Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File:                     A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier:          BdbQ/0HBG8rD8kyY8WIqonOqIoEOh6n3IV5rzysxMqc=
Subject key identifier:   8C:C2:B5:6B:B9:0B:2A:F4:CE:09:5C:4A:23:16:08:E5:CA:7D:C6:86
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer:       /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial:       018F57023AA52164958503EBBEF384554C3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number:          0B7E
Signing time:             Wed 08 May 2024 07:01:54 +0000
Manifest this update:     Wed 08 May 2024 07:01:54 +0000
Manifest next update:     Thu 09 May 2024 07:01:54 +0000
Files and hashes:         1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: +vq9GRUwsLfBc6zl+I8xRrIdgvxeTGm9JBk7TxE1YwA=)
                          2: NgiZIvgfSE3gRbXKWGjL7-RX4JA.roa (hash: s1nxacAoqwvGw7o6uKwGOjxFDbTY351bALOZ7RPT8kE=)
                          3: bPWjPQeVaZXM8NHgAgjJoTgkB7k.roa (hash: 30Hov8q4hfIbN9zHbX1aOu5QbHtVsV28wqW/XK69yvo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:02:3a:a5:21:64:95:85:03:eb:be:f3:84:55:4c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
        Validity
            Not Before: May  8 07:01:54 2024 GMT
            Not After : May  9 07:01:54 2024 GMT
        Subject: CN=8cc2b56bb90b2af4ce095c4a231608e5ca7dc686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:96:c6:40:1e:12:6c:ae:f7:6e:13:37:de:cc:
                    72:0d:cd:af:69:98:16:b1:74:e6:8d:ff:71:eb:16:
                    26:1e:4c:3f:bd:f2:b6:b9:61:5f:eb:b8:c6:58:ec:
                    17:28:a6:73:5a:2d:f3:28:99:da:1c:78:eb:76:b0:
                    cc:d1:80:f3:42:76:a7:52:1c:78:1a:98:a2:ed:8e:
                    07:c0:12:7b:1c:66:d2:80:da:c2:f2:37:e5:d9:67:
                    fb:c6:35:ee:a4:d6:d5:b0:45:8b:a9:ad:32:6c:04:
                    c3:fd:dc:18:c8:b9:27:ff:ad:04:7c:ec:20:a2:50:
                    0f:71:ab:02:06:d3:b8:28:58:dc:55:4a:19:bb:4c:
                    ec:e3:26:4a:63:5c:b2:51:8a:ed:84:df:f0:2a:f4:
                    a5:c6:e1:dd:16:28:0a:2a:f1:77:80:70:96:2b:1e:
                    ad:f6:23:59:dd:e9:b8:89:b0:bf:c4:de:18:73:a4:
                    36:bc:bc:62:a5:3d:b1:32:fc:2d:73:25:df:f1:ae:
                    5a:31:df:e0:30:88:a9:ab:73:b9:29:46:3c:f2:91:
                    6b:5c:e1:21:c3:f1:1e:9a:93:52:c1:c5:dd:81:e3:
                    03:5e:6b:79:e7:1c:26:d2:f3:06:5b:cd:3f:ee:72:
                    51:26:40:b5:53:cf:02:9b:a8:38:e5:2f:d8:72:1d:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C2:B5:6B:B9:0B:2A:F4:CE:09:5C:4A:23:16:08:E5:CA:7D:C6:86
            X509v3 Authority Key Identifier:
                keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:67:65:58:f8:5d:e7:60:74:0c:b7:84:b0:24:95:f9:6f:e9:
         db:be:2d:21:04:70:82:3b:49:03:49:d8:4f:bd:98:b8:05:dc:
         32:94:1c:ed:7b:46:07:32:0f:30:db:a4:c8:e1:72:52:31:1e:
         74:70:7c:b0:88:8a:30:bd:7a:f2:05:4f:39:b4:78:5a:23:93:
         ea:16:e9:f8:9a:e5:63:26:3c:f2:0c:f1:67:c8:bc:7d:bf:84:
         3f:e8:14:1c:ca:82:e0:6d:f7:e5:9b:d8:cb:2d:2a:83:0c:53:
         22:49:21:1a:ff:18:d0:b4:53:21:6b:41:89:16:fc:d9:a7:c2:
         c6:14:20:df:ee:ee:fa:84:5c:63:b1:57:52:48:da:c5:c3:49:
         31:c3:80:3d:ca:bf:8c:d9:5e:36:e4:8d:b9:85:b8:80:e7:93:
         76:e5:31:b3:4e:43:32:c1:a8:fe:dc:ac:62:3f:69:79:ee:bd:
         0b:0c:08:cd:9a:48:f7:91:1a:fa:c4:77:f4:32:bb:5f:c8:00:
         04:11:40:19:f9:87:d9:8a:b0:96:8b:8f:72:7b:2e:e1:00:cb:
         3e:e4:c3:07:d6:a1:29:5d:38:ff:5b:83:c2:99:80:a8:ac:f6:
         08:60:ff:ac:b7:fc:21:8e:25:92:cb:51:7f:16:e0:d0:b4:e7:
         76:ff:a1:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9XAjqlIWSVhQPrvvOEVUw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTBkZjc4ZmM3ODU4MTM3MjRlYzY2NjQ4ZGY5YjQ5NGY5
YjhkYTcwHhcNMjQwNTA4MDcwMTU0WhcNMjQwNTA5MDcwMTU0WjAzMTEwLwYDVQQD
Eyg4Y2MyYjU2YmI5MGIyYWY0Y2UwOTVjNGEyMzE2MDhlNWNhN2RjNjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZbGQB4SbK73bhM33sxyDc2vaZgW
sXTmjf9x6xYmHkw/vfK2uWFf67jGWOwXKKZzWi3zKJnaHHjrdrDM0YDzQnanUhx4
Gpii7Y4HwBJ7HGbSgNrC8jfl2Wf7xjXupNbVsEWLqa0ybATD/dwYyLkn/60EfOwg
olAPcasCBtO4KFjcVUoZu0zs4yZKY1yyUYrthN/wKvSlxuHdFigKKvF3gHCWKx6t
9iNZ3em4ibC/xN4Yc6Q2vLxipT2xMvwtcyXf8a5aMd/gMIipq3O5KUY88pFrXOEh
w/EempNSwcXdgeMDXmt55xwm0vMGW80/7nJRJkC1U88Cm6g45S/Ych0xDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzCtWu5Cyr0zglcSiMWCOXKfcaGMB8GA1UdIwQY
MBaAFANQ33j8eFgTck7GZkjfm0lPm42nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgt
ZDI5MmFiN2NlOWZhLzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgtZDI5MmFiN2NlOWZh
LzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImdlWPhd
52B0DLeEsCSV+W/p274tIQRwgjtJA0nYT72YuAXcMpQc7XtGBzIPMNukyOFyUjEe
dHB8sIiKML168gVPObR4WiOT6hbp+JrlYyY88gzxZ8i8fb+EP+gUHMqC4G335ZvY
yy0qgwxTIkkhGv8Y0LRTIWtBiRb82afCxhQg3+7u+oRcY7FXUkjaxcNJMcOAPcq/
jNleNuSNuYW4gOeTduUxs05DMsGo/tysYj9pee69CwwIzZpI95Ea+sR39DK7X8gA
BBFAGfmH2YqwlouPcnsu4QDLPuTDB9ahKV04/1uDwpmAqKz2CGD/rLf8IY4lkstR
fxbg0LTndv+hpA==
-----END CERTIFICATE-----
Generated at Wed May 8 12:52:22 2024 by rpki-client on console-fra.rpki-client.org