Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
File:                     U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft (raw, json)
Hash identifier:          +fcGP7shFY3oai8crHtyorFUtYeaIp9RHNpYvMCsepo=
Subject key identifier:   35:AB:29:65:13:C6:2F:4F:9A:67:B1:D6:CC:77:68:36:D5:67:85:45
Authority key identifier: 53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
Certificate issuer:       /CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Certificate serial:       018F87ED823A0A7C4C4DD3221E9AB9615BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 19:00:40 +0000
Manifest this update:     Fri 17 May 2024 19:00:40 +0000
Manifest next update:     Sat 18 May 2024 19:00:40 +0000
Files and hashes:         1: U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl (hash: yquqLvRB/GcwU0guhMw+V6xtp25r167N6u9ZrA6cNZI=)
                          2: ouK5Dp2H6EeB1Tg1182oEw_e4ig.roa (hash: Z4zOMsCIxmt+bmLJkQ9pRd4m9OMVGysXGeLWEWAcTRs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:82:3a:0a:7c:4c:4d:d3:22:1e:9a:b9:61:5b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
        Validity
            Not Before: May 17 19:00:40 2024 GMT
            Not After : May 18 19:00:40 2024 GMT
        Subject: CN=35ab296513c62f4f9a67b1d6cc776836d5678545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:48:e7:43:47:6a:13:4c:b7:b0:4c:fc:16:cb:
                    b9:86:21:c7:e8:18:31:87:ca:4c:71:b7:5a:54:de:
                    a3:9f:a3:2c:f0:1d:44:20:59:40:29:4a:d9:f7:c3:
                    a3:bf:79:ce:a0:1a:8a:9c:2a:0c:ae:11:36:ce:cf:
                    7f:70:42:b4:ae:d4:7e:b9:07:27:b2:5d:5f:11:0e:
                    90:c7:40:54:b2:b2:60:24:6f:d8:59:3e:c0:ae:21:
                    b3:13:36:bd:2b:4b:71:60:9d:24:31:c7:88:fc:bf:
                    69:d2:b2:d6:a6:95:f9:da:9f:60:39:1b:9d:62:2f:
                    b9:f5:99:e0:03:4e:5e:10:d4:ea:41:2f:89:e2:21:
                    91:1f:85:86:9a:48:ec:3d:96:d6:8c:59:75:cf:c1:
                    24:00:63:39:b1:74:bb:e4:17:82:65:4e:b8:eb:27:
                    08:57:aa:33:0b:2a:2a:3c:ed:7e:e1:6f:d1:8c:40:
                    4f:3a:fb:28:65:1e:9e:68:b1:62:dd:b6:76:66:24:
                    b3:e0:41:91:7b:c3:ee:d1:41:34:02:e0:2f:c3:68:
                    0d:2f:b5:be:44:6b:14:b1:12:3a:f7:32:9c:11:4c:
                    76:19:8e:92:a1:14:52:07:70:67:c8:1a:85:70:13:
                    59:6f:d6:4d:07:f2:a8:93:29:9b:5f:5f:01:09:3a:
                    cd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AB:29:65:13:C6:2F:4F:9A:67:B1:D6:CC:77:68:36:D5:67:85:45
            X509v3 Authority Key Identifier:
                keyid:53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:55:06:fc:40:82:af:de:2d:3b:02:00:ec:39:04:de:eb:a3:
         ee:f8:f2:35:31:05:23:05:cf:82:aa:93:d0:50:05:cf:0a:cd:
         7d:91:3a:72:b9:f8:b6:b7:f2:d7:b8:b7:a4:71:5c:8d:08:a3:
         37:6d:ee:71:83:6b:2b:0b:c5:7d:5b:a6:3c:da:3f:69:5d:02:
         79:0f:bd:ef:fe:73:0d:ae:fa:72:96:41:c9:c4:8c:58:34:e7:
         7d:77:7f:51:f3:85:d9:33:1e:f9:70:aa:a5:00:e2:28:73:2b:
         e6:b9:5b:4a:f0:ae:3d:22:9e:ea:8a:b6:bc:e1:10:79:24:5d:
         b0:6d:13:d6:f0:fe:6c:2d:0d:97:86:9b:7f:08:51:4a:84:70:
         e8:f6:bb:f2:0f:7c:11:98:04:83:a1:e3:39:50:7e:13:db:b6:
         39:34:e8:8a:57:3b:ff:ed:cb:72:e9:54:cb:bd:6c:c0:16:f5:
         60:4c:48:8c:1f:a0:bc:ef:bd:c6:e7:dc:19:7b:f9:97:7c:8c:
         92:b8:8d:3d:45:ba:bd:3e:b1:eb:5f:65:bd:ab:29:78:1e:4a:
         24:60:77:61:d5:95:57:78:4c:06:bc:17:6f:64:4d:71:86:af:
         93:3a:cb:10:b3:dd:aa:d6:4b:c0:07:46:03:dd:53:f0:29:d8:
         4a:5f:29:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7YI6CnxMTdMiHpq5YVvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTNhOWE4NWZhMTFmYzRiZjE1NmZhYjRkOGQ4NGEwOGU1
ZDY2ZjkwHhcNMjQwNTE3MTkwMDQwWhcNMjQwNTE4MTkwMDQwWjAzMTEwLwYDVQQD
EygzNWFiMjk2NTEzYzYyZjRmOWE2N2IxZDZjYzc3NjgzNmQ1Njc4NTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUjnQ0dqE0y3sEz8Fsu5hiHH6Bgx
h8pMcbdaVN6jn6Ms8B1EIFlAKUrZ98Ojv3nOoBqKnCoMrhE2zs9/cEK0rtR+uQcn
sl1fEQ6Qx0BUsrJgJG/YWT7AriGzEza9K0txYJ0kMceI/L9p0rLWppX52p9gORud
Yi+59ZngA05eENTqQS+J4iGRH4WGmkjsPZbWjFl1z8EkAGM5sXS75BeCZU646ycI
V6ozCyoqPO1+4W/RjEBPOvsoZR6eaLFi3bZ2ZiSz4EGRe8Pu0UE0AuAvw2gNL7W+
RGsUsRI69zKcEUx2GY6SoRRSB3BnyBqFcBNZb9ZNB/KokymbX18BCTrNoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWrKWUTxi9Pmmex1sx3aDbVZ4VFMB8GA1UdIwQY
MBaAFFNTqahfoR/EvxVvq02NhKCOXWb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iOTI5Y2UtZWMxNy00ZDUwLWE2YWUt
NzlkOTM0ZTRhOTlhLzEvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9iOTI5Y2UtZWMxNy00ZDUwLWE2YWUtNzlkOTM0ZTRhOTlh
LzEvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFUG/ECC
r94tOwIA7DkE3uuj7vjyNTEFIwXPgqqT0FAFzwrNfZE6crn4trfy17i3pHFcjQij
N23ucYNrKwvFfVumPNo/aV0CeQ+97/5zDa76cpZBycSMWDTnfXd/UfOF2TMe+XCq
pQDiKHMr5rlbSvCuPSKe6oq2vOEQeSRdsG0T1vD+bC0Nl4abfwhRSoRw6Pa78g98
EZgEg6HjOVB+E9u2OTToilc7/+3LculUy71swBb1YExIjB+gvO+9xufcGXv5l3yM
kriNPUW6vT6x619lvaspeB5KJGB3YdWVV3hMBrwXb2RNcYavkzrLELPdqtZLwAdG
A91T8CnYSl8pYA==
-----END CERTIFICATE-----
Generated at Fri May 17 20:15:12 2024 by rpki-client on console-fra.rpki-client.org