Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
File:                     rujl3-xoOuXxoOvg-5b6JWswR2I.mft (raw, json)
Hash identifier:          ma8OQfxiYzKsMNLswH0K0k0YCU70cZddR7r2UWzg5GI=
Subject key identifier:   22:17:18:18:22:7D:D1:80:13:C3:45:EC:60:89:F2:E4:A8:44:C4:D6
Authority key identifier: AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
Certificate issuer:       /CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Certificate serial:       018F89373DCC390848D8E57302323744BAFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
Manifest number:          0A35
Signing time:             Sat 18 May 2024 01:00:49 +0000
Manifest this update:     Sat 18 May 2024 01:00:49 +0000
Manifest next update:     Sun 19 May 2024 01:00:49 +0000
Files and hashes:         1: p_T4aOfJgt32cIeHmdCdZaJR0_E.roa (hash: jiCa9LbV82kIu27nzA/kWtY2FEgGHuesgpNQFkD9nkc=)
                          2: rujl3-xoOuXxoOvg-5b6JWswR2I.crl (hash: M1Li7bn1wf7sxIUN3mtOVLxSL7/H2M2vVVDsqQ7HK60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:3d:cc:39:08:48:d8:e5:73:02:32:37:44:ba:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
        Validity
            Not Before: May 18 01:00:49 2024 GMT
            Not After : May 19 01:00:49 2024 GMT
        Subject: CN=22171818227dd18013c345ec6089f2e4a844c4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:d4:c0:0d:38:b1:5b:b2:f3:b7:50:e0:dc:
                    df:f6:14:b4:dc:98:fa:25:75:4a:a8:03:4d:62:61:
                    da:a3:51:ff:77:df:22:b3:dc:5e:b6:ef:8f:f8:53:
                    74:cd:40:96:ae:3a:c7:e6:ca:9b:de:3f:c2:07:d6:
                    28:9a:7e:9f:72:55:2e:13:09:27:67:67:f0:c2:20:
                    60:ac:c4:16:05:0b:da:72:c0:43:55:d7:4e:38:db:
                    f1:83:db:b2:54:0d:bc:91:24:33:d7:6f:37:2f:31:
                    a9:c7:11:1d:13:d0:82:28:2a:d1:da:f9:c7:3f:67:
                    4b:36:34:bb:80:06:a8:29:06:a1:63:70:0c:ab:e8:
                    1d:d0:37:fb:e0:c1:9e:28:ec:2d:81:a7:4a:dd:ad:
                    7c:35:c8:44:fa:a7:64:00:82:15:58:e4:7c:9e:d0:
                    b3:08:36:7e:8a:26:d4:1b:c1:31:a2:71:f3:f1:9f:
                    a3:0e:21:0e:79:dc:93:db:ba:d1:e4:21:bd:4c:27:
                    28:d0:c3:c9:d1:21:40:2a:03:a6:9f:88:c1:82:75:
                    45:02:51:2d:99:eb:6d:9d:93:15:40:e5:93:aa:c7:
                    a0:a9:be:1b:e6:7f:7e:ac:17:e5:45:37:84:67:6a:
                    1a:77:a7:60:64:1b:16:1a:d8:8e:2c:d5:a7:ce:fe:
                    9f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:17:18:18:22:7D:D1:80:13:C3:45:EC:60:89:F2:E4:A8:44:C4:D6
