Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
File:                     N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json)
Hash identifier:          CHWU7BlKtRtQLvl3zKAuMzayuGVNSKhxrhV9GjSVuwY=
Subject key identifier:   0F:CB:A4:EE:07:D9:55:B9:70:CA:04:E8:8B:12:D2:DE:6F:7B:B2:7C
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Certificate issuer:       /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial:       01906C3C845A035482516875B638F70F79BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
Manifest number:          11EE
Signing time:             Mon 01 Jul 2024 03:00:23 +0000
Manifest this update:     Mon 01 Jul 2024 03:00:23 +0000
Manifest next update:     Tue 02 Jul 2024 03:00:23 +0000
Files and hashes:         1: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: e5aU6qqbLlo20QkyuXhI/WGCCiaCXRnjxha6g7KOOE8=)
                          2: bQ1ild-O2tARleAajkeYOURNc-s.roa (hash: 4WDFgn438KJhSpwPs/ScRYyhV7Vp2ZYJ8aaPY6xAFNA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 03:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6c:3c:84:5a:03:54:82:51:68:75:b6:38:f7:0f:79:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
        Validity
            Not Before: Jul  1 03:00:23 2024 GMT
            Not After : Jul  2 03:00:23 2024 GMT
        Subject: CN=0fcba4ee07d955b970ca04e88b12d2de6f7bb27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e5:f8:87:b3:48:27:f7:72:3d:5d:fe:1a:8b:
                    7f:41:8b:b0:a5:27:72:08:b6:c5:b3:dc:dc:40:30:
                    99:ff:e7:96:0d:16:7f:7a:6b:66:c5:35:75:7f:12:
                    71:b6:d2:77:f0:b3:b9:68:3b:c3:ea:db:91:3a:b8:
                    56:e4:a9:0c:35:4b:88:cb:0d:1c:0e:db:b6:e0:66:
                    21:98:d9:73:eb:83:d0:c9:1a:f6:e8:8e:27:4a:7b:
                    f8:9f:d2:ac:41:71:29:19:c1:21:b7:cb:86:1e:1e:
                    86:6e:d0:f3:c3:e4:6a:2d:75:57:18:58:31:ff:e3:
                    1a:93:e5:99:ad:5f:9f:c3:d6:b5:c6:47:55:7d:93:
                    68:a9:ea:6f:16:3c:5a:bc:e3:43:4a:e5:7a:bf:be:
                    8e:2e:2c:36:f4:40:f1:af:39:78:93:a2:1a:cd:c3:
                    52:c7:ac:66:bb:73:bd:9b:7b:aa:64:7e:8a:c3:85:
                    ac:ad:a7:c4:f5:1f:64:6f:db:bf:57:38:ab:95:60:
                    c3:16:f4:b0:2b:a1:01:af:59:03:fe:e0:54:58:f6:
                    86:93:fa:31:dc:04:aa:4c:6f:7b:e4:ed:27:5e:4d:
                    45:d9:e1:12:d0:b8:b2:18:12:7a:6a:5d:e3:7a:c1:
                    76:fc:ea:66:79:d6:95:90:57:cd:18:98:83:c3:6b:
                    be:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CB:A4:EE:07:D9:55:B9:70:CA:04:E8:8B:12:D2:DE:6F:7B:B2:7C
