Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
File:                     9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json)
Hash identifier:          ef9a5cQqrq/mFvBsq+J/9rppr/qAz6IRXd+uCZ4PMyo=
Subject key identifier:   D0:72:99:FF:29:5F:81:57:BD:51:B0:2A:73:89:93:2B:D3:CB:64:A0
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Certificate issuer:       /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial:       018F1936BCFB52A3DCBF0C706CAA0347D114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
Manifest number:          0AB7
Signing time:             Fri 26 Apr 2024 07:02:48 +0000
Manifest this update:     Fri 26 Apr 2024 07:02:48 +0000
Manifest next update:     Sat 27 Apr 2024 07:02:48 +0000
Files and hashes:         1: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: oV2IlVChx0Y7k4xXTd89r9oSFpqqKKhfGQ+rj3y0XNA=)
                          2: E40rcYJvh4ABfi8nQUF3Ua8Y3l0.roa (hash: +dxiWUD9SHUn6nQwazKHEKuahbt7roG6ojvutVPvzig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Apr 2024 07:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:19:36:bc:fb:52:a3:dc:bf:0c:70:6c:aa:03:47:d1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
        Validity
            Not Before: Apr 26 07:02:48 2024 GMT
            Not After : Apr 27 07:02:48 2024 GMT
        Subject: CN=d07299ff295f8157bd51b02a7389932bd3cb64a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:20:39:69:e5:29:98:09:62:b3:8e:e8:6c:
                    b3:5f:f8:b9:97:81:7e:2f:51:02:65:b8:97:aa:74:
                    10:ae:cc:5d:40:41:c9:11:d8:a5:17:5a:a6:d5:48:
                    d5:42:6e:19:64:39:2b:a7:2f:a7:ab:55:c5:3b:46:
                    c6:e2:04:f0:32:6c:3a:57:fb:ec:1f:24:aa:a0:2d:
                    27:1c:1c:6a:44:19:e8:bf:13:4b:da:43:fc:c7:30:
                    67:24:e0:12:3a:fb:c2:fd:5b:37:26:81:99:79:32:
                    c0:76:1e:12:89:b2:3d:73:ee:5f:18:60:44:80:6a:
                    9c:ae:f5:1f:46:4d:16:f8:00:3e:dd:83:5f:b0:f6:
                    1d:79:88:2b:3a:5e:41:fc:3c:02:bd:48:60:22:17:
                    19:99:5b:dd:6d:be:4f:7e:91:9a:94:dc:51:de:2e:
                    62:f7:03:69:c7:84:89:71:3b:0a:47:95:16:1d:e7:
                    57:d2:5e:9e:99:73:d5:a7:02:a4:b1:e8:ca:7e:ec:
                    e7:42:df:47:41:6e:04:04:72:b9:cc:77:0f:41:ba:
                    3f:a6:3b:da:31:ca:46:58:c0:c8:97:cb:4d:bc:45:
                    cf:2a:b1:87:88:6d:ca:cb:82:ec:61:df:eb:87:1a:
                    96:5e:be:c9:b7:59:06:de:b4:cb:1a:45:66:10:24:
                    a2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:72:99:FF:29:5F:81:57:BD:51:B0:2A:73:89:93:2B:D3:CB:64:A0
