Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
File:                     9S8g0NOy78W8l6R7d1vYuheU-eU.mft (raw, json)
Hash identifier:          CcsmcmvFb+bNVu8x6RarZAtfgMmpfxvkVsoaYckP6Qc=
Subject key identifier:   E0:03:C0:D6:96:61:D4:81:AF:65:3A:10:75:8A:D1:2B:5C:22:E8:06
Authority key identifier: F5:2F:20:D0:D3:B2:EF:C5:BC:97:A4:7B:77:5B:D8:BA:17:94:F9:E5
Certificate issuer:       /CN=f52f20d0d3b2efc5bc97a47b775bd8ba1794f9e5
Certificate serial:       018F3A0C0617DAA9D63C48AAEAE3471676EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
Manifest number:          114E
Signing time:             Thu 02 May 2024 16:03:37 +0000
Manifest this update:     Thu 02 May 2024 16:03:37 +0000
Manifest next update:     Fri 03 May 2024 16:03:37 +0000
Files and hashes:         1: 9S8g0NOy78W8l6R7d1vYuheU-eU.crl (hash: TSBt421tUmBjAdN/uLGGhJn8GVrP5BPFNU8WKDvH+YY=)
                          2: uZiaTq3yiY7hzYTIlesT-SvL720.roa (hash: LDhJ9qoMfxOR7ri1o/2qvYW9OU0kSR0croF/qKMk4lc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0c:06:17:da:a9:d6:3c:48:aa:ea:e3:47:16:76:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f52f20d0d3b2efc5bc97a47b775bd8ba1794f9e5
        Validity
            Not Before: May  2 16:03:37 2024 GMT
            Not After : May  3 16:03:37 2024 GMT
        Subject: CN=e003c0d69661d481af653a10758ad12b5c22e806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c7:49:97:84:24:6e:58:7e:fe:22:2a:ba:59:
                    b1:ce:9c:84:48:4d:38:04:4d:2b:0f:72:4a:69:97:
                    75:44:49:28:c9:d9:8c:c6:da:06:6d:8e:42:01:24:
                    c1:4a:84:25:9d:06:c3:13:dd:28:33:e0:69:9c:d6:
                    6a:78:fb:bc:e8:22:09:2c:1e:18:81:6b:fc:0a:25:
                    17:59:44:f6:d6:f5:41:10:ac:ca:dc:35:84:cb:d1:
                    e5:ce:6a:ee:70:69:d6:6d:35:f2:a2:a8:a1:6d:a2:
                    4d:d2:30:8f:1b:15:7c:84:a0:e1:57:95:c9:b3:fb:
                    52:44:e5:48:0b:85:94:2e:92:de:a0:88:82:09:76:
                    72:cf:ec:e4:af:74:da:10:25:d2:c8:f2:a8:39:0c:
                    7f:97:61:dd:3a:5e:49:36:62:35:f2:d5:a4:7f:95:
                    6d:38:fb:63:ef:cb:be:13:6d:b9:34:66:04:34:82:
                    b1:43:8a:3a:90:a6:86:7b:81:54:c4:18:82:08:52:
                    74:de:20:be:84:52:d5:8b:27:35:8f:72:a7:32:18:
                    6a:47:9a:4f:e5:50:d0:e1:8d:8e:66:5d:c3:9a:e8:
                    c3:6c:7b:3d:31:7f:8a:30:3b:89:cd:26:7d:2e:53:
                    16:c5:3b:1e:10:75:39:3b:32:b6:06:a7:55:bb:fd:
                    d3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:03:C0:D6:96:61:D4:81:AF:65:3A:10:75:8A:D1:2B:5C:22:E8:06
            X509v3 Authority Key Identifier:
