Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
File:                     4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft (raw, json)
Hash identifier:          BvGpVYGH3JBX5Ocjfr1OxIaIIrKAoqaRjkkQVSWjhTw=
Subject key identifier:   72:2C:3B:82:AD:61:14:0F:1B:92:E0:B8:22:6A:01:4B:C1:64:E0:59
Authority key identifier: E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03
Certificate issuer:       /CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
Certificate serial:       018F3AAE83A5352F7A9040292959F7814C92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
Manifest number:          0E8A
Signing time:             Thu 02 May 2024 19:01:06 +0000
Manifest this update:     Thu 02 May 2024 19:01:06 +0000
Manifest next update:     Fri 03 May 2024 19:01:06 +0000
Files and hashes:         1: 4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl (hash: berJAs2gmEKODtzsmbNz3V5I1TVjgTodvi/XDoLb/X4=)
                          2: mJ_tPpSeSVdNqb3uu8sD5fnC6l4.roa (hash: 1V0RqqqNgdnqEczmfgvXni7vMfrFT/mZyl24ZpBDCNM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:ae:83:a5:35:2f:7a:90:40:29:29:59:f7:81:4c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
        Validity
            Not Before: May  2 19:01:06 2024 GMT
            Not After : May  3 19:01:06 2024 GMT
        Subject: CN=722c3b82ad61140f1b92e0b8226a014bc164e059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c3:0f:f5:81:62:53:a0:cc:f6:df:b2:00:f3:
                    3c:11:76:83:fd:15:a7:9c:ff:1f:81:47:69:50:96:
                    70:9b:a1:ac:f2:03:f7:e6:94:aa:3b:d7:38:cd:51:
                    e0:1d:17:9b:2b:12:0f:30:59:d2:96:c0:b3:fd:37:
                    68:6c:d3:6c:8b:8b:76:a1:84:55:d0:61:61:a6:aa:
                    4f:83:7f:af:48:dd:07:c5:f0:ed:25:91:ca:6a:52:
                    3a:8c:6e:ff:fb:92:85:ee:6a:50:80:f6:22:1c:8e:
                    0d:01:36:76:4b:5a:78:e3:94:07:83:83:75:30:1a:
                    c2:a3:ad:9b:e3:e1:4a:46:ed:02:a3:9d:02:ad:d0:
                    33:8e:ee:1a:f9:4c:be:52:cd:ae:4b:44:fa:8f:03:
                    64:8a:f7:a4:39:2d:f9:c3:cb:a6:74:71:2c:0e:7a:
                    d4:8a:41:9a:0a:56:d6:5f:d4:e0:d9:25:f6:9f:83:
                    32:03:40:66:8a:f8:80:15:4d:f0:16:50:87:07:7c:
                    4c:c5:8a:a0:b9:ad:8d:9a:3a:93:6b:de:b5:6a:3c:
                    cc:a8:9c:7b:ad:5e:5c:17:2d:d1:3f:e1:67:d9:7d:
                    89:90:94:8d:f8:e4:c3:ae:36:c6:76:57:82:81:25:
                    7f:8f:5c:6b:50:2a:d4:63:2a:60:cd:3b:4a:73:35:
                    e9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2C:3B:82:AD:61:14:0F:1B:92:E0:B8:22:6A:01:4B:C1:64:E0:59
            X509v3 Authority Key Identifier:
                keyid:E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:82:65:39:4d:04:a5:04:6a:17:2a:1c:cb:b1:57:9b:23:e7:
         1b:b6:1b:4c:a7:1b:15:cd:ce:29:f3:03:14:cc:2d:d4:d3:d2:
         71:5e:72:a8:b0:fe:02:c6:5d:16:94:5b:18:95:04:ea:46:5d:
         bc:44:9a:c8:2d:46:3c:4b:79:d8:8d:6b:3f:09:55:e6:64:a6:
         40:9c:ed:4c:03:a3:da:ac:7c:84:60:7a:1e:7e:10:e7:82:06:
         40:bd:e8:42:4d:f4:09:60:22:68:08:dd:dc:34:e7:04:4b:13:
         6b:3c:75:25:c2:2b:c2:62:0e:99:ab:86:f4:01:79:c9:cc:c1:
         75:65:2f:ae:93:2d:7a:44:5e:35:34:f4:ce:cc:bd:3e:df:5a:
         4e:49:62:e3:77:48:5e:c4:5c:f5:d2:5b:b6:d3:fd:53:28:8a:
         9f:7c:41:f4:c2:5b:9e:b0:7f:38:71:b6:7c:06:a1:e0:ce:43:
         c6:37:46:ef:c5:50:fe:19:54:1a:4f:f2:83:75:d9:36:bd:35:
         54:1a:c0:8a:5e:63:b2:23:2e:82:b2:55:ae:45:c6:32:de:1a:
         c1:ad:ac:f5:06:be:e9:2b:17:4d:b7:0d:1b:0c:d8:0e:cb:42:
         c7:8c:c7:14:4e:d9:ec:8a:d3:91:d1:3f:fc:20:80:0f:38:36:
         0a:2b:a9:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY86roOlNS96kEApKVn3gUySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDdlOWZmMTI3OGExNGRjMjZlZjMzZjlmZjUzMWQ4NmVm
ZjVkMDMwHhcNMjQwNTAyMTkwMTA2WhcNMjQwNTAzMTkwMTA2WjAzMTEwLwYDVQQD
Eyg3MjJjM2I4MmFkNjExNDBmMWI5MmUwYjgyMjZhMDE0YmMxNjRlMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MMP9YFiU6DM9t+yAPM8EXaD/RWn
nP8fgUdpUJZwm6Gs8gP35pSqO9c4zVHgHRebKxIPMFnSlsCz/TdobNNsi4t2oYRV
0GFhpqpPg3+vSN0HxfDtJZHKalI6jG7/+5KF7mpQgPYiHI4NATZ2S1p445QHg4N1
MBrCo62b4+FKRu0Co50CrdAzju4a+Uy+Us2uS0T6jwNkivekOS35w8umdHEsDnrU
ikGaClbWX9Tg2SX2n4MyA0BmiviAFU3wFlCHB3xMxYqgua2NmjqTa961ajzMqJx7
rV5cFy3RP+Fn2X2JkJSN+OTDrjbGdleCgSV/j1xrUCrUYypgzTtKczXpowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIsO4KtYRQPG5LguCJqAUvBZOBZMB8GA1UdIwQY
MBaAFOHX6f8SeKFNwm7zP5/1Mdhu/10DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGRmcF94SjRvVTNDYnZNX25fVXgyRzdfWFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hYTc5MjItYzJjMC00N2FlLTkxMDgt
NjAzMGE5ZGEzYjg5LzEvNGRmcF94SjRvVTNDYnZNX25fVXgyRzdfWFFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hYTc5MjItYzJjMC00N2FlLTkxMDgtNjAzMGE5ZGEzYjg5
LzEvNGRmcF94SjRvVTNDYnZNX25fVXgyRzdfWFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYJlOU0E
pQRqFyocy7FXmyPnG7YbTKcbFc3OKfMDFMwt1NPScV5yqLD+AsZdFpRbGJUE6kZd
vESayC1GPEt52I1rPwlV5mSmQJztTAOj2qx8hGB6Hn4Q54IGQL3oQk30CWAiaAjd
3DTnBEsTazx1JcIrwmIOmauG9AF5yczBdWUvrpMtekReNTT0zsy9Pt9aTkli43dI
XsRc9dJbttP9UyiKn3xB9MJbnrB/OHG2fAah4M5DxjdG78VQ/hlUGk/yg3XZNr01
VBrAil5jsiMugrJVrkXGMt4awa2s9Qa+6SsXTbcNGwzYDstCx4zHFE7Z7IrTkdE/
/CCADzg2CiupNg==
-----END CERTIFICATE-----
Generated at Fri May 3 02:20:27 2024 by rpki-client on console-fra.rpki-client.org