Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
File:                     JLcItlJ6u9LeK5s3NJarwddItuc.mft (raw, json)
Hash identifier:          jRniFOyht1dbAA9kvFPO/Vsbw3aXe8F2qoAwlKnzo+4=
Subject key identifier:   19:9A:FC:E2:60:96:E1:4E:5F:80:E9:D6:2B:C3:1E:04:F4:C5:CC:1E
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Certificate issuer:       /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial:       018F8938348B748A5AA43292997F284563B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
Manifest number:          0EC6
Signing time:             Sat 18 May 2024 01:01:52 +0000
Manifest this update:     Sat 18 May 2024 01:01:52 +0000
Manifest next update:     Sun 19 May 2024 01:01:52 +0000
Files and hashes:         1: JLcItlJ6u9LeK5s3NJarwddItuc.crl (hash: ERsiQveLlCHinX2ziGg+dMRUKR7JQr+qVL+zZqtQDB8=)
                          2: jTPsAyzAGI46TtZesy17SlAaaxU.roa (hash: kcAmfum7usY5q2K0+OBaM6HRRHY2cTEy12DLrhGdt60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:34:8b:74:8a:5a:a4:32:92:99:7f:28:45:63:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
        Validity
            Not Before: May 18 01:01:52 2024 GMT
            Not After : May 19 01:01:52 2024 GMT
        Subject: CN=199afce26096e14e5f80e9d62bc31e04f4c5cc1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:fe:3a:a0:57:ab:0d:01:f9:94:b7:51:e7:
                    ad:24:ac:de:97:24:5a:d3:fe:85:61:59:8d:91:c5:
                    b3:d0:03:3b:41:b5:b8:29:24:f4:66:48:ad:6c:0e:
                    bd:6e:95:47:ae:c3:49:88:d1:c1:b4:b4:a4:51:79:
                    b4:76:b5:de:9d:60:38:bc:54:7e:f7:2b:3c:0d:a2:
                    86:78:aa:34:95:72:9a:3f:3f:6e:ac:93:ee:e8:bd:
                    8e:db:da:1d:b4:da:ee:71:4f:77:b6:1a:05:1e:9a:
                    50:90:6f:b3:00:76:d3:1a:be:cc:4d:22:1a:94:15:
                    a2:ee:4d:91:9b:6d:8b:90:a5:b2:0d:bc:82:d5:f4:
                    c4:ef:95:93:40:0f:bd:38:84:ae:23:ca:5b:ff:c2:
                    46:38:29:aa:47:c3:c4:2a:cb:c8:0f:bf:1a:18:55:
                    fa:ea:a6:5c:7a:6f:29:d7:ce:3f:45:74:1e:71:5d:
                    cb:27:c0:93:03:a1:7f:f0:56:c5:97:f1:03:54:15:
                    2c:c2:b8:ac:97:a6:9c:3d:c9:bc:af:14:17:40:28:
                    32:2b:a6:79:b4:02:c4:66:16:6f:e2:de:46:cd:1f:
                    40:e8:27:fb:e7:94:a9:27:c5:a3:14:51:7d:3a:04:
                    6e:1a:bf:a1:d5:0d:81:0d:cd:8e:f2:9b:8a:93:f6:
                    22:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9A:FC:E2:60:96:E1:4E:5F:80:E9:D6:2B:C3:1E:04:F4:C5:CC:1E
