Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
File:                     5XXe8Yp160XEQHcaziRsUOip0xY.mft (raw, json)
Hash identifier:          +1zO70m7auWAGCPi8BWMQg4+JxVdOjPVIwmOwhKvQ5c=
Subject key identifier:   33:36:AC:24:CD:54:0E:EF:B9:C1:AB:F7:A6:14:76:CC:20:BD:9D:B1
Authority key identifier: E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
Certificate issuer:       /CN=e575def18a75eb45c440771ace246c50e8a9d316
Certificate serial:       018F392E125EA26DBBC956FE628AC2520A67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
Manifest number:          0458
Signing time:             Thu 02 May 2024 12:01:11 +0000
Manifest this update:     Thu 02 May 2024 12:01:11 +0000
Manifest next update:     Fri 03 May 2024 12:01:11 +0000
Files and hashes:         1: 5XXe8Yp160XEQHcaziRsUOip0xY.crl (hash: hpTsMkrkQ45Z3T3RtEpTrA5HGGuk5+pv1EcyuTKn9SA=)
                          2: 7em0t6sNnXkE15I9LtW5nfZVxvg.roa (hash: evKJ4zJYuPRPrpsJFXiiLqZgtQcJQ5aAfqovr54sIng=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:2e:12:5e:a2:6d:bb:c9:56:fe:62:8a:c2:52:0a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e575def18a75eb45c440771ace246c50e8a9d316
        Validity
            Not Before: May  2 12:01:11 2024 GMT
            Not After : May  3 12:01:11 2024 GMT
        Subject: CN=3336ac24cd540eefb9c1abf7a61476cc20bd9db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ae:5c:8f:04:b4:42:fa:e8:67:d3:b9:37:7f:
                    44:22:0b:b3:2c:01:57:a1:9d:ba:ee:76:98:9d:09:
                    c9:cb:9d:3a:e6:f3:43:4d:bc:63:eb:64:7b:b2:cb:
                    7e:da:c0:85:7b:6a:6f:6a:76:72:72:9c:0e:2f:5d:
                    93:53:05:bd:d0:ba:c4:b6:02:b7:e3:ea:3a:77:e8:
                    5b:0c:87:d2:84:1d:96:e5:d5:fb:14:ab:96:8c:aa:
                    07:00:31:c7:04:ef:d2:93:89:dc:ba:8d:58:79:da:
                    35:74:88:5a:cc:ad:7b:56:84:31:20:64:92:81:51:
                    b4:9c:53:de:3a:38:b0:47:84:6a:6d:3b:f6:91:d7:
                    4c:e6:ba:32:d5:a1:5e:82:4e:71:eb:e4:21:0d:76:
                    34:96:ba:c1:f1:eb:11:01:86:b1:d9:60:5b:c5:d9:
                    47:48:be:64:6b:fa:79:b5:77:d1:a8:d3:f6:f0:8f:
                    59:65:ac:f9:ac:4c:bc:5d:13:63:27:e0:af:4c:70:
                    d7:3b:d9:47:e8:59:a2:7f:b9:e7:5d:76:aa:82:e1:
                    a1:20:73:21:35:c4:7d:a2:16:5f:bf:73:db:39:19:
                    7e:a2:e2:44:b4:ef:49:39:e8:4b:3e:ae:81:83:a3:
                    80:0c:ba:eb:08:b0:96:e1:b8:2e:09:36:96:7b:38:
                    b5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:36:AC:24:CD:54:0E:EF:B9:C1:AB:F7:A6:14:76:CC:20:BD:9D:B1
