Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File:                     MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier:          CW9mQUknir0vHHB4SQwWm7/iib1KvMkhl/Dtq/08yEM=
Subject key identifier:   FD:4C:D5:4F:2F:D5:CC:25:63:71:DC:36:30:C3:26:4A:AA:52:1A:10
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer:       /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial:       018F8635E35C17B9FC53379042EA3E8D9035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 11:00:29 +0000
Manifest this update:     Fri 17 May 2024 11:00:29 +0000
Manifest next update:     Sat 18 May 2024 11:00:29 +0000
Files and hashes:         1: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: nDqs/kWAOU5jEXuAj2KsFU0xEGaH0N6Q7wOYAckSEUE=)
                          2: qQg22zxseBR6RvKqkZnkZ9ERf_A.roa (hash: zQPuQ4HlH+R5hLoobBavICO8zEfXjdJ5YjFwpC+0xgA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:e3:5c:17:b9:fc:53:37:90:42:ea:3e:8d:90:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
        Validity
            Not Before: May 17 11:00:29 2024 GMT
            Not After : May 18 11:00:29 2024 GMT
        Subject: CN=fd4cd54f2fd5cc256371dc3630c3264aaa521a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:22:2b:99:47:be:26:4a:99:e0:23:be:dd:
                    30:ad:6a:ab:3e:26:73:44:77:e7:61:54:0d:c4:d3:
                    52:d4:85:7f:76:09:e5:a1:7d:1b:20:45:84:af:0a:
                    94:d6:c2:1a:55:af:67:2c:fb:c1:47:68:78:89:ae:
                    46:cb:e4:92:ea:e6:ce:60:f7:34:0b:ae:e2:6b:34:
                    50:c3:6f:c4:e6:13:56:ef:34:77:32:58:6e:fa:e4:
                    c0:87:9a:97:27:af:45:e9:d5:64:21:42:c9:ae:5e:
                    54:33:ab:7d:2e:b5:5c:55:1b:6c:c7:ea:51:75:79:
                    db:d6:e2:01:22:be:01:18:67:7f:e1:d6:69:88:02:
                    35:e1:ea:9a:00:3b:c3:14:d6:85:75:97:ea:96:06:
                    bd:69:11:e6:d6:c1:f5:9c:26:3d:fe:64:a7:57:be:
                    d7:35:dc:f0:1c:4f:d4:6f:c1:0b:4d:d2:aa:34:c7:
                    39:a0:4a:c3:b5:35:e6:77:80:93:13:88:c3:b1:32:
                    b3:fa:fa:7e:20:ae:c7:09:31:af:c1:bc:ef:b1:9c:
                    65:6e:b8:c0:ce:18:a9:5d:e1:b4:6e:dc:f9:32:fb:
                    e1:fc:2a:36:73:03:5f:48:08:ed:36:2b:c8:4c:2a:
                    a3:d9:4b:41:1b:01:73:93:15:fa:1f:77:9b:26:fa:
                    79:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4C:D5:4F:2F:D5:CC:25:63:71:DC:36:30:C3:26:4A:AA:52:1A:10
            X509v3 Authority Key Identifier:
                keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:20:fe:cd:1c:33:49:73:7e:11:43:0d:61:bd:be:22:7b:ce:
