Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
File:                     ER2JVJLtS2nVqm7aX3Av52Oie6A.mft (raw, json)
Hash identifier:          GA6DxrRI3hRdlFn/ylIo4igWQqWhAPgvfTC6K635oKo=
Subject key identifier:   F4:97:2B:9A:93:AA:51:A6:80:F6:FE:41:DE:05:D6:FD:72:77:45:76
Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Certificate issuer:       /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Certificate serial:       018F41C4274B22743F139B0E6877F0D5E227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 04:02:05 +0000
Manifest this update:     Sat 04 May 2024 04:02:05 +0000
Manifest next update:     Sun 05 May 2024 04:02:05 +0000
Files and hashes:         1: ER2JVJLtS2nVqm7aX3Av52Oie6A.crl (hash: +GpZhcuoi0Fq69oioYRDuQjf8RH7PIOSdYcJ4x4q6UU=)
                          2: Vz0-bunSPYqG6Y1fldcfQCTTU5k.roa (hash: UOJRqIip9Oc8TooeCQSRNQ9QxXyVO8ufhcQAAbPfyI4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:27:4b:22:74:3f:13:9b:0e:68:77:f0:d5:e2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
        Validity
            Not Before: May  4 04:02:05 2024 GMT
            Not After : May  5 04:02:05 2024 GMT
        Subject: CN=f4972b9a93aa51a680f6fe41de05d6fd72774576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:9b:9e:ee:fe:08:32:83:cd:02:c7:3e:c6:
                    d8:37:82:34:bc:ff:18:b2:00:7d:bd:47:ed:c2:e0:
                    71:b3:b4:8f:b7:2d:bf:42:41:73:f5:dd:2e:c2:e2:
                    0d:ad:e5:01:38:bf:f9:2e:6c:66:27:ab:8e:e5:33:
                    f1:0f:c0:d0:db:13:9a:cb:08:f3:c4:54:70:58:59:
                    31:55:2b:6f:e1:f3:dc:dd:f5:ce:66:c3:9a:3d:7f:
                    f2:a3:81:b3:e4:4f:a5:dd:ba:fa:d2:f1:9b:2c:6a:
                    6a:b4:d4:2c:41:04:30:03:0b:1f:72:ce:96:5e:c8:
                    a0:7a:1a:58:37:bc:46:3f:c0:9b:93:bb:02:1a:0f:
                    a2:85:95:63:9e:96:ed:31:ba:12:df:fd:3f:1b:01:
                    f0:69:c9:f7:a4:48:8a:55:94:89:7a:f8:57:5c:b3:
                    24:4a:ed:39:e0:3c:f6:0a:ff:13:54:85:62:ff:00:
                    a4:7b:2e:e0:4e:ac:6f:b0:d3:07:6f:00:2e:20:f9:
                    fe:85:c7:62:c6:b4:d6:cb:0a:80:a2:bd:1d:b2:09:
                    d9:25:4d:d0:b4:8d:37:74:1a:9d:5a:c8:07:d2:f2:
                    35:f9:06:07:68:18:6f:54:d6:5a:00:8a:c0:35:89:
                    32:05:fb:71:e5:11:73:bc:f2:e0:e7:d4:24:ec:0a:
                    7a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:97:2B:9A:93:AA:51:A6:80:F6:FE:41:DE:05:D6:FD:72:77:45:76
            X509v3 Authority Key Identifier:
                keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:a6:fa:6f:5b:8a:98:51:c6:d1:7e:d6:39:7b:aa:b6:e3:3f:
