Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File:                     7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier:          7J86sXPW6Ic+4V9uGJdLb5OHNHl34AV5HknJbPeb6rc=
Subject key identifier:   FB:4C:D7:CC:86:D6:45:AB:4A:6D:4B:95:AD:62:57:E3:B5:79:F0:17
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer:       /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial:       018F18FD767B2DCF3984D37FBD4BE0CE0EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number:          113E
Signing time:             Fri 26 Apr 2024 06:00:14 +0000
Manifest this update:     Fri 26 Apr 2024 06:00:14 +0000
Manifest next update:     Sat 27 Apr 2024 06:00:14 +0000
Files and hashes:         1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: CN4wTXYwi2zFm9BoBmlVu6+KUXvTNe6/YUCQh+cSJ+I=)
                          2: G-I2s73RA53gv5Zn7vKqiN6ibEs.roa (hash: Yi9Mn6mQMvxn2+JIGZov39pIUKQzg+KgeZ9fwDM8NfU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:18:fd:76:7b:2d:cf:39:84:d3:7f:bd:4b:e0:ce:0e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
        Validity
            Not Before: Apr 26 06:00:14 2024 GMT
            Not After : Apr 27 06:00:14 2024 GMT
        Subject: CN=fb4cd7cc86d645ab4a6d4b95ad6257e3b579f017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:15:b6:55:55:9f:99:de:41:a0:ab:26:33:c4:
                    95:02:90:f5:83:1c:db:3c:e1:90:cd:32:6a:5c:61:
                    48:e7:df:c0:4f:70:07:84:13:49:88:3b:17:43:26:
                    47:65:e0:a9:cc:dd:1e:56:56:da:43:08:84:ac:3e:
                    cd:5c:ff:4f:6a:d4:5e:d0:75:92:f8:fe:06:e4:5f:
                    2a:7e:b4:07:f7:43:fd:15:e7:39:bd:62:b0:85:d6:
                    1e:b0:b6:c0:e7:e8:bf:0b:98:3f:97:df:09:fa:41:
                    16:4e:08:33:6f:2e:61:8b:fc:b0:c2:44:0e:60:1c:
                    7a:d5:75:68:85:cd:90:9a:09:2a:81:64:4d:57:5a:
                    fd:b3:f2:5b:b8:6d:b7:56:ff:22:16:04:6f:33:60:
                    a8:82:09:79:af:18:2e:45:a4:e7:c1:8c:a1:37:35:
                    9a:ec:30:81:c0:8f:f0:7e:f9:2e:a7:6a:89:f3:b6:
                    b1:0d:04:52:cb:a1:eb:e4:e1:c0:4b:67:ee:1f:d4:
                    a7:da:d6:0d:55:ae:f1:f4:14:17:e0:eb:cf:46:3a:
                    6d:6b:ba:76:59:02:b1:2d:24:2a:21:9d:95:e3:92:
                    1f:1e:e7:7b:23:2a:a0:80:99:15:3c:7d:41:80:fd:
                    66:ac:2e:9e:93:b9:fb:3b:73:27:ec:65:49:2c:cc:
                    f6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4C:D7:CC:86:D6:45:AB:4A:6D:4B:95:AD:62:57:E3:B5:79:F0:17
            X509v3 Authority Key Identifier:
                keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:34:85:57:e8:c5:c5:cc:da:db:cd:49:cd:c0:b3:8f:82:6d:
         0c:a5:50:9b:63:71:51:1e:e3:de:e8:01:b5:e0:87:4b:ba:10:
         4f:98:8c:f4:72:10:1c:72:21:14:ba:b0:9c:1b:78:24:ac:bc:
         19:bc:04:d9:c6:47:b0:d6:92:d0:ec:00:79:bc:d7:d2:a4:72:
         22:43:67:f0:c0:53:5f:44:ee:2b:63:af:1e:ee:8e:4a:04:9c:
         c5:14:0d:c6:43:2f:a7:2e:a8:07:35:a2:d0:50:f4:37:97:08:
         ac:6b:dd:d2:bd:c1:e7:8e:fc:fe:f5:36:51:08:c8:95:39:e7:
         f5:99:29:fe:11:46:98:1f:b1:3c:d9:64:60:49:f5:86:20:8e:
         d9:9e:58:20:42:d1:4f:0d:95:7b:53:ee:b1:dc:f0:63:be:44:
         2a:9a:78:8f:58:d0:7b:a5:9c:61:cc:03:50:1a:95:94:eb:4e:
         90:71:09:89:53:f1:e9:16:f6:f6:9b:70:d4:4f:69:d0:b9:60:
         1b:8f:89:9b:e5:2f:48:e1:c6:f3:6e:b9:8d:00:db:e1:53:18:
         6f:3e:05:8c:95:78:ed:9d:a1:24:24:89:e4:ff:2a:1f:f9:c4:
         33:2b:1a:3c:d7:21:6e:d3:5a:ce:7c:e0:11:1c:eb:2c:3c:d0:
         66:a1:13:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8Y/XZ7Lc85hNN/vUvgzg7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZDZiZGFjYzUyMWVkY2E0YzA3NjA0OGRhODZmZWQ1ZGNk
NjEyMjAwHhcNMjQwNDI2MDYwMDE0WhcNMjQwNDI3MDYwMDE0WjAzMTEwLwYDVQQD
EyhmYjRjZDdjYzg2ZDY0NWFiNGE2ZDRiOTVhZDYyNTdlM2I1NzlmMDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRW2VVWfmd5BoKsmM8SVApD1gxzb
POGQzTJqXGFI59/AT3AHhBNJiDsXQyZHZeCpzN0eVlbaQwiErD7NXP9PatRe0HWS
+P4G5F8qfrQH90P9Fec5vWKwhdYesLbA5+i/C5g/l98J+kEWTggzby5hi/ywwkQO
YBx61XVohc2QmgkqgWRNV1r9s/JbuG23Vv8iFgRvM2Coggl5rxguRaTnwYyhNzWa
7DCBwI/wfvkup2qJ87axDQRSy6Hr5OHAS2fuH9Sn2tYNVa7x9BQX4OvPRjpta7p2
WQKxLSQqIZ2V45IfHud7IyqggJkVPH1BgP1mrC6ek7n7O3Mn7GVJLMz2PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtM18yG1kWrSm1Lla1iV+O1efAXMB8GA1UdIwQY
MBaAFOzWvazFIe3KTAdgSNqG/tXc1hIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYt
NDNlOTFlNWVmMTQ1LzEvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYtNDNlOTFlNWVmMTQ1
LzEvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjSFV+jF
xcza281JzcCzj4JtDKVQm2NxUR7j3ugBteCHS7oQT5iM9HIQHHIhFLqwnBt4JKy8
GbwE2cZHsNaS0OwAebzX0qRyIkNn8MBTX0TuK2OvHu6OSgScxRQNxkMvpy6oBzWi
0FD0N5cIrGvd0r3B5478/vU2UQjIlTnn9Zkp/hFGmB+xPNlkYEn1hiCO2Z5YIELR
Tw2Ve1PusdzwY75EKpp4j1jQe6WcYcwDUBqVlOtOkHEJiVPx6Rb29ptw1E9p0Llg
G4+Jm+UvSOHG8265jQDb4VMYbz4FjJV47Z2hJCSJ5P8qH/nEMysaPNchbtNaznzg
ERzrLDzQZqETpQ==
-----END CERTIFICATE-----
Generated at Fri Apr 26 12:16:00 2024 by rpki-client on console-ams.rpki-client.org