Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
File:                     1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json)
Hash identifier:          AEoprU1o/xgjrXkL0MuV3PJ0+mDsgoSL2cuB8FyfLIo=
Subject key identifier:   D2:E7:66:DB:B1:E6:67:68:9B:E3:E6:A5:7F:66:45:87:CE:82:A3:36
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Certificate issuer:       /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial:       018F52123EDB5203361C47496C167EF21B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
Manifest number:          0D2D
Signing time:             Tue 07 May 2024 08:01:18 +0000
Manifest this update:     Tue 07 May 2024 08:01:18 +0000
Manifest next update:     Wed 08 May 2024 08:01:18 +0000
Files and hashes:         1: 0AbbJ9iFdNVeZK44K9UADNLHetQ.roa (hash: 7rqKyESIyvvpj20vbYseLFDGL4sFYb7f8jyYda6YIcI=)
                          2: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: R9aXQR9ySt/cBJ06na/LZ+O5VlNjhCXQq47YEqpFxSM=)
                          3: rZVc5_3K_1-jGrhdm9YkbN63AsM.roa (hash: gVFfmk3tu5vaxJnLtzUpqcTmymQLUqZSyLTw56IirNc=)
                          4: vapu5C4V0tmAwvLONdAgp6O8e3c.roa (hash: Tnzubylrjm2ap5KcX4R3tELnV5BO1WVvmEhMK3nKlmk=)
                          5: yV9drke-h1uIjboH88NUXVHY4Bo.roa (hash: fZOpqsTt4fGdRAb7/U5hRZPCKjKIF+PcrH+P0L033DI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:12:3e:db:52:03:36:1c:47:49:6c:16:7e:f2:1b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
        Validity
            Not Before: May  7 08:01:18 2024 GMT
            Not After : May  8 08:01:18 2024 GMT
        Subject: CN=d2e766dbb1e667689be3e6a57f664587ce82a336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d9:d6:be:79:72:46:71:cc:93:02:e0:53:4c:
                    c5:4a:c4:c6:66:61:4b:8e:02:41:17:a4:6f:0f:e6:
                    1e:c4:03:8c:81:b7:b8:d2:aa:7b:ee:ef:52:8f:1a:
                    25:70:85:2b:36:48:59:78:c3:c6:98:4e:98:ce:aa:
                    1c:d4:95:6c:8c:aa:bb:2b:dd:09:4d:9e:9e:f0:27:
                    87:9e:f3:fe:02:bf:2c:bb:17:b8:71:e8:32:5e:f3:
                    25:d8:b7:26:10:1f:b1:bb:86:44:8f:ec:df:e5:c7:
                    6c:99:26:8a:f0:f1:96:22:54:ad:e6:bd:78:a1:b2:
                    a1:86:89:ab:6d:73:34:af:c1:55:a2:9b:41:64:ba:
                    a0:3e:a1:ff:a4:15:b7:98:d9:54:b0:e1:06:d2:b6:
                    fc:cd:90:c8:d8:8b:6c:bb:02:27:8f:ca:b2:50:18:
                    44:c2:fd:11:22:d0:ef:b9:e9:f1:b3:94:21:08:5e:
                    17:66:93:1e:2b:76:36:af:6b:33:b6:0d:1d:4e:9a:
                    e7:dd:cb:37:3b:f6:61:aa:83:9f:9d:c7:6c:d3:f2:
                    a3:02:c2:53:d2:53:18:ff:13:90:96:c4:ac:40:19:
                    f1:fc:c7:70:e2:90:69:f6:66:84:ef:a9:db:88:31:
                    0b:9c:bb:52:5b:80:5b:40:17:0f:9f:09:11:be:a5:
