Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File:                     0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier:          UBmcaU/aMQdyvNVvoew0uLISUXygXCVlndeND35iuNU=
Subject key identifier:   EC:62:4F:2D:E6:7A:DF:D2:6E:AF:A9:D0:F2:B5:4D:27:55:AB:B0:16
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer:       /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial:       018F87B66AF3024454FED169C9C99397B98F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number:          013B
Signing time:             Fri 17 May 2024 18:00:30 +0000
Manifest this update:     Fri 17 May 2024 18:00:30 +0000
Manifest next update:     Sat 18 May 2024 18:00:30 +0000
Files and hashes:         1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: EonxozExjTMlRUx+U3MEPRd3CRYEKBQO78FqMjfEQHg=)
                          2: 1m4ekupBDw2diSy5kBH7FH4ykiM.roa (hash: KhsSFWNiOxPpZz9x0iSKSy3MkwGEXCHLB+e6DJQfQO8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:6a:f3:02:44:54:fe:d1:69:c9:c9:93:97:b9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
        Validity
            Not Before: May 17 18:00:30 2024 GMT
            Not After : May 18 18:00:30 2024 GMT
        Subject: CN=ec624f2de67adfd26eafa9d0f2b54d2755abb016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9b:1d:84:7f:fa:a3:ae:93:35:2e:04:df:69:
                    c1:e0:c9:98:3a:7e:d2:97:fc:4e:4e:93:32:a8:3a:
                    47:1b:79:7b:ef:f0:57:53:c7:e2:75:f6:7f:00:6c:
                    f3:b9:f0:15:9d:5d:0c:36:63:03:0f:2e:ff:0f:dd:
                    2c:04:50:b4:9b:42:92:ad:a0:2f:4b:d3:e0:0e:e0:
                    26:6f:ea:6f:a5:7f:fb:24:a2:01:92:fa:4b:54:a8:
                    d0:e6:b8:9c:33:77:be:11:19:ab:5a:c0:38:b1:dd:
                    48:f2:e6:81:2e:dc:64:fc:ff:83:e5:14:33:81:0b:
                    d4:e1:68:9a:a6:0c:6e:a0:54:73:fd:4b:9c:14:c5:
                    ec:49:a7:a4:42:19:c9:98:08:13:40:ea:7b:ee:25:
                    cb:49:59:e5:27:d2:22:9e:f7:72:c9:c6:3d:bb:d8:
                    b7:80:12:6a:20:1b:62:97:d8:94:a2:13:02:e0:64:
                    84:4d:5e:6a:c8:d7:1f:8e:4a:ab:03:59:1d:fb:c8:
                    3d:d2:7a:28:bd:5a:1d:ea:f9:7c:06:ae:f7:5b:e9:
                    70:62:32:9c:b5:5f:55:ca:49:47:9f:1d:ab:5a:56:
                    2c:20:ef:75:76:ce:7b:a1:e6:62:88:05:71:e8:84:
                    06:d4:3f:c3:5b:69:b6:91:79:5a:4b:c2:5e:8a:90:
                    77:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:62:4F:2D:E6:7A:DF:D2:6E:AF:A9:D0:F2:B5:4D:27:55:AB:B0:16
            X509v3 Authority Key Identifier:
                keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3d:77:82:4c:a0:f7:0f:24:30:3d:a5:af:2e:00:4d:2f:82:
         b7:3a:5b:4e:50:50:79:88:ce:3a:76:e0:5c:03:4b:93:47:dc:
         32:99:d6:07:dd:0f:99:6e:88:19:96:40:a4:d5:35:67:c0:52:
         f4:81:bf:cc:c4:b1:be:65:7c:a7:54:f2:7e:85:a6:41:ec:70:
         05:3e:f3:80:fc:0c:40:d0:fc:29:70:fc:a3:5d:ef:76:d7:2b:
         a7:e9:cd:07:4b:4e:4c:3d:6d:2d:de:e9:3f:aa:53:a2:ae:15:
         8e:7d:66:4b:15:98:67:7d:cb:b6:34:cc:ad:a4:20:0c:6c:90:
         ec:0a:e0:c1:d8:a4:1b:b5:1c:88:77:78:d6:c7:0a:41:b1:7c:
         da:63:4a:e9:a5:bb:0b:f8:20:fc:8a:af:25:3a:8f:22:6f:18:
         ec:ea:9f:ff:7c:a7:fc:b9:44:52:8e:f2:5b:c4:fa:b7:f5:6a:
         af:1e:f0:3d:46:8a:b4:12:b6:f6:02:e9:b8:4a:46:7e:92:4e:
         09:fb:b0:8f:3b:e6:10:d7:df:7d:69:73:6d:62:21:c7:d9:eb:
         16:3e:9a:64:c5:73:e7:27:90:32:d5:2e:6f:7f:29:8e:fe:66:
         7a:88:5f:da:9e:10:19:a0:81:0e:60:2c:1e:fa:82:63:be:2a:
         b6:1f:95:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtmrzAkRU/tFpycmTl7mPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjdjNjA5ZmFmNGE2YzIyYWRmMWY4YzRhNzBhMDdhZTdj
ZjJlODEwHhcNMjQwNTE3MTgwMDMwWhcNMjQwNTE4MTgwMDMwWjAzMTEwLwYDVQQD
EyhlYzYyNGYyZGU2N2FkZmQyNmVhZmE5ZDBmMmI1NGQyNzU1YWJiMDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZsdhH/6o66TNS4E32nB4MmYOn7S
l/xOTpMyqDpHG3l77/BXU8fidfZ/AGzzufAVnV0MNmMDDy7/D90sBFC0m0KSraAv
S9PgDuAmb+pvpX/7JKIBkvpLVKjQ5ricM3e+ERmrWsA4sd1I8uaBLtxk/P+D5RQz
gQvU4WiapgxuoFRz/UucFMXsSaekQhnJmAgTQOp77iXLSVnlJ9IinvdyycY9u9i3
gBJqIBtil9iUohMC4GSETV5qyNcfjkqrA1kd+8g90noovVod6vl8Bq73W+lwYjKc
tV9VyklHnx2rWlYsIO91ds57oeZiiAVx6IQG1D/DW2m2kXlaS8JeipB3bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxiTy3met/Sbq+p0PK1TSdVq7AWMB8GA1UdIwQY
MBaAFNAnxgn69KbCKt8fjEpwoHrnzy6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUt
M2FjYjgxNDkwNGEwLzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUtM2FjYjgxNDkwNGEw
LzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbj13gkyg
9w8kMD2lry4ATS+CtzpbTlBQeYjOOnbgXANLk0fcMpnWB90PmW6IGZZApNU1Z8BS
9IG/zMSxvmV8p1TyfoWmQexwBT7zgPwMQND8KXD8o13vdtcrp+nNB0tOTD1tLd7p
P6pToq4Vjn1mSxWYZ33LtjTMraQgDGyQ7ArgwdikG7UciHd41scKQbF82mNK6aW7
C/gg/IqvJTqPIm8Y7Oqf/3yn/LlEUo7yW8T6t/Vqrx7wPUaKtBK29gLpuEpGfpJO
CfuwjzvmENfffWlzbWIhx9nrFj6aZMVz5yeQMtUub38pjv5meohf2p4QGaCBDmAs
HvqCY74qth+V2Q==
-----END CERTIFICATE-----
Generated at Fri May 17 20:15:07 2024 by rpki-client on console-fra.rpki-client.org