Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File:                     7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier:          WO4ErVp0CAXuvBVEhSzJgCpADfmxYdIx9iJeXbxQMIg=
Subject key identifier:   B6:A8:46:A6:4B:47:94:7B:11:ED:ED:50:30:12:3D:BF:F8:96:40:3A
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer:       /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial:       018F3B539F25E9F5D9B2DA2A6E2D84456244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number:          0ABA
Signing time:             Thu 02 May 2024 22:01:26 +0000
Manifest this update:     Thu 02 May 2024 22:01:26 +0000
Manifest next update:     Fri 03 May 2024 22:01:26 +0000
Files and hashes:         1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: Hwkvl3hMJlIIqyQebHuNyqsivjvo0zCjyAwNxavHKEU=)
                          2: yjLdisVxsIoHIDmK1cdDeBbKxeM.roa (hash: neXJQtfQf6uvjUfLs6HDebDTp+ALBw/1LALUwbwR4Wk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 22:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:53:9f:25:e9:f5:d9:b2:da:2a:6e:2d:84:45:62:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
        Validity
            Not Before: May  2 22:01:26 2024 GMT
            Not After : May  3 22:01:26 2024 GMT
        Subject: CN=b6a846a64b47947b11eded5030123dbff896403a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:fe:74:40:7b:56:63:1b:20:b7:20:f5:30:
                    fd:24:28:16:c8:28:0b:e2:8f:1f:23:e9:9a:5b:1c:
                    56:6d:8a:88:8c:c0:1d:73:f1:f1:8d:f9:2b:1b:14:
                    ad:21:8b:a3:d1:f7:59:67:e2:43:80:05:f2:d2:9d:
                    d2:5c:1d:d6:37:01:d1:35:bd:ef:4f:46:05:34:97:
                    1e:61:bd:2f:9d:c9:48:9d:87:72:81:59:28:ad:44:
                    2b:c8:32:e8:60:ad:69:85:00:f8:e2:43:2b:92:ac:
                    0b:2b:d0:6c:3b:42:19:9c:b2:5b:c9:6f:94:6f:ff:
                    ef:b0:59:a8:83:15:27:71:5f:7d:2c:dd:2c:12:00:
                    af:6d:87:cf:86:e3:08:71:37:08:1d:5e:42:9e:99:
                    c4:2b:6c:90:29:be:5a:4b:9e:1b:98:23:1f:33:c8:
                    90:76:9b:0c:b1:74:4c:e4:c4:31:0a:8a:7d:1e:e8:
                    25:fc:a3:0a:06:a9:46:b5:36:91:84:b1:3d:f6:a1:
                    59:85:8e:2f:d2:51:16:a2:e2:4c:07:b2:dd:f8:12:
                    c9:a7:89:e1:56:79:5f:22:4b:27:d5:b6:93:fb:4f:
                    db:24:bd:99:ca:93:26:cc:28:9e:d1:4d:6e:30:17:
                    9e:29:58:91:38:8f:bb:33:f6:5f:80:bc:0b:8c:81:
                    16:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A8:46:A6:4B:47:94:7B:11:ED:ED:50:30:12:3D:BF:F8:96:40:3A
            X509v3 Authority Key Identifier:
                keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a4:3b:2a:41:14:6d:7d:b7:3e:d7:3f:6f:bb:d1:01:58:03:
         56:26:bd:9c:43:50:97:00:91:44:b2:78:20:03:81:46:b3:5b:
         ec:44:f8:9d:73:0c:16:ab:05:92:eb:ad:90:02:b6:44:15:2a:
         c5:32:bb:f6:3b:e4:dc:bf:f0:7b:bf:f5:10:a8:b2:a0:de:93:
         6a:cf:74:a7:d8:74:5e:a6:72:6f:4c:7d:9f:2b:fd:8b:ea:4f:
         b8:b6:52:09:4a:68:c0:9a:b6:78:b5:1d:9d:05:7e:09:1d:86:
         1b:b8:15:32:e1:28:11:1a:70:82:9a:6b:e3:9b:f9:bb:03:96:
         f3:d3:44:d6:d4:cc:48:1c:61:7b:28:5e:82:16:06:db:e4:e5:
         71:8b:82:6c:64:2e:55:31:7e:cf:77:ee:3b:da:13:74:98:66:
         1c:3e:8a:6e:e6:98:c2:6f:fe:3d:43:cb:da:1f:38:14:20:94:
         87:35:48:8c:b7:54:0f:de:8e:d7:db:3b:c2:e6:a8:b7:a3:78:
         a2:a7:4c:7a:4c:7b:ba:45:1a:ec:5f:f3:0d:b8:0a:65:05:fe:
         11:b6:23:d4:84:21:c5:de:67:6c:91:3a:0a:df:f0:0c:0c:48:
         a0:ec:05:38:08:bb:a6:03:56:66:3e:b6:cc:36:a8:98:ed:43:
         84:1c:f7:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87U58l6fXZstoqbi2ERWJEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZGYzNjk2Y2Y3NGVhOTU1YmUzODM4NzRlMzlhNzI3YWE2
ODI0ZjEwHhcNMjQwNTAyMjIwMTI2WhcNMjQwNTAzMjIwMTI2WjAzMTEwLwYDVQQD
EyhiNmE4NDZhNjRiNDc5NDdiMTFlZGVkNTAzMDEyM2RiZmY4OTY0MDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWH+dEB7VmMbILcg9TD9JCgWyCgL
4o8fI+maWxxWbYqIjMAdc/HxjfkrGxStIYuj0fdZZ+JDgAXy0p3SXB3WNwHRNb3v
T0YFNJceYb0vnclInYdygVkorUQryDLoYK1phQD44kMrkqwLK9BsO0IZnLJbyW+U
b//vsFmogxUncV99LN0sEgCvbYfPhuMIcTcIHV5CnpnEK2yQKb5aS54bmCMfM8iQ
dpsMsXRM5MQxCop9Hugl/KMKBqlGtTaRhLE99qFZhY4v0lEWouJMB7Ld+BLJp4nh
VnlfIksn1baT+0/bJL2ZypMmzCie0U1uMBeeKViROI+7M/ZfgLwLjIEWCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaoRqZLR5R7Ee3tUDASPb/4lkA6MB8GA1UdIwQY
MBaAFOzfNpbPdOqVW+ODh045pyeqaCTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgt
MGZmOGNhZmU1ZGVhLzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgtMGZmOGNhZmU1ZGVh
LzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaQ7KkEU
bX23Ptc/b7vRAVgDVia9nENQlwCRRLJ4IAOBRrNb7ET4nXMMFqsFkuutkAK2RBUq
xTK79jvk3L/we7/1EKiyoN6Tas90p9h0XqZyb0x9nyv9i+pPuLZSCUpowJq2eLUd
nQV+CR2GG7gVMuEoERpwgppr45v5uwOW89NE1tTMSBxheyheghYG2+TlcYuCbGQu
VTF+z3fuO9oTdJhmHD6KbuaYwm/+PUPL2h84FCCUhzVIjLdUD96O19s7wuaot6N4
oqdMekx7ukUa7F/zDbgKZQX+EbYj1IQhxd5nbJE6Ct/wDAxIoOwFOAi7pgNWZj62
zDaomO1DhBz3aQ==
-----END CERTIFICATE-----
Generated at Fri May 3 06:31:53 2024 by rpki-client on console-ams.rpki-client.org