Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
File:                     FrUekDbKbnVqAWPDh3ggzV_OEa4.mft (raw, json)
Hash identifier:          g63yDwlHNa+oRdl7a7JUpkg0WLieIYBbBRMXGAgxORg=
Subject key identifier:   39:0E:72:55:53:EF:91:C8:67:2D:33:FE:73:D1:6E:B9:48:96:F3:6D
Authority key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
Certificate issuer:       /CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Certificate serial:       018FD789080D1EECCA5863086CB7E8D1940D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
Manifest number:          0896
Signing time:             Sun 02 Jun 2024 06:00:32 +0000
Manifest this update:     Sun 02 Jun 2024 06:00:32 +0000
Manifest next update:     Mon 03 Jun 2024 06:00:32 +0000
Files and hashes:         1: FrUekDbKbnVqAWPDh3ggzV_OEa4.crl (hash: HMlZbzL4X6Np0VJo32kRdZ5riW3CWyYtE5KvfdmSMCs=)
                          2: dpdd_5ts9zRsdLfIozCimvlNDr8.roa (hash: gJH06dX21BcYzgm78cSADbgWBh7YQMVF1RkzRWo07Hc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d7:89:08:0d:1e:ec:ca:58:63:08:6c:b7:e8:d1:94:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
        Validity
            Not Before: Jun  2 06:00:32 2024 GMT
            Not After : Jun  3 06:00:32 2024 GMT
        Subject: CN=390e725553ef91c8672d33fe73d16eb94896f36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f5:30:1c:3f:97:cd:df:e5:91:d7:aa:ef:5b:
                    17:11:77:1d:6e:a1:c1:31:0b:15:1b:d9:9b:3c:5b:
                    5d:77:c0:19:7c:30:56:c3:99:45:ff:91:cb:90:76:
                    1c:19:3e:b6:0f:33:33:3d:06:c3:ba:31:ad:c5:e0:
                    e4:4f:c9:aa:e3:07:51:d5:04:e4:21:9a:0f:4d:53:
                    92:3e:be:39:d6:66:2e:d9:a3:3e:db:09:bb:cf:16:
                    ab:28:5d:d1:30:c6:25:ec:6d:41:c2:31:d0:a5:9a:
                    57:27:75:74:2d:75:3d:89:9d:d4:80:21:e3:ab:00:
                    3f:e2:39:56:37:19:ac:67:b9:2b:04:af:1d:83:d5:
                    fa:a3:a4:bb:74:26:21:d4:35:47:17:05:18:37:50:
                    67:a6:95:6c:08:a5:13:66:d3:6d:61:8a:0a:1c:86:
                    eb:95:2b:cf:b3:51:9a:65:ad:10:80:79:eb:4d:ce:
                    67:6b:91:26:cc:3b:c0:2d:61:77:65:b4:ac:7e:c5:
                    cd:5b:03:5e:65:84:f9:23:0b:5d:28:52:0b:ef:d9:
                    4a:89:02:b9:c7:a3:87:07:67:37:e4:43:23:71:ed:
                    49:9d:f9:14:12:4a:b3:e8:5f:7e:de:50:af:58:20:
                    b6:72:18:f6:85:c2:ce:a0:af:1a:3b:b7:fc:c4:d3:
                    7c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0E:72:55:53:EF:91:C8:67:2D:33:FE:73:D1:6E:B9:48:96:F3:6D
            X509v3 Authority Key Identifier:
