Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
File:                     NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json)
Hash identifier:          MXffc0iflYfaaKpYs9l2OnsRW4yMc5Ko/PTMjSNllzY=
Subject key identifier:   77:B9:DC:06:B5:56:16:B2:CB:1E:29:75:47:53:2A:95:D6:86:04:09
Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
Certificate issuer:       /CN=36117a6815a918478d3f8c00d671a57166bfeeca
Certificate serial:       018F87B6249DF22FA5E7DA47A9DB927576ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
Manifest number:          0210
Signing time:             Fri 17 May 2024 18:00:12 +0000
Manifest this update:     Fri 17 May 2024 18:00:12 +0000
Manifest next update:     Sat 18 May 2024 18:00:12 +0000
Files and hashes:         1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: aTSZ3RBVPKzvsscKVoaYQR/xMQKrwdY5ets8pKOJ2m4=)
                          2: Vcyur_roscMOhTtXz2Hg-AgAk6A.roa (hash: YqbdDHnQ8xpJD/w09qrvs2ueyVYiT8BkkoSiObQgg5s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:24:9d:f2:2f:a5:e7:da:47:a9:db:92:75:76:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca
        Validity
            Not Before: May 17 18:00:12 2024 GMT
            Not After : May 18 18:00:12 2024 GMT
        Subject: CN=77b9dc06b55616b2cb1e297547532a95d6860409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fe:b3:33:14:88:6b:db:05:dc:3b:3e:f7:06:
                    1e:51:31:2f:b3:c3:2a:04:19:e1:61:92:06:37:0e:
                    92:b2:7f:39:03:38:26:ca:2e:d5:92:d2:87:ee:7f:
                    9e:b1:ea:6b:a9:56:46:18:04:2d:fd:29:58:06:93:
                    96:b7:fa:11:0c:ce:36:7f:71:7a:d6:ab:a7:bf:d8:
                    a5:ff:2c:37:f7:6d:d1:f0:78:5e:83:a5:cf:bc:73:
                    34:7e:53:ab:da:3f:3c:66:11:4e:8d:54:1e:28:fd:
                    73:71:fe:40:c2:0b:55:5f:ce:f7:5a:06:fe:b5:db:
                    e4:db:7e:75:e6:8c:70:e5:40:7a:72:aa:cf:cf:2f:
                    a4:fa:6a:23:e0:02:23:2d:fb:85:fe:62:57:bb:2c:
                    0c:b6:4a:9b:b9:db:93:d2:89:c6:c5:93:0d:77:e4:
                    bb:ce:6e:72:11:db:1a:70:02:be:ea:1c:09:ab:8e:
                    30:39:13:25:ae:1f:78:fb:d0:50:b8:1e:7a:6e:35:
                    c1:0c:ff:6c:3c:76:c5:2a:bc:83:1a:0a:21:27:57:
                    40:ae:d8:7b:6f:30:8f:8c:e7:2f:ce:a5:e6:0c:b5:
                    74:2e:b2:cc:d3:af:e9:ab:64:43:03:de:9b:43:21:
                    b5:0c:c9:9c:4c:f1:f0:dd:74:9d:66:2b:a8:79:a2:
                    e5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B9:DC:06:B5:56:16:B2:CB:1E:29:75:47:53:2A:95:D6:86:04:09
