Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
File:                     FaevcHtYSLNTljanQxd51wFM2mE.mft (raw, json)
Hash identifier:          8LOxVHgGDT5WxkdhWksMKcjZeroDf6fjfvidRjwxD/U=
Subject key identifier:   EB:BF:52:E7:8F:D0:B0:22:92:FE:19:C5:30:49:84:CA:1C:34:9E:7F
Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
Certificate issuer:       /CN=15a7af707b5848b3539636a7431779d7014cda61
Certificate serial:       018F87B6934F9ADACB9591F83750A7664896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
Manifest number:          7C
Signing time:             Fri 17 May 2024 18:00:40 +0000
Manifest this update:     Fri 17 May 2024 18:00:40 +0000
Manifest next update:     Sat 18 May 2024 18:00:40 +0000
Files and hashes:         1: FaevcHtYSLNTljanQxd51wFM2mE.crl (hash: YFpSKIKtnMXR2OtaCQYvAzAiG55/F+IupfDqhkKcLGY=)
                          2: VS8FwNlMkuFGyMg5BXbxczjl27Y.roa (hash: UcE5UYwIWmYhcm4TYcooWIH8aSpJHNpDVg6vQOgqBUM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:93:4f:9a:da:cb:95:91:f8:37:50:a7:66:48:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61
        Validity
            Not Before: May 17 18:00:40 2024 GMT
            Not After : May 18 18:00:40 2024 GMT
        Subject: CN=ebbf52e78fd0b02292fe19c5304984ca1c349e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:50:5c:0d:d2:5f:dd:6e:b0:09:c6:80:20:d8:
                    2f:74:e7:a2:67:88:9f:13:cc:fe:b3:98:87:8b:aa:
                    cb:5b:00:7d:92:1a:04:ae:a0:4a:e1:b5:9c:9e:72:
                    b2:8f:be:cf:2b:86:14:85:8d:90:32:0f:5c:36:8a:
                    91:01:06:56:07:3e:a7:a2:76:f1:ad:52:23:a4:5c:
                    46:08:7f:68:7e:22:c0:60:bc:ce:f3:d9:69:3b:99:
                    ff:9b:98:3d:35:3d:5d:7a:11:1f:82:fe:89:7e:40:
                    75:34:a1:fe:87:a3:f1:1c:2a:ef:6c:22:8c:72:94:
                    bd:99:89:eb:81:86:a0:e4:1f:9b:ff:26:26:44:50:
                    a0:f3:95:37:12:ac:42:d7:50:73:c9:14:3d:04:32:
                    45:6a:eb:56:1c:3f:2b:0e:4f:40:70:bd:7a:4f:a3:
                    b5:bf:4e:fc:7a:d0:10:57:c6:84:93:83:66:f9:de:
                    06:7f:96:69:c7:9a:0c:7c:ea:7a:23:32:65:32:01:
                    3c:1b:82:a4:24:2d:a5:00:b9:8d:5f:1e:90:40:89:
                    91:48:1b:d6:05:be:a4:1a:2d:92:97:f7:33:c2:55:
                    7a:3b:7f:b7:ec:8f:d5:83:5c:a0:79:0a:e4:c9:df:
                    d5:1b:04:40:85:2c:da:5e:59:05:90:82:a7:25:25:
                    2d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BF:52:E7:8F:D0:B0:22:92:FE:19:C5:30:49:84:CA:1C:34:9E:7F
