Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File:                     CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier:          mmrCYnhajbgPcV+BXTmDwgcetMmDRJxcLyWNi2hakzU=
Subject key identifier:   27:CF:46:82:A7:16:86:F7:D5:A1:36:F9:BD:24:E9:74:3A:AC:C2:E7
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer:       /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial:       018F3D0B24EABBF7EB966B3220C3E5C3A1AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number:          0E99
Signing time:             Fri 03 May 2024 06:01:31 +0000
Manifest this update:     Fri 03 May 2024 06:01:31 +0000
Manifest next update:     Sat 04 May 2024 06:01:31 +0000
Files and hashes:         1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: A4GK06pWWnMXIsxuW9oVP7xukN0MvH9HJFdPDQzVg04=)
                          2: kzUYwJhep0ceBv9K25Sx1AuBXa0.roa (hash: kRIcvR47bh8AsbJtBsF4GDAQ6tpHZYGd+jDHo4ODfDI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:0b:24:ea:bb:f7:eb:96:6b:32:20:c3:e5:c3:a1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
        Validity
            Not Before: May  3 06:01:31 2024 GMT
            Not After : May  4 06:01:31 2024 GMT
        Subject: CN=27cf4682a71686f7d5a136f9bd24e9743aacc2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:33:d7:c3:4f:60:16:fb:0d:83:f6:8e:01:e2:
                    96:d3:63:de:3a:bd:0e:30:47:1c:42:92:f6:7f:8d:
                    e3:d4:2f:53:de:13:22:20:a9:cf:1d:e2:e0:51:3c:
                    f9:a5:dc:65:6a:21:90:a7:f6:18:fb:e1:8b:e4:01:
                    70:18:22:ca:3b:f7:8e:cf:45:0b:80:35:f0:17:5a:
                    dd:ce:a2:61:98:cb:fa:82:ad:97:12:28:ab:c7:4f:
                    56:7d:75:9a:e1:bf:33:a3:48:9b:28:70:22:f8:05:
                    2a:c3:75:2d:2c:f1:c3:0a:89:4a:d0:cc:b8:06:9c:
                    b9:4b:78:7c:58:d3:61:0e:80:75:24:fa:89:ec:8e:
                    30:2a:b0:bf:e0:45:ed:39:5a:ed:af:5f:df:4d:31:
                    66:e9:99:07:8e:58:9b:30:e1:b7:e1:51:08:59:ca:
                    51:42:53:40:36:62:a8:ea:77:66:66:52:bb:79:aa:
                    fd:10:7c:bb:d0:60:a1:0c:03:c6:88:42:2a:e3:18:
                    f5:d9:fa:23:99:5a:4a:08:f9:44:9e:b5:34:81:19:
                    b6:d7:3b:98:d8:2f:a2:02:70:37:ee:fa:4b:26:a5:
                    89:33:9c:0c:62:a0:09:a4:bf:b5:93:cc:eb:0c:dc:
                    b5:51:78:ed:e5:01:eb:95:9c:14:2a:13:d1:4e:5d:
                    97:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CF:46:82:A7:16:86:F7:D5:A1:36:F9:BD:24:E9:74:3A:AC:C2:E7
            X509v3 Authority Key Identifier:
                keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f8:05:b8:3a:49:af:14:b7:3c:b9:b5:22:f3:b9:3f:a9:48:
         ed:a7:f9:0b:53:8b:52:16:3a:fe:47:57:4b:0f:4e:76:ed:49:
         c8:be:dd:e2:6d:88:59:db:72:d9:63:03:e1:1b:aa:26:4c:ac:
         02:63:4d:b2:1c:b4:79:5a:34:9d:0e:1e:c9:2a:34:bd:f3:e8:
         54:6a:4b:81:9e:d0:92:3d:84:fb:ed:5a:d7:03:5f:21:1e:dc:
         9b:a0:d2:5e:1e:a3:99:a1:81:6c:fe:e0:9e:c4:30:ab:0b:07:
         de:18:25:e0:64:d3:09:17:ef:4c:70:68:59:7e:90:eb:5e:8c:
         05:74:9c:f6:ec:b0:c8:22:33:45:52:0c:b1:60:d9:46:2a:f0:
         df:82:14:94:df:3e:ea:6f:43:16:cb:a9:ee:aa:e8:fb:a9:19:
         f7:15:99:dc:c9:93:e8:46:66:7a:a4:ed:dc:2b:bc:a8:39:37:
         31:4a:1d:6f:22:f0:d7:75:30:54:98:17:00:c6:31:65:75:4d:
         9f:d0:9f:f9:14:a6:98:87:ce:18:8c:5c:94:5b:fd:ad:10:04:
         1d:8e:88:12:86:82:0c:13:47:0d:75:2f:19:0e:53:28:19:98:
         d3:fd:a3:9d:23:71:58:d3:08:0f:3f:3a:d3:65:ac:f8:22:16:
         d6:64:13:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY89CyTqu/frlmsyIMPlw6GqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZjI2YmQ2ZjQ2ODM3ZTBhZmQ5NTg5ZDg3OGVmYzNlYzg5
NjdmMDIwHhcNMjQwNTAzMDYwMTMxWhcNMjQwNTA0MDYwMTMxWjAzMTEwLwYDVQQD
EygyN2NmNDY4MmE3MTY4NmY3ZDVhMTM2ZjliZDI0ZTk3NDNhYWNjMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zPXw09gFvsNg/aOAeKW02PeOr0O
MEccQpL2f43j1C9T3hMiIKnPHeLgUTz5pdxlaiGQp/YY++GL5AFwGCLKO/eOz0UL
gDXwF1rdzqJhmMv6gq2XEiirx09WfXWa4b8zo0ibKHAi+AUqw3UtLPHDColK0My4
Bpy5S3h8WNNhDoB1JPqJ7I4wKrC/4EXtOVrtr1/fTTFm6ZkHjlibMOG34VEIWcpR
QlNANmKo6ndmZlK7ear9EHy70GChDAPGiEIq4xj12fojmVpKCPlEnrU0gRm21zuY
2C+iAnA37vpLJqWJM5wMYqAJpL+1k8zrDNy1UXjt5QHrlZwUKhPRTl2XTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfPRoKnFob31aE2+b0k6XQ6rMLnMB8GA1UdIwQY
MBaAFAnya9b0aDfgr9lYnYeO/D7Iln8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEt
ZTQwOWE4ZWZhZGFjLzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEtZTQwOWE4ZWZhZGFj
LzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/gFuDpJ
rxS3PLm1IvO5P6lI7af5C1OLUhY6/kdXSw9Odu1JyL7d4m2IWdty2WMD4RuqJkys
AmNNshy0eVo0nQ4eySo0vfPoVGpLgZ7Qkj2E++1a1wNfIR7cm6DSXh6jmaGBbP7g
nsQwqwsH3hgl4GTTCRfvTHBoWX6Q616MBXSc9uywyCIzRVIMsWDZRirw34IUlN8+
6m9DFsup7qro+6kZ9xWZ3MmT6EZmeqTt3Cu8qDk3MUodbyLw13UwVJgXAMYxZXVN
n9Cf+RSmmIfOGIxclFv9rRAEHY6IEoaCDBNHDXUvGQ5TKBmY0/2jnSNxWNMIDz86
02Ws+CIW1mQT9g==
-----END CERTIFICATE-----
Generated at Fri May 3 09:40:58 2024 by rpki-client on console-fra.rpki-client.org