                    9f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E7:66:DB:B1:E6:67:68:9B:E3:E6:A5:7F:66:45:87:CE:82:A3:36
            X509v3 Authority Key Identifier:
                keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:88:68:3b:51:57:bf:34:62:4e:8a:c4:56:09:ad:5b:da:c0:
         9f:6d:0e:e0:7b:9d:d3:14:09:34:f6:5b:b2:25:2f:0f:6d:ff:
         58:f6:4f:55:06:20:f1:89:07:b1:24:5b:2d:4c:da:06:14:99:
         75:ee:30:3f:97:2d:d2:c5:6f:f2:14:93:82:42:df:42:b8:43:
         ed:85:40:db:2f:9a:ef:4d:aa:c8:72:60:6c:e9:e2:cd:8f:aa:
         19:59:14:00:10:d8:8c:e8:57:68:67:64:27:9f:61:9f:1f:cb:
         4d:2a:28:d6:1a:48:2d:50:cd:b1:c5:bc:bd:38:15:30:e8:de:
         3c:e3:62:1d:4c:97:a1:b8:03:2d:fb:b4:70:6a:b4:2c:fe:c6:
         11:a5:69:19:59:50:cd:6c:40:4f:0d:05:be:e7:9a:36:ed:66:
         a8:01:46:5f:04:48:95:0d:de:0f:aa:e5:b3:26:90:50:d6:ce:
         f7:ac:51:85:b0:da:aa:85:71:ed:40:6a:8c:c9:cc:00:0d:7b:
         73:16:57:c1:13:00:3d:56:64:a3:81:2c:80:78:3c:69:aa:b6:
         d9:36:0d:94:16:3d:f6:4a:b9:87:79:50:df:e8:e7:2d:3e:6c:
         74:a6:7c:93:48:f6:8a:fc:c0:1c:8f:4b:da:25:84:a8:a5:69:
         e9:e6:0d:2f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY9SEj7bUgM2HEdJbBZ+8hubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MGUwMTdjZjE3MTE1MTliMGZmOWY2NTg1OGM0OTFiMmZh
NWQ0MGIwHhcNMjQwNTA3MDgwMTE4WhcNMjQwNTA4MDgwMTE4WjAzMTEwLwYDVQQD
EyhkMmU3NjZkYmIxZTY2NzY4OWJlM2U2YTU3ZjY2NDU4N2NlODJhMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NnWvnlyRnHMkwLgU0zFSsTGZmFL
jgJBF6RvD+YexAOMgbe40qp77u9SjxolcIUrNkhZeMPGmE6Yzqoc1JVsjKq7K90J
TZ6e8CeHnvP+Ar8suxe4cegyXvMl2LcmEB+xu4ZEj+zf5cdsmSaK8PGWIlSt5r14
obKhhomrbXM0r8FVoptBZLqgPqH/pBW3mNlUsOEG0rb8zZDI2ItsuwInj8qyUBhE
wv0RItDvuenxs5QhCF4XZpMeK3Y2r2sztg0dTprn3cs3O/ZhqoOfncds0/KjAsJT
0lMY/xOQlsSsQBnx/Mdw4pBp9maE76nbiDELnLtSW4BbQBcPnwkRvqWfVQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNLnZtux5mdom+PmpX9mRYfOgqM2MB8GA1UdIwQY
MBaAFPgOAXzxcRUZsP+fZYWMSRsvpdQLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1BNEJmUEZ4RlJtd181OWxoWXhKR3ktbDFBcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2
LThjZTYwYTVjOGIxZi8xLzEtQTRCZlBGeEZSbXdfNTlsaFl4Skd5LWwxQXMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg3LzJkYzEzNi00MDBkLTQwZTctYWQ4Ni04Y2U2MGE1Yzhi
MWYvMS8xLUE0QmZQRnhGUm13XzU5bGhZeEpHeS1sMUFzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAToho
O1FXvzRiTorEVgmtW9rAn20O4Hud0xQJNPZbsiUvD23/WPZPVQYg8YkHsSRbLUza
BhSZde4wP5ct0sVv8hSTgkLfQrhD7YVA2y+a702qyHJgbOnizY+qGVkUABDYjOhX
aGdkJ59hnx/LTSoo1hpILVDNscW8vTgVMOjePONiHUyXobgDLfu0cGq0LP7GEaVp
GVlQzWxATw0FvueaNu1mqAFGXwRIlQ3eD6rlsyaQUNbO96xRhbDaqoVx7UBqjMnM
AA17cxZXwRMAPVZko4EsgHg8aaq22TYNlBY99kq5h3lQ3+jnLT5sdKZ8k0j2ivzA
HI9L2iWEqKVp6eYNLw==
-----END CERTIFICATE-----
Generated at Tue May 7 10:25:50 2024 by rpki-client on console-fra.rpki-client.org