Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.mft
File:                     m5MZAlcz2oftj8ogMuP4pmBJWnE.mft (raw, json)
Hash identifier:          rQslmGq7IbangEzdYvdFjbVP6GzXeh3TGNlFZ86tzFU=
Subject key identifier:   FA:34:FE:1B:94:3B:AF:D1:62:63:A7:9B:CC:E9:2C:6A:E4:A0:D7:C0
Authority key identifier: 9B:93:19:02:57:33:DA:87:ED:8F:CA:20:32:E3:F8:A6:60:49:5A:71
Certificate issuer:       /CN=9b9319025733da87ed8fca2032e3f8a660495a71
Certificate serial:       018F8748BED8675A9D334F8C70A1C6E7E42D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5MZAlcz2oftj8ogMuP4pmBJWnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.mft
Manifest number:          0FC3
Signing time:             Fri 17 May 2024 16:00:42 +0000
Manifest this update:     Fri 17 May 2024 16:00:42 +0000
Manifest next update:     Sat 18 May 2024 16:00:42 +0000
Files and hashes:         1: ZrNGwCA-9OBv8wy5in0MNgrXg8k.roa (hash: 0J8pTk5PmtXMV8Z35JeNb2azYOZBzntbn9z2PcNZpMY=)
                          2: m5MZAlcz2oftj8ogMuP4pmBJWnE.crl (hash: IBWLwWhSAwL2DrrI1Mnhc3GToSiXc7KY+Uln6g4Ptvg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m5MZAlcz2oftj8ogMuP4pmBJWnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:be:d8:67:5a:9d:33:4f:8c:70:a1:c6:e7:e4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b9319025733da87ed8fca2032e3f8a660495a71
        Validity
            Not Before: May 17 16:00:42 2024 GMT
            Not After : May 18 16:00:42 2024 GMT
        Subject: CN=fa34fe1b943bafd16263a79bcce92c6ae4a0d7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1f:c3:20:5a:cc:2d:12:98:ad:bc:1c:e1:c0:
                    d6:32:94:73:a3:90:f0:6a:43:1c:d4:b6:08:07:02:
                    b2:55:8e:da:ce:dc:cd:b0:4d:e3:f5:72:04:02:dc:
                    da:fe:8e:b5:8d:5d:6b:4f:af:ff:dd:11:41:08:31:
                    77:2b:81:8b:9f:6d:de:bf:c3:88:06:5c:5e:12:7c:
                    e5:09:ea:ba:7b:2a:00:be:83:60:1a:90:cd:a2:65:
                    76:3f:cd:77:ae:d9:08:38:a7:40:3e:56:41:f0:b3:
                    74:fb:36:4d:a2:bb:2e:ec:91:af:6b:da:5f:5d:58:
                    94:ac:19:f6:0c:9a:d5:4c:e8:79:8e:7e:60:8f:57:
                    53:7d:2d:f3:16:2a:e6:8c:b2:db:86:ec:8c:77:e7:
                    4c:5e:07:45:33:62:22:39:40:07:6f:3d:d7:4a:12:
                    fd:67:ac:0f:6b:19:82:0b:13:7b:58:7e:14:5b:12:
                    5c:7f:f3:1c:bb:02:cb:6c:6c:85:cd:47:ad:b9:8b:
                    9d:27:84:42:12:58:30:95:75:e4:67:2a:0f:07:f9:
                    b2:d3:d2:29:c5:3c:fd:0f:ee:76:44:5a:a0:85:60:
                    9c:0c:1c:81:1c:0d:21:f6:e8:b1:3d:d7:ca:93:9d:
                    87:57:6e:4f:0e:64:36:0b:d0:3b:2e:12:84:b9:74:
                    0b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:34:FE:1B:94:3B:AF:D1:62:63:A7:9B:CC:E9:2C:6A:E4:A0:D7:C0
            X509v3 Authority Key Identifier:
                keyid:9B:93:19:02:57:33:DA:87:ED:8F:CA:20:32:E3:F8:A6:60:49:5A:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5MZAlcz2oftj8ogMuP4pmBJWnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e06713-d6da-401c-bae5-65d33f1b58c8/1/m5MZAlcz2oftj8ogMuP4pmBJWnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d5:a2:38:59:45:99:8f:9c:06:2b:a3:a8:d7:19:b8:62:14:
         62:c8:29:a1:69:5c:ea:f2:66:97:08:5f:91:1f:8f:a8:51:0e:
         c6:f6:fb:ac:4e:81:d0:8f:dc:0b:4a:ce:83:57:2c:ca:8b:a2:
         0f:f6:99:99:80:c8:ce:4f:ed:21:e3:a7:93:f4:d9:d5:4d:e4:
         91:4d:df:6e:9e:90:ad:35:b7:bf:12:f7:03:64:eb:c5:76:5f:
         08:87:39:31:a5:63:86:a2:be:6f:f3:8c:6b:f9:03:8f:dc:4e:
         92:7a:ae:aa:e6:f5:c2:97:f8:0f:b5:70:74:6a:44:bc:b2:69:
         3f:1b:78:e8:5e:40:57:8a:66:74:40:aa:59:a6:f2:aa:ad:3c:
         ad:c9:89:65:04:66:d8:0b:15:3f:30:61:cd:c3:29:d8:af:fe:
         95:ed:26:16:06:76:9d:e1:51:f0:87:49:a9:d3:6f:40:9b:d5:
         26:5d:a2:c1:01:8e:a5:ad:1d:f5:c9:b1:84:55:79:e0:c0:a5:
         32:a4:f7:50:df:36:1c:2a:4b:8f:45:52:69:eb:40:a6:06:12:
         8d:a5:42:ef:83:2a:1a:12:68:d4:89:df:14:24:48:50:ff:a1:
         33:89:ef:06:e9:59:9b:9c:0a:a0:08:7c:95:e9:fb:d6:36:e7:
         64:c3:1f:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSL7YZ1qdM0+McKHG5+QtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliOTMxOTAyNTczM2RhODdlZDhmY2EyMDMyZTNmOGE2NjA0
OTVhNzEwHhcNMjQwNTE3MTYwMDQyWhcNMjQwNTE4MTYwMDQyWjAzMTEwLwYDVQQD
EyhmYTM0ZmUxYjk0M2JhZmQxNjI2M2E3OWJjY2U5MmM2YWU0YTBkN2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB/DIFrMLRKYrbwc4cDWMpRzo5Dw
akMc1LYIBwKyVY7aztzNsE3j9XIEAtza/o61jV1rT6//3RFBCDF3K4GLn23ev8OI
BlxeEnzlCeq6eyoAvoNgGpDNomV2P813rtkIOKdAPlZB8LN0+zZNorsu7JGva9pf
XViUrBn2DJrVTOh5jn5gj1dTfS3zFirmjLLbhuyMd+dMXgdFM2IiOUAHbz3XShL9
Z6wPaxmCCxN7WH4UWxJcf/McuwLLbGyFzUetuYudJ4RCElgwlXXkZyoPB/my09Ip
xTz9D+52RFqghWCcDByBHA0h9uixPdfKk52HV25PDmQ2C9A7LhKEuXQLfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPo0/huUO6/RYmOnm8zpLGrkoNfAMB8GA1UdIwQY
MBaAFJuTGQJXM9qH7Y/KIDLj+KZgSVpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTVNWkFsY3oyb2Z0ajhvZ011UDRwbUJKV25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lMDY3MTMtZDZkYS00MDFjLWJhZTUt
NjVkMzNmMWI1OGM4LzEvbTVNWkFsY3oyb2Z0ajhvZ011UDRwbUJKV25FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9lMDY3MTMtZDZkYS00MDFjLWJhZTUtNjVkMzNmMWI1OGM4
LzEvbTVNWkFsY3oyb2Z0ajhvZ011UDRwbUJKV25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9WiOFlF
mY+cBiujqNcZuGIUYsgpoWlc6vJmlwhfkR+PqFEOxvb7rE6B0I/cC0rOg1csyoui
D/aZmYDIzk/tIeOnk/TZ1U3kkU3fbp6QrTW3vxL3A2TrxXZfCIc5MaVjhqK+b/OM
a/kDj9xOknququb1wpf4D7VwdGpEvLJpPxt46F5AV4pmdECqWabyqq08rcmJZQRm
2AsVPzBhzcMp2K/+le0mFgZ2neFR8IdJqdNvQJvVJl2iwQGOpa0d9cmxhFV54MCl
MqT3UN82HCpLj0VSaetApgYSjaVC74MqGhJo1InfFCRIUP+hM4nvBulZm5wKoAh8
len71jbnZMMfow==
-----END CERTIFICATE-----
Generated at Fri May 17 18:19:06 2024 by rpki-client on console-ams.rpki-client.org