Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
File:                     6wK1I7069vxsN93WbN9HmT24Yys.mft (raw, json)
Hash identifier:          HW5UfH0Y0VHdMqbmd7jn4zq+jd5VstYNg0MmomV5hs4=
Subject key identifier:   4F:D3:E0:61:D7:E0:A3:77:D8:BE:C0:A7:0A:22:5E:7F:5C:5C:8B:D0
Authority key identifier: EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
Certificate issuer:       /CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Certificate serial:       018F3A09B0D9A825360BB0581508A54C8991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
Manifest number:          03CA
Signing time:             Thu 02 May 2024 16:01:04 +0000
Manifest this update:     Thu 02 May 2024 16:01:04 +0000
Manifest next update:     Fri 03 May 2024 16:01:04 +0000
Files and hashes:         1: 6wK1I7069vxsN93WbN9HmT24Yys.crl (hash: DXDeXfDBiorTwDRpXOJ1ud1bliMOIF+HVRJ8mE2rMAI=)
                          2: CJYwOmrhgRddI_37F5XjDeqb9gQ.roa (hash: dg3FylFolVaTBiCWw+XlaCNwSSw5iW12d5wI4jL+Daw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:09:b0:d9:a8:25:36:0b:b0:58:15:08:a5:4c:89:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
        Validity
            Not Before: May  2 16:01:04 2024 GMT
            Not After : May  3 16:01:04 2024 GMT
        Subject: CN=4fd3e061d7e0a377d8bec0a70a225e7f5c5c8bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:af:cc:36:f2:97:f2:3c:fe:7b:5f:90:1d:c5:
                    6f:2f:9c:52:16:e2:2d:09:be:2b:d2:51:d7:34:e8:
                    99:f6:17:a6:5b:56:53:68:ba:c7:a5:36:e3:0b:cf:
                    f2:2e:95:86:35:f8:e9:2a:8f:98:f3:96:46:13:ce:
                    8e:b1:fa:ba:8b:64:b6:e2:c6:14:dc:e2:b2:86:a3:
                    f3:3c:7e:07:8a:94:d2:09:56:bd:21:05:04:a2:25:
                    86:3b:87:28:fc:71:24:1c:90:68:d6:d3:13:80:a0:
                    21:06:b0:fc:c1:03:d1:9c:eb:99:88:9f:ea:2e:48:
                    b1:46:7b:3e:89:ac:b2:de:ee:44:0f:0e:3c:cf:17:
                    ea:83:68:66:db:14:fc:cc:f2:57:5f:38:f7:65:43:
                    96:71:8a:96:0a:9c:40:a1:0f:4a:0e:51:c3:3f:f5:
                    8a:0b:20:3b:db:ca:da:60:2e:7c:69:73:a0:0b:b9:
                    69:6d:d4:b5:44:d4:04:27:00:e4:e4:2f:37:c6:3f:
                    df:34:e1:f0:e2:77:e4:bb:0b:7a:63:e9:4f:2e:eb:
                    7c:c0:33:33:08:ff:d6:7b:80:3d:b8:79:84:b2:c7:
                    17:63:75:fc:2f:7d:5e:ae:a0:b8:3c:1d:fd:2c:f5:
                    33:7e:24:c4:67:d0:a2:2b:b4:4b:88:ce:fb:46:00:
                    43:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D3:E0:61:D7:E0:A3:77:D8:BE:C0:A7:0A:22:5E:7F:5C:5C:8B:D0
            X509v3 Authority Key Identifier:
                keyid:EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d0:d7:f8:0a:4b:43:71:1d:e8:c7:79:bf:5c:98:75:74:5f:
         e8:7e:9a:e8:79:85:70:1d:54:8e:c4:35:cc:a5:88:df:c3:f0:
         54:08:ec:d7:31:52:c0:cc:3d:fb:72:5c:16:ac:34:e8:2c:7d:
         dc:0c:8f:42:ba:dd:8a:58:f9:60:2d:3c:3a:41:28:41:ca:f5:
         ff:6a:9c:28:7d:ad:d8:59:c2:84:49:eb:10:fe:35:ce:f3:94:
         8d:55:d5:81:b3:c2:67:7c:c8:15:a0:ba:4d:ae:7f:2a:16:3b:
         84:2e:68:4b:ee:e5:43:11:36:18:0b:2d:0e:47:c9:a9:9c:6e:
         ea:a0:51:3f:22:29:a8:a0:de:64:11:a0:9d:e9:4b:f9:6e:14:
         c4:73:cd:97:f6:c5:57:0b:3d:bd:4c:73:fe:26:5f:fd:5a:f6:
         18:03:ef:8a:58:58:44:1f:c6:41:ff:77:0a:cd:83:0b:9c:8b:
         21:ba:2b:53:ac:41:f3:23:b1:7b:21:66:5f:0d:97:cc:a7:c2:
         e3:38:20:7f:22:b0:60:c6:4c:08:c0:bb:ce:6c:90:54:06:ae:
         18:0f:f4:0c:78:65:f3:95:e2:5a:e4:13:74:ba:1b:0d:02:a6:
         f1:dc:33:3f:17:3c:6d:af:a7:f1:3a:bb:f3:f2:cf:6b:de:da:
         0b:58:bc:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY86CbDZqCU2C7BYFQilTImRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMDJiNTIzYmQzYWY2ZmM2YzM3ZGRkNjZjZGY0Nzk5M2Ri
ODYzMmIwHhcNMjQwNTAyMTYwMTA0WhcNMjQwNTAzMTYwMTA0WjAzMTEwLwYDVQQD
Eyg0ZmQzZTA2MWQ3ZTBhMzc3ZDhiZWMwYTcwYTIyNWU3ZjVjNWM4YmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6/MNvKX8jz+e1+QHcVvL5xSFuIt
Cb4r0lHXNOiZ9hemW1ZTaLrHpTbjC8/yLpWGNfjpKo+Y85ZGE86Osfq6i2S24sYU
3OKyhqPzPH4HipTSCVa9IQUEoiWGO4co/HEkHJBo1tMTgKAhBrD8wQPRnOuZiJ/q
LkixRns+iayy3u5EDw48zxfqg2hm2xT8zPJXXzj3ZUOWcYqWCpxAoQ9KDlHDP/WK
CyA728raYC58aXOgC7lpbdS1RNQEJwDk5C83xj/fNOHw4nfkuwt6Y+lPLut8wDMz
CP/We4A9uHmEsscXY3X8L31erqC4PB39LPUzfiTEZ9CiK7RLiM77RgBDiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/T4GHX4KN32L7ApwoiXn9cXIvQMB8GA1UdIwQY
MBaAFOsCtSO9Ovb8bDfd1mzfR5k9uGMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNndLMUk3MDY5dnhzTjkzV2JOOUhtVDI0WXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zMzE4NzQtN2IzMS00ODc5LWJmMGIt
MDU4NWU5ZWRjMzMwLzEvNndLMUk3MDY5dnhzTjkzV2JOOUhtVDI0WXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zMzE4NzQtN2IzMS00ODc5LWJmMGItMDU4NWU5ZWRjMzMw
LzEvNndLMUk3MDY5dnhzTjkzV2JOOUhtVDI0WXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdDX+ApL
Q3Ed6Md5v1yYdXRf6H6a6HmFcB1UjsQ1zKWI38PwVAjs1zFSwMw9+3JcFqw06Cx9
3AyPQrrdilj5YC08OkEoQcr1/2qcKH2t2FnChEnrEP41zvOUjVXVgbPCZ3zIFaC6
Ta5/KhY7hC5oS+7lQxE2GAstDkfJqZxu6qBRPyIpqKDeZBGgnelL+W4UxHPNl/bF
Vws9vUxz/iZf/Vr2GAPvilhYRB/GQf93Cs2DC5yLIborU6xB8yOxeyFmXw2XzKfC
4zggfyKwYMZMCMC7zmyQVAauGA/0DHhl85XiWuQTdLobDQKm8dwzPxc8ba+n8Tq7
8/LPa97aC1i8gg==
-----END CERTIFICATE-----
Generated at Thu May 2 18:38:28 2024 by rpki-client on console-fra.rpki-client.org