            X509v3 Authority Key Identifier:
                keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8d:fe:86:34:ec:a2:1d:ef:ff:7c:52:d3:16:61:9b:be:8c:
         df:c1:63:15:3e:79:6b:08:63:e3:ca:e6:14:a8:25:9a:14:74:
         e2:8b:17:1d:71:c1:71:7b:19:37:1d:57:b1:a1:da:71:e8:83:
         6a:89:57:46:80:12:e3:9d:1a:bb:5b:50:ed:26:79:a0:45:51:
         3b:59:ed:08:fd:3f:74:1f:ea:94:a4:03:a1:59:c8:eb:5e:61:
         1e:0b:0f:14:f3:62:91:86:ee:9a:c8:ac:c8:47:da:12:99:79:
         35:66:c4:19:a5:a7:79:ba:02:7d:82:03:83:4e:58:be:32:5a:
         92:8c:d4:48:ac:dd:f8:a8:58:7f:c9:f2:ea:8a:e8:1a:ed:6e:
         15:4f:d9:07:7b:c1:db:34:94:9f:ec:57:7c:89:b0:73:3c:3f:
         50:12:63:c3:b3:ff:0b:8e:2c:0a:02:1e:78:d0:55:bc:d1:d6:
         a3:82:be:9a:5a:57:6d:d3:0f:2a:0d:65:36:89:49:b5:35:29:
         0c:7f:38:8d:17:20:ad:0d:43:08:39:42:96:ab:75:5c:fe:14:
         5d:00:89:d4:58:c0:44:10:78:cb:ba:07:c4:b7:49:9c:18:c5:
         b8:e2:85:46:b7:92:9c:c5:e9:9e:60:2c:6e:b3:52:05:c7:7d:
         24:d3:02:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JODSLdIpapDKSmX8oRWOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjcwOGI2NTI3YWJiZDJkZTJiOWIzNzM0OTZhYmMxZDc0
OGI2ZTcwHhcNMjQwNTE4MDEwMTUyWhcNMjQwNTE5MDEwMTUyWjAzMTEwLwYDVQQD
EygxOTlhZmNlMjYwOTZlMTRlNWY4MGU5ZDYyYmMzMWUwNGY0YzVjYzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/j+OqBXqw0B+ZS3UeetJKzelyRa
0/6FYVmNkcWz0AM7QbW4KST0ZkitbA69bpVHrsNJiNHBtLSkUXm0drXenWA4vFR+
9ys8DaKGeKo0lXKaPz9urJPu6L2O29odtNrucU93thoFHppQkG+zAHbTGr7MTSIa
lBWi7k2Rm22LkKWyDbyC1fTE75WTQA+9OISuI8pb/8JGOCmqR8PEKsvID78aGFX6
6qZcem8p184/RXQecV3LJ8CTA6F/8FbFl/EDVBUswrisl6acPcm8rxQXQCgyK6Z5
tALEZhZv4t5GzR9A6Cf755SpJ8WjFFF9OgRuGr+h1Q2BDc2O8puKk/YioQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBma/OJgluFOX4Dp1ivDHgT0xcweMB8GA1UdIwQY
MBaAFCS3CLZServS3iubNzSWq8HXSLbnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZTQzYTAtZWRmNS00NDdkLWI0NzMt
YjJhMTNhM2E5YjhhLzEvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lZTQzYTAtZWRmNS00NDdkLWI0NzMtYjJhMTNhM2E5Yjhh
LzEvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeI3+hjTs
oh3v/3xS0xZhm76M38FjFT55awhj48rmFKglmhR04osXHXHBcXsZNx1XsaHaceiD
aolXRoAS450au1tQ7SZ5oEVRO1ntCP0/dB/qlKQDoVnI615hHgsPFPNikYbumsis
yEfaEpl5NWbEGaWneboCfYIDg05YvjJakozUSKzd+KhYf8ny6oroGu1uFU/ZB3vB
2zSUn+xXfImwczw/UBJjw7P/C44sCgIeeNBVvNHWo4K+mlpXbdMPKg1lNolJtTUp
DH84jRcgrQ1DCDlClqt1XP4UXQCJ1FjARBB4y7oHxLdJnBjFuOKFRreSnMXpnmAs
brNSBcd9JNMCnA==
-----END CERTIFICATE-----
Generated at Sat May 18 02:04:01 2024 by rpki-client on console-fra.rpki-client.org