Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
File:                     sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json)
Hash identifier:          r0fmuqt2rc2fXIqk4zXxstLEDafNvHb1jrpTcn5N74k=
Subject key identifier:   64:BE:A2:A3:54:B6:4E:1D:C1:56:95:45:8D:C9:97:F5:50:2F:E1:53
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Certificate issuer:       /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial:       018F882468EBA068FB3AEB74DEEC9204688A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
Manifest number:          0FD4
Signing time:             Fri 17 May 2024 20:00:38 +0000
Manifest this update:     Fri 17 May 2024 20:00:38 +0000
Manifest next update:     Sat 18 May 2024 20:00:38 +0000
Files and hashes:         1: ZDJzzdDoB0Kb1X6QKVYfLNQlUFU.roa (hash: 46/OQXhtFqOFwfcyfYCQT298UYlGhWYRm1zHLhW1iTU=)
                          2: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: g6q6ZuNlSvyRjVM9jSwAuL0VAWkF9U2Y6PJGbaiVJiM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:68:eb:a0:68:fb:3a:eb:74:de:ec:92:04:68:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
        Validity
            Not Before: May 17 20:00:38 2024 GMT
            Not After : May 18 20:00:38 2024 GMT
        Subject: CN=64bea2a354b64e1dc15695458dc997f5502fe153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:07:0f:36:15:f9:f3:3d:9f:f6:25:5d:f1:83:
                    47:e6:94:bf:29:22:b2:95:98:c4:16:21:f9:1b:92:
                    cb:7a:0d:51:95:31:9b:9c:9c:5e:f8:79:ad:cc:98:
                    ba:3b:95:f3:67:3b:ad:84:c7:5f:0f:cc:81:9b:65:
                    eb:22:2c:cd:8c:24:ec:86:6f:dd:1b:cd:a8:65:07:
                    3a:00:58:ee:94:29:93:49:8b:63:a8:27:19:6d:a0:
                    4e:2b:35:d4:21:65:9b:b6:cd:cc:b4:76:ec:25:7e:
                    e0:ec:ce:90:37:6a:4d:02:ab:a2:7d:45:f4:f2:70:
                    ef:7a:b5:d9:32:b1:e5:d2:39:6f:4b:44:03:ba:65:
                    54:ca:70:43:39:e5:16:5d:51:9b:52:fe:19:e6:1c:
                    44:46:88:de:3a:a9:58:f9:bc:a9:3b:14:c2:95:48:
                    8e:9b:f8:c5:85:b5:13:80:69:10:08:aa:fc:46:a0:
                    5c:73:ad:d2:6e:de:cd:5e:1c:a1:21:42:82:ca:58:
                    17:d1:96:7e:21:44:1d:ec:1b:89:b8:06:e5:7a:23:
                    82:37:44:fd:6e:48:36:d8:16:24:cd:a0:63:d4:b4:
                    2f:ad:88:40:7e:f1:30:67:9f:8a:b1:ec:80:60:cb:
                    3c:ab:b6:7e:46:05:16:97:d8:3c:08:1d:63:10:26:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BE:A2:A3:54:B6:4E:1D:C1:56:95:45:8D:C9:97:F5:50:2F:E1:53
            X509v3 Authority Key Identifier:
                keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:78:ac:73:b7:3f:39:1f:cc:9d:30:ba:e4:ba:23:90:6a:44:
         29:e2:87:90:55:77:eb:6d:35:79:49:2b:7c:74:97:53:15:e2:
         c2:ca:3a:f0:8b:ba:a6:5a:ed:8b:da:6d:d7:ee:a5:08:87:60:
         2a:7a:74:8a:15:c7:35:25:ed:b9:08:72:c7:af:85:84:fe:7d:
         4a:6e:de:a0:fa:bc:67:51:d7:39:ef:e0:bb:ba:c6:76:25:d0:
         1b:02:d9:3d:4f:d8:07:19:66:b0:57:c7:54:05:29:c3:86:bd:
         6b:b4:f9:26:05:d7:b6:4d:15:95:67:07:0d:50:fe:c7:27:67:
         95:70:d0:87:a1:cd:68:46:61:91:62:06:59:9e:d5:ac:2d:37:
         ae:6c:41:09:7e:b7:24:19:4b:6f:7b:f0:fb:4b:7b:57:49:9f:
         82:da:e1:d6:94:02:d4:a5:fa:a7:df:62:d0:f1:67:cb:de:75:
         a5:62:84:89:1b:df:db:8f:79:f3:a4:d0:5f:44:db:05:50:6e:
         7a:6d:88:a1:20:d0:df:c5:52:ca:98:04:e4:2e:6c:2f:2f:0b:
         c5:50:2a:5b:3f:c1:d2:93:f5:81:4a:ad:a9:37:30:a7:37:f9:
         cf:38:2e:77:83:c1:13:5a:6d:56:62:75:ea:95:7c:9c:fc:64:
         70:fc:b5:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJGjroGj7Out03uySBGiKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNGIxY2RmNTA2Y2U1ZTk5MzdlNzdmODI2M2VjZjZkZGIy
NTViMDUwHhcNMjQwNTE3MjAwMDM4WhcNMjQwNTE4MjAwMDM4WjAzMTEwLwYDVQQD
Eyg2NGJlYTJhMzU0YjY0ZTFkYzE1Njk1NDU4ZGM5OTdmNTUwMmZlMTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AcPNhX58z2f9iVd8YNH5pS/KSKy
lZjEFiH5G5LLeg1RlTGbnJxe+HmtzJi6O5XzZzuthMdfD8yBm2XrIizNjCTshm/d
G82oZQc6AFjulCmTSYtjqCcZbaBOKzXUIWWbts3MtHbsJX7g7M6QN2pNAquifUX0
8nDverXZMrHl0jlvS0QDumVUynBDOeUWXVGbUv4Z5hxERojeOqlY+bypOxTClUiO
m/jFhbUTgGkQCKr8RqBcc63Sbt7NXhyhIUKCylgX0ZZ+IUQd7BuJuAbleiOCN0T9
bkg22BYkzaBj1LQvrYhAfvEwZ5+KseyAYMs8q7Z+RgUWl9g8CB1jECZDtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGS+oqNUtk4dwVaVRY3Jl/VQL+FTMB8GA1UdIwQY
MBaAFLBLHN9QbOXpk353+CY+z23bJVsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzliMzQtMzUyOS00MzhiLTg3ZDAt
Y2U1MDE5MjY0ODk1LzEvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84MzliMzQtMzUyOS00MzhiLTg3ZDAtY2U1MDE5MjY0ODk1
LzEvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXisc7c/
OR/MnTC65LojkGpEKeKHkFV36201eUkrfHSXUxXiwso68Iu6plrti9pt1+6lCIdg
Knp0ihXHNSXtuQhyx6+FhP59Sm7eoPq8Z1HXOe/gu7rGdiXQGwLZPU/YBxlmsFfH
VAUpw4a9a7T5JgXXtk0VlWcHDVD+xydnlXDQh6HNaEZhkWIGWZ7VrC03rmxBCX63
JBlLb3vw+0t7V0mfgtrh1pQC1KX6p99i0PFny951pWKEiRvf249586TQX0TbBVBu
em2IoSDQ38VSypgE5C5sLy8LxVAqWz/B0pP1gUqtqTcwpzf5zzgud4PBE1ptVmJ1
6pV8nPxkcPy1oQ==
-----END CERTIFICATE-----
Generated at Sat May 18 02:03:16 2024 by rpki-client on console-ams.rpki-client.org