Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
File:                     0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft (raw, json)
Hash identifier:          NbiokZL+XvYbAnqSuLHAX/6eQxoncZJmNHwICBd5ulw=
Subject key identifier:   C8:9A:78:2D:13:B8:79:24:21:D9:4F:EC:16:F4:85:10:A9:83:69:9D
Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
Certificate issuer:       /CN=d1911510a09979e54e7a14918c0b828b8237f876
Certificate serial:       018F381B77B627CFA4E80679D340BD06EB04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
Manifest number:          074A
Signing time:             Thu 02 May 2024 07:01:15 +0000
Manifest this update:     Thu 02 May 2024 07:01:15 +0000
Manifest next update:     Fri 03 May 2024 07:01:15 +0000
Files and hashes:         1: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl (hash: HbIB8vI1cZqNv3RLBf9lsH+P5MKLLbfLcM85cQetX7Q=)
                          2: FF8l4e0EeKB6743Y_Og28UZU0GQ.roa (hash: cnrhnTb/PXnZzqMi9lYKWAj8aDAT0ZPq3fPD8VrMnKk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1b:77:b6:27:cf:a4:e8:06:79:d3:40:bd:06:eb:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876
        Validity
            Not Before: May  2 07:01:15 2024 GMT
            Not After : May  3 07:01:15 2024 GMT
        Subject: CN=c89a782d13b8792421d94fec16f48510a983699d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bc:9c:b6:44:4c:c6:67:c0:60:b1:df:47:25:
                    10:81:63:72:6d:f2:01:55:a6:1a:38:58:2a:d7:75:
                    14:ae:01:76:1c:1c:19:c2:27:3b:af:b1:a0:cd:fc:
                    99:80:00:22:15:1a:8b:64:bb:22:d6:93:d6:e4:5d:
                    82:d2:09:53:1a:82:4f:a0:bd:eb:10:fd:c6:17:f7:
                    59:33:38:28:30:97:0d:23:d2:6a:c5:1a:7f:b3:52:
                    94:89:b8:df:17:19:f1:1b:ac:ee:6c:f0:bc:73:a2:
                    c3:c2:13:ca:23:4f:db:78:b0:92:f9:1c:40:94:cf:
                    b9:5f:45:6f:28:0a:10:b0:0d:e3:84:58:4d:39:a2:
                    23:dd:50:a4:d3:c4:9c:1e:97:05:92:29:fb:42:d6:
                    d8:6d:d6:2e:34:da:74:d4:bf:48:27:4f:6b:6d:6c:
                    25:ab:70:9e:9d:39:72:40:fa:47:b1:a2:34:05:0c:
                    0b:e1:0a:53:6a:4d:75:5b:71:36:fa:05:55:a0:e1:
                    b2:71:ca:10:85:cc:0c:b9:12:f1:06:51:a3:93:2d:
                    ae:56:6f:e3:43:bd:f3:ea:80:2e:fa:8b:70:07:96:
                    8c:e4:7f:13:34:85:c5:93:3c:29:c6:91:5a:e5:5c:
                    07:16:6d:ff:55:55:ca:46:a9:cb:cd:e0:8c:e7:50:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9A:78:2D:13:B8:79:24:21:D9:4F:EC:16:F4:85:10:A9:83:69:9D
