Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File:                     7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier:          Sa+uPo97a5nbJLljHtAB0nUjUpT5l5bP42ldQ8TIJh8=
Subject key identifier:   D1:F6:4B:4D:72:56:96:7F:D1:83:E8:23:03:FA:55:B7:71:DD:FC:4A
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer:       /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial:       018F497D20491F684A04F529756A0F868277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number:          0BE3
Signing time:             Sun 05 May 2024 16:01:27 +0000
Manifest this update:     Sun 05 May 2024 16:01:27 +0000
Manifest next update:     Mon 06 May 2024 16:01:27 +0000
Files and hashes:         1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: q6kutu/CvfH2lBmQhL2eS/xlZT8tFLYUtv+EZCOyZ94=)
                          2: ofmaTH4r3L7qKPphsJdEPKHa7OE.roa (hash: LunBomFxZOyPt31dameUgLcpB2drXP1Kch26qQfd8WM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7d:20:49:1f:68:4a:04:f5:29:75:6a:0f:86:82:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
        Validity
            Not Before: May  5 16:01:27 2024 GMT
            Not After : May  6 16:01:27 2024 GMT
        Subject: CN=d1f64b4d7256967fd183e82303fa55b771ddfc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ca:97:6a:10:42:b4:ce:6e:f3:84:f3:45:9a:
                    51:60:da:36:e7:45:1d:1d:c0:8f:aa:86:69:8a:2f:
                    a0:ce:93:5d:5b:01:a2:72:54:a1:76:0c:8c:7d:8e:
                    17:04:ad:ed:a3:5a:64:b2:d5:7b:3e:9b:37:b4:83:
                    4a:ad:be:05:2a:bc:0d:3a:37:bb:a4:9e:db:4f:4d:
                    3d:45:a8:29:e5:da:a1:0d:20:fe:52:6f:29:3f:db:
                    a7:e9:e9:34:08:52:74:20:8e:36:f4:27:79:bc:30:
                    f1:c1:4f:dc:cf:22:b0:0f:a1:bb:72:ae:dd:6a:86:
                    12:e7:04:dc:ef:b1:fa:b7:26:71:02:06:4e:2b:9e:
                    04:62:30:a4:f0:5c:60:80:e4:a9:38:61:31:99:f1:
                    33:f7:4e:45:12:41:fd:1a:f4:a6:12:04:6b:50:28:
                    8b:18:c2:44:3d:2e:7d:d4:eb:e5:a6:a8:9f:fb:7e:
                    f6:db:6c:55:f4:bb:a1:3f:d5:8d:db:82:36:9f:1b:
                    ea:f9:ba:dd:7f:75:6e:a0:6e:6a:2c:cf:38:a5:b4:
                    8e:b1:77:fb:63:dd:0c:8f:e5:82:de:20:f3:20:44:
                    44:d6:15:6a:9e:66:ff:6c:48:e8:5a:d3:f5:f8:60:
                    63:d7:26:05:0d:b7:92:33:1d:38:14:5f:4a:16:1f:
                    1b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F6:4B:4D:72:56:96:7F:D1:83:E8:23:03:FA:55:B7:71:DD:FC:4A
            X509v3 Authority Key Identifier:
                keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:99:e5:f4:87:79:6b:b4:cd:82:9c:a5:37:43:ea:58:14:df:
         39:1f:81:d9:cc:c2:05:41:54:ec:d5:e0:b6:10:35:6a:e3:e1:
         5e:71:35:21:0a:f5:c7:9d:1e:ae:60:bd:58:71:ef:0f:0b:e1:
         3c:bf:8f:50:d3:e6:1c:8e:02:9f:7b:70:8e:0d:87:b9:74:95:
         fc:07:0f:1c:4a:67:85:1c:08:63:d6:d5:00:5a:48:67:12:75:
         1a:3c:65:e6:85:08:ea:52:23:9e:bc:83:92:5a:c2:28:1b:dd:
         51:99:e6:3a:cb:f8:cf:c5:7a:9c:d9:ba:47:1b:1e:c7:3e:92:
         43:04:5d:f3:59:a8:b9:31:15:f7:38:14:3f:fd:c0:fc:37:1b:
         26:c3:0a:d1:b4:88:5a:1c:84:44:f6:54:d0:3f:e0:60:75:26:
         d7:29:bc:e0:bf:12:e3:8d:c7:74:44:d4:12:6a:a0:05:2e:74:
         63:bc:70:62:8e:1b:16:68:a3:dd:10:8d:e4:b9:32:ac:78:da:
         79:55:88:5c:4a:59:b0:11:c7:8f:60:fa:64:55:ae:e9:32:8a:
         71:5d:e2:7d:bc:51:47:69:b5:15:9e:95:5b:3d:ad:b8:1e:02:
         c0:e3:4f:83:91:72:77:fc:9e:03:a2:47:83:99:7c:16:40:cb:
         58:08:15:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9JfSBJH2hKBPUpdWoPhoJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmQwZjI5MDVlMGFiYzA2NDIwMzE2NTZhM2E1NjllZjcz
N2I0ZDAwHhcNMjQwNTA1MTYwMTI3WhcNMjQwNTA2MTYwMTI3WjAzMTEwLwYDVQQD
EyhkMWY2NGI0ZDcyNTY5NjdmZDE4M2U4MjMwM2ZhNTViNzcxZGRmYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcqXahBCtM5u84TzRZpRYNo250Ud
HcCPqoZpii+gzpNdWwGiclShdgyMfY4XBK3to1pkstV7Pps3tINKrb4FKrwNOje7
pJ7bT009Ragp5dqhDSD+Um8pP9un6ek0CFJ0II429Cd5vDDxwU/czyKwD6G7cq7d
aoYS5wTc77H6tyZxAgZOK54EYjCk8FxggOSpOGExmfEz905FEkH9GvSmEgRrUCiL
GMJEPS591Ovlpqif+37222xV9LuhP9WN24I2nxvq+brdf3VuoG5qLM84pbSOsXf7
Y90Mj+WC3iDzIERE1hVqnmb/bEjoWtP1+GBj1yYFDbeSMx04FF9KFh8bawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNH2S01yVpZ/0YPoIwP6Vbdx3fxKMB8GA1UdIwQY
MBaAFO29DykF4KvAZCAxZWo6Vp73N7TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQt
MDI4ZmU1MjU1YmJlLzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQtMDI4ZmU1MjU1YmJl
LzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5nl9Id5
a7TNgpylN0PqWBTfOR+B2czCBUFU7NXgthA1auPhXnE1IQr1x50ermC9WHHvDwvh
PL+PUNPmHI4Cn3twjg2HuXSV/AcPHEpnhRwIY9bVAFpIZxJ1Gjxl5oUI6lIjnryD
klrCKBvdUZnmOsv4z8V6nNm6Rxsexz6SQwRd81mouTEV9zgUP/3A/DcbJsMK0bSI
WhyERPZU0D/gYHUm1ym84L8S443HdETUEmqgBS50Y7xwYo4bFmij3RCN5LkyrHja
eVWIXEpZsBHHj2D6ZFWu6TKKcV3ifbxRR2m1FZ6VWz2tuB4CwONPg5Fyd/yeA6JH
g5l8FkDLWAgVvA==
-----END CERTIFICATE-----
Generated at Sun May 5 19:31:02 2024 by rpki-client on console-ams.rpki-client.org