Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
File:                     L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft (raw, json)
Hash identifier:          T38+b0nI4ssdG4JNaFnCbqLWRw/zx9quHYJshWAIo8o=
Subject key identifier:   A0:E2:05:9A:A2:3F:87:C0:99:44:62:7F:E0:8F:B1:DE:35:89:CB:BD
Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
Certificate issuer:       /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Certificate serial:       018F86A37367DBB597B9550311B17ABBF515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
Manifest number:          0225
Signing time:             Fri 17 May 2024 13:00:09 +0000
Manifest this update:     Fri 17 May 2024 13:00:09 +0000
Manifest next update:     Sat 18 May 2024 13:00:09 +0000
Files and hashes:         1: JxfskSqQc2_tzDBHhEWZZ9_CTBQ.roa (hash: yH9HyEXPOLe/M7orBZ/gf2XEtff1lopnw/JwtwbP7Pw=)
                          2: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl (hash: AOHEsAh4eo5B1YMEwARFMjP6QeD7EDHwgBeFXXjCQBo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:73:67:db:b5:97:b9:55:03:11:b1:7a:bb:f5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
        Validity
            Not Before: May 17 13:00:09 2024 GMT
            Not After : May 18 13:00:09 2024 GMT
        Subject: CN=a0e2059aa23f87c09944627fe08fb1de3589cbbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2f:94:e4:36:76:c4:fd:7b:d3:a8:7f:d2:f9:
                    d4:83:30:2b:00:4c:ed:a5:bf:9c:c6:29:42:29:8e:
                    5d:53:ec:40:16:aa:8b:16:98:8b:a9:03:30:e7:e6:
                    3d:f8:4f:35:6d:31:26:60:f9:e4:0d:c4:76:31:4f:
                    f6:30:1e:cb:08:dc:08:09:b1:6d:29:c7:c8:e6:b1:
                    13:e4:16:96:c0:c4:6f:98:7c:3c:86:14:51:91:ea:
                    50:ba:b2:32:16:c3:90:95:0d:18:0e:a1:76:ab:8c:
                    08:80:1c:87:ac:31:e5:52:48:7b:75:78:ea:a7:36:
                    63:31:08:11:49:2f:df:c1:ee:2d:04:46:21:44:c0:
                    39:5a:dd:02:fc:76:bc:d3:8f:84:ef:91:ee:e5:21:
                    af:a4:b2:02:c0:72:bc:ce:1f:2a:fe:c3:35:98:03:
                    6b:32:4d:69:4f:5d:b1:d8:92:94:6a:6b:6a:51:2c:
                    28:3f:02:4d:bc:2a:63:a8:bd:90:cd:ee:a1:57:d1:
                    ff:4d:d4:bb:3a:1a:a1:69:fd:c7:5d:cd:02:d5:11:
                    fb:4d:eb:b3:7b:17:fd:34:ec:62:98:a9:38:ec:e8:
                    de:ab:23:cf:05:6f:8b:03:3e:d2:0d:47:d6:fa:c6:
                    a8:2a:75:bb:65:af:99:dd:51:d4:7d:98:26:89:e7:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E2:05:9A:A2:3F:87:C0:99:44:62:7F:E0:8F:B1:DE:35:89:CB:BD
            X509v3 Authority Key Identifier:
                keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:25:20:14:83:87:97:49:07:70:da:5a:c3:ed:bf:6c:df:33:
         6c:2f:2a:c0:8b:10:48:60:94:6c:14:60:3a:c2:53:5a:aa:88:
         58:e9:43:80:47:92:a9:49:d9:7f:2c:3c:c7:38:88:b4:17:48:
         df:de:93:d6:d5:06:b2:15:5a:bf:cf:57:3d:e8:18:59:f3:93:
         9d:4c:d6:d4:60:79:04:cb:46:5b:08:11:f0:40:6f:5c:82:1b:
         0c:08:e9:22:ad:ed:7d:5c:9b:dc:70:0d:b0:62:57:dd:41:6e:
         38:9c:bc:67:bd:75:e3:e2:08:98:7f:62:c3:96:3b:86:1e:58:
         76:f6:e9:8a:c4:b8:d8:01:6c:07:f8:0b:2b:75:80:26:51:2e:
         a7:f9:75:e3:f1:c0:4f:4e:0d:d1:8c:74:a9:35:da:f7:a5:65:
         0e:d0:91:3d:32:c4:30:a7:a3:f0:f2:fe:5d:95:00:b1:57:d4:
         39:05:78:14:82:4d:3e:97:e8:60:a8:02:f7:63:b3:0c:6c:25:
         27:b0:7a:40:65:67:66:83:b7:1c:0e:da:cc:2c:fe:2d:17:fd:
         ad:01:0b:4d:f8:ac:ff:05:ba:1c:eb:4a:8f:6d:27:6c:51:87:
         e7:44:2b:fd:5b:f2:7b:e8:72:2c:bc:34:79:21:cd:fe:b5:2a:
         5d:5a:2f:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Go3Nn27WXuVUDEbF6u/UVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZmI2NDFkM2NhMmVjMTE1N2Y0NzczMjE3ODljZWMwY2M1
ZjI5YTQwHhcNMjQwNTE3MTMwMDA5WhcNMjQwNTE4MTMwMDA5WjAzMTEwLwYDVQQD
EyhhMGUyMDU5YWEyM2Y4N2MwOTk0NDYyN2ZlMDhmYjFkZTM1ODljYmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki+U5DZ2xP1706h/0vnUgzArAEzt
pb+cxilCKY5dU+xAFqqLFpiLqQMw5+Y9+E81bTEmYPnkDcR2MU/2MB7LCNwICbFt
KcfI5rET5BaWwMRvmHw8hhRRkepQurIyFsOQlQ0YDqF2q4wIgByHrDHlUkh7dXjq
pzZjMQgRSS/fwe4tBEYhRMA5Wt0C/Ha804+E75Hu5SGvpLICwHK8zh8q/sM1mANr
Mk1pT12x2JKUamtqUSwoPwJNvCpjqL2Qze6hV9H/TdS7Ohqhaf3HXc0C1RH7Teuz
exf9NOximKk47OjeqyPPBW+LAz7SDUfW+saoKnW7Za+Z3VHUfZgmiecQQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDiBZqiP4fAmURif+CPsd41icu9MB8GA1UdIwQY
MBaAFC/7ZB08ouwRV/R3MheJzsDMXymkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQt
MDcxZGFhMDVkYWJmLzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iMDZmZTAtMzY5MC00MzdkLTg5MjQtMDcxZGFhMDVkYWJm
LzEvTF90a0hUeWk3QkZYOUhjeUY0bk93TXhmS2FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESUgFIOH
l0kHcNpaw+2/bN8zbC8qwIsQSGCUbBRgOsJTWqqIWOlDgEeSqUnZfyw8xziItBdI
396T1tUGshVav89XPegYWfOTnUzW1GB5BMtGWwgR8EBvXIIbDAjpIq3tfVyb3HAN
sGJX3UFuOJy8Z7114+IImH9iw5Y7hh5YdvbpisS42AFsB/gLK3WAJlEup/l14/HA
T04N0Yx0qTXa96VlDtCRPTLEMKej8PL+XZUAsVfUOQV4FIJNPpfoYKgC92OzDGwl
J7B6QGVnZoO3HA7azCz+LRf9rQELTfis/wW6HOtKj20nbFGH50Qr/Vvye+hyLLw0
eSHN/rUqXVov0A==
-----END CERTIFICATE-----
Generated at Fri May 17 18:24:24 2024 by rpki-client on console-fra.rpki-client.org