Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
File:                     71LcaSC94AdFBjC7_AIWreTgP2I.mft (raw, json)
Hash identifier:          d+NNEa3aOBYdBkDJZJhewg9JdiusMfg2Kd/O3kn0mE8=
Subject key identifier:   46:47:04:8B:C7:FE:61:D2:A7:6E:D5:30:93:FB:24:AB:07:A5:04:D5
Authority key identifier: EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
Certificate issuer:       /CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Certificate serial:       018F43B2A210D8A998960F0CB731F248E161
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
Manifest number:          0C1F
Signing time:             Sat 04 May 2024 13:02:11 +0000
Manifest this update:     Sat 04 May 2024 13:02:11 +0000
Manifest next update:     Sun 05 May 2024 13:02:11 +0000
Files and hashes:         1: 71LcaSC94AdFBjC7_AIWreTgP2I.crl (hash: JoOGrALm1fGo+xozSOTjkp1WzZsik/HDk3CXb0a7vbI=)
                          2: ltdV4P_tNh_NX8Tj86lDtV7cNeI.roa (hash: 6+l3SNp7SFRkkJFJ7XxZ8BAajxEbEaCLSmp6sfMXLSg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:a2:10:d8:a9:98:96:0f:0c:b7:31:f2:48:e1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef52dc6920bde007450630bbfc0216ade4e03f62
        Validity
            Not Before: May  4 13:02:11 2024 GMT
            Not After : May  5 13:02:11 2024 GMT
        Subject: CN=4647048bc7fe61d2a76ed53093fb24ab07a504d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:f7:0b:c5:9a:0c:60:19:5c:73:49:e3:ae:
                    ec:b3:0c:52:f3:cd:92:49:01:f9:6f:9c:a1:51:c0:
                    c7:8d:7b:35:aa:ae:67:97:37:bb:eb:dc:8b:be:a6:
                    84:d3:9d:70:78:65:ce:72:de:60:6e:b6:78:2b:66:
                    92:2a:20:7f:49:19:f4:26:7c:30:90:9a:3d:19:85:
                    10:14:2e:01:27:9b:ea:ee:b9:24:14:97:94:d0:ad:
                    7a:20:3c:23:b9:73:97:99:53:52:39:78:4d:42:3f:
                    a9:32:b0:90:33:d2:64:33:a3:78:51:51:be:f5:b0:
                    1d:28:95:4a:ce:30:94:d1:8f:e0:0a:9f:e2:e2:51:
                    e8:85:fa:35:da:f2:e9:37:60:2c:03:35:fb:ed:75:
                    cd:db:2a:fe:b8:b1:80:36:17:7b:16:7f:ec:20:f2:
                    50:f2:1f:75:83:5b:7f:32:2d:f8:cd:0a:11:5a:eb:
                    dd:ae:24:cb:cf:f9:ea:76:35:6c:17:c8:34:8d:d3:
                    71:31:1c:fc:eb:2e:b7:f0:78:ec:ad:31:cb:08:8b:
                    5c:3f:40:b4:4e:9a:7c:55:5f:5d:b7:5d:25:3a:ba:
                    52:eb:6a:87:b3:73:48:62:0b:fb:da:57:c2:47:bc:
                    11:d7:28:f7:65:d1:46:2a:be:0b:08:5f:12:a0:61:
                    bb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:47:04:8B:C7:FE:61:D2:A7:6E:D5:30:93:FB:24:AB:07:A5:04:D5
