Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
File:                     1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json)
Hash identifier:          KdASQyufjPTCEjMoScMGXsN7iemaITXvw3hDe3tg9c0=
Subject key identifier:   29:28:1F:F1:2F:75:43:F9:63:F0:63:63:A0:4E:91:E9:33:A5:49:F6
Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
Certificate issuer:       /CN=faa16909ca4da39935eab9af038b58a5233122b3
Certificate serial:       018F41C5366A0A0FB361B4E29059B6EC5A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
Manifest number:          10E7
Signing time:             Sat 04 May 2024 04:03:14 +0000
Manifest this update:     Sat 04 May 2024 04:03:14 +0000
Manifest next update:     Sun 05 May 2024 04:03:14 +0000
Files and hashes:         1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: Qfw4Z4oEiaLwwJIrzMEIP2bg4lb1+9ICPC57uI/jzrQ=)
                          2: S-Y0C7F9cfOt_lEfPSBf4khUPRQ.roa (hash: 0+EEYM3V598fmGLxiSFOJuJ1CXpFmYOTFZhNam/jw5M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c5:36:6a:0a:0f:b3:61:b4:e2:90:59:b6:ec:5a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3
        Validity
            Not Before: May  4 04:03:14 2024 GMT
            Not After : May  5 04:03:14 2024 GMT
        Subject: CN=29281ff12f7543f963f06363a04e91e933a549f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:eb:fa:88:3e:00:9d:0b:21:16:46:f9:98:
                    eb:78:e5:70:dc:6c:53:55:c9:49:86:ba:c2:9c:26:
                    81:c8:16:2e:6f:bd:83:aa:35:82:72:3f:8d:5f:44:
                    91:e4:ec:b5:00:2a:62:06:7b:ca:cc:c9:aa:95:2b:
                    99:7f:3b:07:58:76:3d:e9:a7:a0:ec:3c:83:fc:a9:
                    a4:1e:30:e9:1e:e8:71:19:eb:3f:c6:cf:af:ed:4f:
                    81:5e:28:5c:ce:74:ef:5e:53:4e:e1:ab:de:68:e1:
                    5f:5b:c0:8a:56:86:29:cd:06:f6:b9:4f:de:ce:f6:
                    28:92:1e:e2:c8:fa:e9:26:a8:1b:f5:1e:56:08:d7:
                    a6:2e:03:91:83:19:6e:0b:6c:8a:19:00:b2:9b:d4:
                    79:c0:b9:3d:b1:f2:9a:f4:3f:dd:b4:26:50:e6:13:
                    25:06:eb:ec:34:d0:b0:e8:46:7e:72:85:ec:af:6c:
                    9d:3f:53:3d:89:6b:a0:b1:48:8d:cb:c7:b8:5a:48:
                    c7:3d:46:66:52:d6:0e:9f:bf:3f:32:8a:57:3c:8c:
                    11:ca:1f:eb:7d:80:fd:c0:ee:f8:f4:fb:21:83:5e:
                    b3:31:b0:78:59:ed:dc:4c:6f:9f:95:f7:99:7f:a8:
                    f6:6f:36:1a:76:db:af:db:2b:1c:f2:e3:aa:68:5a:
                    67:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:28:1F:F1:2F:75:43:F9:63:F0:63:63:A0:4E:91:E9:33:A5:49:F6
            X509v3 Authority Key Identifier:
                keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:14:a3:b8:1f:0d:69:dc:7c:7c:80:dd:1e:b8:2d:cb:52:8c:
         57:02:75:57:2c:9b:88:43:4b:db:a2:cd:57:f4:da:a0:00:2b:
         a3:64:b5:50:ce:24:c6:20:70:53:31:8c:a5:12:cd:3f:5c:da:
         df:3e:2a:f5:b1:0d:29:96:d6:b4:11:44:e9:13:ba:d6:e3:2c:
         ed:ab:9e:7f:9f:e5:ff:84:0e:c3:32:ab:4a:64:f9:cb:54:d3:
         55:95:0c:34:3b:c8:1c:b1:09:9e:f1:94:bc:bd:41:3d:d3:b5:
         a7:87:4e:cf:f9:f6:fc:5f:33:c4:3c:d5:a0:89:12:63:5f:12:
         71:6d:2d:02:ab:42:16:76:2c:67:9b:c7:66:97:e7:02:fc:63:
         f2:e7:43:b8:f3:a0:58:35:78:5e:d6:a6:3a:bd:90:c2:1a:32:
         da:28:b5:e8:11:94:43:b7:a0:a9:ea:96:79:6f:0f:1e:df:e6:
         3b:64:1d:88:dc:79:48:4f:de:43:e6:c2:a8:9a:6b:96:30:f8:
         83:58:d1:37:10:42:e2:00:de:68:11:57:a6:c4:cc:c3:ba:fc:
         46:3b:b9:73:75:f7:ae:73:25:b3:1d:73:2b:d0:23:6e:da:69:
         46:69:7c:fb:d4:8c:c9:5e:0b:8b:79:59:62:73:50:51:bf:7d:
         ed:17:36:b1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY9BxTZqCg+zYbTikFm27FqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTE2OTA5Y2E0ZGEzOTkzNWVhYjlhZjAzOGI1OGE1MjMz
MTIyYjMwHhcNMjQwNTA0MDQwMzE0WhcNMjQwNTA1MDQwMzE0WjAzMTEwLwYDVQQD
EygyOTI4MWZmMTJmNzU0M2Y5NjNmMDYzNjNhMDRlOTFlOTMzYTU0OWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxjr+og+AJ0LIRZG+ZjreOVw3GxT
VclJhrrCnCaByBYub72DqjWCcj+NX0SR5Oy1ACpiBnvKzMmqlSuZfzsHWHY96aeg
7DyD/KmkHjDpHuhxGes/xs+v7U+BXihcznTvXlNO4aveaOFfW8CKVoYpzQb2uU/e
zvYokh7iyPrpJqgb9R5WCNemLgORgxluC2yKGQCym9R5wLk9sfKa9D/dtCZQ5hMl
BuvsNNCw6EZ+coXsr2ydP1M9iWugsUiNy8e4WkjHPUZmUtYOn78/MopXPIwRyh/r
fYD9wO749Pshg16zMbB4We3cTG+flfeZf6j2bzYadtuv2ysc8uOqaFpnHwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCkoH/EvdUP5Y/BjY6BOkekzpUn2MB8GA1UdIwQY
MBaAFPqhaQnKTaOZNeq5rwOLWKUjMSKzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xRnBDY3BObzVrMTZybXZBNHRZcFNNeElyTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMDQ2NmY4LTMzMGQtNGFjOS1hYzE4
LTkyMGI1MmE5ZjZhNS8xLzEtcUZwQ2NwTm81azE2cm12QTR0WXBTTXhJck0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQyLzA0NjZmOC0zMzBkLTRhYzktYWMxOC05MjBiNTJhOWY2
YTUvMS8xLXFGcENjcE5vNWsxNnJtdkE0dFlwU014SXJNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRSj
uB8Nadx8fIDdHrgty1KMVwJ1VyybiENL26LNV/TaoAAro2S1UM4kxiBwUzGMpRLN
P1za3z4q9bENKZbWtBFE6RO61uMs7auef5/l/4QOwzKrSmT5y1TTVZUMNDvIHLEJ
nvGUvL1BPdO1p4dOz/n2/F8zxDzVoIkSY18ScW0tAqtCFnYsZ5vHZpfnAvxj8udD
uPOgWDV4XtamOr2Qwhoy2ii16BGUQ7egqeqWeW8PHt/mO2QdiNx5SE/eQ+bCqJpr
ljD4g1jRNxBC4gDeaBFXpsTMw7r8Rju5c3X3rnMlsx1zK9AjbtppRml8+9SMyV4L
i3lZYnNQUb997Rc2sQ==
-----END CERTIFICATE-----
Generated at Sat May 4 08:52:53 2024 by rpki-client on console-fra.rpki-client.org