Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
File:                     stf5mYOKoWO_NE_GmRe7YNEv38M.mft (raw, json)
Hash identifier:          tkTkkxcDNe8/cAe/qtc4K5pza+mX90MqgPjo9A0q82E=
Subject key identifier:   0C:D7:E6:77:63:C1:F3:05:E5:DC:C0:16:4F:E2:40:21:94:7A:58:DF
Authority key identifier: B2:D7:F9:99:83:8A:A1:63:BF:34:4F:C6:99:17:BB:60:D1:2F:DF:C3
Certificate issuer:       /CN=b2d7f999838aa163bf344fc69917bb60d12fdfc3
Certificate serial:       019029EF3AD62ECEECC8A9680126244C8167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
Manifest number:          0CBB
Signing time:             Tue 18 Jun 2024 06:01:02 +0000
Manifest this update:     Tue 18 Jun 2024 06:01:02 +0000
Manifest next update:     Wed 19 Jun 2024 06:01:02 +0000
Files and hashes:         1: ahyawC6Xq_LSpM8Pb2vTXWj1dG0.roa (hash: Z6FsKfyPimiL1PQR4PDEwwsIeT5XbJ9YlswgqXBenoA=)
                          2: stf5mYOKoWO_NE_GmRe7YNEv38M.crl (hash: oxn8c5m1Hzcu3Q0ZlIgv6txMhNqgIdie2dP7fRP/cgY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:29:ef:3a:d6:2e:ce:ec:c8:a9:68:01:26:24:4c:81:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2d7f999838aa163bf344fc69917bb60d12fdfc3
        Validity
            Not Before: Jun 18 06:01:02 2024 GMT
            Not After : Jun 19 06:01:02 2024 GMT
        Subject: CN=0cd7e67763c1f305e5dcc0164fe24021947a58df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:24:e7:ff:e3:6b:aa:3a:3e:15:73:34:1c:
                    7c:31:d6:29:40:ba:2f:77:61:48:4a:ef:e9:d4:c0:
                    2d:c9:fe:26:f4:b2:2f:a8:99:2c:cd:fe:24:f4:ac:
                    69:e2:16:d8:14:9b:7d:08:96:75:3b:c5:71:18:5e:
                    0f:ea:75:63:06:f2:50:16:3a:75:a1:bc:b1:3e:11:
                    22:a0:b0:6f:47:76:d5:bc:68:68:f5:47:5a:ef:e4:
                    a9:c1:ab:55:df:96:bf:eb:77:fb:aa:f5:a5:10:dd:
                    49:d6:ae:15:56:e5:82:b8:ce:92:89:ec:80:36:90:
                    5b:b4:35:b0:a9:c2:24:c4:49:d0:02:76:56:39:f1:
                    2d:b7:61:67:a2:4a:22:35:04:7a:06:4c:0f:1f:27:
                    f4:bc:78:83:ff:ec:87:70:7e:9b:47:42:c7:13:ba:
                    6a:13:c5:d2:97:ad:17:6f:8e:aa:cf:fd:85:16:c5:
                    84:ba:3b:32:17:6e:f6:c2:96:7a:22:37:bc:27:80:
                    85:5c:ab:a1:f0:c6:5a:08:5b:21:9b:04:32:74:28:
                    28:c9:5f:2c:b6:b0:52:5c:3d:ef:80:9f:ec:fa:d3:
                    d2:49:52:cb:cf:11:db:80:25:28:a3:d8:bf:d0:f1:
                    3f:df:64:db:eb:4f:23:4d:69:97:a3:1f:1b:a3:b3:
                    ea:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D7:E6:77:63:C1:F3:05:E5:DC:C0:16:4F:E2:40:21:94:7A:58:DF
            X509v3 Authority Key Identifier:
