Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
File:                     8_74sMHKR-cW2iGdMQKAKH026-M.mft (raw, json)
Hash identifier:          uf4WDbiXiwHXbUGKiiagVrNmoZIJOLIJY8LJlv6KOQo=
Subject key identifier:   C6:18:23:6D:C2:F9:8D:3A:0A:1B:8B:34:C1:4F:24:9F:48:51:9B:A7
Authority key identifier: F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
Certificate issuer:       /CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Certificate serial:       018F4833D8841D91EF5D9DC20E240A649AF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
Manifest number:          07E3
Signing time:             Sun 05 May 2024 10:01:48 +0000
Manifest this update:     Sun 05 May 2024 10:01:48 +0000
Manifest next update:     Mon 06 May 2024 10:01:48 +0000
Files and hashes:         1: 8_74sMHKR-cW2iGdMQKAKH026-M.crl (hash: MwiHlDn+UzjpW63PLcXJYy632/64h4AwFmla6DkijQU=)
                          2: enpxcPC3IYnNAb1zzm4U1UIzJHs.roa (hash: qePpejPHCpvI1jP3Z0ESTFdo0aLKye7wFctypqQNHww=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:33:d8:84:1d:91:ef:5d:9d:c2:0e:24:0a:64:9a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
        Validity
            Not Before: May  5 10:01:48 2024 GMT
            Not After : May  6 10:01:48 2024 GMT
        Subject: CN=c618236dc2f98d3a0a1b8b34c14f249f48519ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:5c:e3:c0:ae:91:da:86:c7:2e:ff:ed:cc:
                    91:fb:fb:e6:e1:00:28:f5:a5:72:51:24:05:83:08:
                    cf:cf:79:fc:7d:86:82:42:78:15:96:51:b1:f7:a3:
                    43:55:d0:c1:00:af:84:b1:db:07:b3:a0:22:9b:95:
                    26:8d:d2:65:1f:55:b9:cd:e4:76:a4:8e:28:fb:4d:
                    e5:5d:b5:e7:32:75:80:78:be:1e:c3:56:e8:e8:78:
                    92:23:97:7b:4a:27:7a:a4:6e:70:9c:4c:ea:c8:67:
                    44:a5:15:ea:95:dd:47:85:58:59:41:d8:3d:c9:8e:
                    2c:10:d9:ec:9e:28:ce:ef:cc:98:8c:bd:c7:e6:c6:
                    ba:c7:37:4d:67:fa:f7:f0:0c:0a:f7:d8:f0:b6:27:
                    96:03:13:1d:ee:63:71:4c:de:82:b6:8d:fc:bf:a4:
                    ea:20:48:24:aa:29:e5:f4:18:fd:20:d3:03:be:d4:
                    41:f2:c9:c8:9d:95:17:95:e9:44:76:fd:64:4f:9f:
                    40:a2:ad:c9:fb:84:b6:8d:f6:a7:29:9a:19:67:68:
                    36:44:72:55:35:2b:87:6b:17:2b:86:96:c0:eb:15:
                    50:94:29:03:db:ce:48:6c:16:4b:e5:ec:76:53:7c:
                    cb:f1:78:a4:fe:95:a7:b4:35:88:08:0a:e3:a6:8a:
                    f5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:18:23:6D:C2:F9:8D:3A:0A:1B:8B:34:C1:4F:24:9F:48:51:9B:A7
            X509v3 Authority Key Identifier:
                keyid:F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ba:34:10:b1:c0:2d:bc:08:08:be:65:04:e1:9f:ef:66:a1:
         bb:9b:80:91:6f:b1:0a:53:d0:d2:6d:7c:31:df:8f:ff:59:bf:
         ea:f1:a7:63:0b:33:b3:af:66:a5:3e:0e:b2:a2:a3:c3:76:ef:
         73:40:4d:23:bf:fc:00:07:07:52:b2:c6:be:1b:64:ec:6d:f6:
         a3:1c:ec:3d:69:66:d7:1d:5c:f1:52:5d:a8:a6:2a:e9:05:d6:
         e2:0e:5e:05:99:8a:e8:7e:f5:38:4b:dc:71:84:bc:0c:ca:d9:
         c8:71:c1:cb:e1:d2:58:eb:c4:c8:e8:08:e8:91:d9:6a:14:3d:
         41:90:94:ee:86:2f:bd:f9:ec:ce:62:75:f9:62:44:c8:77:27:
         6c:79:4c:9c:16:eb:05:ea:e4:4e:c8:a1:42:60:2b:a7:9e:97:
         69:5c:e8:f6:86:9e:73:22:0c:20:e3:13:8a:be:66:51:69:c2:
         16:56:f9:0e:c1:7d:72:f8:97:76:e9:fe:51:1d:5c:fa:67:c5:
         23:a0:af:9b:c5:a9:d7:d2:b1:08:d0:d6:b0:84:d7:ea:c6:03:
         1a:b3:37:ed:5e:9a:6e:64:8d:b8:53:85:c5:1c:0e:4e:42:54:
         ff:31:44:46:bd:17:38:5c:26:0c:1d:a1:d7:22:b2:df:b5:88:
         ed:0e:48:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9IM9iEHZHvXZ3CDiQKZJrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZmVmOGIwYzFjYTQ3ZTcxNmRhMjE5ZDMxMDI4MDI4N2Qz
NmViZTMwHhcNMjQwNTA1MTAwMTQ4WhcNMjQwNTA2MTAwMTQ4WjAzMTEwLwYDVQQD
EyhjNjE4MjM2ZGMyZjk4ZDNhMGExYjhiMzRjMTRmMjQ5ZjQ4NTE5YmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AJc48CukdqGxy7/7cyR+/vm4QAo
9aVyUSQFgwjPz3n8fYaCQngVllGx96NDVdDBAK+EsdsHs6Aim5UmjdJlH1W5zeR2
pI4o+03lXbXnMnWAeL4ew1bo6HiSI5d7Sid6pG5wnEzqyGdEpRXqld1HhVhZQdg9
yY4sENnsnijO78yYjL3H5sa6xzdNZ/r38AwK99jwtieWAxMd7mNxTN6Cto38v6Tq
IEgkqinl9Bj9INMDvtRB8snInZUXlelEdv1kT59Aoq3J+4S2jfanKZoZZ2g2RHJV
NSuHaxcrhpbA6xVQlCkD285IbBZL5ex2U3zL8Xik/pWntDWICArjpor13wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYYI23C+Y06ChuLNMFPJJ9IUZunMB8GA1UdIwQY
MBaAFPP++LDBykfnFtohnTECgCh9NuvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOF83NHNNSEtSLWNXMmlHZE1RS0FLSDAyNi1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kNWJkOTgtZmYzNC00MjYzLThkMGYt
Zjg3YzUwZGY2ZmI3LzEvOF83NHNNSEtSLWNXMmlHZE1RS0FLSDAyNi1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9kNWJkOTgtZmYzNC00MjYzLThkMGYtZjg3YzUwZGY2ZmI3
LzEvOF83NHNNSEtSLWNXMmlHZE1RS0FLSDAyNi1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEro0ELHA
LbwICL5lBOGf72ahu5uAkW+xClPQ0m18Md+P/1m/6vGnYwszs69mpT4OsqKjw3bv
c0BNI7/8AAcHUrLGvhtk7G32oxzsPWlm1x1c8VJdqKYq6QXW4g5eBZmK6H71OEvc
cYS8DMrZyHHBy+HSWOvEyOgI6JHZahQ9QZCU7oYvvfnszmJ1+WJEyHcnbHlMnBbr
BerkTsihQmArp56XaVzo9oaecyIMIOMTir5mUWnCFlb5DsF9cviXdun+UR1c+mfF
I6Cvm8Wp19KxCNDWsITX6sYDGrM37V6abmSNuFOFxRwOTkJU/zFERr0XOFwmDB2h
1yKy37WI7Q5I4Q==
-----END CERTIFICATE-----
Generated at Sun May 5 13:12:36 2024 by rpki-client on console-fra.rpki-client.org