Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
File:                     EBIhZFi9dgX_lVQP0gTrk6R385M.mft (raw, json)
Hash identifier:          jGSBxc/wxt0vXE1rn0kdQHDzcpI+I7pwPVKfKv5l2Zw=
Subject key identifier:   A5:39:AD:BE:D0:6B:90:0B:6D:A7:AC:39:95:04:CF:87:85:B9:41:75
Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
Certificate issuer:       /CN=1012216458bd7605ff95540fd204eb93a477f393
Certificate serial:       018F5703C5ACFEBD6E08FDA10E6E1359F544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
Manifest number:          0714
Signing time:             Wed 08 May 2024 07:03:36 +0000
Manifest this update:     Wed 08 May 2024 07:03:36 +0000
Manifest next update:     Thu 09 May 2024 07:03:36 +0000
Files and hashes:         1: EBIhZFi9dgX_lVQP0gTrk6R385M.crl (hash: ZIGP8FOr4tRk/43d0QwHU2FlLKNMuDBC2Tsl3KEoVZc=)
                          2: ey6moBnMvi08mKBXGdO4WD4Fk7M.roa (hash: iETUTlieU3BRdKkaBizaKB/Rn2NtsA7P4u52bLOGprc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:03:c5:ac:fe:bd:6e:08:fd:a1:0e:6e:13:59:f5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393
        Validity
            Not Before: May  8 07:03:36 2024 GMT
            Not After : May  9 07:03:36 2024 GMT
        Subject: CN=a539adbed06b900b6da7ac399504cf8785b94175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:56:d9:a4:12:1d:45:b5:af:5e:8e:13:93:1c:
                    bd:38:b5:0a:16:36:d1:75:21:2d:e8:6c:36:62:e0:
                    d2:1d:a0:13:27:79:63:1d:e6:3a:60:da:6e:4e:4c:
                    f6:fd:85:fd:c9:9e:f6:14:2d:15:60:46:93:7f:cd:
                    dc:37:aa:7d:a4:35:34:d1:3b:ae:40:dc:a0:b5:93:
                    54:fc:53:e5:aa:2d:f7:e3:b9:60:75:61:0f:fc:a7:
                    0d:32:29:3b:dd:8b:f7:4e:a3:42:57:5c:06:d0:0c:
                    57:8e:d4:1d:81:a5:81:40:71:a0:1d:3a:7f:24:25:
                    65:da:ce:b4:49:91:28:c4:5b:47:8a:eb:3d:7a:cb:
                    cb:2b:8b:dc:e5:98:fb:7b:1c:d0:e3:7e:7b:b3:05:
                    0f:fe:a0:8f:68:db:1e:81:93:09:28:9b:9b:ad:f2:
                    cf:8d:21:7e:16:b6:53:e0:60:45:16:a8:bf:8f:be:
                    e1:0d:1b:d0:c7:70:5b:b3:e8:ba:f8:76:9b:98:1f:
                    cc:08:27:af:aa:e1:a5:af:d6:9d:ad:4e:37:18:8e:
                    d9:59:1d:50:b6:22:2f:cf:3c:67:44:50:18:37:3e:
                    a6:41:24:70:b4:04:b9:1f:d3:0f:dc:53:4c:b1:1b:
                    13:be:e4:eb:10:69:7e:76:07:bc:aa:a6:82:c1:c1:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:39:AD:BE:D0:6B:90:0B:6D:A7:AC:39:95:04:CF:87:85:B9:41:75