                keyid:B2:D7:F9:99:83:8A:A1:63:BF:34:4F:C6:99:17:BB:60:D1:2F:DF:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e4:40:34:e7:6e:f0:cb:64:e9:79:62:77:28:1a:23:df:9b:
         48:e0:47:9e:42:b0:39:d9:78:72:d9:f3:29:56:d6:a5:59:0b:
         31:ad:5c:75:a6:cd:a9:fb:7e:61:07:5d:63:00:0d:36:51:b2:
         26:d4:40:f1:51:01:a6:f7:d8:c8:00:32:8a:54:53:d4:40:2f:
         ef:e4:21:68:b0:ea:e9:cc:b9:aa:0e:ae:41:5a:91:07:03:97:
         73:e6:29:b7:13:f1:72:f1:1f:7f:30:ff:39:e0:a0:59:dd:ee:
         fc:cc:f8:cb:a8:8a:63:39:e5:d9:1f:05:e6:6d:a5:1c:68:e5:
         39:a8:f8:f4:df:23:f9:b5:3d:f5:06:7d:be:af:00:ac:87:d4:
         f6:cd:92:e3:66:52:04:75:89:4d:81:61:26:12:e7:69:99:ac:
         20:ef:d4:56:21:b2:8b:b1:e1:96:aa:54:38:c3:bb:b4:25:17:
         75:f4:6f:58:39:ec:a8:47:fc:cc:56:57:41:f5:d2:bb:5c:13:
         2c:a7:6e:6d:75:c8:f0:dc:31:95:e4:72:ba:e3:64:86:4c:67:
         f3:de:68:c0:78:a3:41:0a:f2:31:60:0b:f1:06:d1:f1:04:36:
         2f:fc:6b:ba:f4:19:5f:d2:12:08:ff:bf:f7:cd:be:47:97:eb:
         62:6b:0b:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAp7zrWLs7syKloASYkTIFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZDdmOTk5ODM4YWExNjNiZjM0NGZjNjk5MTdiYjYwZDEy
ZmRmYzMwHhcNMjQwNjE4MDYwMTAyWhcNMjQwNjE5MDYwMTAyWjAzMTEwLwYDVQQD
EygwY2Q3ZTY3NzYzYzFmMzA1ZTVkY2MwMTY0ZmUyNDAyMTk0N2E1OGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+wk5//ja6o6PhVzNBx8MdYpQLov
d2FISu/p1MAtyf4m9LIvqJkszf4k9Kxp4hbYFJt9CJZ1O8VxGF4P6nVjBvJQFjp1
obyxPhEioLBvR3bVvGho9Uda7+SpwatV35a/63f7qvWlEN1J1q4VVuWCuM6SieyA
NpBbtDWwqcIkxEnQAnZWOfEtt2FnokoiNQR6BkwPHyf0vHiD/+yHcH6bR0LHE7pq
E8XSl60Xb46qz/2FFsWEujsyF272wpZ6Ije8J4CFXKuh8MZaCFshmwQydCgoyV8s
trBSXD3vgJ/s+tPSSVLLzxHbgCUoo9i/0PE/32Tb608jTWmXox8bo7Pq1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzX5ndjwfMF5dzAFk/iQCGUeljfMB8GA1UdIwQY
MBaAFLLX+ZmDiqFjvzRPxpkXu2DRL9/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3RmNW1ZT0tvV09fTkVfR21SZTdZTkV2MzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82OThlZmItYzZiNC00ZDJjLTkzNjgt
N2NlYzJkNTM0NWI0LzEvc3RmNW1ZT0tvV09fTkVfR21SZTdZTkV2MzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82OThlZmItYzZiNC00ZDJjLTkzNjgtN2NlYzJkNTM0NWI0
LzEvc3RmNW1ZT0tvV09fTkVfR21SZTdZTkV2MzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+RANOdu
8Mtk6XlidygaI9+bSOBHnkKwOdl4ctnzKVbWpVkLMa1cdabNqft+YQddYwANNlGy
JtRA8VEBpvfYyAAyilRT1EAv7+QhaLDq6cy5qg6uQVqRBwOXc+YptxPxcvEffzD/
OeCgWd3u/Mz4y6iKYznl2R8F5m2lHGjlOaj49N8j+bU99QZ9vq8ArIfU9s2S42ZS
BHWJTYFhJhLnaZmsIO/UViGyi7HhlqpUOMO7tCUXdfRvWDnsqEf8zFZXQfXSu1wT
LKdubXXI8NwxleRyuuNkhkxn895owHijQQryMWAL8QbR8QQ2L/xruvQZX9ISCP+/
982+R5frYmsLCg==
-----END CERTIFICATE-----
Generated at Tue Jun 18 11:36:25 2024 by rpki-client on console-ams.rpki-client.org