            X509v3 Authority Key Identifier:
                keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:37:43:f3:74:1d:f3:55:ac:19:9e:0d:18:20:a9:0e:7a:db:
         2b:1e:9b:eb:ea:ab:8a:b4:e2:96:e3:3e:f5:cc:de:87:f5:56:
         d6:1f:fe:0a:29:45:dd:39:2e:fb:a1:1f:9e:79:3a:0a:80:e3:
         86:d4:d5:6e:ea:05:29:a2:35:90:8a:11:bb:3d:28:ec:d5:6c:
         ca:3f:83:0c:e1:2e:4d:de:f5:1a:44:2a:d2:cd:66:79:61:f6:
         9b:0d:76:29:93:93:26:8e:12:c9:2b:cd:36:75:00:fa:fb:bd:
         e3:14:80:d9:e1:91:c9:f7:55:86:db:11:0a:52:d3:8d:dd:01:
         1e:f8:2a:ae:5f:cd:e6:70:16:c4:60:fe:a8:7a:73:fb:21:c0:
         23:c0:fd:1e:01:8e:66:3b:7a:7e:4a:e6:b0:3c:20:78:54:af:
         c0:17:10:0d:42:d0:a3:b8:fe:a6:49:f4:af:65:2e:da:c7:c1:
         26:a5:c0:7b:7a:16:2b:5e:e2:9c:97:9d:04:6c:90:dc:40:02:
         4b:02:d9:97:6c:f6:d8:48:d0:4e:be:c2:1c:33:cb:0f:6a:2a:
         4b:38:be:8c:c5:5f:90:69:42:1c:ef:ad:d0:18:4b:b3:b4:fb:
         e8:25:e8:22:c7:40:76:44:45:4f:de:44:78:85:f0:9c:44:46:
         25:4c:ed:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBsPIRaA1SCUWh1tjj3D3m7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTUyZTljOTY0ZGU2ZmY1NGUwOTljNzExNTVjMWExZGVj
OGE3MzAwHhcNMjQwNzAxMDMwMDIzWhcNMjQwNzAyMDMwMDIzWjAzMTEwLwYDVQQD
EygwZmNiYTRlZTA3ZDk1NWI5NzBjYTA0ZTg4YjEyZDJkZTZmN2JiMjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OX4h7NIJ/dyPV3+Got/QYuwpSdy
CLbFs9zcQDCZ/+eWDRZ/emtmxTV1fxJxttJ38LO5aDvD6tuROrhW5KkMNUuIyw0c
Dtu24GYhmNlz64PQyRr26I4nSnv4n9KsQXEpGcEht8uGHh6GbtDzw+RqLXVXGFgx
/+Mak+WZrV+fw9a1xkdVfZNoqepvFjxavONDSuV6v76OLiw29EDxrzl4k6IazcNS
x6xmu3O9m3uqZH6Kw4WsrafE9R9kb9u/VzirlWDDFvSwK6EBr1kD/uBUWPaGk/ox
3ASqTG975O0nXk1F2eES0LiyGBJ6al3jesF2/OpmedaVkFfNGJiDw2u+QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/LpO4H2VW5cMoE6IsS0t5ve7J8MB8GA1UdIwQY
MBaAFDdVLpyWTeb/VOCZxxFVwaHeyKcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kYzQzZmItNDY1Ni00YWY5LWFhZDIt
ZWUyOGE2NWM4YTIyLzEvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9kYzQzZmItNDY1Ni00YWY5LWFhZDItZWUyOGE2NWM4YTIy
LzEvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqTdD83Qd
81WsGZ4NGCCpDnrbKx6b6+qrirTiluM+9czeh/VW1h/+CilF3Tku+6Efnnk6CoDj
htTVbuoFKaI1kIoRuz0o7NVsyj+DDOEuTd71GkQq0s1meWH2mw12KZOTJo4SySvN
NnUA+vu94xSA2eGRyfdVhtsRClLTjd0BHvgqrl/N5nAWxGD+qHpz+yHAI8D9HgGO
Zjt6fkrmsDwgeFSvwBcQDULQo7j+pkn0r2Uu2sfBJqXAe3oWK17inJedBGyQ3EAC
SwLZl2z22EjQTr7CHDPLD2oqSzi+jMVfkGlCHO+t0BhLs7T76CXoIsdAdkRFT95E
eIXwnERGJUztAQ==
-----END CERTIFICATE-----
Generated at Mon Jul 1 09:04:03 2024 by rpki-client on console-fra.rpki-client.org