Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
File:                     FgWNKEMMTknmGlivT9em9lbt_Z4.mft (raw, json)
Hash identifier:          qPjbGixRAswZvMd2nq+ou6MTMlRmRBwOCMPtWYgdjZI=
Subject key identifier:   71:3E:DA:2B:F7:0B:53:6B:74:D9:EE:A5:96:D8:7A:44:D9:0C:6B:96
Authority key identifier: 16:05:8D:28:43:0C:4E:49:E6:1A:58:AF:4F:D7:A6:F6:56:ED:FD:9E
Certificate issuer:       /CN=16058d28430c4e49e61a58af4fd7a6f656edfd9e
Certificate serial:       018F38895C2C935F282B1AC72D9DB86D81A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
Manifest number:          0C57
Signing time:             Thu 02 May 2024 09:01:17 +0000
Manifest this update:     Thu 02 May 2024 09:01:17 +0000
Manifest next update:     Fri 03 May 2024 09:01:17 +0000
Files and hashes:         1: FgWNKEMMTknmGlivT9em9lbt_Z4.crl (hash: W9JE94aNN92MGqMFQc2v4KRqd/9tBwwVf7qoWEynTW8=)
                          2: HmuVMw8VRPedRbLs_ih_l1ad8xw.roa (hash: PGOE2RxqOA+1MYaxVO+oFZUrUs67IBjypfZgtkQGebs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:89:5c:2c:93:5f:28:2b:1a:c7:2d:9d:b8:6d:81:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16058d28430c4e49e61a58af4fd7a6f656edfd9e
        Validity
            Not Before: May  2 09:01:17 2024 GMT
            Not After : May  3 09:01:17 2024 GMT
        Subject: CN=713eda2bf70b536b74d9eea596d87a44d90c6b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c4:87:fa:5f:ba:e0:b7:5f:5d:0b:d0:ac:75:
                    8e:15:9d:a2:62:c1:a1:f7:27:98:5d:52:2f:1d:09:
                    40:2c:94:b8:06:75:01:de:ba:05:49:96:3e:90:92:
                    49:e6:03:0b:b7:e9:84:30:00:ff:3c:86:3b:ff:18:
                    1e:8e:91:35:06:22:5e:45:d8:56:e8:d6:84:6c:f0:
                    76:76:2b:aa:7a:e5:8f:5e:b5:98:cd:1d:54:96:79:
                    db:3f:fa:aa:f4:5a:fa:ab:59:45:fb:6a:c5:6b:31:
                    ee:9a:8d:db:1e:05:03:4f:08:b2:25:57:ec:d6:51:
                    f6:64:d8:ce:1f:15:09:c1:98:41:cd:c0:94:72:a7:
                    a0:76:55:4a:55:3e:0f:d7:de:a5:58:59:bb:70:28:
                    60:24:77:bd:a4:81:a2:28:29:fa:e9:c2:d4:e6:d3:
                    37:af:97:ec:cc:6d:9f:65:4b:ac:3a:2b:72:12:52:
                    22:27:d1:6d:7d:00:67:10:34:c6:59:f7:9d:7c:af:
                    3b:7b:c1:13:51:81:b8:b2:1e:4e:01:8e:fa:d2:d2:
                    10:b3:51:ae:8b:e2:58:2b:6b:e3:76:2b:70:81:b4:
                    41:83:5b:b8:fb:c3:9e:92:74:79:fe:8e:4a:a7:29:
                    88:70:89:15:02:78:f3:15:d7:00:a3:25:a2:c7:17:
                    55:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3E:DA:2B:F7:0B:53:6B:74:D9:EE:A5:96:D8:7A:44:D9:0C:6B:96
            X509v3 Authority Key Identifier:
                keyid:16:05:8D:28:43:0C:4E:49:E6:1A:58:AF:4F:D7:A6:F6:56:ED:FD:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d4:b3:d4:f6:7e:31:40:e2:0b:45:60:9c:41:e4:6d:4d:b5:
         dd:b5:1d:30:93:c5:0f:f4:30:cd:b5:b4:e1:a8:2f:e9:c9:3b:
         a6:21:ae:e2:7e:ff:33:7e:ea:e1:12:4e:9a:1e:9f:22:03:3b:
         34:6b:57:b2:bc:63:82:c9:4a:4c:04:07:dc:27:65:35:fe:5c:
         3a:90:a9:10:fd:71:cf:22:90:fb:e6:d6:ec:04:13:86:0e:f6:
         42:6a:17:b6:56:a8:68:4f:8e:23:c2:5c:e7:b1:25:0a:be:88:
         fa:e0:40:6b:21:b4:1d:f1:80:a9:3d:00:36:d9:c6:6f:e1:12:
         d3:f4:2d:ba:aa:c0:97:16:87:52:fd:40:46:5d:41:ee:67:f5:
         91:60:aa:ff:af:15:3c:6c:8f:5e:22:10:b1:0e:67:41:0e:c9:
         d0:30:a6:86:8d:d2:a2:62:33:9b:08:07:b4:61:7d:37:fa:27:
         9a:16:cf:3a:6a:1f:0f:b0:54:61:21:05:56:f5:af:b2:29:58:
         ce:34:ab:a1:6b:ce:e4:da:e9:89:40:d2:59:25:c4:54:12:9e:
         1d:cc:31:14:94:5b:65:7b:c0:a9:0a:94:28:0f:e4:92:7b:c5:
         19:f4:2c:08:1a:97:aa:df:32:97:c2:1f:75:32:eb:8d:4e:32:
         f8:cd:63:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY84iVwsk18oKxrHLZ24bYGnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU4ZDI4NDMwYzRlNDllNjFhNThhZjRmZDdhNmY2NTZl
ZGZkOWUwHhcNMjQwNTAyMDkwMTE3WhcNMjQwNTAzMDkwMTE3WjAzMTEwLwYDVQQD
Eyg3MTNlZGEyYmY3MGI1MzZiNzRkOWVlYTU5NmQ4N2E0NGQ5MGM2Yjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9cSH+l+64LdfXQvQrHWOFZ2iYsGh
9yeYXVIvHQlALJS4BnUB3roFSZY+kJJJ5gMLt+mEMAD/PIY7/xgejpE1BiJeRdhW
6NaEbPB2diuqeuWPXrWYzR1UlnnbP/qq9Fr6q1lF+2rFazHumo3bHgUDTwiyJVfs
1lH2ZNjOHxUJwZhBzcCUcqegdlVKVT4P196lWFm7cChgJHe9pIGiKCn66cLU5tM3
r5fszG2fZUusOityElIiJ9FtfQBnEDTGWfedfK87e8ETUYG4sh5OAY760tIQs1Gu
i+JYK2vjditwgbRBg1u4+8OeknR5/o5KpymIcIkVAnjzFdcAoyWixxdVdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHE+2iv3C1NrdNnupZbYekTZDGuWMB8GA1UdIwQY
MBaAFBYFjShDDE5J5hpYr0/XpvZW7f2eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdXTktFTU1Ua25tR2xpdlQ5ZW05bGJ0X1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iODgxMzktMWE5My00YmQwLTk4MjUt
YmFmYjc5MTFlZTE3LzEvRmdXTktFTU1Ua25tR2xpdlQ5ZW05bGJ0X1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iODgxMzktMWE5My00YmQwLTk4MjUtYmFmYjc5MTFlZTE3
LzEvRmdXTktFTU1Ua25tR2xpdlQ5ZW05bGJ0X1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdSz1PZ+
MUDiC0VgnEHkbU213bUdMJPFD/QwzbW04agv6ck7piGu4n7/M37q4RJOmh6fIgM7
NGtXsrxjgslKTAQH3CdlNf5cOpCpEP1xzyKQ++bW7AQThg72QmoXtlaoaE+OI8Jc
57ElCr6I+uBAayG0HfGAqT0ANtnGb+ES0/QtuqrAlxaHUv1ARl1B7mf1kWCq/68V
PGyPXiIQsQ5nQQ7J0DCmho3SomIzmwgHtGF9N/onmhbPOmofD7BUYSEFVvWvsilY
zjSroWvO5NrpiUDSWSXEVBKeHcwxFJRbZXvAqQqUKA/kknvFGfQsCBqXqt8yl8If
dTLrjU4y+M1j9Q==
-----END CERTIFICATE-----
Generated at Thu May 2 12:45:34 2024 by rpki-client on console-ams.rpki-client.org