Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
File:                     DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json)
Hash identifier:          akx016i/N0yAxz9dKfSEXCyEvZk3zf6CMbgN6/xwXso=
Subject key identifier:   34:3C:DB:F1:31:AC:B4:B3:C9:31:17:CA:53:55:18:A1:7E:FD:B7:1C
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Certificate issuer:       /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial:       018F877F4D0E64D756BA289F893FB6D246C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
Manifest number:          DE
Signing time:             Fri 17 May 2024 17:00:17 +0000
Manifest this update:     Fri 17 May 2024 17:00:17 +0000
Manifest next update:     Sat 18 May 2024 17:00:17 +0000
Files and hashes:         1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: M44o3UVL2nBRLz2A2AtmjsDFmj3N3qIL8z94dnM4SrU=)
                          2: Zsel22JqlvhjtVMdiGFoGv_MKrs.roa (hash: 3L6rmpCArq3eFKYyqqUbQyY3r8HkQvkmUN53Xsmc470=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:4d:0e:64:d7:56:ba:28:9f:89:3f:b6:d2:46:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
        Validity
            Not Before: May 17 17:00:17 2024 GMT
            Not After : May 18 17:00:17 2024 GMT
        Subject: CN=343cdbf131acb4b3c93117ca535518a17efdb71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:bb:fd:48:e9:b8:58:ea:b3:b0:cc:fa:39:
                    bf:41:c8:95:e5:6c:45:81:bc:c8:e4:b0:e5:39:04:
                    38:e3:34:7a:99:01:c1:5b:2e:b2:bd:49:19:8b:c8:
                    28:81:93:b4:30:7a:37:3e:63:e6:13:4b:83:96:30:
                    42:f8:cd:47:0e:43:7d:d2:43:21:8c:a4:1e:03:43:
                    3d:0f:29:5b:16:e5:d1:1e:ba:d1:5e:f7:24:8b:c8:
                    9b:81:79:2b:cd:47:af:6e:c2:7e:82:36:69:af:79:
                    bb:57:68:f6:bf:4a:aa:cb:fb:d2:8a:1e:44:6f:8b:
                    bf:31:70:b0:fc:e2:c2:44:f6:19:9b:de:20:dd:bf:
                    e5:a9:f5:2c:34:61:9b:d4:4a:5d:aa:11:9d:c2:67:
                    b0:b7:16:14:c9:f7:ab:2a:57:f8:2f:7a:f4:f7:9d:
                    20:cb:1c:23:09:77:f9:ec:34:22:6d:11:a1:73:d5:
                    be:74:39:d9:a6:3c:de:7d:8d:7a:47:f1:23:b6:65:
                    1c:ec:ef:79:3d:22:5f:c8:48:03:cc:ba:a3:16:39:
                    d6:0d:f4:c4:5b:cf:5a:5a:5d:9a:51:34:36:48:72:
                    b2:b8:3c:21:9b:26:7a:f6:01:b4:03:33:d5:b0:54:
                    b8:6a:6d:67:40:a3:1d:f1:ee:7b:e1:8f:c8:61:31:
                    7c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3C:DB:F1:31:AC:B4:B3:C9:31:17:CA:53:55:18:A1:7E:FD:B7:1C
            X509v3 Authority Key Identifier:
                keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:0e:a4:86:c4:74:02:eb:82:85:8e:a7:d5:56:8b:dd:ad:da:
         af:c7:3f:ca:1f:ff:2e:8b:76:30:f7:de:b1:28:6c:7c:a5:3d:
         64:76:59:6d:4e:0c:56:02:f5:ea:c7:ba:44:91:fe:18:77:9b:
         f3:ea:0b:0e:bd:3f:4e:32:94:f1:96:c7:24:c0:e0:26:9e:fb:
         62:9b:75:48:3d:f7:ce:84:35:91:a0:c7:51:36:bc:16:48:4b:
         1d:aa:00:29:33:62:17:d2:18:28:fb:c7:62:4a:76:aa:ff:e0:
         0b:43:aa:d0:75:e7:c3:e3:b0:c4:f4:32:34:2d:77:4a:64:28:
         dd:9d:60:7b:08:2c:89:d2:3d:3d:ca:9e:70:fd:bc:14:cd:4c:
         44:a4:c8:bd:f8:86:32:93:b9:90:48:0c:ff:2c:bb:37:28:87:
         5f:90:2c:3e:79:b4:85:66:e9:58:5c:0b:06:01:40:a4:86:bb:
         20:08:19:5f:0b:fa:77:2f:7f:ef:6f:28:f2:ef:46:50:43:5a:
         7c:04:88:d4:c6:0f:60:21:b8:d0:7f:bd:de:5e:b7:bf:18:a2:
         6e:41:6d:6e:d3:4b:ce:b0:d5:13:0d:4d:6c:58:50:fd:4a:b5:
         ef:9c:d2:b2:6b:bc:9e:f2:94:c5:22:49:69:5a:6b:4f:d7:ca:
         55:c2:c2:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Hf00OZNdWuiifiT+20kbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDM3ZGQyMmI3YWFiZTI4MjIyNWFmYjI1NmI4ZDlkY2Jl
YmEzNTMwHhcNMjQwNTE3MTcwMDE3WhcNMjQwNTE4MTcwMDE3WjAzMTEwLwYDVQQD
EygzNDNjZGJmMTMxYWNiNGIzYzkzMTE3Y2E1MzU1MThhMTdlZmRiNzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow+7/UjpuFjqs7DM+jm/QciV5WxF
gbzI5LDlOQQ44zR6mQHBWy6yvUkZi8gogZO0MHo3PmPmE0uDljBC+M1HDkN90kMh
jKQeA0M9DylbFuXRHrrRXvcki8ibgXkrzUevbsJ+gjZpr3m7V2j2v0qqy/vSih5E
b4u/MXCw/OLCRPYZm94g3b/lqfUsNGGb1EpdqhGdwmewtxYUyferKlf4L3r0950g
yxwjCXf57DQibRGhc9W+dDnZpjzefY16R/EjtmUc7O95PSJfyEgDzLqjFjnWDfTE
W89aWl2aUTQ2SHKyuDwhmyZ69gG0AzPVsFS4am1nQKMd8e574Y/IYTF8MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ82/ExrLSzyTEXylNVGKF+/bccMB8GA1UdIwQY
MBaAFAwDfdIreqvigiJa+yVrjZ3L66NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYTgxY2ItMTk3Mi00YzliLTlkYWIt
ZThmM2E2NmVmNTU4LzEvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kYTgxY2ItMTk3Mi00YzliLTlkYWItZThmM2E2NmVmNTU4
LzEvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUg6khsR0
AuuChY6n1VaL3a3ar8c/yh//Lot2MPfesShsfKU9ZHZZbU4MVgL16se6RJH+GHeb
8+oLDr0/TjKU8ZbHJMDgJp77Ypt1SD33zoQ1kaDHUTa8FkhLHaoAKTNiF9IYKPvH
Ykp2qv/gC0Oq0HXnw+OwxPQyNC13SmQo3Z1gewgsidI9PcqecP28FM1MRKTIvfiG
MpO5kEgM/yy7NyiHX5AsPnm0hWbpWFwLBgFApIa7IAgZXwv6dy9/728o8u9GUENa
fASI1MYPYCG40H+93l63vxiibkFtbtNLzrDVEw1NbFhQ/Uq175zSsmu8nvKUxSJJ
aVprT9fKVcLCqQ==
-----END CERTIFICATE-----
Generated at Sat May 18 01:54:26 2024 by rpki-client on console-fra.rpki-client.org