            X509v3 Authority Key Identifier:
                keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:80:69:90:79:f3:43:f9:1e:5b:3c:49:c2:cc:b9:51:01:fe:
         c3:45:18:88:27:c4:2b:17:9a:d6:c6:f8:48:17:0a:ba:c8:a9:
         a6:a6:86:d1:7c:01:44:ef:ae:21:f9:b6:42:23:bb:04:f2:30:
         a1:09:a9:04:dc:3a:b4:12:98:09:37:42:70:b9:b3:d9:f8:fb:
         f6:08:56:25:27:85:d9:d9:98:da:ff:b2:36:a8:ec:71:0d:17:
         90:4c:09:b4:02:f4:0e:06:63:ec:3d:ca:16:f5:0f:53:cb:d8:
         b8:d7:57:b1:e8:fc:90:d7:d4:61:39:9c:b1:59:36:3a:26:f8:
         4d:42:ec:fc:c6:d3:17:d0:bc:08:5b:65:f0:0a:64:56:a6:c4:
         65:3f:ac:b5:8a:37:0d:a0:d9:f7:51:07:5e:48:19:48:03:c3:
         99:9b:72:3a:d2:36:d6:f2:b9:3c:9f:cb:02:6c:a0:41:e8:0e:
         10:62:40:3b:c2:07:5f:c9:08:a1:3c:e4:cc:d2:2c:36:3b:70:
         ee:40:cb:15:8c:04:2d:31:bd:58:16:48:50:8e:fc:0a:d9:a4:
         4f:ea:69:77:0e:58:b7:f7:d1:75:3d:8a:56:02:ee:1e:fb:f4:
         bf:5b:0c:2f:bf:32:e1:5f:8b:07:01:ec:97:25:44:24:45:f8:
         6c:fb:50:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtiSd8i+l59pHqduSdXbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTE3YTY4MTVhOTE4NDc4ZDNmOGMwMGQ2NzFhNTcxNjZi
ZmVlY2EwHhcNMjQwNTE3MTgwMDEyWhcNMjQwNTE4MTgwMDEyWjAzMTEwLwYDVQQD
Eyg3N2I5ZGMwNmI1NTYxNmIyY2IxZTI5NzU0NzUzMmE5NWQ2ODYwNDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v6zMxSIa9sF3Ds+9wYeUTEvs8Mq
BBnhYZIGNw6Ssn85Azgmyi7VktKH7n+eseprqVZGGAQt/SlYBpOWt/oRDM42f3F6
1qunv9il/yw3923R8Hheg6XPvHM0flOr2j88ZhFOjVQeKP1zcf5AwgtVX873Wgb+
tdvk23515oxw5UB6cqrPzy+k+moj4AIjLfuF/mJXuywMtkqbuduT0onGxZMNd+S7
zm5yEdsacAK+6hwJq44wORMlrh94+9BQuB56bjXBDP9sPHbFKryDGgohJ1dArth7
bzCPjOcvzqXmDLV0LrLM06/pq2RDA96bQyG1DMmcTPHw3XSdZiuoeaLl3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHe53Aa1Vhayyx4pdUdTKpXWhgQJMB8GA1UdIwQY
MBaAFDYRemgVqRhHjT+MANZxpXFmv+7KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jYmI3NDEtYjY5Mi00ZjA5LThjYmEt
YzZhZWM2OGFiMzY0LzEvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jYmI3NDEtYjY5Mi00ZjA5LThjYmEtYzZhZWM2OGFiMzY0
LzEvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAroBpkHnz
Q/keWzxJwsy5UQH+w0UYiCfEKxea1sb4SBcKusippqaG0XwBRO+uIfm2QiO7BPIw
oQmpBNw6tBKYCTdCcLmz2fj79ghWJSeF2dmY2v+yNqjscQ0XkEwJtAL0DgZj7D3K
FvUPU8vYuNdXsej8kNfUYTmcsVk2Oib4TULs/MbTF9C8CFtl8ApkVqbEZT+stYo3
DaDZ91EHXkgZSAPDmZtyOtI21vK5PJ/LAmygQegOEGJAO8IHX8kIoTzkzNIsNjtw
7kDLFYwELTG9WBZIUI78CtmkT+ppdw5Yt/fRdT2KVgLuHvv0v1sML78y4V+LBwHs
lyVEJEX4bPtQ9g==
-----END CERTIFICATE-----
Generated at Fri May 17 20:06:43 2024 by rpki-client on console-ams.rpki-client.org