+Gz4CHFD9JrSTWK6fxaoQSFUTJ8ycjh8OwGtbQjjOk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:2f:13:06:62:c3:40:9f:9f:79:80:14:8d:67:16:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
        Validity
            Not Before: May  3 02:01:08 2024 GMT
            Not After : May  4 02:01:08 2024 GMT
        Subject: CN=90064ad26d1a60fbafa6974bbd2415db5a29d396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:35:70:60:ac:9c:b0:d9:75:01:54:d8:de:3f:
                    1a:9f:0c:fd:19:c3:01:9b:bf:4d:c0:91:27:fd:ce:
                    83:28:18:5a:a6:de:2b:b4:29:19:df:c7:59:98:01:
                    cf:3e:0b:71:e0:fe:98:cd:90:01:ce:d3:a1:07:d0:
                    18:42:88:ad:f9:65:40:9a:a4:0c:14:d2:53:2a:de:
                    e6:84:1a:4e:cc:46:2f:55:c2:38:e4:8d:25:c2:4a:
                    f8:66:6d:0a:d7:bd:e4:69:b1:1a:82:b3:e9:89:0a:
                    0b:23:f4:b9:31:79:5e:a5:0c:56:9c:12:86:ac:51:
                    30:58:b2:9c:c1:af:aa:5f:ea:6c:88:a3:6e:8e:ea:
                    5b:2a:17:c5:30:cc:25:b0:2a:f3:29:57:7e:03:4a:
                    46:f1:f8:95:27:54:74:1e:0d:9a:a3:56:ce:22:cb:
                    db:7f:d8:f4:61:8a:41:eb:70:2e:23:e5:46:88:b1:
                    b5:f4:bd:19:02:65:af:02:1c:95:9e:b7:1d:2a:13:
                    a0:b7:8f:4e:e0:77:7c:e5:64:2c:f3:d1:41:86:8b:
                    5b:2f:1b:e3:2c:fd:45:e8:f1:93:81:66:d8:ff:30:
                    c2:09:da:c0:ab:96:fd:ed:d2:b5:8d:f9:83:0d:f9:
                    03:16:0d:95:88:30:00:8c:46:0d:b5:f1:d1:35:0b:
                    6d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:06:4A:D2:6D:1A:60:FB:AF:A6:97:4B:BD:24:15:DB:5A:29:D3:96
            X509v3 Authority Key Identifier:
                keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:63:ce:46:31:f7:82:22:0c:c4:5c:1a:2a:a3:b0:34:8c:7c:
         8c:65:08:07:e6:46:f4:42:2e:6b:53:6e:25:3b:28:86:d9:27:
         02:6e:10:1e:7b:95:3e:8a:33:e7:b4:82:79:41:ae:0d:d1:72:
         2d:8d:2a:7d:29:99:cb:f5:2c:d7:00:8f:5b:df:a3:7d:47:d3:
         4d:ba:d5:4a:30:f4:74:e1:2b:3d:2c:db:d2:da:fd:63:ef:b3:
         fd:d2:90:28:ab:d0:d1:05:09:89:bb:aa:ca:9e:5d:ad:5d:92:
         3d:70:1b:c3:8f:4c:b7:9d:d0:f3:2f:6f:e0:5e:8f:fc:39:38:
         da:e6:82:5b:c4:44:48:40:11:45:76:46:a4:14:ff:ee:7e:23:
         00:e5:e5:09:eb:2b:e2:16:de:2a:ec:ca:d4:2d:5e:cd:76:96:
         9b:16:96:30:0e:a4:c1:6f:30:2d:a5:ba:33:d4:98:c7:ea:73:
         e2:36:0a:a6:ca:0b:65:8a:80:58:b4:14:68:5e:bb:b0:88:73:
         31:fd:a3:59:b5:50:69:ef:b6:f0:d1:71:ad:52:f8:4b:83:46:
         73:74:98:36:9c:a9:d6:1b:89:6d:04:42:2c:5d:08:7d:2e:b1:
         55:3b:05:10:84:17:d5:99:35:b4:3e:a9:83:33:87:e0:7a:36:
         79:b4:c8:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY88LxMGYsNAn595gBSNZxaeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZTViMDE0ZTU2OTE4NmZiODRhMjAyNDk1NGNjY2M5Yzkx
YjFlM2YwHhcNMjQwNTAzMDIwMTA4WhcNMjQwNTA0MDIwMTA4WjAzMTEwLwYDVQQD
Eyg5MDA2NGFkMjZkMWE2MGZiYWZhNjk3NGJiZDI0MTVkYjVhMjlkMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zVwYKycsNl1AVTY3j8anwz9GcMB
m79NwJEn/c6DKBhapt4rtCkZ38dZmAHPPgtx4P6YzZABztOhB9AYQoit+WVAmqQM
FNJTKt7mhBpOzEYvVcI45I0lwkr4Zm0K173kabEagrPpiQoLI/S5MXlepQxWnBKG
rFEwWLKcwa+qX+psiKNujupbKhfFMMwlsCrzKVd+A0pG8fiVJ1R0Hg2ao1bOIsvb
f9j0YYpB63AuI+VGiLG19L0ZAmWvAhyVnrcdKhOgt49O4Hd85WQs89FBhotbLxvj
LP1F6PGTgWbY/zDCCdrAq5b97dK1jfmDDfkDFg2ViDAAjEYNtfHRNQttXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAGStJtGmD7r6aXS70kFdtaKdOWMB8GA1UdIwQY
MBaAFOnlsBTlaRhvuEogJJVMzMnJGx4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmVXd0ZPVnBHRy00U2lBa2xVek15Y2tiSGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNzM2N2QtN2JiZi00Njk3LTk2Y2Qt
MmJiMWVmYzU3YTg2LzEvNmVXd0ZPVnBHRy00U2lBa2xVek15Y2tiSGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kNzM2N2QtN2JiZi00Njk3LTk2Y2QtMmJiMWVmYzU3YTg2
LzEvNmVXd0ZPVnBHRy00U2lBa2xVek15Y2tiSGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWPORjH3
giIMxFwaKqOwNIx8jGUIB+ZG9EIua1NuJTsohtknAm4QHnuVPooz57SCeUGuDdFy
LY0qfSmZy/Us1wCPW9+jfUfTTbrVSjD0dOErPSzb0tr9Y++z/dKQKKvQ0QUJibuq
yp5drV2SPXAbw49Mt53Q8y9v4F6P/Dk42uaCW8RESEARRXZGpBT/7n4jAOXlCesr
4hbeKuzK1C1ezXaWmxaWMA6kwW8wLaW6M9SYx+pz4jYKpsoLZYqAWLQUaF67sIhz
Mf2jWbVQae+28NFxrVL4S4NGc3SYNpyp1huJbQRCLF0IfS6xVTsFEIQX1Zk1tD6p
gzOH4Ho2ebTIuQ==
-----END CERTIFICATE-----
Generated at Fri May 3 08:36:12 2024 by rpki-client on console-ams.rpki-client.org