            X509v3 Authority Key Identifier:
                keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:7d:a0:6f:be:0e:5c:5f:87:fb:90:45:2e:bc:d0:8d:cb:45:
         f3:5d:66:38:b3:7d:d8:75:32:d8:0f:49:85:5d:eb:60:e2:5c:
         72:9d:d1:e9:64:68:41:d9:2a:d0:de:61:5f:49:0a:ea:7d:71:
         be:35:3a:d5:9b:e8:76:f2:cc:c6:fa:f0:27:0c:28:85:ed:4e:
         75:cd:d1:d6:a5:91:53:de:c0:1e:02:65:84:64:88:4f:f7:7c:
         dd:c5:cc:21:c5:f4:5f:95:bc:30:12:64:13:7d:7e:36:42:58:
         d7:28:71:1e:34:e3:bf:90:38:39:9f:7c:b8:ff:74:80:ea:1d:
         cb:f4:ee:1f:ba:73:17:54:e0:11:0e:d4:d8:47:9c:c9:9e:4b:
         47:28:27:73:87:c5:19:f7:1f:db:20:e8:d9:5a:fe:29:74:d7:
         22:69:c7:ad:66:79:3e:a8:c0:a7:3f:0a:24:ff:53:67:c6:0a:
         3a:13:2a:f1:0b:49:2e:d9:0f:be:06:9c:dc:a7:bc:4f:86:a0:
         d3:fe:15:d0:bb:48:64:de:83:c6:b7:4d:8a:a7:44:a1:c4:94:
         b7:ca:40:40:31:f4:e5:57:1f:c4:7f:69:44:d4:87:de:f0:36:
         76:11:81:bb:44:24:ea:77:6a:02:2b:c9:ec:a6:34:bc:d9:7f:
         73:e4:b8:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY84G3e2J8+k6AZ500C9BusEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTExNTEwYTA5OTc5ZTU0ZTdhMTQ5MThjMGI4MjhiODIz
N2Y4NzYwHhcNMjQwNTAyMDcwMTE1WhcNMjQwNTAzMDcwMTE1WjAzMTEwLwYDVQQD
EyhjODlhNzgyZDEzYjg3OTI0MjFkOTRmZWMxNmY0ODUxMGE5ODM2OTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobyctkRMxmfAYLHfRyUQgWNybfIB
VaYaOFgq13UUrgF2HBwZwic7r7GgzfyZgAAiFRqLZLsi1pPW5F2C0glTGoJPoL3r
EP3GF/dZMzgoMJcNI9JqxRp/s1KUibjfFxnxG6zubPC8c6LDwhPKI0/beLCS+RxA
lM+5X0VvKAoQsA3jhFhNOaIj3VCk08ScHpcFkin7QtbYbdYuNNp01L9IJ09rbWwl
q3CenTlyQPpHsaI0BQwL4QpTak11W3E2+gVVoOGyccoQhcwMuRLxBlGjky2uVm/j
Q73z6oAu+otwB5aM5H8TNIXFkzwpxpFa5VwHFm3/VVXKRqnLzeCM51B2pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiaeC0TuHkkIdlP7Bb0hRCpg2mdMB8GA1UdIwQY
MBaAFNGRFRCgmXnlTnoUkYwLgouCN/h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84ZTdhYWQtMzUxNS00ZTFkLTg0NjIt
OGY3NmJmNzZjZjQ2LzEvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84ZTdhYWQtMzUxNS00ZTFkLTg0NjItOGY3NmJmNzZjZjQ2
LzEvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJn2gb74O
XF+H+5BFLrzQjctF811mOLN92HUy2A9JhV3rYOJccp3R6WRoQdkq0N5hX0kK6n1x
vjU61ZvodvLMxvrwJwwohe1Odc3R1qWRU97AHgJlhGSIT/d83cXMIcX0X5W8MBJk
E31+NkJY1yhxHjTjv5A4OZ98uP90gOody/TuH7pzF1TgEQ7U2EecyZ5LRygnc4fF
Gfcf2yDo2Vr+KXTXImnHrWZ5PqjApz8KJP9TZ8YKOhMq8QtJLtkPvgac3Ke8T4ag
0/4V0LtIZN6DxrdNiqdEocSUt8pAQDH05VcfxH9pRNSH3vA2dhGBu0Qk6ndqAivJ
7KY0vNl/c+S4iA==
-----END CERTIFICATE-----
Generated at Thu May 2 09:37:12 2024 by rpki-client on console-fra.rpki-client.org