Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/6TEUABhy-ryTnba-3B5s1pFGIRc.mft
File:                     6TEUABhy-ryTnba-3B5s1pFGIRc.mft (raw, json)
Hash identifier:          cTOtPuEjeJ6nvV0kkJta1KihHF+ZaHPOQ8vkMJiTrvY=
Subject key identifier:   2D:63:77:8F:A4:34:2E:18:5D:95:B8:8D:6B:BF:B9:BE:BE:68:DA:7A
Authority key identifier: E9:31:14:00:18:72:FA:BC:93:9D:B6:BE:DC:1E:6C:D6:91:46:21:17
Certificate issuer:       /CN=e93114001872fabc939db6bedc1e6cd691462117
Certificate serial:       018F411EC306011355A3DD811AE2E2764DEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TEUABhy-ryTnba-3B5s1pFGIRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/6TEUABhy-ryTnba-3B5s1pFGIRc.mft
Manifest number:          0621
Signing time:             Sat 04 May 2024 01:01:26 +0000
Manifest this update:     Sat 04 May 2024 01:01:26 +0000
Manifest next update:     Sun 05 May 2024 01:01:26 +0000
Files and hashes:         1: 6TEUABhy-ryTnba-3B5s1pFGIRc.crl (hash: sk9XDDMlG2E6hXL7HxcAs07/rrW8CslNZ6SozNLufAs=)
                          2: xR7tu-g0VkAo75q4zFlmP3o7Q3Y.roa (hash: E+nbfPTBJdqGTxnoOD8DkAiXqQCjiEyFxpnniZ+DBXg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/6TEUABhy-ryTnba-3B5s1pFGIRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/6TEUABhy-ryTnba-3B5s1pFGIRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TEUABhy-ryTnba-3B5s1pFGIRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:1e:c3:06:01:13:55:a3:dd:81:1a:e2:e2:76:4d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93114001872fabc939db6bedc1e6cd691462117
        Validity
            Not Before: May  4 01:01:26 2024 GMT
            Not After : May  5 01:01:26 2024 GMT
        Subject: CN=2d63778fa4342e185d95b88d6bbfb9bebe68da7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:ef:aa:76:ae:ba:ce:5c:16:d1:b9:fc:23:
                    62:81:e5:c2:a7:cb:83:5d:37:18:8c:61:30:98:54:
                    9a:66:2d:e2:a9:f0:0f:2e:7f:08:a2:32:3e:46:d2:
                    49:74:3f:80:4d:bc:4b:ad:44:5b:9a:10:cd:02:15:
                    11:9e:11:99:b9:a8:c0:d1:b1:8f:8c:17:c9:7a:91:
                    ef:8c:c6:b3:f9:d9:fa:54:50:28:8b:05:02:70:4e:
                    bf:ed:ed:16:34:9d:cc:7e:42:cd:5e:dd:a6:69:af:
                    39:dd:a2:4e:09:1f:6f:f3:5e:af:fe:a2:41:dd:09:
                    37:f3:6e:e1:a2:c7:3d:18:d6:5d:89:5e:8e:fb:fc:
                    d6:71:35:2b:d2:8f:74:4b:14:d3:6d:b8:13:c6:7f:
                    f4:f2:3d:ca:c5:54:b4:aa:72:8c:a8:18:a0:2b:10:
                    43:a2:88:50:d5:e4:ac:6f:d3:20:70:c6:a5:55:0a:
                    61:ab:f1:61:42:3e:6f:b8:ea:24:64:a7:ba:b1:d4:
                    41:f4:87:8c:64:11:7f:b1:1b:e8:66:35:d3:24:1e:
                    2b:09:52:85:09:9a:5c:9a:c6:5d:c3:0c:64:87:81:
                    bf:b7:e2:57:f1:bc:2d:22:cb:66:85:8a:48:7f:0f:
                    20:24:4d:29:d5:e7:59:dc:22:76:cb:36:ae:18:1e:
                    ea:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:63:77:8F:A4:34:2E:18:5D:95:B8:8D:6B:BF:B9:BE:BE:68:DA:7A
