Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File:                     2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier:          yjDKqEzLF13/+kQaRaBXp+4dGp8a3z+yIOY2gZzzxIg=
Subject key identifier:   CE:B0:08:B8:D6:34:18:6F:00:99:48:30:EF:03:52:E6:E3:F1:E4:7D
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer:       /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial:       019062CBEE1F5046E9B318719C87060E0557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number:          0894
Signing time:             Sat 29 Jun 2024 07:00:50 +0000
Manifest this update:     Sat 29 Jun 2024 07:00:50 +0000
Manifest next update:     Sun 30 Jun 2024 07:00:50 +0000
Files and hashes:         1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: xZkV3xcPVmYUbGz6XVXLX7HeTamBpGLRG4t3ZqiiOrM=)
                          2: CbuE_XwyQkwKHDc3YmSFPwu3LVg.roa (hash: BVJ7JaJOf+rCAa7TNXT2FAbJQePyEkeapeaPnAys5B0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 07:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:62:cb:ee:1f:50:46:e9:b3:18:71:9c:87:06:0e:05:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
        Validity
            Not Before: Jun 29 07:00:50 2024 GMT
            Not After : Jun 30 07:00:50 2024 GMT
        Subject: CN=ceb008b8d634186f00994830ef0352e6e3f1e47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:88:39:7d:8c:b9:5e:8a:76:51:f9:58:80:
                    95:2b:21:63:bc:da:64:27:11:4e:70:5f:3f:d8:16:
                    52:53:03:ac:07:0e:83:29:fe:3f:10:18:30:83:3c:
                    6a:1d:6e:00:68:5e:13:12:a1:6b:3a:42:bb:f4:b1:
                    14:f8:73:da:05:b1:c6:54:2f:32:ab:54:d0:1f:f4:
                    79:64:bf:24:fa:d6:cd:4e:a4:4f:9a:18:1a:cc:1f:
                    e8:24:52:83:99:fd:b7:a3:b8:1f:fd:99:b3:43:3a:
                    ee:09:2d:08:8d:b4:88:21:af:c6:d3:ed:2c:18:51:
                    a4:17:2f:92:5a:3f:fe:58:63:75:25:a2:17:82:e5:
                    52:10:91:44:8f:d3:a2:75:1e:db:71:e8:b4:3d:69:
                    e3:8f:2b:0d:7c:5b:d6:94:8e:b9:e6:43:80:64:fd:
                    8e:46:c7:64:95:ee:8c:7f:2a:1d:ee:66:b4:74:43:
                    31:df:55:63:9c:3f:ec:0d:2e:15:31:de:55:0c:a5:
                    77:5d:05:82:13:a4:cd:0a:c2:2f:d7:9f:6a:77:21:
                    f9:8b:70:49:d9:50:90:15:cf:97:e2:71:74:e8:4f:
                    e0:89:e7:38:ee:a1:dd:d5:8d:10:a4:48:9e:33:2a:
                    a3:2e:07:10:a4:8d:e1:9b:ce:5b:32:81:e4:dc:39:
                    93:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B0:08:B8:D6:34:18:6F:00:99:48:30:EF:03:52:E6:E3:F1:E4:7D
            X509v3 Authority Key Identifier:
                keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:4d:17:64:d1:b2:16:73:09:6c:ec:64:5b:26:69:3f:9d:6f:
         c6:82:18:32:69:25:83:0e:a9:78:55:73:7e:aa:ba:bc:b7:b7:
         1d:2d:f1:36:2d:57:aa:1c:3c:ab:92:95:93:fd:3a:0a:52:2c:
         af:ee:3a:0e:61:8d:46:c1:77:59:38:a8:ed:bb:4a:76:46:3b:
         24:81:12:94:d0:3e:a1:52:62:ea:11:40:fa:dd:09:a6:25:66:
         58:86:09:14:f5:ae:29:fe:25:03:c6:6c:a2:19:aa:d8:37:08:
         8a:eb:6c:24:ad:3a:ab:c8:25:29:57:1b:b6:35:61:a5:37:95:
         19:8a:db:9a:a4:91:e0:36:f1:b6:4e:36:3d:d4:33:c1:74:a0:
         92:f8:61:f3:2c:32:7d:f4:2c:76:52:ad:27:b3:eb:9d:6e:b5:
         0d:4b:d1:09:2b:3c:83:f3:2c:67:06:a1:ed:10:0f:0d:9d:f1:
         b7:85:0f:d1:41:a5:2d:f3:e5:05:87:32:34:41:6c:d8:88:bc:
         1d:f6:7a:01:2f:26:59:99:38:83:8c:3a:01:22:73:89:6d:63:
         07:2c:42:ab:24:53:b7:32:9e:5e:72:d8:7e:7c:a3:7b:ac:02:
         7f:73:8d:9c:4c:b0:0c:3a:6b:b1:51:92:45:84:f8:34:b6:a4:
         d3:17:f5:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBiy+4fUEbpsxhxnIcGDgVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YjkyYWY0NGI3OWZjMGFjZjY0MTAzZWI1ZmIzMzdhOTFl
ZWNkOWEwHhcNMjQwNjI5MDcwMDUwWhcNMjQwNjMwMDcwMDUwWjAzMTEwLwYDVQQD
EyhjZWIwMDhiOGQ2MzQxODZmMDA5OTQ4MzBlZjAzNTJlNmUzZjFlNDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUmIOX2MuV6KdlH5WICVKyFjvNpk
JxFOcF8/2BZSUwOsBw6DKf4/EBgwgzxqHW4AaF4TEqFrOkK79LEU+HPaBbHGVC8y
q1TQH/R5ZL8k+tbNTqRPmhgazB/oJFKDmf23o7gf/ZmzQzruCS0IjbSIIa/G0+0s
GFGkFy+SWj/+WGN1JaIXguVSEJFEj9OidR7bcei0PWnjjysNfFvWlI655kOAZP2O
Rsdkle6Mfyod7ma0dEMx31VjnD/sDS4VMd5VDKV3XQWCE6TNCsIv159qdyH5i3BJ
2VCQFc+X4nF06E/giec47qHd1Y0QpEieMyqjLgcQpI3hm85bMoHk3DmTDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6wCLjWNBhvAJlIMO8DUubj8eR9MB8GA1UdIwQY
MBaAFNi5KvRLefwKz2QQPrX7M3qR7s2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMt
NjdhYzk3MTE4Y2FjLzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMtNjdhYzk3MTE4Y2Fj
LzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOU0XZNGy
FnMJbOxkWyZpP51vxoIYMmklgw6peFVzfqq6vLe3HS3xNi1Xqhw8q5KVk/06ClIs
r+46DmGNRsF3WTio7btKdkY7JIESlNA+oVJi6hFA+t0JpiVmWIYJFPWuKf4lA8Zs
ohmq2DcIiutsJK06q8glKVcbtjVhpTeVGYrbmqSR4Dbxtk42PdQzwXSgkvhh8ywy
ffQsdlKtJ7PrnW61DUvRCSs8g/MsZwah7RAPDZ3xt4UP0UGlLfPlBYcyNEFs2Ii8
HfZ6AS8mWZk4g4w6ASJziW1jByxCqyRTtzKeXnLYfnyje6wCf3ONnEywDDprsVGS
RYT4NLak0xf1cA==
-----END CERTIFICATE-----
Generated at Sat Jun 29 14:07:53 2024 by rpki-client on console-fra.rpki-client.org