Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File:                     kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier:          8kAD1LYD07N9VbFh/b2rCy4BQKhsaUjYLMtB97uBq8M=
Subject key identifier:   55:B9:85:3A:1E:F6:78:F0:4A:79:E4:6A:E9:C2:A4:46:95:30:7C:18
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer:       /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial:       018F87486A1D825B5AECC21A349D77C3A3D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number:          0FE6
Signing time:             Fri 17 May 2024 16:00:20 +0000
Manifest this update:     Fri 17 May 2024 16:00:20 +0000
Manifest next update:     Sat 18 May 2024 16:00:20 +0000
Files and hashes:         1: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: 1kBRDsPAK83VLuWzIZbbT14Y95i9Ey0abzh44n2yF2M=)
                          2: ulj2w9JN4ZRjx_VwY1Md4hcACis.roa (hash: rylcW47HXkwq6CMKuNMQEvu00QUWBlQNzcfXJmFscCY=)
                          3: zoGIyV1IOyNkkhE89Udsw2K-7D4.roa (hash: odvte4x/8Xt2r3Sdjs2M/W547EDORk7OhEKGosP9d3g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:6a:1d:82:5b:5a:ec:c2:1a:34:9d:77:c3:a3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
        Validity
            Not Before: May 17 16:00:20 2024 GMT
            Not After : May 18 16:00:20 2024 GMT
        Subject: CN=55b9853a1ef678f04a79e46ae9c2a44695307c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:3a:1a:93:30:9d:48:1c:57:7e:32:59:e6:
                    7c:d8:1c:7d:87:17:09:d9:63:07:1f:db:d8:7b:6e:
                    d5:4c:c3:cd:cd:c2:90:05:60:f6:47:29:6c:92:4d:
                    cb:6c:87:f0:3e:8c:16:02:d0:67:8f:ed:83:05:e1:
                    b0:b5:e0:1a:15:c7:d6:48:dd:6a:fa:7e:2e:a0:65:
                    9f:3a:f9:5a:26:e4:c1:81:b2:5e:28:6b:d8:83:d5:
                    6b:c4:6c:1d:9e:62:d3:33:1e:4f:2d:e6:54:5e:0d:
                    f7:3c:b2:88:9e:e6:76:47:f0:77:c4:14:c8:15:0c:
                    82:c9:17:8c:5a:ad:b6:1e:53:b7:b0:d5:97:6e:1e:
                    a1:09:9f:32:2b:a6:6b:44:6b:27:a6:c2:90:52:e9:
                    a9:a2:2e:d3:92:d7:d4:4a:d5:0f:8f:ac:94:75:26:
                    77:5b:f5:9f:1f:68:99:12:a6:0f:f0:2f:a4:a2:1e:
                    41:3f:3b:83:6f:dc:50:cb:ef:5d:0f:b1:89:74:f7:
                    e0:2a:03:d6:0f:66:a0:b6:ca:20:af:dd:d0:83:86:
                    46:92:33:fb:34:cf:f2:75:cc:cf:7d:e5:6e:c6:a1:
                    b6:1a:1f:3e:39:53:a6:c1:e4:78:dd:25:cc:0a:c4:
                    b8:fd:cb:26:7a:2d:91:9a:92:16:64:22:39:a9:43:
                    1a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B9:85:3A:1E:F6:78:F0:4A:79:E4:6A:E9:C2:A4:46:95:30:7C:18
