Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/8-oWKkkqwrR-eW6aPB1RhYOD-xI.mft
File:                     8-oWKkkqwrR-eW6aPB1RhYOD-xI.mft (raw, json)
Hash identifier:          Zj738RNe/9f9Bmz+KAnydiZxOCkyyILdtLnZDVuO8ik=
Subject key identifier:   C1:48:4A:C9:9C:35:27:16:7D:1A:AE:A6:9B:15:3F:30:5A:BA:7A:57
Authority key identifier: F3:EA:16:2A:49:2A:C2:B4:7E:79:6E:9A:3C:1D:51:85:83:83:FB:12
Certificate issuer:       /CN=f3ea162a492ac2b47e796e9a3c1d51858383fb12
Certificate serial:       018F7BB2D155D19D7220A085735C7C019C98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-oWKkkqwrR-eW6aPB1RhYOD-xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/8-oWKkkqwrR-eW6aPB1RhYOD-xI.mft
Manifest number:          0F7E
Signing time:             Wed 15 May 2024 10:01:07 +0000
Manifest this update:     Wed 15 May 2024 10:01:07 +0000
Manifest next update:     Thu 16 May 2024 10:01:07 +0000
Files and hashes:         1: 8-oWKkkqwrR-eW6aPB1RhYOD-xI.crl (hash: AcPBmvwq0qfO8SyEBnOjW5StfEag1Nag7Q8OAR+2QRg=)
                          2: AR33O1sspdvQq-PnbWsgAdD3q-8.roa (hash: 8E6n1d4DknBpwLCF120y6YrS5Io0uGhUtOjvRk3cDVg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/8-oWKkkqwrR-eW6aPB1RhYOD-xI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/8-oWKkkqwrR-eW6aPB1RhYOD-xI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-oWKkkqwrR-eW6aPB1RhYOD-xI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 10:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7b:b2:d1:55:d1:9d:72:20:a0:85:73:5c:7c:01:9c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ea162a492ac2b47e796e9a3c1d51858383fb12
        Validity
            Not Before: May 15 10:01:07 2024 GMT
            Not After : May 16 10:01:07 2024 GMT
        Subject: CN=c1484ac99c3527167d1aaea69b153f305aba7a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:60:eb:0d:46:cc:8a:f8:80:53:8d:91:37:
                    2b:72:34:f4:e2:bd:e1:1c:9c:f9:38:d2:7b:a2:24:
                    c3:bd:f8:1a:bd:b2:a5:99:c5:a2:cf:fb:63:0b:b6:
                    2d:41:c0:99:96:46:70:90:30:52:a2:09:86:64:86:
                    1f:bf:5d:ac:82:57:89:a3:3c:b8:d4:40:2b:18:05:
                    59:e4:64:05:01:0c:60:e7:24:81:83:f5:89:9d:a5:
                    c8:6e:20:dd:9e:57:a2:37:d5:e5:bb:7c:a0:ca:a9:
                    58:9f:29:fe:e6:8f:30:e1:7f:91:d5:42:df:65:98:
                    0e:f2:0d:6e:f3:e5:ac:48:89:b2:bd:0c:be:75:91:
                    71:b4:51:78:aa:8b:e7:42:72:5e:cc:d0:ae:37:fd:
                    8e:3e:ca:80:7f:57:fe:83:16:39:5c:18:c4:1f:52:
                    83:43:21:ad:1d:de:60:da:97:05:54:04:24:ab:23:
                    c7:bf:92:eb:d4:f5:62:19:d9:55:c4:d5:b1:8b:29:
                    f4:f6:dc:6b:07:ef:b2:84:76:ed:11:fc:e7:75:f5:
                    97:69:1d:0c:2e:ea:36:15:55:0d:36:be:89:54:b0:
                    b0:c9:83:50:19:cc:a8:d6:f1:1b:59:ee:c4:64:52:
                    88:b5:5a:cb:f7:5c:2b:28:d7:e6:5e:e2:37:a8:1f:
                    8d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:48:4A:C9:9C:35:27:16:7D:1A:AE:A6:9B:15:3F:30:5A:BA:7A:57