         75:80:77:40:f6:99:5d:ee:88:c8:c2:4a:b0:4e:ed:0a:82:a9:
         37:9c:a3:33:52:cf:88:bb:9c:2d:d9:f6:2e:5d:09:0a:19:aa:
         39:c4:a4:dd:7b:6f:19:7a:05:7c:ac:fa:a3:e4:10:fc:41:5f:
         4e:d3:6b:65:09:1c:8d:67:be:34:ae:ee:ae:7d:bb:70:ba:be:
         fd:ac:0d:57:c1:24:8f:ff:53:bf:0a:86:d5:e9:50:34:41:3c:
         59:d8:97:ef:ff:38:0e:14:03:0c:7f:fb:a2:9e:43:44:18:ca:
         8c:82:ac:75:3f:60:60:e6:de:77:65:73:0e:6c:73:23:f3:a2:
         ff:9d:d3:62:01:a1:56:fc:46:0b:83:e4:92:21:ec:67:71:fb:
         c7:eb:95:88:d3:68:27:91:f2:4c:ac:69:03:0f:fe:7c:e1:99:
         9d:a7:16:11:3b:2d:91:36:f2:cb:32:09:00:a5:68:c9:d4:94:
         db:a6:d2:bf:e9:bc:b6:fe:d9:a2:98:0f:9b:18:e5:87:21:be:
         76:39:2c:0c:23:a5:d2:38:a8:57:eb:b8:b8:13:a5:58:8b:25:
         57:b6:d7:24:b5:b3:fe:06:8a:4b:0a:5c:2c:45:cb:1d:61:f6:
         bb:be:5d:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GNeNcF7n8UzeQQuo+jZA1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZGQwYjcwODUwZTFmOTg5NTY1OGVkYWJlMjhiOWQ4ZDll
YTAxN2MwHhcNMjQwNTE3MTEwMDI5WhcNMjQwNTE4MTEwMDI5WjAzMTEwLwYDVQQD
EyhmZDRjZDU0ZjJmZDVjYzI1NjM3MWRjMzYzMGMzMjY0YWFhNTIxYTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2EiK5lHviZKmeAjvt0wrWqrPiZz
RHfnYVQNxNNS1IV/dgnloX0bIEWErwqU1sIaVa9nLPvBR2h4ia5Gy+SS6ubOYPc0
C67iazRQw2/E5hNW7zR3Mlhu+uTAh5qXJ69F6dVkIULJrl5UM6t9LrVcVRtsx+pR
dXnb1uIBIr4BGGd/4dZpiAI14eqaADvDFNaFdZfqlga9aRHm1sH1nCY9/mSnV77X
NdzwHE/Ub8ELTdKqNMc5oErDtTXmd4CTE4jDsTKz+vp+IK7HCTGvwbzvsZxlbrjA
zhipXeG0btz5Mvvh/Co2cwNfSAjtNivITCqj2UtBGwFzkxX6H3ebJvp5bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1M1U8v1cwlY3HcNjDDJkqqUhoQMB8GA1UdIwQY
MBaAFDDdC3CFDh+YlWWO2r4oudjZ6gF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU4wTGNJVU9INWlWWlk3YXZpaTUyTm5xQVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mY2EyYWUtMjVmYy00NDRiLWE4Njgt
ODEwZGM5ZTFhYTU0LzEvTU4wTGNJVU9INWlWWlk3YXZpaTUyTm5xQVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mY2EyYWUtMjVmYy00NDRiLWE4NjgtODEwZGM5ZTFhYTU0
LzEvTU4wTGNJVU9INWlWWlk3YXZpaTUyTm5xQVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiD+zRwz
SXN+EUMNYb2+InvOdYB3QPaZXe6IyMJKsE7tCoKpN5yjM1LPiLucLdn2Ll0JChmq
OcSk3XtvGXoFfKz6o+QQ/EFfTtNrZQkcjWe+NK7urn27cLq+/awNV8Ekj/9TvwqG
1elQNEE8WdiX7/84DhQDDH/7op5DRBjKjIKsdT9gYObed2VzDmxzI/Oi/53TYgGh
VvxGC4PkkiHsZ3H7x+uViNNoJ5HyTKxpAw/+fOGZnacWETstkTbyyzIJAKVoydSU
26bSv+m8tv7ZopgPmxjlhyG+djksDCOl0jioV+u4uBOlWIslV7bXJLWz/gaKSwpc
LEXLHWH2u75d1A==
-----END CERTIFICATE-----
Generated at Fri May 17 18:40:46 2024 by rpki-client on console-fra.rpki-client.org