Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft
File:                     L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft (raw, json)
Hash identifier:          jpwVKguIjTlav3Y7uEGZchpsqQxPKJyz/l4nixw86f4=
Subject key identifier:   0F:32:D5:87:A8:9B:B3:63:C1:60:83:14:7E:D9:CF:5E:A3:E5:05:FB
Authority key identifier: 2F:F0:E1:D9:78:0F:C9:22:EB:C2:25:90:38:0F:28:07:07:DD:CF:BB
Certificate issuer:       /CN=2ff0e1d9780fc922ebc22590380f280707ddcfbb
Certificate serial:       018F874982B35FA904B792E252E176FC798D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_Dh2XgPySLrwiWQOA8oBwfdz7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft
Manifest number:          D0
Signing time:             Fri 17 May 2024 16:01:32 +0000
Manifest this update:     Fri 17 May 2024 16:01:32 +0000
Manifest next update:     Sat 18 May 2024 16:01:32 +0000
Files and hashes:         1: L_Dh2XgPySLrwiWQOA8oBwfdz7s.crl (hash: 7q0887okCOF0KWr7dtvzSlOdErXvt1j3diXVwMAzUG4=)
                          2: pTTXmjRmjQvvYJ5mgf7-KuTgpCc.roa (hash: zxaJVXwD3IYH+EmaTEeDHSSO56WWcVfs/JBiIzGvMn0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L_Dh2XgPySLrwiWQOA8oBwfdz7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:82:b3:5f:a9:04:b7:92:e2:52:e1:76:fc:79:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff0e1d9780fc922ebc22590380f280707ddcfbb
        Validity
            Not Before: May 17 16:01:32 2024 GMT
            Not After : May 18 16:01:32 2024 GMT
        Subject: CN=0f32d587a89bb363c16083147ed9cf5ea3e505fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:42:a4:a3:ab:65:30:fe:80:1d:91:3c:65:66:
                    86:e7:f2:22:ba:e4:3a:92:bc:24:1f:73:ec:27:fd:
                    af:72:ba:4a:66:fd:9d:f6:c4:46:d8:cf:4a:c3:9d:
                    2e:11:cf:9b:9d:f9:31:90:8d:66:5f:b5:49:42:59:
                    b9:1f:84:9d:82:29:19:0c:e2:8d:5d:cf:cb:80:97:
                    a4:e0:87:5a:e5:b0:42:ac:12:bc:9a:c1:da:42:e5:
                    f9:a4:84:b2:95:3b:42:21:1e:c2:f0:b0:ae:bf:9f:
                    5e:e3:25:98:81:2e:54:80:bc:d9:24:60:ec:9a:c1:
                    a3:3e:26:39:53:ed:92:c0:77:86:0c:3f:e9:94:24:
                    63:a2:da:35:19:0a:70:39:95:32:47:fd:8b:62:82:
                    03:7e:ff:5a:02:28:90:0f:e0:5f:40:11:26:2d:08:
                    6e:fd:3b:b9:1c:44:21:a6:31:8f:53:77:5d:2e:86:
                    ce:ed:7e:fc:74:87:3b:2e:d7:b0:45:b7:22:f6:6e:
                    78:cf:fc:e5:3a:19:ed:8b:b4:b0:cb:39:2f:ab:84:
                    20:8c:ab:18:a9:46:b0:04:b0:cb:21:31:fa:f8:42:
                    bb:af:24:45:93:d7:19:33:8e:07:9a:3a:20:fc:c7:
                    34:54:18:f4:4f:c8:ba:b5:e0:b8:b4:0c:f0:da:77:
                    c6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:32:D5:87:A8:9B:B3:63:C1:60:83:14:7E:D9:CF:5E:A3:E5:05:FB
