Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d334fd-8aed-4fd2-891c-7e453293c3ca/1/4Kr476H1rsbdljxiz1OtolUa2yo.mft
File:                     4Kr476H1rsbdljxiz1OtolUa2yo.mft (raw, json)
Hash identifier:          lkBXjd3bKmh0MKLy6/jFzBqsZOwdCDzI0RmsqxqTz+8=
Subject key identifier:   FF:9B:E1:86:51:1E:61:BA:EB:60:DA:AD:40:02:B9:53:6C:0E:79:DB
Authority key identifier: E0:AA:F8:EF:A1:F5:AE:C6:DD:96:3C:62:CF:53:AD:A2:55:1A:DB:2A
Certificate issuer:       /CN=e0aaf8efa1f5aec6dd963c62cf53ada2551adb2a
Certificate serial:       018F3BFA9F517851F04F1626958944153EB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Kr476H1rsbdljxiz1OtolUa2yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/d334fd-8aed-4fd2-891c-7e453293c3ca/1/4Kr476H1rsbdljxiz1OtolUa2yo.mft
Manifest number:          0FDE
Signing time:             Fri 03 May 2024 01:03:51 +0000
Manifest this update:     Fri 03 May 2024 01:03:51 +0000
Manifest next update:     Sat 04 May 2024 01:03:51 +0000
Files and hashes:         1: 4Kr476H1rsbdljxiz1OtolUa2yo.crl (hash: LPiWacD6JHZ+ZTT+A3M+X/5hlfMY7VdLl+E6Q8y1VWc=)
                          2: IYfub2XT1xu_NMv5b6qb7i7mLfM.roa (hash: zYRv27jNHvtS+lqqRT1s6hm33WzY0pTavFIB+hxyzwI=)
                          3: fewY50b2CBb1mhqDVIsDNEtNeoY.roa (hash: JH9qj5/4RRo67UugApaPAlUt8GSdpdNmDyNetBj2jE8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/d334fd-8aed-4fd2-891c-7e453293c3ca/1/4Kr476H1rsbdljxiz1OtolUa2yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/d334fd-8aed-4fd2-891c-7e453293c3ca/1/4Kr476H1rsbdljxiz1OtolUa2yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Kr476H1rsbdljxiz1OtolUa2yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:9f:51:78:51:f0:4f:16:26:95:89:44:15:3e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0aaf8efa1f5aec6dd963c62cf53ada2551adb2a
        Validity
            Not Before: May  3 01:03:51 2024 GMT
            Not After : May  4 01:03:51 2024 GMT
        Subject: CN=ff9be186511e61baeb60daad4002b9536c0e79db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ec:73:03:30:1a:84:31:96:1a:b3:52:12:7f:
                    bc:a7:4a:06:6a:3e:93:02:67:38:d0:34:3d:b7:b5:
                    02:37:ed:68:97:7f:bd:6c:33:e0:57:a1:67:83:4a:
                    fb:45:31:79:47:92:78:45:2d:f4:e8:51:26:29:56:
                    d6:36:65:35:5b:5c:f9:10:51:f9:80:73:59:a9:ed:
                    37:ad:7c:dc:27:1a:ad:91:e7:9b:12:ee:26:44:8b:
                    d5:11:a8:62:83:53:77:8a:1f:56:b2:ee:d6:e4:22:
                    b8:ec:79:a0:e8:10:d1:4e:7b:af:14:26:71:e1:39:
                    cc:49:ee:0c:a9:da:23:04:5c:29:67:87:07:b1:8e:
                    d7:f2:8e:e2:7e:ab:2a:5c:b2:85:5f:c4:cf:58:bf:
                    61:ae:c8:ac:f0:92:3d:92:ae:ab:b9:2f:4d:e2:f8:
                    13:e9:c1:12:c4:09:73:15:1f:56:3a:04:f7:ee:14:
                    bf:da:32:4c:8a:6f:6d:28:e9:fb:33:73:83:03:90:
                    80:64:2f:a4:a0:1d:b7:29:54:3b:6d:0f:6f:c5:bc:
                    41:31:b1:af:23:44:54:83:e9:a9:9f:86:15:96:c8:
                    5b:29:2a:3a:2e:2e:fe:ee:94:aa:cb:e4:14:a3:64:
                    89:f3:5a:3a:6f:d0:7b:9a:66:fd:f1:64:3e:39:79:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9B:E1:86:51:1E:61:BA:EB:60:DA:AD:40:02:B9:53:6C:0E:79:DB