            X509v3 Authority Key Identifier:
                keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:9a:df:9b:7c:73:6a:ed:e9:57:59:76:79:72:cd:59:fc:06:
         ae:1d:94:30:9a:3d:5e:5f:7d:e7:f2:6a:2f:1c:cd:39:50:f4:
         a5:15:08:f2:ad:ad:b4:99:ab:6d:e2:89:ea:37:0d:c1:1e:f4:
         04:c3:7a:24:a9:0e:13:28:80:b1:94:24:66:1d:bc:09:78:f3:
         ce:c6:9d:6d:4b:95:c0:64:b1:c6:f6:46:e6:49:5e:40:70:42:
         41:bb:e4:06:a9:0b:01:8a:e9:e9:d4:44:df:d9:2a:58:59:a6:
         f0:92:ab:fc:f5:d3:23:a0:0e:ac:9c:75:5c:7f:50:a8:16:46:
         d3:ae:16:b2:a7:ca:6e:4d:3b:fa:91:e6:ab:3f:b8:26:72:61:
         d6:ea:79:aa:ee:67:49:ab:1f:7f:5c:b7:b8:87:3c:30:27:b1:
         dc:6f:8a:1f:88:db:9d:55:1a:91:05:ad:ee:05:b1:37:80:02:
         a7:df:86:f2:ee:c3:e0:8e:9d:81:39:e6:4b:45:b2:33:d7:14:
         6a:52:5b:b8:13:a4:47:80:64:40:ae:00:1c:14:ad:e8:d3:35:
         e1:db:11:6e:6b:f4:77:d2:74:10:06:2c:29:3e:00:2c:86:06:
         97:9f:ca:87:ca:27:f9:f0:21:64:ed:73:ba:fa:8b:83:d2:84:
         6a:26:0c:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8ZNrz7UqPcvwxwbKoDR9EUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTQ2NjhiYTc2Y2Y1NTBjNDEzOWMxNzMwMDE2MDA3N2Rj
ZWEwNTkwHhcNMjQwNDI2MDcwMjQ4WhcNMjQwNDI3MDcwMjQ4WjAzMTEwLwYDVQQD
EyhkMDcyOTlmZjI5NWY4MTU3YmQ1MWIwMmE3Mzg5OTMyYmQzY2I2NGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5wgOWnlKZgJYrOO6GyzX/i5l4F+
L1ECZbiXqnQQrsxdQEHJEdilF1qm1UjVQm4ZZDkrpy+nq1XFO0bG4gTwMmw6V/vs
HySqoC0nHBxqRBnovxNL2kP8xzBnJOASOvvC/Vs3JoGZeTLAdh4SibI9c+5fGGBE
gGqcrvUfRk0W+AA+3YNfsPYdeYgrOl5B/DwCvUhgIhcZmVvdbb5PfpGalNxR3i5i
9wNpx4SJcTsKR5UWHedX0l6emXPVpwKksejKfuznQt9HQW4EBHK5zHcPQbo/pjva
McpGWMDIl8tNvEXPKrGHiG3Ky4LsYd/rhxqWXr7Jt1kG3rTLGkVmECSiywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBymf8pX4FXvVGwKnOJkyvTy2SgMB8GA1UdIwQY
MBaAFPaUZounbPVQxBOcFzABYAd9zqBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ZTAzMTYtZjRiOS00Zjg5LWE4YTEt
N2U1MDkxM2FjMDFkLzEvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82ZTAzMTYtZjRiOS00Zjg5LWE4YTEtN2U1MDkxM2FjMDFk
LzEvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJrfm3xz
au3pV1l2eXLNWfwGrh2UMJo9Xl995/JqLxzNOVD0pRUI8q2ttJmrbeKJ6jcNwR70
BMN6JKkOEyiAsZQkZh28CXjzzsadbUuVwGSxxvZG5kleQHBCQbvkBqkLAYrp6dRE
39kqWFmm8JKr/PXTI6AOrJx1XH9QqBZG064WsqfKbk07+pHmqz+4JnJh1up5qu5n
Sasff1y3uIc8MCex3G+KH4jbnVUakQWt7gWxN4ACp9+G8u7D4I6dgTnmS0WyM9cU
alJbuBOkR4BkQK4AHBSt6NM14dsRbmv0d9J0EAYsKT4ALIYGl5/Kh8on+fAhZO1z
uvqLg9KEaiYMng==
-----END CERTIFICATE-----
Generated at Fri Apr 26 12:15:00 2024 by rpki-client on console-ams.rpki-client.org