Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
File:                     EWYPCgX8TPczIjCFLZ14vXrC8ks.mft (raw, json)
Hash identifier:          CR3jFXrr6CXU04QcQWZ7Y8UxPTEKr6kCmbvD9cOIbU0=
Subject key identifier:   DB:1D:DE:D2:4F:0C:08:E5:E9:D5:20:77:B8:9E:02:BE:19:A4:8F:35
Authority key identifier: 11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
Certificate issuer:       /CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Certificate serial:       018F50918D9ED47148EA182E2245CB7CC099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
Manifest number:          0C00
Signing time:             Tue 07 May 2024 01:01:07 +0000
Manifest this update:     Tue 07 May 2024 01:01:07 +0000
Manifest next update:     Wed 08 May 2024 01:01:07 +0000
Files and hashes:         1: EWYPCgX8TPczIjCFLZ14vXrC8ks.crl (hash: wWcw81/VJJeWxNB9ygJ3F4L4f5cs6WNRe5sNy8yAHQ8=)
                          2: iMkPzPUgiXbWFGL4ySRbudQw7cM.roa (hash: 2wCz/AbYbX9j6SwscLYIhG9wF0HE4aYHXogYbEb2x4w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:91:8d:9e:d4:71:48:ea:18:2e:22:45:cb:7c:c0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
        Validity
            Not Before: May  7 01:01:07 2024 GMT
            Not After : May  8 01:01:07 2024 GMT
        Subject: CN=db1dded24f0c08e5e9d52077b89e02be19a48f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3a:cc:33:07:93:08:58:9b:99:b1:40:0a:05:
                    db:a0:28:aa:a5:36:b9:41:85:9f:7e:5f:b4:02:03:
                    22:c3:01:91:94:eb:9b:48:5c:0c:08:c6:42:32:48:
                    d1:52:81:ce:b0:69:29:1f:ab:50:8c:aa:a4:ed:44:
                    1d:3c:76:7d:8f:c9:34:31:57:10:d2:a3:15:a0:3d:
                    b5:c9:d2:1e:12:1e:b9:27:38:be:9e:ad:5d:2b:2f:
                    f8:10:90:aa:dc:86:cd:0c:eb:00:cf:e8:a9:cc:c9:
                    da:dc:c6:32:57:a4:9f:98:d1:8b:ad:62:ab:ca:1a:
                    08:de:1e:65:f9:71:47:60:a4:4d:57:3f:3c:a5:87:
                    dd:b7:c2:ac:58:5d:35:20:b5:ca:53:c5:0e:4e:93:
                    52:11:bd:ae:3f:7f:1b:61:ea:1a:cc:54:3c:d5:6a:
                    80:d3:71:ad:e5:37:e3:e2:8a:d9:d4:86:f5:eb:0d:
                    80:f9:55:fa:32:45:bb:ba:33:3d:bc:e6:fb:b9:e9:
                    49:cf:41:fc:67:56:4b:93:e2:6f:7c:5e:7d:00:be:
                    e4:b5:5e:1d:bd:14:f3:6a:c6:d9:b6:c0:ba:be:37:
                    bd:d7:83:a8:9a:76:22:e2:ff:de:8c:d2:50:d3:22:
                    5a:a2:ab:fc:27:7e:6a:16:46:55:31:4b:29:4b:00:
                    b1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1D:DE:D2:4F:0C:08:E5:E9:D5:20:77:B8:9E:02:BE:19:A4:8F:35
            X509v3 Authority Key Identifier:
                keyid:11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:49:de:b8:dd:3d:ce:58:68:d6:4f:d4:43:3e:04:ba:44:86:
         d6:60:5d:d3:7b:71:b8:ff:c8:2c:84:62:cc:ee:67:c7:25:91:
         e8:45:c9:c7:6a:65:b1:f1:d1:2e:00:d9:eb:37:82:b9:2d:eb:
         07:5d:d9:7c:e2:37:8d:06:57:9f:50:2e:26:b2:38:64:84:9d:
         7a:5c:79:bb:36:b0:77:2d:39:9e:14:2e:6e:5a:6e:c4:1a:7d:
         0f:f7:11:85:84:3a:4d:f0:3d:a6:21:33:fd:dc:b6:20:30:6c:
         1f:d8:09:62:69:2f:63:1b:fc:99:d6:b5:45:5b:7b:86:8b:e2:
         ea:5a:d1:40:66:bf:7c:49:2c:3d:0a:30:06:b2:2e:0c:d4:56:
         5a:58:d0:63:64:ae:22:e3:22:de:41:8e:b4:6a:96:68:8c:3a:
         c1:91:3a:9e:52:63:1d:1a:ae:83:68:77:d3:75:1f:60:54:2b:
         14:9c:52:5e:6c:32:fa:a1:24:79:cf:ec:fe:6d:87:51:1d:74:
         11:10:02:94:a3:20:19:46:5e:3a:28:c7:a7:f1:31:32:ec:da:
         19:7c:69:18:d1:f1:a5:71:86:e6:07:55:4b:1b:08:0d:4a:f8:
         af:39:62:1c:b3:03:ab:ce:4e:3b:cd:52:b6:ac:55:4d:cf:f7:
         3c:28:8c:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9QkY2e1HFI6hguIkXLfMCZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNjYwZjBhMDVmYzRjZjczMzIyMzA4NTJkOWQ3OGJkN2Fj
MmYyNGIwHhcNMjQwNTA3MDEwMTA3WhcNMjQwNTA4MDEwMTA3WjAzMTEwLwYDVQQD
EyhkYjFkZGVkMjRmMGMwOGU1ZTlkNTIwNzdiODllMDJiZTE5YTQ4ZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTrMMweTCFibmbFACgXboCiqpTa5
QYWffl+0AgMiwwGRlOubSFwMCMZCMkjRUoHOsGkpH6tQjKqk7UQdPHZ9j8k0MVcQ
0qMVoD21ydIeEh65Jzi+nq1dKy/4EJCq3IbNDOsAz+ipzMna3MYyV6SfmNGLrWKr
yhoI3h5l+XFHYKRNVz88pYfdt8KsWF01ILXKU8UOTpNSEb2uP38bYeoazFQ81WqA
03Gt5Tfj4orZ1Ib16w2A+VX6MkW7ujM9vOb7uelJz0H8Z1ZLk+JvfF59AL7ktV4d
vRTzasbZtsC6vje914OomnYi4v/ejNJQ0yJaoqv8J35qFkZVMUspSwCxhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsd3tJPDAjl6dUgd7ieAr4ZpI81MB8GA1UdIwQY
MBaAFBFmDwoF/Ez3MyIwhS2deL16wvJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVdZUENnWDhUUGN6SWpDRkxaMTR2WHJDOGtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84MWIyYzctZjQ1NC00MTE5LTg5NGEt
N2EwNmZmMDAyNTE3LzEvRVdZUENnWDhUUGN6SWpDRkxaMTR2WHJDOGtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS84MWIyYzctZjQ1NC00MTE5LTg5NGEtN2EwNmZmMDAyNTE3
LzEvRVdZUENnWDhUUGN6SWpDRkxaMTR2WHJDOGtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUneuN09
zlho1k/UQz4EukSG1mBd03txuP/ILIRizO5nxyWR6EXJx2plsfHRLgDZ6zeCuS3r
B13ZfOI3jQZXn1AuJrI4ZISdelx5uzawdy05nhQublpuxBp9D/cRhYQ6TfA9piEz
/dy2IDBsH9gJYmkvYxv8mda1RVt7hovi6lrRQGa/fEksPQowBrIuDNRWWljQY2Su
IuMi3kGOtGqWaIw6wZE6nlJjHRqug2h303UfYFQrFJxSXmwy+qEkec/s/m2HUR10
ERAClKMgGUZeOijHp/ExMuzaGXxpGNHxpXGG5gdVSxsIDUr4rzliHLMDq85OO81S
tqxVTc/3PCiMiw==
-----END CERTIFICATE-----
Generated at Tue May 7 02:23:35 2024 by rpki-client on console-fra.rpki-client.org