Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File:                     ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier:          usze3OdvB1kiW044OfJ5O4P/VR5dtgUpAQVzTi4zsok=
Subject key identifier:   1F:1D:05:23:D4:AE:7F:40:C3:AD:49:F5:38:6F:0B:18:9D:FE:4B:35
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer:       /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial:       01901DEAA783FFBF806FEB78D6DB2D0E220E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number:          0270
Signing time:             Sat 15 Jun 2024 22:00:35 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:35 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:35 +0000
Files and hashes:         1: RmmKrtZ5De7LVHB3_oTAgdAJ5mc.roa (hash: Mp3gIZ0W6AGHNBD/5FTI3wEC6W4uvmTI1RthaZGnsqE=)
                          2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: Mu+VETVyotgpAmKdOio1MDGEf/o7fgnUAjttgn1Lq4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:a7:83:ff:bf:80:6f:eb:78:d6:db:2d:0e:22:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
        Validity
            Not Before: Jun 15 22:00:35 2024 GMT
            Not After : Jun 16 22:00:35 2024 GMT
        Subject: CN=1f1d0523d4ae7f40c3ad49f5386f0b189dfe4b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:c1:12:a7:c0:6c:cd:c8:d3:93:e2:dc:ab:
                    fa:00:4e:44:4c:86:e5:2a:cc:9d:d0:9b:52:59:f0:
                    3d:f5:05:d6:88:5b:44:89:bc:9e:d3:42:bc:58:86:
                    ee:0a:9b:82:10:d6:9c:96:95:96:7a:e5:97:82:a1:
                    e9:ce:63:4c:25:6b:84:b0:26:22:b1:e2:fd:0a:b6:
                    01:ef:53:24:00:a1:3a:c3:b9:65:8d:da:0c:4c:f9:
                    17:d8:8f:ab:be:b4:75:c2:64:ff:bb:b5:7d:92:ed:
                    c6:0f:d7:18:19:bc:bf:64:4b:04:c2:bd:fd:63:84:
                    89:34:bf:ba:47:bf:e4:17:68:9a:5c:5c:b7:d3:1d:
                    e6:18:69:d7:e2:d1:6e:43:00:73:38:d7:57:8f:69:
                    cd:06:e6:93:2e:09:5e:1f:2a:ef:8b:c3:c6:8a:a3:
                    2e:53:fc:ca:68:8e:6e:78:ba:0d:27:17:cf:01:ab:
                    4d:f6:a9:1a:10:cc:21:53:61:3b:e4:14:a9:28:63:
                    7d:d6:f3:52:24:1f:e8:e3:42:54:cf:f2:b0:6d:e8:
                    e7:60:d3:29:a6:e6:3d:84:8b:f8:3f:3c:58:ce:d0:
                    42:19:42:42:cb:a4:33:3e:a8:97:dd:cf:c7:0b:c8:
                    35:db:c2:80:6f:b2:57:cb:84:f0:f8:08:63:69:d7:
                    3e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1D:05:23:D4:AE:7F:40:C3:AD:49:F5:38:6F:0B:18:9D:FE:4B:35
            X509v3 Authority Key Identifier:
                keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:87:7a:1b:c5:6a:fd:e1:28:fb:6b:ff:05:ca:31:59:fd:ac:
         b9:f9:f2:4b:68:8a:5c:67:6e:dc:35:37:52:fd:5b:ca:a2:44:
         a8:78:83:9c:19:13:e0:3b:b4:46:2c:da:94:96:3d:18:30:4b:
         c4:0f:2a:3a:86:4e:04:4d:f6:7e:d9:08:17:43:ac:41:39:25:
         47:52:9f:8b:ca:68:75:47:95:9d:63:eb:ce:64:92:bc:bf:b6:
         bf:8a:5e:70:e5:56:63:7d:56:9f:02:8d:7b:6f:31:39:7b:36:
         09:9e:3a:5d:db:94:8d:f1:ba:6e:dd:70:c6:f2:4c:02:8b:f5:
         73:63:14:7f:81:ec:64:7d:8f:09:7e:cb:be:46:76:30:c5:fa:
         45:78:87:69:2e:b4:2d:fe:46:f3:38:1e:4e:41:54:a1:3e:21:
         78:3f:94:c5:6a:37:16:6e:a6:9b:01:cf:23:99:e1:b4:2e:6a:
         8f:40:65:74:8c:2b:93:62:a0:52:0c:9b:a4:e1:2b:7f:e8:67:
         b0:18:e0:70:fa:aa:e6:68:96:68:a6:ab:ee:ba:e3:0d:a1:b5:
         aa:03:6d:c4:d3:54:ff:50:02:19:25:c0:1a:de:c5:ec:f3:3b:
         49:20:14:a9:c1:c0:8c:15:21:5d:d4:b0:27:11:3b:dd:7d:a1:
         59:61:cf:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6qeD/7+Ab+t41tstDiIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjkwNGFiMTQwNjZjN2E5ZmU2MWE1MjFkNTQ5MmEwZTUy
OTY1Y2EwHhcNMjQwNjE1MjIwMDM1WhcNMjQwNjE2MjIwMDM1WjAzMTEwLwYDVQQD
EygxZjFkMDUyM2Q0YWU3ZjQwYzNhZDQ5ZjUzODZmMGIxODlkZmU0YjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4rBEqfAbM3I05Pi3Kv6AE5ETIbl
Ksyd0JtSWfA99QXWiFtEibye00K8WIbuCpuCENaclpWWeuWXgqHpzmNMJWuEsCYi
seL9CrYB71MkAKE6w7lljdoMTPkX2I+rvrR1wmT/u7V9ku3GD9cYGby/ZEsEwr39
Y4SJNL+6R7/kF2iaXFy30x3mGGnX4tFuQwBzONdXj2nNBuaTLgleHyrvi8PGiqMu
U/zKaI5ueLoNJxfPAatN9qkaEMwhU2E75BSpKGN91vNSJB/o40JUz/KwbejnYNMp
puY9hIv4PzxYztBCGUJCy6QzPqiX3c/HC8g128KAb7JXy4Tw+Ahjadc+NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8dBSPUrn9Aw61J9ThvCxid/ks1MB8GA1UdIwQY
MBaAFH35BKsUBmx6n+YaUh1UkqDlKWXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYt
M2I0NDVmMjlmNWI3LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYtM2I0NDVmMjlmNWI3
LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA64d6G8Vq
/eEo+2v/BcoxWf2sufnyS2iKXGdu3DU3Uv1byqJEqHiDnBkT4Du0RizalJY9GDBL
xA8qOoZOBE32ftkIF0OsQTklR1Kfi8podUeVnWPrzmSSvL+2v4pecOVWY31WnwKN
e28xOXs2CZ46XduUjfG6bt1wxvJMAov1c2MUf4HsZH2PCX7LvkZ2MMX6RXiHaS60
Lf5G8zgeTkFUoT4heD+UxWo3Fm6mmwHPI5nhtC5qj0BldIwrk2KgUgybpOErf+hn
sBjgcPqq5miWaKar7rrjDaG1qgNtxNNU/1ACGSXAGt7F7PM7SSAUqcHAjBUhXdSw
JxE73X2hWWHPzQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:48:38 2024 by rpki-client on console-fra.rpki-client.org