Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File:                     60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier:          8sfno6YbeuX7L4OXkqD4jcZ4IFJ7zGPKAMhJrUF1tMU=
Subject key identifier:   E9:51:3C:48:EE:46:63:DD:D9:0E:85:A2:73:D3:91:A7:03:61:78:4D
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer:       /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial:       018FA2C03B84AD6429D90F85C4174CD6513D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number:          05FA
Signing time:             Thu 23 May 2024 00:00:58 +0000
Manifest this update:     Thu 23 May 2024 00:00:58 +0000
Manifest next update:     Fri 24 May 2024 00:00:58 +0000
Files and hashes:         1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: dNJ+rL+VKN5w1Qh5FXA/bcRh6PZIRsZU3DGzSg0sASw=)
                          2: J3gM3D9XyMg0_YhFEzLWDaMqa2g.roa (hash: MuQ0eRDjSqYqo14SiWXV2gDCb9ZDxMSNiXBacfh7IhA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 22:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a2:c0:3b:84:ad:64:29:d9:0f:85:c4:17:4c:d6:51:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
        Validity
            Not Before: May 23 00:00:58 2024 GMT
            Not After : May 24 00:00:58 2024 GMT
        Subject: CN=e9513c48ee4663ddd90e85a273d391a70361784d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:0e:49:bc:1c:d2:90:c4:99:4d:49:78:51:
                    89:76:48:d5:bd:60:38:54:d3:fc:b6:78:e8:6c:f2:
                    3b:ad:26:f4:9e:6c:de:24:79:ca:f6:33:84:b2:38:
                    f7:4f:23:11:b0:8d:9b:60:29:55:02:c8:8c:55:36:
                    56:b8:aa:d1:96:6d:e4:b1:5d:4b:16:2b:5c:8d:e8:
                    5c:0d:6d:25:fb:f7:8f:74:c0:49:11:4f:2c:b1:26:
                    c2:76:9d:4f:ea:7c:90:0a:20:f9:19:8f:19:ab:c9:
                    be:27:d9:ac:0e:94:28:59:ed:b1:20:ee:42:26:cc:
                    2f:58:5e:9b:72:6e:78:dc:bc:98:0f:3f:a6:40:b3:
                    10:14:af:bd:41:b0:dd:e5:a1:9c:3c:ed:fe:01:00:
                    bf:2e:6e:70:f7:38:fd:e5:59:bf:78:30:87:2a:0e:
                    b9:8a:24:66:7f:20:05:23:0b:24:72:e5:ac:f8:85:
                    7b:d9:e7:9d:38:83:7f:1e:a4:37:3c:67:a9:52:ed:
                    af:fc:3f:ba:43:14:16:b3:8f:8a:b1:71:81:63:73:
                    36:23:4d:ba:33:03:48:98:c1:74:ee:ea:46:a3:5d:
                    9f:a6:8b:6a:74:ad:ad:2a:c4:cd:06:ab:9c:4f:09:
                    bb:5d:ef:40:2d:ec:a0:c9:2b:e1:b1:e6:41:30:64:
                    48:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:51:3C:48:EE:46:63:DD:D9:0E:85:A2:73:D3:91:A7:03:61:78:4D
            X509v3 Authority Key Identifier:
                keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:bf:81:cc:b0:db:15:5b:50:b6:26:55:88:91:aa:a0:93:54:
         dc:bc:85:2a:5c:dd:a4:d7:70:0e:0a:f2:49:51:3e:a5:47:b0:
         ca:9c:e1:f8:53:81:5c:a3:0a:43:56:48:ed:45:06:86:80:32:
         ca:c5:cc:83:52:9c:d5:e7:9c:09:5b:ae:65:ad:e4:01:3c:42:
         1e:66:73:21:10:e4:02:05:4a:eb:64:39:83:72:01:6b:ec:37:
         9e:0b:b2:e2:4a:8a:e6:62:0a:0e:92:c0:be:2e:70:9b:44:96:
         56:d0:d7:0e:29:4c:ea:07:99:50:1c:17:08:2f:b5:00:68:7c:
         5a:ce:79:bb:ea:8e:07:68:5f:60:ee:a1:44:20:f8:ce:48:52:
         e8:86:ce:9e:c9:7c:00:fa:28:2c:80:b4:d1:51:24:84:32:a7:
         00:b5:4c:55:25:5c:c5:ac:e4:d7:a2:68:81:98:37:e8:ed:bb:
         58:dd:41:09:55:a6:ef:af:57:39:de:5f:e4:96:83:e1:15:d5:
         00:57:98:99:3f:78:1e:ff:2b:34:a4:10:94:d4:db:f0:64:76:
         42:54:ae:2f:28:0c:7d:3e:7f:e5:67:8c:a1:21:f6:21:29:24:
         4e:0e:32:0c:d0:b3:ca:fb:01:26:ff:b5:f4:c0:15:ea:7a:dd:
         18:17:b1:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+iwDuErWQp2Q+FxBdM1lE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNGM1YWNkNmZhMWU2YTkxMTI5YWM0MjQwNTdhODc3NTU4
ZTgwNTIwHhcNMjQwNTIzMDAwMDU4WhcNMjQwNTI0MDAwMDU4WjAzMTEwLwYDVQQD
EyhlOTUxM2M0OGVlNDY2M2RkZDkwZTg1YTI3M2QzOTFhNzAzNjE3ODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd8OSbwc0pDEmU1JeFGJdkjVvWA4
VNP8tnjobPI7rSb0nmzeJHnK9jOEsjj3TyMRsI2bYClVAsiMVTZWuKrRlm3ksV1L
FitcjehcDW0l+/ePdMBJEU8ssSbCdp1P6nyQCiD5GY8Zq8m+J9msDpQoWe2xIO5C
JswvWF6bcm543LyYDz+mQLMQFK+9QbDd5aGcPO3+AQC/Lm5w9zj95Vm/eDCHKg65
iiRmfyAFIwskcuWs+IV72eedOIN/HqQ3PGepUu2v/D+6QxQWs4+KsXGBY3M2I026
MwNImMF07upGo12fpotqdK2tKsTNBqucTwm7Xe9ALeygySvhseZBMGRIbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlRPEjuRmPd2Q6FonPTkacDYXhNMB8GA1UdIwQY
MBaAFOtMWs1voeapESmsQkBXqHdVjoBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAt
ZGNiZGY3MWZmMzQ3LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAtZGNiZGY3MWZmMzQ3
LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0r+BzLDb
FVtQtiZViJGqoJNU3LyFKlzdpNdwDgrySVE+pUewypzh+FOBXKMKQ1ZI7UUGhoAy
ysXMg1Kc1eecCVuuZa3kATxCHmZzIRDkAgVK62Q5g3IBa+w3nguy4kqK5mIKDpLA
vi5wm0SWVtDXDilM6geZUBwXCC+1AGh8Ws55u+qOB2hfYO6hRCD4zkhS6IbOnsl8
APooLIC00VEkhDKnALVMVSVcxazk16JogZg36O27WN1BCVWm769XOd5f5JaD4RXV
AFeYmT94Hv8rNKQQlNTb8GR2QlSuLygMfT5/5WeMoSH2ISkkTg4yDNCzyvsBJv+1
9MAV6nrdGBexnw==
-----END CERTIFICATE-----
Generated at Thu May 23 01:50:32 2024 by rpki-client on console-fra.rpki-client.org