         4c:af:3c:65:87:1b:97:92:a7:43:71:44:26:c0:70:70:3d:c4:
         83:48:9e:dd:09:83:2f:d5:b8:2f:7a:86:ca:eb:bb:12:66:be:
         94:60:e5:ec:88:c4:2e:81:a8:ff:8a:9b:3e:06:cc:4c:8b:b1:
         3a:64:03:24:87:ea:00:64:74:86:43:55:94:ba:f9:bb:1a:f6:
         32:d3:57:f7:fd:ac:62:7c:b2:92:06:ac:5a:b3:fd:93:93:f3:
         52:5e:92:c8:2b:8b:b3:9e:c0:ce:90:fc:fd:e4:31:45:b2:0f:
         50:2b:54:45:87:6a:22:7e:15:6d:8a:07:82:b7:60:2e:b6:ae:
         5f:4b:f6:77:94:7c:63:31:30:9f:e8:dd:6b:7d:4a:88:24:78:
         6d:a2:d7:66:71:55:67:cc:a1:8b:f2:48:20:75:83:3b:ee:ea:
         a9:92:3f:83:46:7c:c0:21:bf:74:be:cc:89:9f:78:b2:c1:9e:
         11:7d:5e:bb:51:7a:fa:1a:cb:d7:58:e1:20:b9:22:00:5d:63:
         83:20:d1:85:4b:d8:03:00:77:5f:e5:91:5d:2d:18:28:b4:f6:
         d9:62:e0:e2:e7:4a:4b:5c:9f:76:a9:ce:ea:8d:80:06:00:e4:
         4c:28:b3:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9BxCdLInQ/E5sOaHfw1eInMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWQ4OTU0OTJlZDRiNjlkNWFhNmVkYTVmNzAyZmU3NjNh
MjdiYTAwHhcNMjQwNTA0MDQwMjA1WhcNMjQwNTA1MDQwMjA1WjAzMTEwLwYDVQQD
EyhmNDk3MmI5YTkzYWE1MWE2ODBmNmZlNDFkZTA1ZDZmZDcyNzc0NTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfibnu7+CDKDzQLHPsbYN4I0vP8Y
sgB9vUftwuBxs7SPty2/QkFz9d0uwuINreUBOL/5LmxmJ6uO5TPxD8DQ2xOaywjz
xFRwWFkxVStv4fPc3fXOZsOaPX/yo4Gz5E+l3br60vGbLGpqtNQsQQQwAwsfcs6W
XsigehpYN7xGP8Cbk7sCGg+ihZVjnpbtMboS3/0/GwHwacn3pEiKVZSJevhXXLMk
Su054Dz2Cv8TVIVi/wCkey7gTqxvsNMHbwAuIPn+hcdixrTWywqAor0dsgnZJU3Q
tI03dBqdWsgH0vI1+QYHaBhvVNZaAIrANYkyBftx5RFzvPLg59Qk7Ap65wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSXK5qTqlGmgPb+Qd4F1v1yd0V2MB8GA1UdIwQY
MBaAFBEdiVSS7Utp1apu2l9wL+djonugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVIySlZKTHRTMm5WcW03YVgzQXY1Mk9pZTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84MGQxY2MtNDUzZi00MmUzLTlmZDQt
ODdiZWNmNzRkNTY0LzEvRVIySlZKTHRTMm5WcW03YVgzQXY1Mk9pZTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84MGQxY2MtNDUzZi00MmUzLTlmZDQtODdiZWNmNzRkNTY0
LzEvRVIySlZKTHRTMm5WcW03YVgzQXY1Mk9pZTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuqb6b1uK
mFHG0X7WOXuqtuM/TK88ZYcbl5KnQ3FEJsBwcD3Eg0ie3QmDL9W4L3qGyuu7Ema+
lGDl7IjELoGo/4qbPgbMTIuxOmQDJIfqAGR0hkNVlLr5uxr2MtNX9/2sYnyykgas
WrP9k5PzUl6SyCuLs57AzpD8/eQxRbIPUCtURYdqIn4VbYoHgrdgLrauX0v2d5R8
YzEwn+jda31KiCR4baLXZnFVZ8yhi/JIIHWDO+7qqZI/g0Z8wCG/dL7MiZ94ssGe
EX1eu1F6+hrL11jhILkiAF1jgyDRhUvYAwB3X+WRXS0YKLT22WLg4udKS1yfdqnO
6o2ABgDkTCiztg==
-----END CERTIFICATE-----
Generated at Sat May 4 04:52:10 2024 by rpki-client on console-fra.rpki-client.org