            X509v3 Authority Key Identifier:
                keyid:E9:31:14:00:18:72:FA:BC:93:9D:B6:BE:DC:1E:6C:D6:91:46:21:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TEUABhy-ryTnba-3B5s1pFGIRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/6TEUABhy-ryTnba-3B5s1pFGIRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2aab9a-fbe1-4f2a-a95d-ebc7043dbbdc/1/6TEUABhy-ryTnba-3B5s1pFGIRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d6:5a:42:22:7c:43:84:93:48:8a:a6:52:26:d1:56:34:1c:
         62:ee:a9:47:ac:75:bf:a9:66:18:b2:84:30:dd:1f:ff:96:be:
         8a:77:f8:56:33:52:c0:a9:fd:4a:2b:3c:e1:49:9f:a5:89:10:
         6e:3b:cd:6d:5e:ab:6f:6e:61:ed:bf:aa:a2:00:cc:05:3c:92:
         e1:0b:be:ae:f5:5b:6e:86:8a:5f:a3:83:e0:4e:73:82:5c:62:
         40:4c:c7:ee:d7:de:b9:0e:80:b8:33:9f:e8:1c:5e:f6:b7:74:
         f5:38:2f:96:a9:ff:02:69:2b:2c:9c:fb:b2:75:19:4b:c7:b6:
         db:c8:ee:00:09:7f:d3:6f:fa:45:8b:d5:a2:b9:06:fe:b7:a5:
         54:9b:5d:de:62:42:25:13:f2:10:f4:0d:28:d5:14:38:6b:4a:
         24:cc:d3:76:40:cd:67:c6:0d:75:89:d9:af:15:6c:1d:b3:a9:
         fc:61:06:35:27:5c:a2:d6:a2:f4:2d:ee:fc:2c:c9:f8:8b:3a:
         eb:92:fd:83:3d:65:26:a1:78:21:d5:07:6f:26:ad:5b:71:57:
         b8:39:a5:bc:13:f5:d5:5b:2e:5e:84:48:8d:28:7e:85:19:4d:
         f7:6b:83:b8:3e:26:9d:40:1c:cd:8b:bd:7c:cd:3d:4d:eb:e0:
         25:02:28:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9BHsMGARNVo92BGuLidk3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzExNDAwMTg3MmZhYmM5MzlkYjZiZWRjMWU2Y2Q2OTE0
NjIxMTcwHhcNMjQwNTA0MDEwMTI2WhcNMjQwNTA1MDEwMTI2WjAzMTEwLwYDVQQD
EygyZDYzNzc4ZmE0MzQyZTE4NWQ5NWI4OGQ2YmJmYjliZWJlNjhkYTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIHvqnauus5cFtG5/CNigeXCp8uD
XTcYjGEwmFSaZi3iqfAPLn8IojI+RtJJdD+ATbxLrURbmhDNAhURnhGZuajA0bGP
jBfJepHvjMaz+dn6VFAoiwUCcE6/7e0WNJ3MfkLNXt2maa853aJOCR9v816v/qJB
3Qk3827hosc9GNZdiV6O+/zWcTUr0o90SxTTbbgTxn/08j3KxVS0qnKMqBigKxBD
oohQ1eSsb9MgcMalVQphq/FhQj5vuOokZKe6sdRB9IeMZBF/sRvoZjXTJB4rCVKF
CZpcmsZdwwxkh4G/t+JX8bwtIstmhYpIfw8gJE0p1edZ3CJ2yzauGB7qsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1jd4+kNC4YXZW4jWu/ub6+aNp6MB8GA1UdIwQY
MBaAFOkxFAAYcvq8k522vtwebNaRRiEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRFVUFCaHktcnlUbmJhLTNCNXMxcEZHSVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yYWFiOWEtZmJlMS00ZjJhLWE5NWQt
ZWJjNzA0M2RiYmRjLzEvNlRFVUFCaHktcnlUbmJhLTNCNXMxcEZHSVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yYWFiOWEtZmJlMS00ZjJhLWE5NWQtZWJjNzA0M2RiYmRj
LzEvNlRFVUFCaHktcnlUbmJhLTNCNXMxcEZHSVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtZaQiJ8
Q4STSIqmUibRVjQcYu6pR6x1v6lmGLKEMN0f/5a+inf4VjNSwKn9Sis84UmfpYkQ
bjvNbV6rb25h7b+qogDMBTyS4Qu+rvVbboaKX6OD4E5zglxiQEzH7tfeuQ6AuDOf
6Bxe9rd09Tgvlqn/AmkrLJz7snUZS8e228juAAl/02/6RYvVorkG/relVJtd3mJC
JRPyEPQNKNUUOGtKJMzTdkDNZ8YNdYnZrxVsHbOp/GEGNSdcotai9C3u/CzJ+Is6
65L9gz1lJqF4IdUHbyatW3FXuDmlvBP11VsuXoRIjSh+hRlN92uDuD4mnUAczYu9
fM09TevgJQIopw==
-----END CERTIFICATE-----
Generated at Sat May 4 02:17:53 2024 by rpki-client on console-ams.rpki-client.org