            X509v3 Authority Key Identifier:
                keyid:2F:F0:E1:D9:78:0F:C9:22:EB:C2:25:90:38:0F:28:07:07:DD:CF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_Dh2XgPySLrwiWQOA8oBwfdz7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:0f:dd:e6:7b:08:3a:04:f0:ea:3d:29:49:81:6e:d3:56:7a:
         77:e1:4b:43:55:18:e0:57:fd:09:5b:47:66:14:98:a9:f9:9d:
         c2:fe:f3:57:1c:81:df:df:87:c6:d0:d7:5e:dd:6b:ed:c1:3f:
         10:1c:b5:da:b6:2a:55:e3:86:f7:71:c5:b2:a7:77:21:61:43:
         49:c0:da:d3:8c:07:35:ab:6e:26:91:de:f1:3c:7c:57:d9:35:
         38:9c:89:df:80:65:46:9a:b5:5d:c7:5d:f7:ec:19:6f:3e:d6:
         4c:61:9d:df:bf:d4:ac:e4:f8:ef:ef:38:c4:0b:46:01:a3:9b:
         c7:ec:53:4a:a8:52:f3:df:9f:0c:ce:b9:92:79:c4:61:aa:69:
         50:74:7b:f3:2b:13:ea:14:7f:f1:72:88:8e:be:65:22:46:5d:
         31:dd:76:d6:95:14:02:7f:cd:fa:1c:40:48:bf:31:7e:96:a8:
         6d:95:f6:50:91:c0:f9:59:9a:72:54:40:2b:e5:f2:97:d0:b5:
         b0:78:b5:5b:51:84:28:22:52:15:fe:2e:fa:7b:da:e1:a7:af:
         0c:c3:d7:a4:e0:f6:79:33:bb:af:1b:06:f5:31:06:07:0d:96:
         e2:29:2a:63:f9:88:df:60:40:f2:01:37:d6:61:5f:00:43:0e:
         0f:11:c4:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSYKzX6kEt5LiUuF2/HmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZjBlMWQ5NzgwZmM5MjJlYmMyMjU5MDM4MGYyODA3MDdk
ZGNmYmIwHhcNMjQwNTE3MTYwMTMyWhcNMjQwNTE4MTYwMTMyWjAzMTEwLwYDVQQD
EygwZjMyZDU4N2E4OWJiMzYzYzE2MDgzMTQ3ZWQ5Y2Y1ZWEzZTUwNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UKko6tlMP6AHZE8ZWaG5/IiuuQ6
krwkH3PsJ/2vcrpKZv2d9sRG2M9Kw50uEc+bnfkxkI1mX7VJQlm5H4SdgikZDOKN
Xc/LgJek4Ida5bBCrBK8msHaQuX5pISylTtCIR7C8LCuv59e4yWYgS5UgLzZJGDs
msGjPiY5U+2SwHeGDD/plCRjoto1GQpwOZUyR/2LYoIDfv9aAiiQD+BfQBEmLQhu
/Tu5HEQhpjGPU3ddLobO7X78dIc7LtewRbci9m54z/zlOhnti7Swyzkvq4QgjKsY
qUawBLDLITH6+EK7ryRFk9cZM44Hmjog/Mc0VBj0T8i6teC4tAzw2nfG+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8y1Yeom7NjwWCDFH7Zz16j5QX7MB8GA1UdIwQY
MBaAFC/w4dl4D8ki68IlkDgPKAcH3c+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTF9EaDJYZ1B5U0xyd2lXUU9BOG9Cd2ZkejdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wMzk1Y2EtOTRkYi00YzJjLWE2YmQt
MWZkMzYzZmU3YzcyLzEvTF9EaDJYZ1B5U0xyd2lXUU9BOG9Cd2ZkejdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8wMzk1Y2EtOTRkYi00YzJjLWE2YmQtMWZkMzYzZmU3Yzcy
LzEvTF9EaDJYZ1B5U0xyd2lXUU9BOG9Cd2ZkejdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQ/d5nsI
OgTw6j0pSYFu01Z6d+FLQ1UY4Ff9CVtHZhSYqfmdwv7zVxyB39+HxtDXXt1r7cE/
EBy12rYqVeOG93HFsqd3IWFDScDa04wHNatuJpHe8Tx8V9k1OJyJ34BlRpq1Xcdd
9+wZbz7WTGGd37/UrOT47+84xAtGAaObx+xTSqhS89+fDM65knnEYappUHR78ysT
6hR/8XKIjr5lIkZdMd121pUUAn/N+hxASL8xfpaobZX2UJHA+VmaclRAK+Xyl9C1
sHi1W1GEKCJSFf4u+nva4aevDMPXpOD2eTO7rxsG9TEGBw2W4ikqY/mI32BA8gE3
1mFfAEMODxHEpA==
-----END CERTIFICATE-----
Generated at Sat May 18 02:16:18 2024 by rpki-client on console-fra.rpki-client.org