            X509v3 Authority Key Identifier:
                keyid:E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:7f:31:c4:b2:12:9f:3c:9e:3f:fb:97:f0:ec:13:37:cd:85:
         c0:df:3b:b4:5f:34:6b:01:cb:54:ae:a8:34:b6:f9:af:ce:0a:
         44:cf:8c:1b:ff:4f:57:78:90:e2:1a:26:95:e3:20:82:26:32:
         d2:e2:bc:32:41:fa:9e:80:d6:b7:52:df:a7:c0:54:e8:47:8d:
         31:ff:4c:1a:34:86:ca:9a:44:61:6e:e8:c2:ff:25:91:6b:b2:
         14:6e:27:74:cd:f1:e4:ce:cd:3c:d9:85:91:ef:f7:b7:5a:02:
         ed:36:e1:19:6d:e8:2d:c5:da:40:5b:8f:a8:01:fc:de:e3:89:
         f2:49:31:28:d7:71:01:ba:fa:57:e7:85:dc:99:1f:96:5c:d3:
         e8:ec:f1:8a:55:c3:a4:99:38:e0:65:24:6b:a7:db:2f:2c:99:
         a8:a6:39:17:c3:30:4d:20:fe:44:3a:13:82:36:35:f8:c4:be:
         d6:e7:70:36:5e:b5:c2:5d:18:f6:44:07:3c:05:11:b7:93:58:
         6e:ab:b1:21:3b:84:d3:fa:da:5c:f3:14:b6:6d:87:5d:3b:46:
         73:de:af:5a:86:38:1e:c6:75:d8:12:48:b8:c6:5c:a3:a1:4f:
         41:12:d2:b6:cd:4e:9f:98:6d:03:ef:44:6d:9a:91:07:fb:ef:
         49:15:d3:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY85LhJeom27yVb+YorCUgpnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzVkZWYxOGE3NWViNDVjNDQwNzcxYWNlMjQ2YzUwZThh
OWQzMTYwHhcNMjQwNTAyMTIwMTExWhcNMjQwNTAzMTIwMTExWjAzMTEwLwYDVQQD
EygzMzM2YWMyNGNkNTQwZWVmYjljMWFiZjdhNjE0NzZjYzIwYmQ5ZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza5cjwS0QvroZ9O5N39EIguzLAFX
oZ267naYnQnJy5065vNDTbxj62R7sst+2sCFe2pvanZycpwOL12TUwW90LrEtgK3
4+o6d+hbDIfShB2W5dX7FKuWjKoHADHHBO/Sk4ncuo1Yedo1dIhazK17VoQxIGSS
gVG0nFPeOjiwR4RqbTv2kddM5roy1aFegk5x6+QhDXY0lrrB8esRAYax2WBbxdlH
SL5ka/p5tXfRqNP28I9ZZaz5rEy8XRNjJ+CvTHDXO9lH6Fmif7nnXXaqguGhIHMh
NcR9ohZfv3PbORl+ouJEtO9JOehLPq6Bg6OADLrrCLCW4bguCTaWezi1vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDM2rCTNVA7vucGr96YUdswgvZ2xMB8GA1UdIwQY
MBaAFOV13vGKdetFxEB3Gs4kbFDoqdMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jYTA4OTgtMjk3OS00M2FlLThiODkt
ZmI5NzQxMzU5NzI3LzEvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jYTA4OTgtMjk3OS00M2FlLThiODktZmI5NzQxMzU5NzI3
LzEvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP38xxLIS
nzyeP/uX8OwTN82FwN87tF80awHLVK6oNLb5r84KRM+MG/9PV3iQ4homleMggiYy
0uK8MkH6noDWt1Lfp8BU6EeNMf9MGjSGyppEYW7owv8lkWuyFG4ndM3x5M7NPNmF
ke/3t1oC7TbhGW3oLcXaQFuPqAH83uOJ8kkxKNdxAbr6V+eF3JkfllzT6OzxilXD
pJk44GUka6fbLyyZqKY5F8MwTSD+RDoTgjY1+MS+1udwNl61wl0Y9kQHPAURt5NY
bquxITuE0/raXPMUtm2HXTtGc96vWoY4HsZ12BJIuMZco6FPQRLSts1On5htA+9E
bZqRB/vvSRXT5Q==
-----END CERTIFICATE-----
Generated at Thu May 2 15:36:34 2024 by rpki-client on console-fra.rpki-client.org