Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
File:                     IO7gXaGD3uK4EYFBlWRiySQNeHY.mft (raw, json)
Hash identifier:          WTqQsiw01tDvD+5LBReEe8V4MnYnDqvHKR+u3n7BChA=
Subject key identifier:   7F:6B:FE:C6:35:DF:F2:46:F3:5A:91:78:DB:85:42:4A:AD:C8:66:75
Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
Certificate issuer:       /CN=20eee05da183dee2b8118141956462c9240d7876
Certificate serial:       018F381C73B16F88332DF0E987E8487D6C7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
Manifest number:          0F59
Signing time:             Thu 02 May 2024 07:02:19 +0000
Manifest this update:     Thu 02 May 2024 07:02:19 +0000
Manifest next update:     Fri 03 May 2024 07:02:19 +0000
Files and hashes:         1: IO7gXaGD3uK4EYFBlWRiySQNeHY.crl (hash: STor59LA4sPMvUok0+KZ3OPYDwPKPdXs59zQZ++CngU=)
                          2: TEcgcfmPc588zPAFcM06ho7aozE.roa (hash: niZABl/p53xvLn9Jd0yvH3YAzX7TmR1lU6dVv6SS6w0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1c:73:b1:6f:88:33:2d:f0:e9:87:e8:48:7d:6c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20eee05da183dee2b8118141956462c9240d7876
        Validity
            Not Before: May  2 07:02:19 2024 GMT
            Not After : May  3 07:02:19 2024 GMT
        Subject: CN=7f6bfec635dff246f35a9178db85424aadc86675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:58:13:57:d2:cf:06:f9:01:02:ae:03:52:80:
                    31:3d:57:61:92:a2:4d:6f:d9:97:e1:7b:f7:34:94:
                    c5:9c:bc:cb:d7:76:d9:9f:fb:e6:77:0c:44:09:7a:
                    b6:a3:9b:58:27:12:f6:62:94:41:3d:c7:3c:19:6e:
                    bf:6e:2b:c3:f6:55:e9:5d:b3:d3:e6:92:3e:50:4f:
                    27:7f:5e:38:7e:1a:c0:3d:2f:c6:dd:ab:93:2f:5e:
                    ee:00:49:e4:26:0b:7b:6c:d7:70:b1:6d:fc:96:3a:
                    00:f3:c8:77:98:09:2c:91:0f:2a:ae:64:b6:ea:02:
                    97:e9:5c:fb:cf:b9:3e:7a:08:e0:3f:14:80:32:97:
                    e2:21:57:26:e4:0b:69:ba:76:f0:20:bc:76:86:41:
                    75:67:be:da:fb:71:d4:73:6b:a7:a0:88:55:a0:a6:
                    e9:e8:a5:a6:44:04:4d:7f:20:e7:92:45:ec:d7:ca:
                    aa:2a:61:de:fe:7c:6d:5d:2d:46:d1:05:64:8f:3a:
                    c7:97:2f:34:84:88:79:9a:59:21:c1:3a:4f:f2:b1:
                    63:76:ba:1b:07:2e:76:e8:07:48:9c:83:26:00:90:
                    bb:a8:c5:fb:af:29:d1:4e:b9:ab:8a:84:bd:17:36:
                    b7:24:d1:48:7b:46:c7:19:5d:1d:06:76:78:7e:32:
                    23:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6B:FE:C6:35:DF:F2:46:F3:5A:91:78:DB:85:42:4A:AD:C8:66:75
            X509v3 Authority Key Identifier:
                keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f0:3d:22:77:5e:46:90:98:5a:11:73:75:2e:dd:13:c2:5b:
         a2:3b:75:c0:f2:76:21:34:3d:a5:dd:33:be:ef:ee:5f:36:b4:
         c9:3c:ec:f2:1d:fe:34:6c:80:0c:26:71:32:8c:83:98:51:db:
         c5:a3:c1:4f:8d:b0:97:6e:19:bd:32:07:0d:8b:bf:b3:9d:ca:
         ad:40:82:ec:48:46:fc:74:e2:18:da:a2:62:ea:f9:90:64:e4:
         c7:2d:50:41:ae:80:8b:c8:5a:36:50:62:f5:1e:c0:a6:77:14:
         c7:eb:1c:5a:38:13:1d:27:0d:31:f2:ce:7f:78:f0:25:62:12:
         e0:0d:16:eb:76:45:fe:61:79:bf:db:93:50:00:7b:f9:eb:6a:
         f2:91:ab:3d:8b:07:17:24:80:e3:90:8b:72:ad:93:14:29:27:
         b8:64:da:e6:da:40:5f:13:16:71:fb:3f:52:a0:e9:19:c4:d9:
         40:0e:f4:c7:39:67:63:19:02:59:b8:75:ca:96:74:f7:b7:07:
         d3:8a:9f:03:6e:05:43:39:31:27:d0:86:1b:ae:dc:cb:c3:0d:
         2a:01:4b:8e:61:8e:39:47:f4:5a:28:22:3c:c0:f6:b9:10:c0:
         d4:f2:68:01:74:42:32:14:8c:b1:66:02:1f:90:e9:ce:cb:9d:
         62:cc:c9:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY84HHOxb4gzLfDph+hIfWx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZWVlMDVkYTE4M2RlZTJiODExODE0MTk1NjQ2MmM5MjQw
ZDc4NzYwHhcNMjQwNTAyMDcwMjE5WhcNMjQwNTAzMDcwMjE5WjAzMTEwLwYDVQQD
Eyg3ZjZiZmVjNjM1ZGZmMjQ2ZjM1YTkxNzhkYjg1NDI0YWFkYzg2Njc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FgTV9LPBvkBAq4DUoAxPVdhkqJN
b9mX4Xv3NJTFnLzL13bZn/vmdwxECXq2o5tYJxL2YpRBPcc8GW6/bivD9lXpXbPT
5pI+UE8nf144fhrAPS/G3auTL17uAEnkJgt7bNdwsW38ljoA88h3mAkskQ8qrmS2
6gKX6Vz7z7k+egjgPxSAMpfiIVcm5AtpunbwILx2hkF1Z77a+3HUc2unoIhVoKbp
6KWmRARNfyDnkkXs18qqKmHe/nxtXS1G0QVkjzrHly80hIh5mlkhwTpP8rFjdrob
By526AdInIMmAJC7qMX7rynRTrmrioS9Fza3JNFIe0bHGV0dBnZ4fjIjkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9r/sY13/JG81qReNuFQkqtyGZ1MB8GA1UdIwQY
MBaAFCDu4F2hg97iuBGBQZVkYskkDXh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU83Z1hhR0QzdUs0RVlGQmxXUml5U1FOZUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jZmMwZDEtZDA5NS00YjFiLTliNWQt
Mzk4NTI5OWZhZDZkLzEvSU83Z1hhR0QzdUs0RVlGQmxXUml5U1FOZUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jZmMwZDEtZDA5NS00YjFiLTliNWQtMzk4NTI5OWZhZDZk
LzEvSU83Z1hhR0QzdUs0RVlGQmxXUml5U1FOZUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfA9Inde
RpCYWhFzdS7dE8Jbojt1wPJ2ITQ9pd0zvu/uXza0yTzs8h3+NGyADCZxMoyDmFHb
xaPBT42wl24ZvTIHDYu/s53KrUCC7EhG/HTiGNqiYur5kGTkxy1QQa6Ai8haNlBi
9R7ApncUx+scWjgTHScNMfLOf3jwJWIS4A0W63ZF/mF5v9uTUAB7+etq8pGrPYsH
FySA45CLcq2TFCknuGTa5tpAXxMWcfs/UqDpGcTZQA70xzlnYxkCWbh1ypZ097cH
04qfA24FQzkxJ9CGG67cy8MNKgFLjmGOOUf0WigiPMD2uRDA1PJoAXRCMhSMsWYC
H5DpzsudYszJeg==
-----END CERTIFICATE-----
Generated at Thu May 2 10:37:53 2024 by rpki-client on console-ams.rpki-client.org