            X509v3 Authority Key Identifier:
                keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a7:12:9e:8d:6c:d0:24:a9:49:16:f9:ae:e2:b3:ee:1f:76:
         0e:a3:60:ef:ee:76:da:c7:c5:d6:1a:9f:2e:fb:0b:16:a3:aa:
         72:fd:d6:48:98:66:09:59:57:64:d1:f5:ba:ae:7b:7c:0a:ea:
         90:a8:0a:d7:e9:8b:30:24:8f:f6:e3:d2:8a:b8:71:f5:87:ad:
         5a:2c:b2:ed:d2:ec:5f:ca:82:3a:1e:84:bf:53:2b:27:a8:71:
         45:30:04:b3:48:46:44:13:81:89:4a:cb:02:a3:ad:f7:65:d9:
         2c:01:9a:48:09:c8:f2:d4:c1:8e:4a:5d:f0:46:23:88:24:89:
         09:0e:8f:6f:89:f4:ac:77:8c:e6:03:db:54:cb:68:7f:79:9d:
         f0:1d:d6:72:5e:79:3f:68:1e:4c:35:f3:92:be:90:06:27:09:
         ba:fe:ae:c6:49:53:33:91:8d:b5:9b:af:68:f8:64:0b:73:5e:
         50:28:03:31:91:7f:c2:40:80:06:4c:aa:cf:b7:7f:a3:e9:fc:
         e4:e4:aa:92:2a:ae:6a:1e:6a:32:69:85:06:20:ef:ca:14:40:
         d5:99:16:a7:d4:fb:cc:44:aa:a6:18:54:bf:d7:86:c3:36:28:
         12:39:8c:8a:c4:b2:bb:f6:60:ea:1a:dc:ab:8f:b9:03:3a:0e:
         73:7f:e6:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtpNPmtrLlZH4N1CnZkiWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YTdhZjcwN2I1ODQ4YjM1Mzk2MzZhNzQzMTc3OWQ3MDE0
Y2RhNjEwHhcNMjQwNTE3MTgwMDQwWhcNMjQwNTE4MTgwMDQwWjAzMTEwLwYDVQQD
EyhlYmJmNTJlNzhmZDBiMDIyOTJmZTE5YzUzMDQ5ODRjYTFjMzQ5ZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFBcDdJf3W6wCcaAINgvdOeiZ4if
E8z+s5iHi6rLWwB9khoErqBK4bWcnnKyj77PK4YUhY2QMg9cNoqRAQZWBz6nonbx
rVIjpFxGCH9ofiLAYLzO89lpO5n/m5g9NT1dehEfgv6JfkB1NKH+h6PxHCrvbCKM
cpS9mYnrgYag5B+b/yYmRFCg85U3EqxC11BzyRQ9BDJFautWHD8rDk9AcL16T6O1
v078etAQV8aEk4Nm+d4Gf5Zpx5oMfOp6IzJlMgE8G4KkJC2lALmNXx6QQImRSBvW
Bb6kGi2Sl/czwlV6O3+37I/Vg1ygeQrkyd/VGwRAhSzaXlkFkIKnJSUttQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOu/UueP0LAikv4ZxTBJhMocNJ5/MB8GA1UdIwQY
MBaAFBWnr3B7WEizU5Y2p0MXedcBTNphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kZDUwZGUtOGUyYS00OTBjLWE0MTgt
NjAxMTY4NjI2MTZhLzEvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kZDUwZGUtOGUyYS00OTBjLWE0MTgtNjAxMTY4NjI2MTZh
LzEvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALacSno1s
0CSpSRb5ruKz7h92DqNg7+522sfF1hqfLvsLFqOqcv3WSJhmCVlXZNH1uq57fArq
kKgK1+mLMCSP9uPSirhx9YetWiyy7dLsX8qCOh6Ev1MrJ6hxRTAEs0hGRBOBiUrL
AqOt92XZLAGaSAnI8tTBjkpd8EYjiCSJCQ6Pb4n0rHeM5gPbVMtof3md8B3Wcl55
P2geTDXzkr6QBicJuv6uxklTM5GNtZuvaPhkC3NeUCgDMZF/wkCABkyqz7d/o+n8
5OSqkiquah5qMmmFBiDvyhRA1ZkWp9T7zESqphhUv9eGwzYoEjmMisSyu/Zg6hrc
q4+5AzoOc3/mFw==
-----END CERTIFICATE-----
Generated at Fri May 17 20:13:42 2024 by rpki-client on console-fra.rpki-client.org