Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
File:                     52CwD7DMWV_lQtYibj8KPlFl8cw.mft (raw, json)
Hash identifier:          OdopUFifzCQfD0fHUKzpkOpuLjbOWWw2eqbDUpz1B6k=
Subject key identifier:   28:EE:E7:29:67:DB:55:C0:71:13:2B:D1:07:4B:0D:7C:D7:59:4D:FD
Authority key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
Certificate issuer:       /CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Certificate serial:       018F87B60795589B8836847E7550F89D03EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
Manifest number:          0120
Signing time:             Fri 17 May 2024 18:00:04 +0000
Manifest this update:     Fri 17 May 2024 18:00:04 +0000
Manifest next update:     Sat 18 May 2024 18:00:04 +0000
Files and hashes:         1: 52CwD7DMWV_lQtYibj8KPlFl8cw.crl (hash: NjY1i3YqENK5D20chorE8P376UytYjwsIDnqtLGsSGg=)
                          2: Ox1wIAMaN_OXwH6rTid10222kZY.roa (hash: M07ikvRsyHNJNNRIKTUa/LMiwQ2cnWzJxDfVg6SspNU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:07:95:58:9b:88:36:84:7e:75:50:f8:9d:03:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
        Validity
            Not Before: May 17 18:00:04 2024 GMT
            Not After : May 18 18:00:04 2024 GMT
        Subject: CN=28eee72967db55c071132bd1074b0d7cd7594dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:bc:23:f2:4f:13:a5:62:77:f3:4c:f9:67:
                    d8:fd:af:9e:98:f9:ed:93:46:77:48:91:57:86:f9:
                    3d:1e:fd:dc:aa:e2:56:45:3d:18:68:59:8c:b6:d3:
                    74:21:4e:4f:8d:3f:74:f4:10:87:18:d7:5b:2d:2d:
                    95:ae:2e:00:4c:e1:16:15:9c:53:cd:10:73:ec:f9:
                    f3:00:c2:fc:0b:99:43:9e:ec:74:5f:9b:bc:7c:03:
                    6d:50:27:21:0d:96:43:fc:65:15:f8:b4:0e:9d:ff:
                    50:4e:02:01:ba:dd:8a:4e:ed:cc:71:c3:56:7b:f2:
                    a8:0d:bc:61:d3:59:19:89:66:08:3d:1a:d3:fd:c3:
                    81:36:27:93:e6:a0:bc:1a:78:79:41:7b:9c:c0:64:
                    22:e5:cf:40:54:ae:e8:80:c7:2c:cd:31:6c:1f:3e:
                    e5:8c:54:0c:bc:f8:71:ae:a3:2b:91:84:08:b3:7b:
                    51:54:1a:ee:06:c6:01:a6:57:b6:a9:5b:99:d7:49:
                    14:a7:92:28:a8:60:11:7d:37:2c:dc:0a:58:45:da:
                    46:aa:f1:46:e9:a7:dc:5a:d2:42:9f:64:a8:93:cf:
                    a3:69:77:dd:7e:94:85:c5:7a:5a:6c:7b:79:06:cb:
                    40:60:64:49:da:f2:8b:d2:f1:7d:78:a1:19:3a:da:
                    16:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EE:E7:29:67:DB:55:C0:71:13:2B:D1:07:4B:0D:7C:D7:59:4D:FD
            X509v3 Authority Key Identifier:
                keyid:E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ba:c9:e0:a4:a7:06:f6:3c:a5:d5:0b:c2:86:21:cf:47:e9:
         9c:0b:4c:d5:97:79:31:9e:58:c2:81:35:7a:2b:4b:ec:12:e8:
         41:f1:fb:69:04:80:0f:d9:da:b4:f5:c5:de:5c:31:b6:85:74:
         7e:ab:37:09:a9:36:26:b2:78:9d:7d:73:c0:15:a5:8d:60:be:
         ce:a5:cc:f8:15:1e:d9:e1:1d:24:56:7d:63:10:cd:95:31:a3:
         2d:46:70:e5:29:40:69:72:15:a6:d1:16:c2:89:04:ac:55:88:
         f8:0a:51:65:bc:41:02:cc:ec:9d:a8:1d:37:19:b5:66:13:fe:
         e7:f5:13:22:83:b8:86:1a:5a:5f:28:bf:d6:c1:73:fe:7f:34:
         56:5b:dc:f8:20:32:6f:39:f3:18:2a:45:0d:07:bd:3d:fa:c2:
         7b:4a:0c:bd:99:b7:d9:0c:34:8d:36:0a:70:0f:6e:5d:ec:53:
         9a:eb:2c:01:39:83:05:70:23:1e:cf:b4:dd:b4:16:c2:d0:89:
         ee:8f:71:19:e3:94:04:88:a0:34:38:a0:cd:1f:7b:54:ea:13:
         8d:9c:95:6a:29:f7:0d:0e:8f:5a:64:fa:7b:2e:22:70:07:10:
         26:22:42:8b:56:fc:f3:88:34:61:af:30:de:fe:e2:ad:98:f5:
         1d:e8:53:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtgeVWJuINoR+dVD4nQPvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjBiMDBmYjBjYzU5NWZlNTQyZDYyMjZlM2YwYTNlNTE2
NWYxY2MwHhcNMjQwNTE3MTgwMDA0WhcNMjQwNTE4MTgwMDA0WjAzMTEwLwYDVQQD
EygyOGVlZTcyOTY3ZGI1NWMwNzExMzJiZDEwNzRiMGQ3Y2Q3NTk0ZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroG8I/JPE6Vid/NM+WfY/a+emPnt
k0Z3SJFXhvk9Hv3cquJWRT0YaFmMttN0IU5PjT909BCHGNdbLS2Vri4ATOEWFZxT
zRBz7PnzAML8C5lDnux0X5u8fANtUCchDZZD/GUV+LQOnf9QTgIBut2KTu3MccNW
e/KoDbxh01kZiWYIPRrT/cOBNieT5qC8Gnh5QXucwGQi5c9AVK7ogMcszTFsHz7l
jFQMvPhxrqMrkYQIs3tRVBruBsYBple2qVuZ10kUp5IoqGARfTcs3ApYRdpGqvFG
6afcWtJCn2Sok8+jaXfdfpSFxXpabHt5BstAYGRJ2vKL0vF9eKEZOtoWLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCju5yln21XAcRMr0QdLDXzXWU39MB8GA1UdIwQY
MBaAFOdgsA+wzFlf5ULWIm4/Cj5RZfHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJDd0Q3RE1XVl9sUXRZaWJqOEtQbEZsOGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iZWEzZDAtZDMzZS00NGJjLTgyOTYt
OTRlNGM5ZmQ3MThhLzEvNTJDd0Q3RE1XVl9sUXRZaWJqOEtQbEZsOGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iZWEzZDAtZDMzZS00NGJjLTgyOTYtOTRlNGM5ZmQ3MThh
LzEvNTJDd0Q3RE1XVl9sUXRZaWJqOEtQbEZsOGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7rJ4KSn
BvY8pdULwoYhz0fpnAtM1Zd5MZ5YwoE1eitL7BLoQfH7aQSAD9natPXF3lwxtoV0
fqs3Cak2JrJ4nX1zwBWljWC+zqXM+BUe2eEdJFZ9YxDNlTGjLUZw5SlAaXIVptEW
wokErFWI+ApRZbxBAszsnagdNxm1ZhP+5/UTIoO4hhpaXyi/1sFz/n80Vlvc+CAy
bznzGCpFDQe9PfrCe0oMvZm32Qw0jTYKcA9uXexTmussATmDBXAjHs+03bQWwtCJ
7o9xGeOUBIigNDigzR97VOoTjZyVain3DQ6PWmT6ey4icAcQJiJCi1b884g0Ya8w
3v7irZj1HehT7w==
-----END CERTIFICATE-----
Generated at Fri May 17 20:13:48 2024 by rpki-client on console-fra.rpki-client.org