            X509v3 Authority Key Identifier:
                keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:dc:7f:84:d5:59:1f:95:66:0f:ed:48:a1:0b:9b:29:a9:2e:
         da:e1:c1:d9:18:ac:96:3c:bf:a2:20:3d:55:aa:7e:85:f4:63:
         7d:d9:4a:44:5d:16:36:ab:38:65:7f:d6:d2:08:b4:a4:64:7b:
         2e:c9:97:0f:15:f6:83:1d:60:a7:53:40:52:94:7c:41:1d:7a:
         2b:74:02:63:8e:a2:e6:c1:7a:a8:21:7f:fd:e6:7b:0b:01:de:
         10:7e:bb:8e:26:7e:72:7f:6a:ac:dc:46:19:8a:b8:11:f8:e0:
         23:eb:ef:44:c5:6c:7f:72:9c:53:39:5c:e2:dd:26:97:c2:f3:
         49:e1:c6:e0:44:05:f2:87:58:d2:8c:42:45:69:5d:19:27:37:
         26:07:81:c1:e2:bc:fd:9e:97:17:f1:60:99:a9:f7:a9:f9:ba:
         3d:35:a6:26:8f:0a:34:69:16:9d:d6:c0:ec:37:12:a4:85:fb:
         62:fc:91:91:04:44:e4:6a:83:8c:c2:68:72:42:b2:ef:e6:fc:
         cc:63:9f:20:8a:7b:c5:1d:a0:34:1e:ee:93:55:44:ea:97:e9:
         9e:ec:b5:ed:c0:06:0f:34:1a:2f:80:7c:63:f2:80:9e:7e:c1:
         7a:f9:ef:5e:f3:64:e5:d0:e0:39:fd:9f:4e:89:b9:ee:6c:70:
         8e:3b:a3:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9XA8Ws/r1uCP2hDm4TWfVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMTIyMTY0NThiZDc2MDVmZjk1NTQwZmQyMDRlYjkzYTQ3
N2YzOTMwHhcNMjQwNTA4MDcwMzM2WhcNMjQwNTA5MDcwMzM2WjAzMTEwLwYDVQQD
EyhhNTM5YWRiZWQwNmI5MDBiNmRhN2FjMzk5NTA0Y2Y4Nzg1Yjk0MTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFbZpBIdRbWvXo4Tkxy9OLUKFjbR
dSEt6Gw2YuDSHaATJ3ljHeY6YNpuTkz2/YX9yZ72FC0VYEaTf83cN6p9pDU00Tuu
QNygtZNU/FPlqi3347lgdWEP/KcNMik73Yv3TqNCV1wG0AxXjtQdgaWBQHGgHTp/
JCVl2s60SZEoxFtHius9esvLK4vc5Zj7exzQ4357swUP/qCPaNsegZMJKJubrfLP
jSF+FrZT4GBFFqi/j77hDRvQx3Bbs+i6+HabmB/MCCevquGlr9adrU43GI7ZWR1Q
tiIvzzxnRFAYNz6mQSRwtAS5H9MP3FNMsRsTvuTrEGl+dge8qqaCwcFcyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKU5rb7Qa5ALbaesOZUEz4eFuUF1MB8GA1UdIwQY
MBaAFBASIWRYvXYF/5VUD9IE65Okd/OTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81MmJlNTYtZWM3Yi00NDM0LTkzZWIt
MDlmZWFhMTRlMzFlLzEvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81MmJlNTYtZWM3Yi00NDM0LTkzZWItMDlmZWFhMTRlMzFl
LzEvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdx/hNVZ
H5VmD+1IoQubKaku2uHB2Risljy/oiA9Vap+hfRjfdlKRF0WNqs4ZX/W0gi0pGR7
LsmXDxX2gx1gp1NAUpR8QR16K3QCY46i5sF6qCF//eZ7CwHeEH67jiZ+cn9qrNxG
GYq4EfjgI+vvRMVsf3KcUzlc4t0ml8LzSeHG4EQF8odY0oxCRWldGSc3JgeBweK8
/Z6XF/Fgman3qfm6PTWmJo8KNGkWndbA7DcSpIX7YvyRkQRE5GqDjMJockKy7+b8
zGOfIIp7xR2gNB7uk1VE6pfpnuy17cAGDzQaL4B8Y/KAnn7BevnvXvNk5dDgOf2f
Tom57mxwjjuj/g==
-----END CERTIFICATE-----
Generated at Wed May 8 12:59:45 2024 by rpki-client on console-fra.rpki-client.org