            X509v3 Authority Key Identifier:
                keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:bd:3c:05:95:02:51:48:ef:71:9d:56:b6:91:34:66:e3:7d:
         e5:20:bd:82:5c:08:7e:45:12:19:15:fe:73:48:a4:e0:91:ac:
         8b:c3:05:a8:21:66:91:7f:32:dc:4e:41:ba:73:e6:a7:d4:53:
         b6:74:8f:30:2d:21:9a:6d:ee:2d:ad:e6:93:e2:8a:a9:69:85:
         fb:cd:22:ce:05:c6:46:ea:77:ba:13:a5:0f:fa:55:04:0e:d8:
         b0:df:41:5b:da:95:58:4a:c2:4a:3a:1a:db:e9:7e:42:2a:a7:
         7c:2e:6e:6b:26:ae:67:42:2c:2a:e7:2e:46:55:e8:9b:7e:6d:
         6c:8e:fd:cc:1e:e7:be:72:96:51:d7:e0:d7:f5:d5:c7:41:c6:
         0b:ae:31:f5:ac:55:33:55:a5:13:a0:6b:3c:74:37:13:13:06:
         ce:21:88:93:18:ce:c7:15:27:eb:4a:0e:e5:a9:b7:34:0b:55:
         9a:2a:eb:7d:43:92:b7:64:85:88:fc:79:13:50:06:bb:20:1f:
         f4:cb:95:00:c9:97:f7:29:a6:a8:d6:76:a8:ed:fd:7c:99:db:
         d8:4c:89:a5:6d:64:53:18:d0:3e:42:7b:6c:a3:79:41:15:f4:
         8f:ca:7b:1b:f8:64:12:de:e5:2e:ff:18:79:53:b1:08:a1:d9:
         e4:66:90:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSGodglta7MIaNJ13w6PQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZjU4OTFhMjZjZmE0MzZhMjNlN2UxZmY5NzY2NDhiZWU3
OWVmNzcwHhcNMjQwNTE3MTYwMDIwWhcNMjQwNTE4MTYwMDIwWjAzMTEwLwYDVQQD
Eyg1NWI5ODUzYTFlZjY3OGYwNGE3OWU0NmFlOWMyYTQ0Njk1MzA3YzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs06GpMwnUgcV34yWeZ82Bx9hxcJ
2WMHH9vYe27VTMPNzcKQBWD2Rylskk3LbIfwPowWAtBnj+2DBeGwteAaFcfWSN1q
+n4uoGWfOvlaJuTBgbJeKGvYg9VrxGwdnmLTMx5PLeZUXg33PLKInuZ2R/B3xBTI
FQyCyReMWq22HlO3sNWXbh6hCZ8yK6ZrRGsnpsKQUumpoi7TktfUStUPj6yUdSZ3
W/WfH2iZEqYP8C+koh5BPzuDb9xQy+9dD7GJdPfgKgPWD2agtsogr93Qg4ZGkjP7
NM/ydczPfeVuxqG2Gh8+OVOmweR43SXMCsS4/csmei2RmpIWZCI5qUMauwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFW5hToe9njwSnnkaunCpEaVMHwYMB8GA1UdIwQY
MBaAFJH1iRomz6Q2oj5+H/l2ZIvuee93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83ZjFiNzQtYzhkNy00YTBkLThhMzkt
ZGFhNzM5MGI1YmE3LzEva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83ZjFiNzQtYzhkNy00YTBkLThhMzktZGFhNzM5MGI1YmE3
LzEva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGr08BZUC
UUjvcZ1WtpE0ZuN95SC9glwIfkUSGRX+c0ik4JGsi8MFqCFmkX8y3E5BunPmp9RT
tnSPMC0hmm3uLa3mk+KKqWmF+80izgXGRup3uhOlD/pVBA7YsN9BW9qVWErCSjoa
2+l+QiqnfC5uayauZ0IsKucuRlXom35tbI79zB7nvnKWUdfg1/XVx0HGC64x9axV
M1WlE6BrPHQ3ExMGziGIkxjOxxUn60oO5am3NAtVmirrfUOSt2SFiPx5E1AGuyAf
9MuVAMmX9ymmqNZ2qO39fJnb2EyJpW1kUxjQPkJ7bKN5QRX0j8p7G/hkEt7lLv8Y
eVOxCKHZ5GaQyA==
-----END CERTIFICATE-----
Generated at Fri May 17 23:41:17 2024 by rpki-client on console-fra.rpki-client.org