            X509v3 Authority Key Identifier:
                keyid:F3:EA:16:2A:49:2A:C2:B4:7E:79:6E:9A:3C:1D:51:85:83:83:FB:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-oWKkkqwrR-eW6aPB1RhYOD-xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/8-oWKkkqwrR-eW6aPB1RhYOD-xI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d37bf0-adae-44c5-9438-f345ed3b6016/1/8-oWKkkqwrR-eW6aPB1RhYOD-xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:84:28:f0:2e:2a:78:76:fa:8b:93:7d:fc:b7:47:c0:97:90:
         e4:7c:50:2f:3b:7e:cb:23:49:b1:ab:e3:80:5f:83:d9:61:8f:
         09:9b:2d:f0:62:53:27:55:b6:b3:04:d2:40:42:d9:ee:90:8c:
         11:87:cb:1c:3e:49:3f:1e:f2:cf:4c:ee:05:af:bc:20:45:d4:
         2f:c5:bd:91:32:7e:8b:0e:a1:11:3c:c4:18:9b:15:ab:0f:c9:
         af:59:7b:dc:f4:99:34:d3:ac:6d:a3:bf:49:a0:37:ce:39:fd:
         10:fd:03:f9:c8:0c:78:fc:19:77:48:b5:74:f1:4a:4b:c6:af:
         d4:ae:4a:a4:e7:62:ef:4d:65:9a:9e:e4:49:0f:79:12:2d:08:
         bd:a4:e7:cd:0c:f0:c3:08:70:67:82:fc:8c:ec:9a:3b:68:4a:
         47:7a:7e:ef:55:2e:15:5b:52:ec:fb:5c:df:2a:3e:b9:0f:5d:
         9f:dc:2c:53:e4:c4:6a:d2:30:ff:71:5a:1d:8b:32:ee:73:6e:
         f1:9d:ef:39:87:01:cd:6f:e7:06:75:29:71:f4:f7:0a:b4:7d:
         d2:be:40:fe:03:2c:9e:6b:00:2b:8d:aa:1c:8b:98:fb:13:3e:
         0f:36:45:c8:6b:40:22:d2:5c:96:97:9d:4b:79:26:ea:c7:80:
         ec:8f:48:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY97stFV0Z1yIKCFc1x8AZyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZWExNjJhNDkyYWMyYjQ3ZTc5NmU5YTNjMWQ1MTg1ODM4
M2ZiMTIwHhcNMjQwNTE1MTAwMTA3WhcNMjQwNTE2MTAwMTA3WjAzMTEwLwYDVQQD
EyhjMTQ4NGFjOTljMzUyNzE2N2QxYWFlYTY5YjE1M2YzMDVhYmE3YTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7Jg6w1GzIr4gFONkTcrcjT04r3h
HJz5ONJ7oiTDvfgavbKlmcWiz/tjC7YtQcCZlkZwkDBSogmGZIYfv12sgleJozy4
1EArGAVZ5GQFAQxg5ySBg/WJnaXIbiDdnleiN9Xlu3ygyqlYnyn+5o8w4X+R1ULf
ZZgO8g1u8+WsSImyvQy+dZFxtFF4qovnQnJezNCuN/2OPsqAf1f+gxY5XBjEH1KD
QyGtHd5g2pcFVAQkqyPHv5Lr1PViGdlVxNWxiyn09txrB++yhHbtEfzndfWXaR0M
Luo2FVUNNr6JVLCwyYNQGcyo1vEbWe7EZFKItVrL91wrKNfmXuI3qB+NYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFISsmcNScWfRquppsVPzBaunpXMB8GA1UdIwQY
MBaAFPPqFipJKsK0fnlumjwdUYWDg/sSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC1vV0tra3F3clItZVc2YVBCMVJoWU9ELXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kMzdiZjAtYWRhZS00NGM1LTk0Mzgt
ZjM0NWVkM2I2MDE2LzEvOC1vV0tra3F3clItZVc2YVBCMVJoWU9ELXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kMzdiZjAtYWRhZS00NGM1LTk0MzgtZjM0NWVkM2I2MDE2
LzEvOC1vV0tra3F3clItZVc2YVBCMVJoWU9ELXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyoQo8C4q
eHb6i5N9/LdHwJeQ5HxQLzt+yyNJsavjgF+D2WGPCZst8GJTJ1W2swTSQELZ7pCM
EYfLHD5JPx7yz0zuBa+8IEXUL8W9kTJ+iw6hETzEGJsVqw/Jr1l73PSZNNOsbaO/
SaA3zjn9EP0D+cgMePwZd0i1dPFKS8av1K5KpOdi701lmp7kSQ95Ei0IvaTnzQzw
wwhwZ4L8jOyaO2hKR3p+71UuFVtS7Ptc3yo+uQ9dn9wsU+TEatIw/3FaHYsy7nNu
8Z3vOYcBzW/nBnUpcfT3CrR90r5A/gMsnmsAK42qHIuY+xM+DzZFyGtAItJclped
S3km6seA7I9IlA==
-----END CERTIFICATE-----
Generated at Wed May 15 17:59:18 2024 by rpki-client on console-fra.rpki-client.org