Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
File:                     bcXjzvXaXn_fw2TF1aBALTpnhtw.mft (raw, json)
Hash identifier:          yHmY1Y8WxYiFb6qwl4KT1f1E1UYSr3y/rQ3PQ4ZHDgw=
Subject key identifier:   59:10:EE:AF:F3:BB:24:9B:D1:5C:E0:5F:60:04:86:B5:0D:F3:0B:1E
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Certificate issuer:       /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial:       018F87ED88B3773079FE003E78F3813C1672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
Manifest number:          0A12
Signing time:             Fri 17 May 2024 19:00:42 +0000
Manifest this update:     Fri 17 May 2024 19:00:42 +0000
Manifest next update:     Sat 18 May 2024 19:00:42 +0000
Files and hashes:         1: VH3G_303asJBWFa_lMh2ouHbT0k.roa (hash: jIJh4mrM4/T9puXMCbTg0BeeK2DYUK9ibWUESP1cZbk=)
                          2: bcXjzvXaXn_fw2TF1aBALTpnhtw.crl (hash: 3C7BTgmRO+iOvyKYfBeTZZwj369uLNh0a/J5OV8KW0A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:88:b3:77:30:79:fe:00:3e:78:f3:81:3c:16:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
        Validity
            Not Before: May 17 19:00:42 2024 GMT
            Not After : May 18 19:00:42 2024 GMT
        Subject: CN=5910eeaff3bb249bd15ce05f600486b50df30b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a7:d7:f0:1c:f2:82:64:a3:a8:61:b9:5c:df:
                    84:7e:37:c3:47:7f:21:f6:6b:7e:0b:09:3f:50:49:
                    b5:c6:70:84:4e:d1:87:17:09:7d:45:21:77:38:9d:
                    29:d9:4a:d2:7a:b9:f8:32:54:ba:60:aa:7d:bc:b7:
                    8a:f1:0b:80:d8:03:a1:05:9b:ce:f6:20:df:40:8f:
                    dd:60:9d:5b:61:4c:ae:df:47:40:e9:4d:93:19:0c:
                    77:31:af:c0:b0:c2:45:f7:65:b6:25:f6:e7:3d:d3:
                    18:c6:94:5a:d0:e0:6b:4c:ec:8b:57:5e:58:ac:11:
                    74:11:61:b7:b1:7d:2a:b4:0d:8c:cb:1c:bf:f4:41:
                    be:e4:08:14:dc:54:4c:c7:31:af:4e:8a:59:07:f7:
                    78:63:61:bf:7d:58:3f:fb:41:c5:70:99:e0:78:23:
                    a4:b3:d6:14:ae:0d:66:aa:4c:99:4f:e6:3c:c2:47:
                    0c:df:98:9d:2c:ef:87:15:b7:4f:f8:13:42:24:5f:
                    a2:c5:ca:51:d8:c9:a1:15:38:60:4e:91:15:4a:c3:
                    43:88:9b:b3:34:e2:f2:10:91:3d:26:71:98:a4:ef:
                    54:a6:f9:53:5c:21:1e:2d:33:5b:18:2d:f2:11:2b:
                    ed:1b:fd:81:d8:17:98:f0:c6:4c:65:79:a3:ab:53:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:10:EE:AF:F3:BB:24:9B:D1:5C:E0:5F:60:04:86:B5:0D:F3:0B:1E
