Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
File:                     1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft (raw, json)
Hash identifier:          bF6uzaqqcAsdi7XBxhYOrpBRCgopShDVKzdcGw+LIDU=
Subject key identifier:   A8:4F:FC:3A:E4:EE:C9:02:08:EF:46:F6:91:18:EB:A2:AE:2E:4D:94
Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
Certificate issuer:       /CN=d70af942465ff265b896f0d1b762490f27dc322c
Certificate serial:       018FF44A5BEE7C38CB38AF22F5C8CE54D234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
Manifest number:          0E5A
Signing time:             Fri 07 Jun 2024 20:01:04 +0000
Manifest this update:     Fri 07 Jun 2024 20:01:04 +0000
Manifest next update:     Sat 08 Jun 2024 20:01:04 +0000
Files and hashes:         1: 0SqHgFeBiCzRMzCgEc-NdFaAIpE.roa (hash: h7NAvOJNv423UgyyUDEeZXdGag07fg4ylUoBX4NppEE=)
                          2: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl (hash: HNYAQ7Hrk68poIjGT5gWOLZtZaQ++d1bJSX4TVTe7RI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:f4:4a:5b:ee:7c:38:cb:38:af:22:f5:c8:ce:54:d2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c
        Validity
            Not Before: Jun  7 20:01:04 2024 GMT
            Not After : Jun  8 20:01:04 2024 GMT
        Subject: CN=a84ffc3ae4eec90208ef46f69118eba2ae2e4d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e3:4b:b0:b1:d1:8a:17:12:08:dd:c1:75:3d:
                    83:8f:12:72:43:a2:35:56:81:d7:42:db:a8:a7:0a:
                    69:59:a6:c0:f9:56:d6:c5:47:ef:8f:dc:f7:38:02:
                    84:d8:ee:46:e5:83:65:9d:02:b8:69:b4:4e:2b:6c:
                    9a:2b:b6:97:45:9f:41:d3:4e:eb:cc:8d:af:bb:71:
                    ab:47:3d:4d:71:39:7d:e1:ef:37:55:23:b1:b4:8a:
                    a5:f4:7d:ed:2d:64:ee:1a:23:a4:f2:62:c0:60:d0:
                    72:28:1e:72:58:7b:ce:5c:7a:b1:b6:c6:fb:58:a3:
                    7b:a8:a1:27:08:71:d7:f7:72:76:ee:b9:87:94:e9:
                    79:ca:f4:e9:7f:6d:16:70:93:df:56:8b:ae:a0:51:
                    0a:fe:00:34:5f:ed:ca:c0:06:69:5c:0a:00:24:84:
                    cc:4d:1a:37:11:fe:52:50:fa:58:af:da:0f:a1:86:
                    1c:72:f9:8c:05:cc:ff:e2:9b:e0:df:ab:9b:3e:5d:
                    fd:bf:ac:17:7f:8c:e2:ba:20:38:a8:c6:d5:af:a5:
                    a9:4e:7c:0c:13:26:bf:73:25:a4:83:21:68:12:05:
                    c1:f2:a6:ac:81:25:e4:8b:65:03:d5:1e:d5:f7:ca:
                    98:54:b9:cb:29:80:43:eb:02:96:25:2c:99:cd:22:
                    52:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4F:FC:3A:E4:EE:C9:02:08:EF:46:F6:91:18:EB:A2:AE:2E:4D:94