            X509v3 Authority Key Identifier:
                keyid:E0:AA:F8:EF:A1:F5:AE:C6:DD:96:3C:62:CF:53:AD:A2:55:1A:DB:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Kr476H1rsbdljxiz1OtolUa2yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d334fd-8aed-4fd2-891c-7e453293c3ca/1/4Kr476H1rsbdljxiz1OtolUa2yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d334fd-8aed-4fd2-891c-7e453293c3ca/1/4Kr476H1rsbdljxiz1OtolUa2yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d6:09:5c:40:4a:05:02:4b:df:49:4d:02:39:af:e8:ef:3d:
         9b:f5:51:97:1f:1c:33:d6:ba:1e:2d:c0:9e:fa:1a:1a:ed:5b:
         39:6a:a1:02:f0:e9:28:16:94:64:7e:5a:bf:db:be:6c:81:cb:
         d0:75:a4:22:eb:5f:cf:8c:53:62:9a:f4:45:c7:3c:e2:77:3b:
         d4:9c:ac:20:93:55:fa:d0:42:6e:37:fa:c3:f5:ad:53:36:e2:
         48:08:e9:24:bd:b9:cd:a4:98:f0:07:57:fc:05:6b:c2:e5:2f:
         ae:fa:ec:5a:66:96:97:a6:43:28:95:d2:3e:63:64:6c:97:b9:
         84:e4:4c:71:7b:6e:f8:aa:64:79:ca:35:8a:7b:45:a1:03:9b:
         00:4a:38:14:ec:31:72:ba:21:e8:e4:22:5f:dd:47:2b:b5:2b:
         bc:d4:6c:79:91:55:89:63:8c:98:a6:98:84:c9:4b:f7:e9:7b:
         69:e3:16:2b:a2:76:38:56:ff:a3:bd:27:e7:d1:86:28:7e:21:
         9e:d9:be:a0:cc:aa:b0:8e:68:f5:fa:4c:af:7e:71:42:82:b7:
         5e:2f:8c:ce:63:34:7f:38:1b:be:46:a4:72:30:94:60:ba:3d:
         f1:0b:dd:f3:a8:b8:c5:58:38:f5:e7:68:3b:29:5c:b4:77:e5:
         31:73:d2:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87+p9ReFHwTxYmlYlEFT6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYWFmOGVmYTFmNWFlYzZkZDk2M2M2MmNmNTNhZGEyNTUx
YWRiMmEwHhcNMjQwNTAzMDEwMzUxWhcNMjQwNTA0MDEwMzUxWjAzMTEwLwYDVQQD
EyhmZjliZTE4NjUxMWU2MWJhZWI2MGRhYWQ0MDAyYjk1MzZjMGU3OWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuxzAzAahDGWGrNSEn+8p0oGaj6T
Amc40DQ9t7UCN+1ol3+9bDPgV6Fng0r7RTF5R5J4RS306FEmKVbWNmU1W1z5EFH5
gHNZqe03rXzcJxqtkeebEu4mRIvVEahig1N3ih9Wsu7W5CK47Hmg6BDRTnuvFCZx
4TnMSe4MqdojBFwpZ4cHsY7X8o7ifqsqXLKFX8TPWL9hrsis8JI9kq6ruS9N4vgT
6cESxAlzFR9WOgT37hS/2jJMim9tKOn7M3ODA5CAZC+koB23KVQ7bQ9vxbxBMbGv
I0RUg+mpn4YVlshbKSo6Li7+7pSqy+QUo2SJ81o6b9B7mmb98WQ+OXmtcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+b4YZRHmG662DarUACuVNsDnnbMB8GA1UdIwQY
MBaAFOCq+O+h9a7G3ZY8Ys9TraJVGtsqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtyNDc2SDFyc2JkbGp4aXoxT3RvbFVhMnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kMzM0ZmQtOGFlZC00ZmQyLTg5MWMt
N2U0NTMyOTNjM2NhLzEvNEtyNDc2SDFyc2JkbGp4aXoxT3RvbFVhMnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9kMzM0ZmQtOGFlZC00ZmQyLTg5MWMtN2U0NTMyOTNjM2Nh
LzEvNEtyNDc2SDFyc2JkbGp4aXoxT3RvbFVhMnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9YJXEBK
BQJL30lNAjmv6O89m/VRlx8cM9a6Hi3AnvoaGu1bOWqhAvDpKBaUZH5av9u+bIHL
0HWkIutfz4xTYpr0Rcc84nc71JysIJNV+tBCbjf6w/WtUzbiSAjpJL25zaSY8AdX
/AVrwuUvrvrsWmaWl6ZDKJXSPmNkbJe5hORMcXtu+Kpkeco1intFoQObAEo4FOwx
croh6OQiX91HK7UrvNRseZFViWOMmKaYhMlL9+l7aeMWK6J2OFb/o70n59GGKH4h
ntm+oMyqsI5o9fpMr35xQoK3Xi+MzmM0fzgbvkakcjCUYLo98Qvd86i4xVg49edo
OylctHflMXPSmA==
-----END CERTIFICATE-----
Generated at Fri May 3 03:31:16 2024 by rpki-client on console-ams.rpki-client.org