Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File:                     4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier:          PM0h04E2QDKpR1EMVTQfWbSC92LwI+9txKcr5Gj/Z3o=
Subject key identifier:   B1:94:ED:78:1B:5A:59:B0:26:C2:16:21:A3:86:09:1D:ED:FE:EC:CB
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer:       /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial:       018FD8D2AD34620749C28D7406C8E3363BED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number:          0EB2
Signing time:             Sun 02 Jun 2024 12:00:36 +0000
Manifest this update:     Sun 02 Jun 2024 12:00:36 +0000
Manifest next update:     Mon 03 Jun 2024 12:00:36 +0000
Files and hashes:         1: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: fwdSPIB0p5ZQtyeye7sAzlsEiPQdMCLDSBPmrAxVDqs=)
                          2: ByM3cwTyOuyi2XyOhS5bNUiP5nI.roa (hash: XcFaIB598SO0OMjobDnTlm0rIsybFCtDDlxbb/z5pTA=)
                          3: FnPazRzKIQB1T4VgUb8FnHMO82w.roa (hash: pHQB+KAsL6wINeTpYg20wOKqmmPiqjo0nvcBu+FybD8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d8:d2:ad:34:62:07:49:c2:8d:74:06:c8:e3:36:3b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
        Validity
            Not Before: Jun  2 12:00:36 2024 GMT
            Not After : Jun  3 12:00:36 2024 GMT
        Subject: CN=b194ed781b5a59b026c21621a386091dedfeeccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:98:85:06:f0:c1:70:a4:88:e9:1c:f7:5d:af:
                    7f:b2:35:ac:ff:4b:b0:14:4e:86:9a:fe:54:1e:c6:
                    01:90:01:9c:3b:f3:21:6f:71:98:84:f3:38:79:cb:
                    79:51:19:85:d1:9b:29:79:c8:03:ca:fa:93:a9:12:
                    8f:e9:94:9c:7e:05:d8:c0:e9:5b:dc:fc:4d:e8:08:
                    9d:75:14:ad:b8:7d:b0:83:4d:01:18:c1:cb:85:7f:
                    6f:e7:db:ef:4a:3e:f4:52:ef:ff:07:a6:08:cb:e6:
                    38:83:73:b1:fa:b8:0f:82:8a:48:95:93:d4:d7:b1:
                    27:3f:c0:45:a9:77:a0:8f:99:fc:ea:f7:c9:be:4b:
                    ce:6e:ff:29:d8:0a:09:cc:11:32:ff:d2:96:ad:7b:
                    b0:cf:ef:14:71:f4:6d:ca:f7:60:ef:ce:71:e7:37:
                    b0:30:f7:36:2d:bd:5f:8e:2f:ba:68:b0:60:81:6e:
                    80:8d:48:78:8d:00:3f:ab:52:66:33:65:85:0d:e5:
                    f0:26:7f:71:54:6b:62:b9:c9:f8:11:d7:e9:8b:25:
                    b6:f3:00:c8:27:52:77:c4:c5:d6:4b:d6:90:58:22:
                    09:90:9a:1b:cd:41:5e:dd:c6:67:14:2a:92:b9:b8:
                    e7:ca:d6:61:08:33:47:66:fd:9e:08:11:8e:8d:c2:
                    22:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:94:ED:78:1B:5A:59:B0:26:C2:16:21:A3:86:09:1D:ED:FE:EC:CB
            X509v3 Authority Key Identifier:
                keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:42:d3:ce:33:a4:c0:29:19:ca:5c:d7:ee:9e:a8:86:c7:7c:
         e4:ff:1f:e8:91:1e:77:1b:63:12:37:3f:52:a8:fb:71:de:f7:
         57:70:a5:d0:b7:c0:46:9c:51:2f:00:84:53:dc:cf:d0:d8:3a:
         63:b6:ef:0c:06:0b:b7:68:52:ec:83:dd:5b:29:9b:00:fa:cc:
         eb:64:72:40:e0:40:6d:58:13:9b:87:e5:31:1a:de:a1:c0:3a:
         e4:b5:ab:43:fc:7a:dd:cd:e0:18:fc:af:d0:b1:32:63:72:df:
         69:4e:b4:eb:f8:bc:20:9d:fe:04:f0:2c:87:14:03:e6:fc:54:
         33:71:68:08:5d:f2:0a:01:66:8c:a0:e1:8e:8f:d6:49:be:35:
         ee:1e:f5:77:85:8f:22:d1:64:c7:1b:7f:0d:83:fc:c6:c5:01:
         e7:02:c0:33:33:14:bb:4d:88:cf:dc:ac:de:7d:01:c3:5c:dd:
         3d:14:03:dc:bf:10:8f:c9:94:64:97:65:77:14:58:6f:65:da:
         b2:10:f9:2a:aa:6a:4a:ba:aa:16:38:2b:40:df:8d:d1:66:d7:
         43:71:63:3f:7c:77:af:45:23:25:69:a4:25:80:be:4f:8e:f9:
         d0:0c:15:fd:05:55:8d:fa:a2:b6:65:c2:8b:60:ec:77:82:be:
         46:aa:f2:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY/Y0q00YgdJwo10BsjjNjvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjQ3YzExYTNhM2NhZTA2YTE5Mjg2MGE5NmM1MDUzZWMw
NGI1ZGMwHhcNMjQwNjAyMTIwMDM2WhcNMjQwNjAzMTIwMDM2WjAzMTEwLwYDVQQD
EyhiMTk0ZWQ3ODFiNWE1OWIwMjZjMjE2MjFhMzg2MDkxZGVkZmVlY2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJiFBvDBcKSI6Rz3Xa9/sjWs/0uw
FE6Gmv5UHsYBkAGcO/Mhb3GYhPM4ect5URmF0ZspecgDyvqTqRKP6ZScfgXYwOlb
3PxN6AiddRStuH2wg00BGMHLhX9v59vvSj70Uu//B6YIy+Y4g3Ox+rgPgopIlZPU
17EnP8BFqXegj5n86vfJvkvObv8p2AoJzBEy/9KWrXuwz+8UcfRtyvdg785x5zew
MPc2Lb1fji+6aLBggW6AjUh4jQA/q1JmM2WFDeXwJn9xVGtiucn4EdfpiyW28wDI
J1J3xMXWS9aQWCIJkJobzUFe3cZnFCqSubjnytZhCDNHZv2eCBGOjcIifQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGU7XgbWlmwJsIWIaOGCR3t/uzLMB8GA1UdIwQY
MBaAFOH0fBGjo8rgahkoYKlsUFPsBLXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzIt
MzFjNzMzMTk3MDczLzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzItMzFjNzMzMTk3MDcz
LzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx0LTzjOk
wCkZylzX7p6ohsd85P8f6JEedxtjEjc/Uqj7cd73V3Cl0LfARpxRLwCEU9zP0Ng6
Y7bvDAYLt2hS7IPdWymbAPrM62RyQOBAbVgTm4flMRreocA65LWrQ/x63c3gGPyv
0LEyY3LfaU606/i8IJ3+BPAshxQD5vxUM3FoCF3yCgFmjKDhjo/WSb417h71d4WP
ItFkxxt/DYP8xsUB5wLAMzMUu02Iz9ys3n0Bw1zdPRQD3L8Qj8mUZJdldxRYb2Xa
shD5KqpqSrqqFjgrQN+N0WbXQ3FjP3x3r0UjJWmkJYC+T4750AwV/QVVjfqitmXC
i2Dsd4K+Rqrygw==
-----END CERTIFICATE-----
Generated at Sun Jun 2 14:38:22 2024 by rpki-client on console-fra.rpki-client.org