Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
File:                     6hyVHWG4faGUOXhNI2Z6icsykKQ.mft (raw, json)
Hash identifier:          qfiLVewIP+S+WTE8jBafkmxCOoSYom3uJHeexpo34t0=
Subject key identifier:   1F:4C:AB:0C:B8:18:B1:F8:90:ED:38:65:16:F9:68:70:23:C2:37:4A
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Certificate issuer:       /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial:       018F2EE11B837B247886B3B4A913A5943348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
Manifest number:          0B98
Signing time:             Tue 30 Apr 2024 12:00:55 +0000
Manifest this update:     Tue 30 Apr 2024 12:00:55 +0000
Manifest next update:     Wed 01 May 2024 12:00:55 +0000
Files and hashes:         1: 6hyVHWG4faGUOXhNI2Z6icsykKQ.crl (hash: CWlTAhjbWh0cQXk6KI/ed7wWtNnWh3KxSbU+8U1iOjE=)
                          2: A2Rv7ClIshkFuB3bNo4Gd9TWKHs.roa (hash: 0+/3pHZMw0x8iQLxvECxzJJcUrsJdaEuKv6JgtjQUds=)
                          3: cdCrb0vfVZpyP4FNBu0T4PvJFSo.roa (hash: nlUDi3TS6ikCwsHmMaCRI4qsH0A9e5Q5uzQBKTaeVc4=)
                          4: wQBAZKiXfAq_q_jpfHmZjtTn55A.roa (hash: dYtF6fRIhEGo8P9NvnzqkjfHpLNqaBR943xpr8PpkEo=)
                          5: xfHfb7X1cZlm-ppZC1Q8zPQ2pMw.roa (hash: ryV+w4kAG9q4wgVSjGuq2V/jKLzDyXQ2028P/KR5a0o=)
                          6: xy2CE0c1yGLOrKbccUUymohABpg.roa (hash: ase6xehlUpBB4VXyEx/vXmj1NTV5t89ZQ91CJ2Gg7Zs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2e:e1:1b:83:7b:24:78:86:b3:b4:a9:13:a5:94:33:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
        Validity
            Not Before: Apr 30 12:00:55 2024 GMT
            Not After : May  1 12:00:55 2024 GMT
        Subject: CN=1f4cab0cb818b1f890ed386516f9687023c2374a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fe:ad:5b:48:3b:d3:61:cb:85:db:05:2f:15:
                    e8:9b:18:c6:b4:a9:79:21:43:9a:50:1d:24:15:72:
                    b3:23:c7:a7:7b:8b:92:7b:c1:02:f9:51:81:50:08:
                    d1:e8:f9:70:0a:79:84:78:8b:8a:e5:a6:6f:f6:f3:
                    95:88:5a:66:64:43:79:d1:99:15:67:85:9f:a0:2d:
                    11:f9:92:33:e3:f4:17:a6:be:c9:98:4e:38:34:34:
                    08:5e:f4:64:e1:e0:c2:93:cc:fb:2b:a4:a8:c7:e9:
                    39:9f:ae:ea:5d:e5:6e:f1:6b:f5:3f:5a:c2:0e:e2:
                    f1:cd:2b:64:9c:fd:66:24:1d:57:d6:ed:13:0c:3b:
                    fb:ff:79:47:c1:a7:4f:04:d3:bc:d5:0e:89:20:09:
                    da:6f:1f:c7:4b:58:b7:9d:c4:46:d0:b4:40:31:19:
                    2a:42:6a:1a:ef:36:d9:68:35:a0:02:0d:96:b9:7d:
                    8c:35:8c:29:4d:b5:45:e8:2c:be:b6:a0:0f:6e:a6:
                    c8:0f:b0:0e:a5:c9:f1:67:e3:6c:90:69:cc:ab:50:
                    9c:eb:b3:c7:b4:09:0a:8c:64:32:46:a9:61:46:6c:
                    5b:23:2d:73:5e:73:87:c0:59:40:76:c1:cc:58:c8:
                    36:27:9c:6a:45:68:c5:74:36:aa:dd:98:b8:d9:a4:
                    86:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4C:AB:0C:B8:18:B1:F8:90:ED:38:65:16:F9:68:70:23:C2:37:4A
            X509v3 Authority Key Identifier:
                keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f1:1f:e9:95:44:18:c7:c9:20:22:2f:cc:f7:1e:96:7d:0c:
         45:9e:47:d6:6e:9b:5a:5b:e5:37:7c:2a:61:a0:6a:2b:16:e7:
         54:44:82:57:a3:0a:b5:ae:a7:1a:04:4d:ea:48:ac:5c:c3:12:
         9b:5a:8e:6a:04:e5:9f:a6:56:ae:4e:b8:4e:3e:33:ab:bd:b4:
         f7:8a:40:bf:06:50:df:f9:ce:bb:c0:f7:9c:5c:ac:0f:0b:f6:
         ec:01:be:5b:c4:24:08:90:c2:b7:50:5d:03:aa:3f:f2:13:c4:
         76:9f:50:8d:e5:af:96:f2:c2:ca:fc:4b:c4:fa:c2:ad:10:84:
         3f:8d:c3:5c:b2:23:d9:e2:72:e0:4d:03:80:71:e3:bf:2b:4f:
         8d:98:ff:89:e8:e6:fe:bb:41:6a:99:27:e0:0d:2c:a9:b1:7a:
         ae:31:35:8c:62:24:49:77:6c:49:96:b3:27:e9:08:c0:86:b5:
         0f:2c:3f:9c:ab:eb:6a:45:95:89:bf:fe:40:3b:30:e6:26:71:
         93:c8:5c:c8:3d:2c:4d:11:bd:48:53:97:27:4b:30:0b:11:12:
         57:f0:49:ff:f9:bc:ad:2f:b3:fb:e1:78:c4:0f:ee:3f:06:1f:
         0c:10:7e:27:e5:28:f6:b7:0d:fe:31:82:66:b4:f4:2c:8a:83:
         b1:cb:80:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8u4RuDeyR4hrO0qROllDNIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMWM5NTFkNjFiODdkYTE5NDM5Nzg0ZDIzNjY3YTg5Y2Iz
MjkwYTQwHhcNMjQwNDMwMTIwMDU1WhcNMjQwNTAxMTIwMDU1WjAzMTEwLwYDVQQD
EygxZjRjYWIwY2I4MThiMWY4OTBlZDM4NjUxNmY5Njg3MDIzYzIzNzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP6tW0g702HLhdsFLxXomxjGtKl5
IUOaUB0kFXKzI8ene4uSe8EC+VGBUAjR6PlwCnmEeIuK5aZv9vOViFpmZEN50ZkV
Z4WfoC0R+ZIz4/QXpr7JmE44NDQIXvRk4eDCk8z7K6Sox+k5n67qXeVu8Wv1P1rC
DuLxzStknP1mJB1X1u0TDDv7/3lHwadPBNO81Q6JIAnabx/HS1i3ncRG0LRAMRkq
Qmoa7zbZaDWgAg2WuX2MNYwpTbVF6Cy+tqAPbqbID7AOpcnxZ+NskGnMq1Cc67PH
tAkKjGQyRqlhRmxbIy1zXnOHwFlAdsHMWMg2J5xqRWjFdDaq3Zi42aSG9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9Mqwy4GLH4kO04ZRb5aHAjwjdKMB8GA1UdIwQY
MBaAFOoclR1huH2hlDl4TSNmeonLMpCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMt
NzI0YjFhMDIxMmQ0LzEvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMtNzI0YjFhMDIxMmQ0
LzEvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePEf6ZVE
GMfJICIvzPceln0MRZ5H1m6bWlvlN3wqYaBqKxbnVESCV6MKta6nGgRN6kisXMMS
m1qOagTln6ZWrk64Tj4zq72094pAvwZQ3/nOu8D3nFysDwv27AG+W8QkCJDCt1Bd
A6o/8hPEdp9QjeWvlvLCyvxLxPrCrRCEP43DXLIj2eJy4E0DgHHjvytPjZj/iejm
/rtBapkn4A0sqbF6rjE1jGIkSXdsSZazJ+kIwIa1Dyw/nKvrakWVib/+QDsw5iZx
k8hcyD0sTRG9SFOXJ0swCxESV/BJ//m8rS+z++F4xA/uPwYfDBB+J+Uo9rcN/jGC
ZrT0LIqDscuA9g==
-----END CERTIFICATE-----
Generated at Tue Apr 30 20:03:52 2024 by rpki-client on console-ams.rpki-client.org