Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File:                     l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier:          1XaZ3MFZ1BxDQCrR5PK24k2n5ORIvBAcOTMhd29F2IY=
Subject key identifier:   FB:04:C9:27:CD:FA:F1:88:F0:BE:33:6A:24:48:A0:44:16:1D:B8:FA
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer:       /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial:       018F874A211F4A13ADB68F9C9F19E22C96C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number:          0F38
Signing time:             Fri 17 May 2024 16:02:13 +0000
Manifest this update:     Fri 17 May 2024 16:02:13 +0000
Manifest next update:     Sat 18 May 2024 16:02:13 +0000
Files and hashes:         1: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: ZT+ifue1edS75I4r6ZU8fhQzQnbcnh2tkFnCFN9GK00=)
                          2: mCiA442NbnN5jARiREhsYMrKbo4.roa (hash: iaaw7kyr/nRl21oPFb2v/rCqw6sNnpF9zn9eQmPqG9k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:21:1f:4a:13:ad:b6:8f:9c:9f:19:e2:2c:96:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
        Validity
            Not Before: May 17 16:02:13 2024 GMT
            Not After : May 18 16:02:13 2024 GMT
        Subject: CN=fb04c927cdfaf188f0be336a2448a044161db8fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:67:12:af:5d:57:81:d8:96:51:68:1b:bb:4f:
                    1a:bf:44:c1:1c:d5:a6:5c:bc:5d:7a:94:b6:14:c1:
                    fa:1f:92:bd:98:3a:1b:e2:31:8f:f6:ac:51:8c:5d:
                    2d:fb:28:b1:d7:b3:6d:49:eb:43:a0:02:6e:c3:7a:
                    0e:1b:c9:ae:8f:e2:5c:94:57:ee:c6:49:dc:01:70:
                    e1:e1:2d:37:5b:85:8c:0b:2b:96:e1:05:0f:ba:a2:
                    51:ed:b7:ef:ce:ed:9f:15:68:d3:61:d8:93:d6:1f:
                    54:1c:4e:67:84:1f:40:43:53:45:3e:00:0d:1c:e2:
                    99:bc:73:49:07:be:59:63:67:71:d7:d2:9f:d0:f3:
                    63:7d:69:9d:db:15:ec:ff:e9:17:2d:1e:cf:ac:7b:
                    a7:a5:09:27:6b:3b:d5:32:09:34:41:24:f2:76:c1:
                    48:a5:7e:97:37:89:74:40:ba:90:c8:11:83:65:82:
                    b7:e1:4d:13:24:03:57:e5:ff:15:56:99:15:73:ca:
                    a6:00:51:c5:09:97:e0:5b:c0:c4:bb:f3:5a:ec:36:
                    85:87:ff:b4:1d:de:43:49:e1:42:80:8d:47:6c:08:
                    25:17:3a:b4:58:e1:2b:e2:08:f1:29:c0:32:ba:8a:
                    40:f7:9b:39:1e:38:3b:e8:66:80:5f:65:ef:36:6b:
                    4b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:04:C9:27:CD:FA:F1:88:F0:BE:33:6A:24:48:A0:44:16:1D:B8:FA
            X509v3 Authority Key Identifier:
                keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:3b:d8:5b:13:c3:f3:49:a6:6d:66:e3:d2:c5:af:0b:e9:ed:
         21:f3:6c:2f:d3:0f:3a:33:4b:0e:57:59:74:15:a3:76:92:51:
         6f:67:04:f9:2a:d9:40:d4:ad:77:30:08:a1:e7:3e:9f:cd:16:
         50:50:c8:01:1b:45:92:f4:cc:0f:23:f3:29:d1:c7:06:79:b3:
         66:57:c5:0b:a6:21:a3:67:0c:2c:30:15:28:9e:3c:b5:d0:4e:
         04:6f:85:09:13:cd:bd:1e:ae:e6:8d:25:60:17:c1:98:ce:75:
         85:55:90:35:b2:52:40:c9:d9:79:c4:a8:77:9a:d6:dd:43:07:
         45:89:7e:0e:7e:47:f3:ae:da:6c:e6:d4:6e:d5:e4:c2:18:75:
         57:19:75:e6:9a:b4:19:8c:f5:27:19:40:3f:07:3b:99:c9:c6:
         c9:5c:06:c0:93:17:a5:46:d6:b3:92:53:0d:2b:a4:da:0c:d3:
         83:1c:04:bc:82:71:48:fd:8b:80:ca:c5:70:93:b6:e9:96:b1:
         f0:2e:54:95:b7:43:17:64:0d:26:f7:4f:4b:12:0f:58:5b:23:
         f8:61:a1:cf:9d:3b:e4:71:2b:f3:ab:8e:50:f2:cf:79:21:bc:
         75:fe:10:88:b5:46:d9:b7:21:d0:df:35:24:db:26:38:80:63:
         6e:ea:b9:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSiEfShOtto+cnxniLJbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3N2JmZDk5ZDM1MTE2ZjljNjQ0MTk0YzM2ZDliNjQ2Zjcz
MTI3YzYwHhcNMjQwNTE3MTYwMjEzWhcNMjQwNTE4MTYwMjEzWjAzMTEwLwYDVQQD
EyhmYjA0YzkyN2NkZmFmMTg4ZjBiZTMzNmEyNDQ4YTA0NDE2MWRiOGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WcSr11XgdiWUWgbu08av0TBHNWm
XLxdepS2FMH6H5K9mDob4jGP9qxRjF0t+yix17NtSetDoAJuw3oOG8muj+JclFfu
xkncAXDh4S03W4WMCyuW4QUPuqJR7bfvzu2fFWjTYdiT1h9UHE5nhB9AQ1NFPgAN
HOKZvHNJB75ZY2dx19Kf0PNjfWmd2xXs/+kXLR7PrHunpQknazvVMgk0QSTydsFI
pX6XN4l0QLqQyBGDZYK34U0TJANX5f8VVpkVc8qmAFHFCZfgW8DEu/Na7DaFh/+0
Hd5DSeFCgI1HbAglFzq0WOEr4gjxKcAyuopA95s5Hjg76GaAX2XvNmtLPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsEySfN+vGI8L4zaiRIoEQWHbj6MB8GA1UdIwQY
MBaAFJd7/ZnTURb5xkQZTDbZtkb3MSfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAt
OWE0ZmYwMTM3MDEyLzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9iNjc4ZjUtNTU3ZC00YjVkLWFhNTAtOWE0ZmYwMTM3MDEy
LzEvbDN2OW1kTlJGdm5HUkJsTU50bTJSdmN4SjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1zvYWxPD
80mmbWbj0sWvC+ntIfNsL9MPOjNLDldZdBWjdpJRb2cE+SrZQNStdzAIoec+n80W
UFDIARtFkvTMDyPzKdHHBnmzZlfFC6Yho2cMLDAVKJ48tdBOBG+FCRPNvR6u5o0l
YBfBmM51hVWQNbJSQMnZecSod5rW3UMHRYl+Dn5H867abObUbtXkwhh1Vxl15pq0
GYz1JxlAPwc7mcnGyVwGwJMXpUbWs5JTDSuk2gzTgxwEvIJxSP2LgMrFcJO26Zax
8C5UlbdDF2QNJvdPSxIPWFsj+GGhz5075HEr86uOUPLPeSG8df4QiLVG2bch0N81
JNsmOIBjbuq5pA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:36:03 2024 by rpki-client on console-fra.rpki-client.org