            X509v3 Authority Key Identifier:
                keyid:AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:ce:76:39:91:19:df:0d:20:25:a1:ce:38:71:68:5b:bf:f6:
         9f:64:af:6e:74:7e:f1:f4:f3:c3:d7:ce:83:6e:87:fe:12:f1:
         ff:db:28:bc:fd:30:0f:95:fa:c7:61:6a:7e:af:dc:7d:db:c6:
         19:20:a4:06:3f:85:44:54:83:57:d7:bb:f4:a4:47:e8:73:e6:
         2b:19:89:90:20:df:2a:c1:be:5a:ab:5b:89:25:f4:06:a2:55:
         ce:97:29:24:ab:05:46:b9:0b:9a:6c:76:77:2a:fa:8a:02:b6:
         41:91:c6:04:46:05:c4:90:e8:0e:10:e8:aa:f2:48:d2:da:ec:
         a2:01:26:3f:b7:8e:83:ec:4d:d9:2e:b6:a9:8c:dc:da:5d:e3:
         98:09:54:df:5e:30:da:3c:35:6e:dd:c1:bf:f6:f5:7a:08:de:
         7e:de:7d:f4:92:61:41:19:fd:c7:75:ca:10:d2:96:32:9a:6e:
         46:a8:85:ca:4a:40:3d:c5:ea:d5:ff:46:ec:ed:88:d2:7d:33:
         ea:61:d4:1e:e4:52:53:e2:86:19:57:29:3c:ff:4c:a8:35:0c:
         5f:ae:51:7f:4c:e9:b7:18:34:3f:73:04:7f:b7:17:ba:2b:a0:
         b6:48:99:e9:95:48:3a:3c:df:7a:e9:c8:05:4e:fe:16:4a:e9:
         a4:52:54:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JNz3MOQhI2OVzAjI3RLr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZThlNWRmZWM2ODNhZTVmMWEwZWJlMGZiOTZmYTI1NmIz
MDQ3NjIwHhcNMjQwNTE4MDEwMDQ5WhcNMjQwNTE5MDEwMDQ5WjAzMTEwLwYDVQQD
EygyMjE3MTgxODIyN2RkMTgwMTNjMzQ1ZWM2MDg5ZjJlNGE4NDRjNGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfPUwA04sVuy87dQ4Nzf9hS03Jj6
JXVKqANNYmHao1H/d98is9xetu+P+FN0zUCWrjrH5sqb3j/CB9Yomn6fclUuEwkn
Z2fwwiBgrMQWBQvacsBDVddOONvxg9uyVA28kSQz1283LzGpxxEdE9CCKCrR2vnH
P2dLNjS7gAaoKQahY3AMq+gd0Df74MGeKOwtgadK3a18NchE+qdkAIIVWOR8ntCz
CDZ+iibUG8ExonHz8Z+jDiEOedyT27rR5CG9TCco0MPJ0SFAKgOmn4jBgnVFAlEt
mettnZMVQOWTqsegqb4b5n9+rBflRTeEZ2oad6dgZBsWGtiOLNWnzv6fxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIXGBgifdGAE8NF7GCJ8uSoRMTWMB8GA1UdIwQY
MBaAFK7o5d/saDrl8aDr4PuW+iVrMEdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xOGI2OTAtYzVhZS00ZmI0LThiZjgt
NjNhMGJlNmE4ZTVmLzEvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xOGI2OTAtYzVhZS00ZmI0LThiZjgtNjNhMGJlNmE4ZTVm
LzEvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt852OZEZ
3w0gJaHOOHFoW7/2n2SvbnR+8fTzw9fOg26H/hLx/9sovP0wD5X6x2Fqfq/cfdvG
GSCkBj+FRFSDV9e79KRH6HPmKxmJkCDfKsG+WqtbiSX0BqJVzpcpJKsFRrkLmmx2
dyr6igK2QZHGBEYFxJDoDhDoqvJI0trsogEmP7eOg+xN2S62qYzc2l3jmAlU314w
2jw1bt3Bv/b1egjeft599JJhQRn9x3XKENKWMppuRqiFykpAPcXq1f9G7O2I0n0z
6mHUHuRSU+KGGVcpPP9MqDUMX65Rf0zptxg0P3MEf7cXuiugtkiZ6ZVIOjzfeunI
BU7+FkrppFJUBg==
-----END CERTIFICATE-----
Generated at Sat May 18 02:02:31 2024 by rpki-client on console-fra.rpki-client.org