            X509v3 Authority Key Identifier:
                keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:06:b6:2d:19:6c:ba:cb:28:86:3b:88:ff:12:d3:06:6b:69:
         b6:33:03:1f:15:1b:47:e9:f4:1c:e4:ce:5b:cd:35:0e:67:a7:
         10:d4:ed:1f:15:59:52:ca:39:c5:89:dc:b7:ab:9d:ae:1e:e0:
         94:b9:f9:90:aa:3c:f8:24:c3:36:16:43:ae:1a:16:89:a4:c6:
         2c:e0:e1:eb:ee:a9:2f:d4:82:62:6c:a9:38:f1:83:64:55:90:
         58:5f:42:d9:79:97:1e:5e:d8:56:9a:72:8c:11:a3:11:44:c6:
         e6:46:1d:59:14:e6:14:2c:cd:d8:58:3d:84:b1:00:35:c6:78:
         c8:68:2c:2e:c3:08:97:f2:c8:46:01:46:3f:b0:b1:74:8b:a1:
         f3:f0:02:e6:2e:6e:f9:b3:d6:81:1f:97:40:7b:c5:11:ad:b8:
         62:41:bb:5f:02:fc:72:7c:7c:7f:27:f6:b4:17:a6:87:6b:6f:
         7e:8f:0b:b0:08:69:50:86:e6:69:29:7c:64:ae:31:02:0d:4d:
         a9:8d:27:3e:03:d0:4c:bc:ab:ce:10:b9:d7:21:82:38:08:f3:
         2f:2d:de:f4:41:a3:39:4d:84:c5:b6:9b:08:10:1b:8d:b4:3d:
         9d:84:d4:07:a3:4e:f9:31:2e:a6:d0:c2:f1:a0:f4:6c:06:c8:
         56:8b:cc:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7YizdzB5/gA+ePOBPBZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYzVlM2NlZjVkYTVlN2ZkZmMzNjRjNWQ1YTA0MDJkM2E2
Nzg2ZGMwHhcNMjQwNTE3MTkwMDQyWhcNMjQwNTE4MTkwMDQyWjAzMTEwLwYDVQQD
Eyg1OTEwZWVhZmYzYmIyNDliZDE1Y2UwNWY2MDA0ODZiNTBkZjMwYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqfX8BzygmSjqGG5XN+EfjfDR38h
9mt+Cwk/UEm1xnCETtGHFwl9RSF3OJ0p2UrSern4MlS6YKp9vLeK8QuA2AOhBZvO
9iDfQI/dYJ1bYUyu30dA6U2TGQx3Ma/AsMJF92W2JfbnPdMYxpRa0OBrTOyLV15Y
rBF0EWG3sX0qtA2Myxy/9EG+5AgU3FRMxzGvTopZB/d4Y2G/fVg/+0HFcJngeCOk
s9YUrg1mqkyZT+Y8wkcM35idLO+HFbdP+BNCJF+ixcpR2MmhFThgTpEVSsNDiJuz
NOLyEJE9JnGYpO9UpvlTXCEeLTNbGC3yESvtG/2B2BeY8MZMZXmjq1OjZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkQ7q/zuySb0VzgX2AEhrUN8wseMB8GA1UdIwQY
MBaAFG3F48712l5/38NkxdWgQC06Z4bcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYt
Y2RjYzk2NjA3YjlhLzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYtY2RjYzk2NjA3Yjlh
LzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtAa2LRls
ussohjuI/xLTBmtptjMDHxUbR+n0HOTOW801DmenENTtHxVZUso5xYnct6udrh7g
lLn5kKo8+CTDNhZDrhoWiaTGLODh6+6pL9SCYmypOPGDZFWQWF9C2XmXHl7YVppy
jBGjEUTG5kYdWRTmFCzN2Fg9hLEANcZ4yGgsLsMIl/LIRgFGP7CxdIuh8/AC5i5u
+bPWgR+XQHvFEa24YkG7XwL8cnx8fyf2tBemh2tvfo8LsAhpUIbmaSl8ZK4xAg1N
qY0nPgPQTLyrzhC51yGCOAjzLy3e9EGjOU2ExbabCBAbjbQ9nYTUB6NO+TEuptDC
8aD0bAbIVovMzA==
-----END CERTIFICATE-----
Generated at Fri May 17 20:19:55 2024 by rpki-client on console-fra.rpki-client.org