                keyid:F5:2F:20:D0:D3:B2:EF:C5:BC:97:A4:7B:77:5B:D8:BA:17:94:F9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:36:68:83:25:57:88:64:21:5a:fd:80:7d:18:50:5d:2c:ea:
         70:b0:3b:8b:ab:58:36:b8:4b:c4:55:fa:3c:27:5f:6a:f3:84:
         0e:76:c1:cc:2a:11:ef:12:99:13:35:eb:97:18:9d:e8:b5:bb:
         88:91:c7:c2:eb:b8:d8:e1:9b:25:f3:48:14:25:76:f7:7c:25:
         32:c2:cf:2c:22:94:5c:41:a9:bd:ca:c7:31:02:ec:4a:e1:1f:
         30:19:aa:d7:c5:62:19:70:5f:d5:9f:bd:79:5c:58:61:4e:51:
         e6:e6:4e:ef:c4:25:78:5e:d4:99:dc:78:27:33:15:74:e4:da:
         2a:60:3c:97:5b:ef:5f:da:8d:11:46:15:79:6d:a6:79:db:c8:
         0f:07:20:57:7c:67:ec:21:ea:6f:cd:22:b1:6e:ff:3f:91:c1:
         3e:59:71:49:e6:4d:ab:17:45:1f:13:cd:4a:83:dc:03:e7:85:
         d3:64:c8:fc:79:96:f0:b4:79:7c:92:c6:e6:f4:bc:37:cc:44:
         a2:5b:ac:14:e6:94:1c:9e:d1:e9:f6:4c:d0:93:18:e1:17:4a:
         d8:58:89:75:9d:2e:4f:41:db:31:c7:8f:cf:82:4b:1a:5d:55:
         e6:ca:f0:2f:1e:c0:15:de:0b:af:37:eb:75:0f:97:23:f1:e9:
         97:7f:35:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY86DAYX2qnWPEiq6uNHFnbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MmYyMGQwZDNiMmVmYzViYzk3YTQ3Yjc3NWJkOGJhMTc5
NGY5ZTUwHhcNMjQwNTAyMTYwMzM3WhcNMjQwNTAzMTYwMzM3WjAzMTEwLwYDVQQD
EyhlMDAzYzBkNjk2NjFkNDgxYWY2NTNhMTA3NThhZDEyYjVjMjJlODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38dJl4Qkblh+/iIqulmxzpyESE04
BE0rD3JKaZd1REkoydmMxtoGbY5CASTBSoQlnQbDE90oM+BpnNZqePu86CIJLB4Y
gWv8CiUXWUT21vVBEKzK3DWEy9HlzmrucGnWbTXyoqihbaJN0jCPGxV8hKDhV5XJ
s/tSROVIC4WULpLeoIiCCXZyz+zkr3TaECXSyPKoOQx/l2HdOl5JNmI18tWkf5Vt
OPtj78u+E225NGYENIKxQ4o6kKaGe4FUxBiCCFJ03iC+hFLViyc1j3KnMhhqR5pP
5VDQ4Y2OZl3DmujDbHs9MX+KMDuJzSZ9LlMWxTseEHU5OzK2BqdVu/3TOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOADwNaWYdSBr2U6EHWK0StcIugGMB8GA1UdIwQY
MBaAFPUvINDTsu/FvJeke3db2LoXlPnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVM4ZzBOT3k3OFc4bDZSN2Qxdll1aGVVLWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jNmVjNjgtMjI1Zi00ZDk1LTkzNDAt
YTFmNzQ1ODYzODdiLzEvOVM4ZzBOT3k3OFc4bDZSN2Qxdll1aGVVLWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jNmVjNjgtMjI1Zi00ZDk1LTkzNDAtYTFmNzQ1ODYzODdi
LzEvOVM4ZzBOT3k3OFc4bDZSN2Qxdll1aGVVLWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0DZogyVX
iGQhWv2AfRhQXSzqcLA7i6tYNrhLxFX6PCdfavOEDnbBzCoR7xKZEzXrlxid6LW7
iJHHwuu42OGbJfNIFCV293wlMsLPLCKUXEGpvcrHMQLsSuEfMBmq18ViGXBf1Z+9
eVxYYU5R5uZO78QleF7Umdx4JzMVdOTaKmA8l1vvX9qNEUYVeW2medvIDwcgV3xn
7CHqb80isW7/P5HBPllxSeZNqxdFHxPNSoPcA+eF02TI/HmW8LR5fJLG5vS8N8xE
olusFOaUHJ7R6fZM0JMY4RdK2FiJdZ0uT0HbMcePz4JLGl1V5srwLx7AFd4Lrzfr
dQ+XI/Hpl381rg==
-----END CERTIFICATE-----
Generated at Thu May 2 18:16:07 2024 by rpki-client on console-fra.rpki-client.org