Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft
File:                     eNMexT3EQF1pFeGCWWS5fXoRb4E.mft (raw, json)
Hash identifier:          7XIMjdIIcD5LPxJ+BoWr8xHyWFxNJEBhedKxFKx/1Kk=
Subject key identifier:   22:D2:A5:57:CA:DE:3A:BB:1D:53:D4:D4:DF:25:64:3A:D1:FE:84:A0
Authority key identifier: 78:D3:1E:C5:3D:C4:40:5D:69:15:E1:82:59:64:B9:7D:7A:11:6F:81
Certificate issuer:       /CN=78d31ec53dc4405d6915e1825964b97d7a116f81
Certificate serial:       018F86A3CBFDFD680A1D2F9B772A4B8ACB58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft
Manifest number:          0CE5
Signing time:             Fri 17 May 2024 13:00:32 +0000
Manifest this update:     Fri 17 May 2024 13:00:32 +0000
Manifest next update:     Sat 18 May 2024 13:00:32 +0000
Files and hashes:         1: U_PzZEpzDnu1gf9veJCDwPDD6WY.roa (hash: 84NF6HDmyUvHXTw7bAcPwD/siKeB3azEK9U2JHaZAw4=)
                          2: eNMexT3EQF1pFeGCWWS5fXoRb4E.crl (hash: xLY/TUGcLl5mN3TL41gDSt56QYXQt4kiNao2I82BDcw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:cb:fd:fd:68:0a:1d:2f:9b:77:2a:4b:8a:cb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d31ec53dc4405d6915e1825964b97d7a116f81
        Validity
            Not Before: May 17 13:00:32 2024 GMT
            Not After : May 18 13:00:32 2024 GMT
        Subject: CN=22d2a557cade3abb1d53d4d4df25643ad1fe84a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:bb:5f:e7:0f:7f:79:3e:ee:9b:94:1b:3d:
                    b1:b8:17:92:95:cb:37:dc:30:2a:d5:97:0a:32:73:
                    d2:c3:64:22:e3:a3:9f:af:62:34:b7:21:9f:5c:f8:
                    46:58:70:9b:9c:85:96:a6:b4:8d:6b:c6:dc:9f:7f:
                    aa:b6:58:86:d6:e7:04:1a:c4:db:1d:2a:95:78:2c:
                    b5:aa:d3:d6:b3:e6:09:48:ef:26:ac:1e:87:84:ef:
                    0d:c2:f4:0d:4b:92:7f:be:0f:04:90:83:89:af:5a:
                    33:53:f1:f3:b0:87:d9:be:ff:33:7b:fd:9b:d0:53:
                    61:f6:19:ad:98:f6:c9:88:07:45:d1:0a:c7:47:e4:
                    fc:98:90:2a:24:3a:5a:25:08:7c:e9:c3:09:43:37:
                    dd:42:0c:ef:4f:d1:3e:bb:55:ad:7f:1a:d2:42:3a:
                    58:62:5c:ba:10:2b:d6:da:a7:4f:2b:af:0e:f5:f5:
                    d9:c0:e3:85:2e:b6:0d:43:97:be:15:6b:d8:f6:6f:
                    54:4a:4d:64:12:b6:e2:88:d8:c1:6e:10:fc:39:67:
                    c5:e5:6c:e6:30:b0:08:01:7e:40:12:97:92:b4:82:
                    cf:13:e4:3d:97:13:0f:bf:bb:61:d8:c9:0d:3e:3e:
                    85:62:d4:b5:f6:bb:db:4f:d1:92:e7:13:ef:03:b2:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D2:A5:57:CA:DE:3A:BB:1D:53:D4:D4:DF:25:64:3A:D1:FE:84:A0
            X509v3 Authority Key Identifier:
                keyid:78:D3:1E:C5:3D:C4:40:5D:69:15:E1:82:59:64:B9:7D:7A:11:6F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:bb:3f:e4:c2:5c:9d:56:03:64:ef:91:73:0a:82:66:98:9a:
         1c:59:c1:88:c2:29:0a:a0:76:d6:69:49:06:0a:32:c4:9a:67:
         da:0d:4d:44:6f:c5:89:47:d3:d3:4b:83:bc:63:3d:75:52:e9:
         f2:e8:e6:e2:c4:e7:62:a4:be:e5:bf:58:9e:3d:a6:03:24:5f:
         79:fb:3c:3b:e3:e4:89:66:0d:30:52:5d:18:d7:73:04:71:4e:
         ab:59:a1:78:53:70:32:67:5f:c8:4f:69:03:2a:7f:0e:18:9a:
         78:e4:a4:82:a4:41:99:4f:01:70:42:2e:05:6b:75:16:5b:98:
         6d:1b:55:b8:d0:26:fe:91:fd:09:d3:ed:56:b7:0e:60:d3:b9:
         49:61:e2:a3:a9:af:ad:87:41:9a:4a:fb:cc:97:8b:2d:fe:75:
         43:e3:90:1c:da:40:ea:53:a5:b0:e8:60:78:70:70:cf:f5:88:
         18:76:cb:0e:1a:a3:a2:ea:f8:94:43:1b:70:93:90:11:b3:26:
         52:55:5d:90:b9:f5:7c:76:87:d0:35:92:81:98:0b:1e:5e:a0:
         ef:b9:93:ca:1e:34:2f:60:7d:19:a0:06:70:b9:43:00:7c:21:
         56:d5:ef:ea:22:ac:61:22:1d:ab:d4:ec:0e:92:0a:cc:09:75:
         cf:bb:e1:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Go8v9/WgKHS+bdypListYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZDMxZWM1M2RjNDQwNWQ2OTE1ZTE4MjU5NjRiOTdkN2Ex
MTZmODEwHhcNMjQwNTE3MTMwMDMyWhcNMjQwNTE4MTMwMDMyWjAzMTEwLwYDVQQD
EygyMmQyYTU1N2NhZGUzYWJiMWQ1M2Q0ZDRkZjI1NjQzYWQxZmU4NGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZW7X+cPf3k+7puUGz2xuBeSlcs3
3DAq1ZcKMnPSw2Qi46Ofr2I0tyGfXPhGWHCbnIWWprSNa8bcn3+qtliG1ucEGsTb
HSqVeCy1qtPWs+YJSO8mrB6HhO8NwvQNS5J/vg8EkIOJr1ozU/HzsIfZvv8ze/2b
0FNh9hmtmPbJiAdF0QrHR+T8mJAqJDpaJQh86cMJQzfdQgzvT9E+u1WtfxrSQjpY
Yly6ECvW2qdPK68O9fXZwOOFLrYNQ5e+FWvY9m9USk1kErbiiNjBbhD8OWfF5Wzm
MLAIAX5AEpeStILPE+Q9lxMPv7th2MkNPj6FYtS19rvbT9GS5xPvA7JdvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLSpVfK3jq7HVPU1N8lZDrR/oSgMB8GA1UdIwQY
MBaAFHjTHsU9xEBdaRXhgllkuX16EW+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU5NZXhUM0VRRjFwRmVHQ1dXUzVmWG9SYjRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iZjg3OGQtMGU0ZS00ODIyLTg4MWUt
MTI5YmNlODY0YzIyLzEvZU5NZXhUM0VRRjFwRmVHQ1dXUzVmWG9SYjRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iZjg3OGQtMGU0ZS00ODIyLTg4MWUtMTI5YmNlODY0YzIy
LzEvZU5NZXhUM0VRRjFwRmVHQ1dXUzVmWG9SYjRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLs/5MJc
nVYDZO+RcwqCZpiaHFnBiMIpCqB21mlJBgoyxJpn2g1NRG/FiUfT00uDvGM9dVLp
8ujm4sTnYqS+5b9Ynj2mAyRfefs8O+PkiWYNMFJdGNdzBHFOq1mheFNwMmdfyE9p
Ayp/DhiaeOSkgqRBmU8BcEIuBWt1FluYbRtVuNAm/pH9CdPtVrcOYNO5SWHio6mv
rYdBmkr7zJeLLf51Q+OQHNpA6lOlsOhgeHBwz/WIGHbLDhqjour4lEMbcJOQEbMm
UlVdkLn1fHaH0DWSgZgLHl6g77mTyh40L2B9GaAGcLlDAHwhVtXv6iKsYSIdq9Ts
DpIKzAl1z7vhxQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:15:49 2024 by rpki-client on console-ams.rpki-client.org