Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File:                     9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier:          DZJgfa9owoSl6yDqlWKpijtHGddJdUQxFJvnkbuv5Cc=
Subject key identifier:   E7:FD:74:3C:E9:07:82:18:E9:D2:06:FD:5B:6B:73:30:A5:06:C2:6D
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer:       /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial:       019052EAC5B1DB091A9409EFD9F571CCF759
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number:          09CE
Signing time:             Wed 26 Jun 2024 05:00:35 +0000
Manifest this update:     Wed 26 Jun 2024 05:00:35 +0000
Manifest next update:     Thu 27 Jun 2024 05:00:35 +0000
Files and hashes:         1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: VHdq6qi9f7ppQufCgkBZ3d/47fFRp/ioxacbzdCDmic=)
                          2: IKgvUcJUZp16rR_j84QruNO8gog.roa (hash: NvVVEKSAsUl4hmRuNYRiHzLGDsMB45r6YkgIUT2Nne4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:ea:c5:b1:db:09:1a:94:09:ef:d9:f5:71:cc:f7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
        Validity
            Not Before: Jun 26 05:00:35 2024 GMT
            Not After : Jun 27 05:00:35 2024 GMT
        Subject: CN=e7fd743ce9078218e9d206fd5b6b7330a506c26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:81:66:50:f5:12:00:3f:1f:eb:82:0b:04:
                    d1:ee:47:b4:27:c6:16:94:27:8b:7f:04:78:4d:c0:
                    08:8a:49:9c:da:71:4f:8c:b2:ed:34:02:96:a2:27:
                    b9:05:63:f5:f1:70:5c:a6:a7:ad:f4:8c:c6:05:38:
                    ae:f2:07:c6:35:50:91:dc:07:8a:f6:c0:af:51:f1:
                    7b:5e:26:58:1e:1e:fc:6e:33:88:2d:25:da:92:dc:
                    1c:1e:ba:1a:06:5e:ae:09:f8:8c:7d:21:27:48:74:
                    b4:00:40:3b:24:ea:20:48:9d:bd:d1:91:45:9f:ed:
                    b6:53:53:8a:4b:f6:e8:12:03:a4:b4:34:a3:a4:03:
                    54:bc:4b:16:3a:09:56:cc:a5:67:a7:50:29:4f:f1:
                    12:bc:c7:63:b7:c7:e8:60:af:a2:f1:a2:1f:ef:33:
                    a8:c5:31:69:95:ba:0e:c8:55:f0:97:98:b2:2d:26:
                    bf:e0:9a:ec:6c:b2:a5:90:ce:92:59:ba:b6:87:a1:
                    81:10:55:73:f1:5a:7d:f1:a5:06:20:cf:ad:0a:a6:
                    a7:b7:81:fd:08:29:51:64:d1:eb:29:cf:8b:69:4a:
                    15:bc:ec:08:e7:49:07:e3:cb:39:fe:31:4c:d0:43:
                    3e:f1:df:e5:37:53:d8:31:4f:d8:30:fc:bf:08:d3:
                    8f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FD:74:3C:E9:07:82:18:E9:D2:06:FD:5B:6B:73:30:A5:06:C2:6D
            X509v3 Authority Key Identifier:
                keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:0a:53:98:a7:20:99:bb:15:8a:63:17:a5:a8:c8:7e:c8:fe:
         4e:1b:53:63:f9:a6:f0:5e:f4:16:08:cc:4a:88:1c:3d:3e:31:
         8c:b6:fb:76:f0:ee:f4:5a:ed:99:ca:51:cc:f4:87:2b:df:71:
         4c:41:8c:b1:08:d4:50:10:f2:f7:2e:99:9d:0c:ff:aa:9a:43:
         9f:66:7e:29:a1:da:d8:b5:31:6f:7b:da:3b:1e:f8:9d:1c:35:
         ee:8d:1c:64:de:e7:d2:91:15:64:20:a0:f4:34:da:97:d2:7f:
         f1:8a:3e:6b:31:ca:44:b6:66:57:e7:f6:6b:1c:41:7d:4b:34:
         70:f4:70:7f:41:42:29:a3:8a:96:df:04:e3:bc:37:e9:bf:f8:
         38:44:09:a5:40:92:b0:67:59:f4:e2:21:a5:8e:86:cf:a7:15:
         45:6e:3d:43:49:2b:bd:89:71:ac:f6:8d:df:da:af:55:af:e6:
         ce:ee:57:9a:db:1a:66:c3:1d:cb:0c:00:cd:ec:40:a6:0b:65:
         1b:b0:b0:e6:99:d3:b3:25:1d:70:da:f0:2c:bb:55:8c:22:7e:
         6b:48:0e:38:ec:40:a5:18:7f:d2:a2:21:38:5c:b1:4c:68:0e:
         c4:12:ea:f3:e0:55:03:3e:49:3d:de:12:a4:ec:cc:03:af:ad:
         7d:c9:8a:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBS6sWx2wkalAnv2fVxzPdZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZThlMzZiZTFkYmEwNzM1OTAzODJiYjFmZmZmMzE3NjUz
OTAwZDEwHhcNMjQwNjI2MDUwMDM1WhcNMjQwNjI3MDUwMDM1WjAzMTEwLwYDVQQD
EyhlN2ZkNzQzY2U5MDc4MjE4ZTlkMjA2ZmQ1YjZiNzMzMGE1MDZjMjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKmBZlD1EgA/H+uCCwTR7ke0J8YW
lCeLfwR4TcAIikmc2nFPjLLtNAKWoie5BWP18XBcpqet9IzGBTiu8gfGNVCR3AeK
9sCvUfF7XiZYHh78bjOILSXaktwcHroaBl6uCfiMfSEnSHS0AEA7JOogSJ290ZFF
n+22U1OKS/boEgOktDSjpANUvEsWOglWzKVnp1ApT/ESvMdjt8foYK+i8aIf7zOo
xTFplboOyFXwl5iyLSa/4JrsbLKlkM6SWbq2h6GBEFVz8Vp98aUGIM+tCqant4H9
CClRZNHrKc+LaUoVvOwI50kH48s5/jFM0EM+8d/lN1PYMU/YMPy/CNOPdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf9dDzpB4IY6dIG/VtrczClBsJtMB8GA1UdIwQY
MBaAFPXo42vh26BzWQOCux//8xdlOQDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMt
MmE5OTBmMjg1MGZiLzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xZWMxZDctYWNlZC00ZWFhLTk3OGMtMmE5OTBmMjg1MGZi
LzEvOWVqamEtSGJvSE5aQTRLN0hfX3pGMlU1QU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQpTmKcg
mbsVimMXpajIfsj+ThtTY/mm8F70FgjMSogcPT4xjLb7dvDu9FrtmcpRzPSHK99x
TEGMsQjUUBDy9y6ZnQz/qppDn2Z+KaHa2LUxb3vaOx74nRw17o0cZN7n0pEVZCCg
9DTal9J/8Yo+azHKRLZmV+f2axxBfUs0cPRwf0FCKaOKlt8E47w36b/4OEQJpUCS
sGdZ9OIhpY6Gz6cVRW49Q0krvYlxrPaN39qvVa/mzu5XmtsaZsMdywwAzexApgtl
G7Cw5pnTsyUdcNrwLLtVjCJ+a0gOOOxApRh/0qIhOFyxTGgOxBLq8+BVAz5JPd4S
pOzMA6+tfcmKww==
-----END CERTIFICATE-----
Generated at Wed Jun 26 12:27:01 2024 by rpki-client on console-ams.rpki-client.org