Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
File:                     kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json)
Hash identifier:          54JlbJrvasVhH4I4hgcW9KyZn+KWIsuhE4ffRGY/47c=
Subject key identifier:   EA:67:46:E6:9A:FE:D9:C8:C3:46:FF:CD:14:AD:56:FE:ED:FA:F5:AA
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Certificate issuer:       /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial:       018F8D1545F76063402FCBDA3C2F566BD239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
Manifest number:          0B75
Signing time:             Sat 18 May 2024 19:02:12 +0000
Manifest this update:     Sat 18 May 2024 19:02:12 +0000
Manifest next update:     Sun 19 May 2024 19:02:12 +0000
Files and hashes:         1: BWduBefpT66bo_4Z-mEYg1_6a18.roa (hash: Y0720Pa26aEsMXX1+//Jz6scoW8vciv8TbhdSlbwOL4=)
                          2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: tjvuJxU0rLAR/3TQYgVruvLQmiHCnPFtOp15/3hRBoM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:15:45:f7:60:63:40:2f:cb:da:3c:2f:56:6b:d2:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
        Validity
            Not Before: May 18 19:02:12 2024 GMT
            Not After : May 19 19:02:12 2024 GMT
        Subject: CN=ea6746e69afed9c8c346ffcd14ad56feedfaf5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9b:62:57:27:25:0a:e8:b9:e4:e0:2f:fe:6d:
                    95:a8:36:85:c2:5b:b1:e6:ce:16:21:c0:c1:ab:a8:
                    69:9a:98:62:8d:4e:fe:ac:7f:0d:65:d6:22:a3:5a:
                    6d:28:ea:59:f1:c3:ff:f4:4e:ef:0b:20:cc:9c:f7:
                    c3:85:72:0b:86:4c:a3:f2:27:cd:91:aa:fa:9a:e4:
                    fc:1d:f6:f0:7d:20:80:0c:4c:a4:78:32:e9:ed:99:
                    80:f0:4a:c9:be:80:ca:44:f5:0d:89:22:ba:43:df:
                    b9:a4:a8:ec:89:73:2f:b7:72:a0:b0:62:22:6a:79:
                    fb:55:fb:57:2d:f1:bb:e1:dc:a6:78:2d:8e:da:76:
                    e4:a4:0c:43:90:2c:10:75:c4:6d:81:ea:34:0f:c3:
                    0b:48:b0:87:75:c7:eb:56:70:f1:13:f0:a0:8d:20:
                    33:07:ea:ff:91:ec:17:e1:b9:d5:28:89:fc:03:b5:
                    f0:18:e2:12:2c:b7:2f:da:f9:7a:9c:ab:b4:b3:f4:
                    b5:a1:1f:4f:8b:fb:ad:51:c7:3e:a0:5d:3e:e6:88:
                    55:d0:7a:29:9a:ca:35:39:b1:c6:cc:2b:4a:63:2e:
                    b3:49:d0:ef:0b:31:69:a0:ae:73:05:59:d6:47:d5:
                    c9:5e:56:54:46:62:a3:34:cf:24:af:9b:e9:ae:c9:
                    b1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:67:46:E6:9A:FE:D9:C8:C3:46:FF:CD:14:AD:56:FE:ED:FA:F5:AA
            X509v3 Authority Key Identifier:
                keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f2:33:62:ca:30:4b:35:47:59:40:d3:72:ed:12:68:06:68:
         4e:61:7e:ad:8e:5d:07:84:ce:96:c9:c2:8e:d0:b7:01:cf:97:
         02:c4:95:17:49:bf:d4:5d:63:ae:95:bb:52:b7:a6:60:f4:85:
         fc:ac:b5:9b:10:3e:84:2b:8f:a4:e8:51:f1:13:44:c4:eb:b8:
         8e:9f:ab:74:97:cf:63:1f:db:4b:53:28:04:82:07:16:59:22:
         68:a8:b8:e9:bb:b7:9d:3a:2d:06:11:79:b2:31:3b:4d:30:17:
         11:ce:45:c8:bd:41:06:ec:82:63:d2:04:5c:c6:70:ec:1a:39:
         6a:a9:56:dc:f3:4d:b3:93:38:49:a7:6f:f5:75:71:46:01:94:
         85:20:ca:f5:4a:c7:6a:4b:54:c2:06:44:fb:8b:b5:fa:9b:c4:
         61:31:2e:62:a4:5e:15:9d:29:80:f4:0e:f4:8e:c4:ce:e8:9f:
         e2:f3:0f:36:39:46:3a:d4:12:1d:e1:dc:06:68:7c:29:df:03:
         ed:c4:72:e8:8c:39:6f:b6:89:63:7e:a4:b5:9d:ef:1e:c5:b0:
         1a:27:1e:65:df:ed:67:92:e8:1d:45:d5:9c:d4:42:d7:d3:62:
         ea:8d:68:56:b2:e7:c0:5f:05:b8:c6:4a:a2:6d:ef:b8:e0:e7:
         91:45:d2:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+NFUX3YGNAL8vaPC9Wa9I5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMWM0Yzc2ZWM3NTU2NThkNDVmZDBkM2Y1Y2EzY2M4ZWJk
Mzc0YjcwHhcNMjQwNTE4MTkwMjEyWhcNMjQwNTE5MTkwMjEyWjAzMTEwLwYDVQQD
EyhlYTY3NDZlNjlhZmVkOWM4YzM0NmZmY2QxNGFkNTZmZWVkZmFmNWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjptiVyclCui55OAv/m2VqDaFwlux
5s4WIcDBq6hpmphijU7+rH8NZdYio1ptKOpZ8cP/9E7vCyDMnPfDhXILhkyj8ifN
kar6muT8HfbwfSCADEykeDLp7ZmA8ErJvoDKRPUNiSK6Q9+5pKjsiXMvt3KgsGIi
ann7VftXLfG74dymeC2O2nbkpAxDkCwQdcRtgeo0D8MLSLCHdcfrVnDxE/CgjSAz
B+r/kewX4bnVKIn8A7XwGOISLLcv2vl6nKu0s/S1oR9Pi/utUcc+oF0+5ohV0Hop
mso1ObHGzCtKYy6zSdDvCzFpoK5zBVnWR9XJXlZURmKjNM8kr5vprsmxswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpnRuaa/tnIw0b/zRStVv7t+vWqMB8GA1UdIwQY
MBaAFJEcTHbsdVZY1F/Q0/XKPMjr03S3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1J4TWR1eDFWbGpVWDlEVDljbzh5T3ZUZExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYTQyNTYtODQxNS00YWIyLTk2Y2Ut
NjJkMjc1NGYyODhiLzEva1J4TWR1eDFWbGpVWDlEVDljbzh5T3ZUZExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mYTQyNTYtODQxNS00YWIyLTk2Y2UtNjJkMjc1NGYyODhi
LzEva1J4TWR1eDFWbGpVWDlEVDljbzh5T3ZUZExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPIzYsow
SzVHWUDTcu0SaAZoTmF+rY5dB4TOlsnCjtC3Ac+XAsSVF0m/1F1jrpW7UremYPSF
/Ky1mxA+hCuPpOhR8RNExOu4jp+rdJfPYx/bS1MoBIIHFlkiaKi46bu3nTotBhF5
sjE7TTAXEc5FyL1BBuyCY9IEXMZw7Bo5aqlW3PNNs5M4Sadv9XVxRgGUhSDK9UrH
aktUwgZE+4u1+pvEYTEuYqReFZ0pgPQO9I7Ezuif4vMPNjlGOtQSHeHcBmh8Kd8D
7cRy6Iw5b7aJY36ktZ3vHsWwGiceZd/tZ5LoHUXVnNRC19Ni6o1oVrLnwF8FuMZK
om3vuODnkUXSVg==
-----END CERTIFICATE-----
Generated at Sat May 18 22:30:06 2024 by rpki-client on console-ams.rpki-client.org