            X509v3 Authority Key Identifier:
                keyid:EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a0:3c:a2:04:1b:d9:ca:49:4a:9e:36:0b:d5:d5:b5:d9:70:
         81:87:ac:5e:26:19:c2:39:f7:59:98:5f:55:b4:da:74:cb:e7:
         ce:11:b5:ab:3e:70:76:a8:69:57:cb:8d:f9:35:37:81:fc:12:
         5d:1f:bd:1a:e0:a4:f5:96:a4:d5:8a:60:80:4d:51:15:f1:ae:
         c5:97:d8:91:61:f0:0e:8c:29:2f:38:b5:c2:43:34:a2:ec:eb:
         8a:52:8b:8a:d7:57:3c:9a:1e:c5:ca:86:92:27:b7:af:99:9d:
         7d:50:29:3e:3f:a8:c9:3b:a2:07:70:32:24:9b:9a:59:a5:c6:
         5e:06:6a:bf:3c:2c:4b:e4:01:b5:1d:ef:a2:86:f9:5c:76:e1:
         89:a3:78:df:3b:bb:8e:0f:26:db:54:3c:f7:cd:22:a0:81:46:
         16:96:77:b0:47:60:19:95:23:c2:ac:65:75:46:f6:0c:d0:d4:
         91:a1:c9:43:d6:7c:1b:f8:aa:71:e5:1b:7c:3d:23:48:75:fa:
         7a:0b:56:ec:f3:6a:ab:ba:d1:8a:6d:f6:4d:f5:e5:4c:a4:9a:
         be:14:ed:5a:ae:2a:5d:30:f1:b0:7f:f0:83:ea:6a:29:ce:e5:
         82:64:b3:b8:e7:9c:3d:68:b5:d5:ec:ff:1c:43:ea:2e:1e:b6:
         4e:08:76:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9DsqIQ2KmYlg8MtzHySOFhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTJkYzY5MjBiZGUwMDc0NTA2MzBiYmZjMDIxNmFkZTRl
MDNmNjIwHhcNMjQwNTA0MTMwMjExWhcNMjQwNTA1MTMwMjExWjAzMTEwLwYDVQQD
Eyg0NjQ3MDQ4YmM3ZmU2MWQyYTc2ZWQ1MzA5M2ZiMjRhYjA3YTUwNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh73C8WaDGAZXHNJ467sswxS882S
SQH5b5yhUcDHjXs1qq5nlze769yLvqaE051weGXOct5gbrZ4K2aSKiB/SRn0Jnww
kJo9GYUQFC4BJ5vq7rkkFJeU0K16IDwjuXOXmVNSOXhNQj+pMrCQM9JkM6N4UVG+
9bAdKJVKzjCU0Y/gCp/i4lHohfo12vLpN2AsAzX77XXN2yr+uLGANhd7Fn/sIPJQ
8h91g1t/Mi34zQoRWuvdriTLz/nqdjVsF8g0jdNxMRz86y638HjsrTHLCItcP0C0
Tpp8VV9dt10lOrpS62qHs3NIYgv72lfCR7wR1yj3ZdFGKr4LCF8SoGG7zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZHBIvH/mHSp27VMJP7JKsHpQTVMB8GA1UdIwQY
MBaAFO9S3GkgveAHRQYwu/wCFq3k4D9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yNzg0N2MtNTExMy00YTRiLWE3ODgt
NzY0MzYzYjEzY2QyLzEvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yNzg0N2MtNTExMy00YTRiLWE3ODgtNzY0MzYzYjEzY2Qy
LzEvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaA8ogQb
2cpJSp42C9XVtdlwgYesXiYZwjn3WZhfVbTadMvnzhG1qz5wdqhpV8uN+TU3gfwS
XR+9GuCk9Zak1YpggE1RFfGuxZfYkWHwDowpLzi1wkM0ouzrilKLitdXPJoexcqG
kie3r5mdfVApPj+oyTuiB3AyJJuaWaXGXgZqvzwsS+QBtR3voob5XHbhiaN43zu7
jg8m21Q8980ioIFGFpZ3sEdgGZUjwqxldUb2DNDUkaHJQ9Z8G/iqceUbfD0jSHX6
egtW7PNqq7rRim32TfXlTKSavhTtWq4qXTDxsH/wg+pqKc7lgmSzuOecPWi11ez/
HEPqLh62Tgh2vg==
-----END CERTIFICATE-----
Generated at Sat May 4 13:52:15 2024 by rpki-client on console-fra.rpki-client.org