            X509v3 Authority Key Identifier:
                keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4e:75:67:9d:36:95:1a:b2:8f:64:77:74:38:48:72:15:03:
         c1:52:2a:5f:7f:38:e4:91:44:62:90:10:8f:a2:9c:61:23:40:
         7c:b0:f8:31:ec:ca:52:f7:71:74:88:4a:aa:29:6e:8d:72:50:
         87:16:46:32:5d:bb:01:76:22:b0:ec:a6:c8:33:54:9f:f7:89:
         a8:d1:c8:6a:b6:67:69:8e:a0:62:94:a7:05:23:8f:97:b4:59:
         c6:93:ee:b9:90:d3:7a:e0:7c:c4:e3:b4:ea:24:d7:00:0a:d8:
         69:75:2d:45:04:ea:d5:d5:95:05:f2:d4:d9:15:b2:70:1a:6c:
         61:5e:8c:ca:07:20:9c:24:60:61:1d:61:1d:c3:01:74:43:90:
         ea:78:9a:0d:f5:1a:bc:b7:f2:62:7b:bb:86:72:ac:24:d4:12:
         93:7b:a5:74:d0:f6:72:19:0e:64:98:30:07:dd:33:c1:a0:81:
         02:55:2b:cb:2f:77:5d:80:71:99:ce:a4:61:d1:c9:c5:52:ce:
         1f:5d:52:6d:d9:46:d4:99:d7:93:07:d8:e0:74:d9:ad:d8:99:
         a7:8b:52:0d:ae:a9:e7:18:21:27:4a:11:39:96:49:0b:1d:33:
         06:4d:d2:33:d5:92:df:7b:26:ff:d0:d2:66:de:b8:14:9f:7d:
         2b:b6:bd:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY/0SlvufDjLOK8i9cjOVNI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MGFmOTQyNDY1ZmYyNjViODk2ZjBkMWI3NjI0OTBmMjdk
YzMyMmMwHhcNMjQwNjA3MjAwMTA0WhcNMjQwNjA4MjAwMTA0WjAzMTEwLwYDVQQD
EyhhODRmZmMzYWU0ZWVjOTAyMDhlZjQ2ZjY5MTE4ZWJhMmFlMmU0ZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouNLsLHRihcSCN3BdT2DjxJyQ6I1
VoHXQtuopwppWabA+VbWxUfvj9z3OAKE2O5G5YNlnQK4abROK2yaK7aXRZ9B007r
zI2vu3GrRz1NcTl94e83VSOxtIql9H3tLWTuGiOk8mLAYNByKB5yWHvOXHqxtsb7
WKN7qKEnCHHX93J27rmHlOl5yvTpf20WcJPfVouuoFEK/gA0X+3KwAZpXAoAJITM
TRo3Ef5SUPpYr9oPoYYccvmMBcz/4pvg36ubPl39v6wXf4ziuiA4qMbVr6WpTnwM
Eya/cyWkgyFoEgXB8qasgSXki2UD1R7V98qYVLnLKYBD6wKWJSyZzSJSMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhP/Drk7skCCO9G9pEY66KuLk2UMB8GA1UdIwQY
MBaAFNcK+UJGX/JluJbw0bdiSQ8n3DIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9lOTIwM2QtY2RjZi00ZjIzLWEzYmYt
ZjQ0OWJhZDI5ODU1LzEvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9lOTIwM2QtY2RjZi00ZjIzLWEzYmYtZjQ0OWJhZDI5ODU1
LzEvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk051Z502
lRqyj2R3dDhIchUDwVIqX3845JFEYpAQj6KcYSNAfLD4MezKUvdxdIhKqilujXJQ
hxZGMl27AXYisOymyDNUn/eJqNHIarZnaY6gYpSnBSOPl7RZxpPuuZDTeuB8xOO0
6iTXAArYaXUtRQTq1dWVBfLU2RWycBpsYV6MygcgnCRgYR1hHcMBdEOQ6niaDfUa
vLfyYnu7hnKsJNQSk3uldND2chkOZJgwB90zwaCBAlUryy93XYBxmc6kYdHJxVLO
H11SbdlG1JnXkwfY4HTZrdiZp4tSDa6p5xghJ0oROZZJCx0zBk3SM9WS33sm/9DS
Zt64FJ99K7a9og==
-----END CERTIFICATE-----
Generated at Fri Jun 7 22:47:47 2024 by rpki-client on console-fra.rpki-client.org