                keyid:16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:0a:37:6b:36:ed:76:81:bb:a9:2d:23:9f:66:da:b8:74:4c:
         be:d0:85:e5:05:39:ec:a6:0a:9f:6f:4c:e6:65:fc:c7:17:6e:
         c8:a2:02:d2:d3:07:96:67:2b:39:ac:1c:ee:65:48:60:14:1c:
         67:a0:18:4c:be:6a:6a:e0:81:7f:62:51:d6:fa:59:f2:46:55:
         f2:4f:d9:14:12:9f:f6:b4:d1:59:c7:25:34:c0:22:ef:2a:db:
         56:be:2f:df:b8:1e:e8:f5:63:a6:84:3f:65:2e:7a:9e:dd:6f:
         e7:f4:2e:ad:68:33:9d:79:8e:5d:51:a5:1e:80:26:ba:ce:d6:
         0d:8f:5c:b5:fb:53:57:e7:3a:83:12:80:7f:0b:8c:b0:35:fa:
         b1:6a:ff:44:ff:cf:dc:6e:b4:dd:66:10:3f:2f:dd:ea:05:74:
         a1:2d:2d:52:6d:ea:ca:c4:66:c6:59:d0:64:e7:a9:c3:20:30:
         90:41:19:68:7d:76:e5:f6:ad:c1:3b:76:dc:0d:3c:17:cf:89:
         ea:4c:4e:40:8f:81:2b:b5:2f:35:db:95:1e:8d:3a:c1:74:5a:
         10:a0:66:16:98:fe:ea:f4:9e:19:e5:2c:9b:78:d9:02:ef:80:
         e7:4a:39:9b:5e:db:26:7c:16:ed:ca:a4:c5:de:2d:96:bf:7b:
         76:ae:3d:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY/XiQgNHuzKWGMIbLfo0ZQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YjUxZTkwMzZjYTZlNzU2YTAxNjNjMzg3NzgyMGNkNWZj
ZTExYWUwHhcNMjQwNjAyMDYwMDMyWhcNMjQwNjAzMDYwMDMyWjAzMTEwLwYDVQQD
EygzOTBlNzI1NTUzZWY5MWM4NjcyZDMzZmU3M2QxNmViOTQ4OTZmMzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPUwHD+Xzd/lkdeq71sXEXcdbqHB
MQsVG9mbPFtdd8AZfDBWw5lF/5HLkHYcGT62DzMzPQbDujGtxeDkT8mq4wdR1QTk
IZoPTVOSPr451mYu2aM+2wm7zxarKF3RMMYl7G1BwjHQpZpXJ3V0LXU9iZ3UgCHj
qwA/4jlWNxmsZ7krBK8dg9X6o6S7dCYh1DVHFwUYN1BnppVsCKUTZtNtYYoKHIbr
lSvPs1GaZa0QgHnrTc5na5EmzDvALWF3ZbSsfsXNWwNeZYT5IwtdKFIL79lKiQK5
x6OHB2c35EMjce1JnfkUEkqz6F9+3lCvWCC2chj2hcLOoK8aO7f8xNN8ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkOclVT75HIZy0z/nPRbrlIlvNtMB8GA1UdIwQY
MBaAFBa1HpA2ym51agFjw4d4IM1fzhGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnJVZWtEYktiblZxQVdQRGgzZ2d6Vl9PRWE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NDE5MTctYTY4OC00MmNkLWE4Yzgt
MmVjNDEyNGRkNDA5LzEvRnJVZWtEYktiblZxQVdQRGgzZ2d6Vl9PRWE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85NDE5MTctYTY4OC00MmNkLWE4YzgtMmVjNDEyNGRkNDA5
LzEvRnJVZWtEYktiblZxQVdQRGgzZ2d6Vl9PRWE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgo3azbt
doG7qS0jn2bauHRMvtCF5QU57KYKn29M5mX8xxduyKIC0tMHlmcrOawc7mVIYBQc
Z6AYTL5qauCBf2JR1vpZ8kZV8k/ZFBKf9rTRWcclNMAi7yrbVr4v37ge6PVjpoQ/
ZS56nt1v5/QurWgznXmOXVGlHoAmus7WDY9ctftTV+c6gxKAfwuMsDX6sWr/RP/P
3G603WYQPy/d6gV0oS0tUm3qysRmxlnQZOepwyAwkEEZaH125fatwTt23A08F8+J
6kxOQI+BK7UvNduVHo06wXRaEKBmFpj+6vSeGeUsm3jZAu+A50o5m17bJnwW7cqk
xd4tlr97dq49pA==
-----END CERTIFICATE-----
Generated at Sun Jun 2 09:31:47 2024 by rpki-client on console-ams.rpki-client.org