Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
File:                     9rA2a7rqx7WITkJt-ACewnosYC4.mft (raw, json)
Hash identifier:          YxsTHFARUhFB6MFXtmVn/JEzIgiLQUgpOKhK3yaL2U4=
Subject key identifier:   1D:E3:8C:72:35:81:1D:59:A2:A5:F4:31:EB:41:C1:7E:6E:13:BB:AB
Authority key identifier: F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E
Certificate issuer:       /CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
Certificate serial:       018F874AE3FFEC4E79208519B5899B1CA101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
Manifest number:          6A
Signing time:             Fri 17 May 2024 16:03:03 +0000
Manifest this update:     Fri 17 May 2024 16:03:03 +0000
Manifest next update:     Sat 18 May 2024 16:03:03 +0000
Files and hashes:         1: 9rA2a7rqx7WITkJt-ACewnosYC4.crl (hash: JYk9J7R3Rh6l1TVrTfaD5sEBBFLzGm0aH7nsSOEzaKU=)
                          2: iagOQJs8MTgSjzaiDOHguxxq8e8.roa (hash: 71Kzvl7l7/a6uSh/s6887w9IlWcc2bnR4vYZxol40vM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:e3:ff:ec:4e:79:20:85:19:b5:89:9b:1c:a1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6b0366bbaeac7b5884e426df8009ec27a2c602e
        Validity
            Not Before: May 17 16:03:03 2024 GMT
            Not After : May 18 16:03:03 2024 GMT
        Subject: CN=1de38c7235811d59a2a5f431eb41c17e6e13bbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:45:14:d3:11:69:b7:08:ad:21:da:f7:35:
                    ce:94:77:74:a1:da:a8:59:3b:fd:47:e2:26:d9:de:
                    f7:c0:cd:5d:6b:5d:80:76:47:e1:57:85:d9:4d:d6:
                    4a:6d:2b:fe:22:d4:53:9f:19:29:cf:ff:ce:09:1e:
                    86:a3:ba:7c:35:00:06:f8:6e:78:52:fb:53:ba:d6:
                    54:e6:6d:c9:2b:ef:37:2b:6d:85:d3:cc:43:16:92:
                    93:c1:c5:61:a5:05:15:d8:ae:be:c1:82:89:71:ad:
                    1c:f3:b0:e3:9e:bd:2b:be:a5:e8:b8:b4:43:ee:6c:
                    28:f8:65:8f:58:d6:a5:9f:61:75:31:26:fb:7b:a5:
                    22:e8:d2:25:3a:1d:9b:bc:89:da:96:c5:4d:67:0d:
                    64:7d:a9:26:0a:80:25:dc:a7:b2:d4:f0:0a:ef:1c:
                    90:93:1d:85:4e:a1:96:94:0b:b5:fd:4a:6c:e4:40:
                    47:10:69:f5:0f:34:1c:41:dc:06:cf:5e:b3:15:fd:
                    6a:4b:e3:0f:7e:7f:6e:8a:05:ad:74:c8:5a:1a:23:
                    04:3f:32:a0:4a:54:f1:f1:9e:ff:78:a9:2f:bb:73:
                    e1:e7:b9:1a:55:bb:d2:60:49:98:5d:a5:27:d4:3d:
                    39:22:df:b1:5f:98:3b:b4:7d:19:ae:47:7d:54:50:
                    d0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E3:8C:72:35:81:1D:59:A2:A5:F4:31:EB:41:C1:7E:6E:13:BB:AB
            X509v3 Authority Key Identifier:
