Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File:                     FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier:          sfkFRQwNZ2dI+BEKkvTCMRz7jH0VC7vLVY2NtU9jdq0=
Subject key identifier:   85:54:97:AB:95:5D:B0:F2:CC:0E:5E:8A:1D:38:A5:52:A8:F1:6E:85
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer:       /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial:       018F4AC69B6DF66F9B4AE1B96D29D1348AAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number:          0EFC
Signing time:             Sun 05 May 2024 22:01:20 +0000
Manifest this update:     Sun 05 May 2024 22:01:20 +0000
Manifest next update:     Mon 06 May 2024 22:01:20 +0000
Files and hashes:         1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: Avgi2NEv8F3VmpDp3NvR1GAXBJII96w+mQeUA/I1ofs=)
                          2: ZLX0sohGwknRnmLsm_moOIjYMBo.roa (hash: o/u1AgB1l3ccHn+rOHpOWgjM8zUkMBxpAeDVDZ+rV+I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:c6:9b:6d:f6:6f:9b:4a:e1:b9:6d:29:d1:34:8a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
        Validity
            Not Before: May  5 22:01:20 2024 GMT
            Not After : May  6 22:01:20 2024 GMT
        Subject: CN=855497ab955db0f2cc0e5e8a1d38a552a8f16e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:41:6e:56:b5:ca:5e:73:18:19:91:79:37:12:
                    f5:5e:b7:e8:69:7a:96:4f:6a:a0:fb:05:aa:33:3a:
                    d9:8d:88:85:33:60:f8:07:c6:16:26:63:83:f1:70:
                    54:2d:85:1c:b3:21:5d:40:ae:d8:c4:ab:52:4c:cf:
                    8d:5f:7a:23:8b:b2:80:3e:45:e9:e2:8a:ed:42:1f:
                    d7:f4:48:c9:5f:40:87:cf:8d:02:e8:4a:a4:95:36:
                    83:58:67:a5:44:c5:07:a3:47:89:97:05:1b:74:f5:
                    f9:3f:43:24:24:71:06:f8:b4:4a:c4:33:2f:91:d1:
                    f4:d5:af:f0:35:40:54:fd:b0:08:91:09:ea:6f:dc:
                    ee:0e:32:49:32:c2:c2:cc:e8:db:70:54:04:93:40:
                    32:c0:18:aa:27:41:b7:0f:c3:7e:55:b3:be:e6:62:
                    19:32:7a:bb:80:73:6a:74:67:ff:29:cf:6a:7a:35:
                    cd:e4:33:9d:3c:51:f3:fa:91:b1:db:b4:3a:d3:99:
                    7f:1b:f6:42:a3:39:8c:b5:3f:b2:1e:1c:b5:95:c4:
                    d2:60:17:18:e9:88:13:10:dc:58:71:91:38:43:45:
                    cc:f4:74:c1:4d:28:d8:32:0a:13:89:37:25:4b:55:
                    be:b1:b2:0a:b6:2c:69:ca:e6:0e:f4:e0:36:7f:a2:
                    cf:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:54:97:AB:95:5D:B0:F2:CC:0E:5E:8A:1D:38:A5:52:A8:F1:6E:85
            X509v3 Authority Key Identifier:
                keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1f:05:ea:a8:0b:c7:85:4e:ac:d4:be:33:aa:e8:39:58:60:
         4b:f3:46:e8:1b:31:ee:af:c9:57:e0:dd:df:2a:2c:3e:09:02:
         28:59:be:c3:31:7c:68:18:8a:b7:fe:50:4e:55:de:1f:22:14:
         7a:1c:9f:62:ce:f4:00:e9:f6:8f:59:0f:6b:9e:90:fc:e6:6d:
         bb:ac:7c:ec:71:6d:b8:cb:1b:4b:a0:4a:80:55:5f:a2:c5:56:
         a4:8a:aa:74:13:29:fa:c6:08:23:74:da:01:54:e5:57:ae:e3:
         2f:11:93:8f:c4:f4:88:a5:ef:cf:24:73:4a:c6:ad:30:37:4d:
         69:43:aa:01:45:c4:8e:59:db:c6:f9:8c:df:c3:ea:97:83:46:
         93:71:68:7c:f8:d1:dc:b4:8b:ce:ac:e4:c6:f2:28:23:66:08:
         6d:e7:16:77:72:89:58:66:d2:be:c6:0a:50:0b:5a:23:45:64:
         71:e0:00:60:dd:bd:5c:d0:14:bf:b0:88:e7:26:f5:dc:8b:5c:
         01:40:52:b8:ef:f7:a4:76:b6:1c:ff:1d:5a:18:61:2e:16:9a:
         2d:94:05:8f:eb:3f:9a:8f:75:13:1e:77:90:1f:da:89:e9:71:
         29:bd:94:0d:a8:43:ae:f6:7d:ab:15:41:a7:91:50:f1:57:a7:
         50:7c:dd:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Kxptt9m+bSuG5bSnRNIqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDRhNTFkODRmYmE2ZDBmZTIxOGFlZGNhOTVhODk0ZGNj
ZTFjZDcwHhcNMjQwNTA1MjIwMTIwWhcNMjQwNTA2MjIwMTIwWjAzMTEwLwYDVQQD
Eyg4NTU0OTdhYjk1NWRiMGYyY2MwZTVlOGExZDM4YTU1MmE4ZjE2ZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kFuVrXKXnMYGZF5NxL1XrfoaXqW
T2qg+wWqMzrZjYiFM2D4B8YWJmOD8XBULYUcsyFdQK7YxKtSTM+NX3oji7KAPkXp
4ortQh/X9EjJX0CHz40C6EqklTaDWGelRMUHo0eJlwUbdPX5P0MkJHEG+LRKxDMv
kdH01a/wNUBU/bAIkQnqb9zuDjJJMsLCzOjbcFQEk0AywBiqJ0G3D8N+VbO+5mIZ
Mnq7gHNqdGf/Kc9qejXN5DOdPFHz+pGx27Q605l/G/ZCozmMtT+yHhy1lcTSYBcY
6YgTENxYcZE4Q0XM9HTBTSjYMgoTiTclS1W+sbIKtixpyuYO9OA2f6LPmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVUl6uVXbDyzA5eih04pVKo8W6FMB8GA1UdIwQY
MBaAFBcEpR2E+6bQ/iGK7cqVqJTczhzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMGRkZGUtY2M5Zi00ODA3LThmYTIt
ZWFmOTI0NzMxMjE4LzEvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lMGRkZGUtY2M5Zi00ODA3LThmYTItZWFmOTI0NzMxMjE4
LzEvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWx8F6qgL
x4VOrNS+M6roOVhgS/NG6Bsx7q/JV+Dd3yosPgkCKFm+wzF8aBiKt/5QTlXeHyIU
ehyfYs70AOn2j1kPa56Q/OZtu6x87HFtuMsbS6BKgFVfosVWpIqqdBMp+sYII3Ta
AVTlV67jLxGTj8T0iKXvzyRzSsatMDdNaUOqAUXEjlnbxvmM38Pql4NGk3FofPjR
3LSLzqzkxvIoI2YIbecWd3KJWGbSvsYKUAtaI0VkceAAYN29XNAUv7CI5yb13Itc
AUBSuO/3pHa2HP8dWhhhLhaaLZQFj+s/mo91Ex53kB/aielxKb2UDahDrvZ9qxVB
p5FQ8VenUHzdTQ==
-----END CERTIFICATE-----
Generated at Mon May 6 06:36:18 2024 by rpki-client on console-fra.rpki-client.org