Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
File:                     8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json)
Hash identifier:          mE/cBRj5gzb9Bu/fU+xmvkTO1TDpJ0704Gr0bqspn88=
Subject key identifier:   A1:14:1A:A8:C9:10:55:22:AB:AF:9F:5C:F2:E5:F4:47:4C:FA:53:1D
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Certificate issuer:       /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial:       018F448DC70922F4893253F5567018D8EFEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
Manifest number:          10E7
Signing time:             Sat 04 May 2024 17:01:33 +0000
Manifest this update:     Sat 04 May 2024 17:01:33 +0000
Manifest next update:     Sun 05 May 2024 17:01:33 +0000
Files and hashes:         1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: X5+KYpuEthCzaILovOH2GHv+FTKqg42d714E+zQ0NZg=)
                          2: gYfw8cPNvVEI6cHSjyv7msUjoV4.roa (hash: Z9itgkrO9rXKnkHsCvHMSS+TOiImOZOqdl5Zl0N9pKM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:8d:c7:09:22:f4:89:32:53:f5:56:70:18:d8:ef:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
        Validity
            Not Before: May  4 17:01:33 2024 GMT
            Not After : May  5 17:01:33 2024 GMT
        Subject: CN=a1141aa8c9105522abaf9f5cf2e5f4474cfa531d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:8b:38:2f:2d:b2:1f:72:89:8d:f8:8a:57:
                    9a:39:b9:e7:f3:d4:8a:c3:bd:6c:6a:68:9c:6b:56:
                    10:7c:6a:1d:7f:e2:24:09:93:38:6f:c0:22:29:16:
                    53:c5:bb:47:6b:17:b5:3c:e6:3a:ef:53:1c:c1:7f:
                    64:73:ac:5c:2b:a4:58:aa:55:78:a3:12:c5:c5:fb:
                    17:36:5c:9c:19:96:48:d9:12:42:57:34:33:7b:a7:
                    17:37:21:7b:07:56:a4:27:9c:10:98:4a:40:ce:2d:
                    44:ec:51:58:f7:8e:31:01:fa:43:ae:62:11:59:60:
                    0a:3e:bf:22:0a:30:dd:08:1b:73:5b:a1:d2:b6:1e:
                    52:26:49:2d:65:f8:21:f4:e9:06:06:c3:73:0f:b0:
                    5f:86:bb:3f:78:7d:55:26:4b:24:38:9f:84:25:89:
                    ec:52:6a:e4:4f:b5:99:87:ab:d5:59:33:bb:84:db:
                    55:e2:ce:d7:be:71:b2:a0:86:d5:28:ae:3a:02:54:
                    83:d3:56:d1:29:73:e7:a2:2f:ef:24:14:58:1b:b1:
                    aa:8c:49:8a:71:be:c1:49:4a:b8:2e:d0:90:c5:5d:
                    ff:35:b6:09:e6:3e:3f:8c:f3:af:86:6e:b5:a1:11:
                    77:03:bf:7f:36:25:8e:91:c8:5d:63:2e:fa:3b:27:
                    d5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:14:1A:A8:C9:10:55:22:AB:AF:9F:5C:F2:E5:F4:47:4C:FA:53:1D
            X509v3 Authority Key Identifier:
                keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:80:b2:b7:c4:37:de:d0:72:f9:f1:c4:a2:b4:e3:02:0a:21:
         9f:3f:fc:19:1c:9c:b1:3e:70:10:56:f5:b2:47:cc:51:7f:c7:
         c9:14:ac:27:ab:55:61:8d:6c:5a:e9:6e:53:2e:2c:2d:95:78:
         49:a4:ca:d8:c9:5e:4c:d3:e0:cc:c5:6b:91:30:02:20:db:c7:
         c8:57:05:2f:f7:45:b6:9e:82:a8:d2:db:d1:10:7b:5a:f8:73:
         b9:d6:fd:4c:8b:81:92:db:c8:cc:75:12:73:3d:12:0e:0b:cc:
         e9:b1:e2:e3:98:be:45:9c:97:83:39:4a:56:5a:94:73:af:fa:
         31:5a:92:de:83:2f:2b:c4:c6:31:dc:53:51:33:07:7f:3e:40:
         bf:88:8b:68:36:d9:1e:fe:43:9a:09:f8:d1:04:4e:f4:92:83:
         da:8f:e2:60:c9:c0:bd:26:be:e7:1e:ed:6d:25:50:d6:e2:f7:
         19:bf:f7:4e:01:09:1f:e4:2e:8c:f2:22:70:21:fc:c0:df:af:
         20:fc:e6:05:15:e7:4e:cb:94:66:f2:c6:b7:43:93:1e:df:93:
         89:6d:a7:8c:3f:85:81:ee:c7:c1:72:b9:b3:3c:c8:26:23:08:
         6e:54:22:dd:02:ff:89:cf:10:b5:57:50:45:44:40:44:55:8c:
         e5:77:0d:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9EjccJIvSJMlP1VnAY2O/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZjY3MmJkYjdiMDc2NTkxNDdlNTg3ZDQ0MzFhYTYwNGY3
NmEzODQwHhcNMjQwNTA0MTcwMTMzWhcNMjQwNTA1MTcwMTMzWjAzMTEwLwYDVQQD
EyhhMTE0MWFhOGM5MTA1NTIyYWJhZjlmNWNmMmU1ZjQ0NzRjZmE1MzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqOLOC8tsh9yiY34ileaObnn89SK
w71samica1YQfGodf+IkCZM4b8AiKRZTxbtHaxe1POY671McwX9kc6xcK6RYqlV4
oxLFxfsXNlycGZZI2RJCVzQze6cXNyF7B1akJ5wQmEpAzi1E7FFY944xAfpDrmIR
WWAKPr8iCjDdCBtzW6HSth5SJkktZfgh9OkGBsNzD7Bfhrs/eH1VJkskOJ+EJYns
UmrkT7WZh6vVWTO7hNtV4s7XvnGyoIbVKK46AlSD01bRKXPnoi/vJBRYG7GqjEmK
cb7BSUq4LtCQxV3/NbYJ5j4/jPOvhm61oRF3A79/NiWOkchdYy76OyfVHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEUGqjJEFUiq6+fXPLl9EdM+lMdMB8GA1UdIwQY
MBaAFPL2cr23sHZZFH5YfUQxqmBPdqOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYjFmNTYtODcwNy00NzJjLTg5NzEt
NjI2ZWY4OGYyMWE5LzEvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8zYjFmNTYtODcwNy00NzJjLTg5NzEtNjI2ZWY4OGYyMWE5
LzEvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXICyt8Q3
3tBy+fHEorTjAgohnz/8GRycsT5wEFb1skfMUX/HyRSsJ6tVYY1sWuluUy4sLZV4
SaTK2MleTNPgzMVrkTACINvHyFcFL/dFtp6CqNLb0RB7Wvhzudb9TIuBktvIzHUS
cz0SDgvM6bHi45i+RZyXgzlKVlqUc6/6MVqS3oMvK8TGMdxTUTMHfz5Av4iLaDbZ
Hv5Dmgn40QRO9JKD2o/iYMnAvSa+5x7tbSVQ1uL3Gb/3TgEJH+QujPIicCH8wN+v
IPzmBRXnTsuUZvLGt0OTHt+TiW2njD+Fge7HwXK5szzIJiMIblQi3QL/ic8QtVdQ
RURARFWM5XcNwQ==
-----END CERTIFICATE-----
Generated at Sat May 4 18:36:45 2024 by rpki-client on console-fra.rpki-client.org