                keyid:F6:B0:36:6B:BA:EA:C7:B5:88:4E:42:6D:F8:00:9E:C2:7A:2C:60:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rA2a7rqx7WITkJt-ACewnosYC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fa707a-b334-4b05-83fa-1420b84134d3/1/9rA2a7rqx7WITkJt-ACewnosYC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ec:9b:d2:13:26:99:52:9f:6b:13:4d:ca:f4:af:47:f3:38:
         4e:75:37:50:67:5a:2e:9c:54:30:15:ea:a8:7e:c5:62:c7:d1:
         b8:ed:d2:0d:a4:7d:00:31:c7:e4:6d:74:18:74:92:14:d5:24:
         cb:76:a7:77:7c:d9:4e:e2:70:81:7c:5a:d6:0e:d3:88:ff:85:
         33:76:f2:37:34:38:e3:74:84:1a:cc:8e:96:b3:fb:a6:07:be:
         80:c7:9f:cc:3d:af:b9:64:9c:47:cc:ea:ad:20:7d:e0:b6:f8:
         44:47:f0:45:ed:f7:d4:0e:86:53:6b:bc:ac:cb:1f:56:db:27:
         f5:03:3e:1c:c3:fe:5f:2b:02:03:ab:3a:42:93:ee:ee:1e:62:
         2b:26:23:43:47:c8:33:1c:73:d2:c2:d5:3d:5e:52:20:26:af:
         78:0f:ec:6b:d0:70:e7:b8:52:a3:16:2a:ca:16:c1:5a:23:ab:
         ab:a1:4b:9b:32:90:e3:2e:17:f8:5d:7e:53:9e:cf:19:e3:9a:
         36:00:55:25:fa:48:7f:7a:7f:89:d1:c9:9f:4c:72:26:09:41:
         85:ea:e9:f4:3f:1c:79:e0:49:21:87:eb:c2:e0:54:ea:fd:ac:
         19:e8:e4:5f:47:ac:89:22:2a:07:d4:af:15:47:38:62:23:ce:
         d0:fa:5e:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSuP/7E55IIUZtYmbHKEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YjAzNjZiYmFlYWM3YjU4ODRlNDI2ZGY4MDA5ZWMyN2Ey
YzYwMmUwHhcNMjQwNTE3MTYwMzAzWhcNMjQwNTE4MTYwMzAzWjAzMTEwLwYDVQQD
EygxZGUzOGM3MjM1ODExZDU5YTJhNWY0MzFlYjQxYzE3ZTZlMTNiYmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfJFFNMRabcIrSHa9zXOlHd0odqo
WTv9R+Im2d73wM1da12AdkfhV4XZTdZKbSv+ItRTnxkpz//OCR6Go7p8NQAG+G54
UvtTutZU5m3JK+83K22F08xDFpKTwcVhpQUV2K6+wYKJca0c87Djnr0rvqXouLRD
7mwo+GWPWNaln2F1MSb7e6Ui6NIlOh2bvInalsVNZw1kfakmCoAl3Key1PAK7xyQ
kx2FTqGWlAu1/Ups5EBHEGn1DzQcQdwGz16zFf1qS+MPfn9uigWtdMhaGiMEPzKg
SlTx8Z7/eKkvu3Ph57kaVbvSYEmYXaUn1D05It+xX5g7tH0Zrkd9VFDQZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3jjHI1gR1ZoqX0MetBwX5uE7urMB8GA1UdIwQY
MBaAFPawNmu66se1iE5CbfgAnsJ6LGAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJBMmE3cnF4N1dJVGtKdC1BQ2V3bm9zWUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mYTcwN2EtYjMzNC00YjA1LTgzZmEt
MTQyMGI4NDEzNGQzLzEvOXJBMmE3cnF4N1dJVGtKdC1BQ2V3bm9zWUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9mYTcwN2EtYjMzNC00YjA1LTgzZmEtMTQyMGI4NDEzNGQz
LzEvOXJBMmE3cnF4N1dJVGtKdC1BQ2V3bm9zWUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeyb0hMm
mVKfaxNNyvSvR/M4TnU3UGdaLpxUMBXqqH7FYsfRuO3SDaR9ADHH5G10GHSSFNUk
y3and3zZTuJwgXxa1g7TiP+FM3byNzQ443SEGsyOlrP7pge+gMefzD2vuWScR8zq
rSB94Lb4REfwRe331A6GU2u8rMsfVtsn9QM+HMP+XysCA6s6QpPu7h5iKyYjQ0fI
Mxxz0sLVPV5SICaveA/sa9Bw57hSoxYqyhbBWiOrq6FLmzKQ4y4X+F1+U57PGeOa
NgBVJfpIf3p/idHJn0xyJglBherp9D8ceeBJIYfrwuBU6v2sGejkX0esiSIqB9Sv
FUc4YiPO0PpegQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:15:30 2024 by rpki-client on console-ams.rpki-client.org