Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/777c74-c6c0-4679-b0bc-4331a1f1abd0/1/EfXV5hsLpNx7zHM-WrISVzU1ay8.mft
File:                     EfXV5hsLpNx7zHM-WrISVzU1ay8.mft (raw, json)
Hash identifier:          Xyh5b5l1vF4HFJ8b4WKPWRZy9EfD8MgfxvfTSc5wAIU=
Subject key identifier:   95:9A:3E:1F:23:1B:D4:77:C1:8A:0A:31:BF:06:04:31:6B:43:1B:8F
Authority key identifier: 11:F5:D5:E6:1B:0B:A4:DC:7B:CC:73:3E:5A:B2:12:57:35:35:6B:2F
Certificate issuer:       /CN=11f5d5e61b0ba4dc7bcc733e5ab2125735356b2f
Certificate serial:       018F4790F8516AD6D05E66AF18D94F604A23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EfXV5hsLpNx7zHM-WrISVzU1ay8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/777c74-c6c0-4679-b0bc-4331a1f1abd0/1/EfXV5hsLpNx7zHM-WrISVzU1ay8.mft
Manifest number:          0C67
Signing time:             Sun 05 May 2024 07:03:54 +0000
Manifest this update:     Sun 05 May 2024 07:03:54 +0000
Manifest next update:     Mon 06 May 2024 07:03:54 +0000
Files and hashes:         1: EfXV5hsLpNx7zHM-WrISVzU1ay8.crl (hash: btVWvxvPqo5z2NERq6F39l8hAAm3ha965hxa+y5AOn8=)
                          2: FytJBBCn_tLTqRhxr6sOKlPUOVg.roa (hash: eD9cTb9WzqGvQRnZdgdJMpqFqR/0KPtWtWQ+Td7gdGQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/777c74-c6c0-4679-b0bc-4331a1f1abd0/1/EfXV5hsLpNx7zHM-WrISVzU1ay8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/777c74-c6c0-4679-b0bc-4331a1f1abd0/1/EfXV5hsLpNx7zHM-WrISVzU1ay8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EfXV5hsLpNx7zHM-WrISVzU1ay8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 07:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:90:f8:51:6a:d6:d0:5e:66:af:18:d9:4f:60:4a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f5d5e61b0ba4dc7bcc733e5ab2125735356b2f
        Validity
            Not Before: May  5 07:03:54 2024 GMT
            Not After : May  6 07:03:54 2024 GMT
        Subject: CN=959a3e1f231bd477c18a0a31bf0604316b431b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:a0:ac:72:05:4c:11:6e:49:c0:b2:35:8b:
                    9c:6c:cb:c1:c6:ec:4a:0f:c2:dc:1b:2c:63:61:43:
                    ab:09:16:a9:e1:6e:85:cd:e3:c5:6e:9c:97:b7:52:
                    ec:03:e8:1b:df:22:10:91:cc:2f:7f:a3:43:46:32:
                    10:e6:14:86:ce:fb:b6:12:82:cb:f1:96:a8:e1:67:
                    b8:5d:f8:fd:1b:32:02:8f:2b:36:da:9f:85:01:27:
                    90:7f:73:e9:ce:60:7f:ed:16:9b:fd:10:95:a4:a9:
                    07:c7:01:c5:13:20:75:c6:81:7b:49:4e:cb:32:1d:
                    51:16:79:6c:9d:f0:90:14:90:60:0f:c5:41:ab:e1:
                    ae:6b:de:3d:72:99:c1:57:aa:7f:13:75:e6:23:d2:
                    13:a1:ae:44:55:dc:6d:37:7e:12:0c:ba:41:fd:8b:
                    34:8b:ab:e4:0c:1f:3f:e7:5d:ae:76:ea:ee:fe:99:
                    12:7a:78:1f:79:e7:14:9f:96:5a:6b:98:b5:85:8f:
                    e0:99:26:dc:c2:f7:e8:e9:32:e9:2e:5f:11:fe:8d:
                    99:97:f9:39:6a:2f:8d:23:e7:7b:90:38:e6:47:ef:
                    73:f4:d2:66:21:b7:0b:f1:8c:dd:91:f8:29:ab:d8:
                    8f:c3:a6:6e:10:73:f2:46:5f:a4:33:35:6f:74:b7:
                    88:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9A:3E:1F:23:1B:D4:77:C1:8A:0A:31:BF:06:04:31:6B:43:1B:8F
            X509v3 Authority Key Identifier:
                keyid:11:F5:D5:E6:1B:0B:A4:DC:7B:CC:73:3E:5A:B2:12:57:35:35:6B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfXV5hsLpNx7zHM-WrISVzU1ay8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/777c74-c6c0-4679-b0bc-4331a1f1abd0/1/EfXV5hsLpNx7zHM-WrISVzU1ay8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/777c74-c6c0-4679-b0bc-4331a1f1abd0/1/EfXV5hsLpNx7zHM-WrISVzU1ay8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:be:2f:40:61:ea:56:b5:ec:4f:24:95:2f:60:d1:14:97:57:
         79:85:68:40:bf:20:54:19:25:d2:64:be:14:37:19:7e:02:e7:
         e3:a2:85:75:ef:8b:49:f0:36:5b:be:ca:3f:e0:e8:f3:5d:87:
         7b:db:1a:2a:72:40:c1:9b:fe:14:36:b1:32:c4:2f:0f:24:16:
         fb:a5:bb:df:ed:95:92:62:53:43:7e:44:33:8c:3d:5a:ba:ab:
         75:1f:34:7d:7b:03:53:43:e2:00:c3:5e:a9:4b:01:75:6f:b6:
         17:ce:47:82:9f:99:1c:d7:d4:54:eb:f0:44:35:1c:bc:84:8f:
         ec:8f:17:e1:85:e1:1d:55:83:8f:ef:30:31:d1:5e:ab:f0:56:
         ef:c1:31:12:12:7f:15:5b:0e:11:45:89:90:d0:97:e8:ce:2e:
         68:69:7e:1e:dc:1e:15:44:36:ca:5f:18:ae:be:c5:43:c9:e0:
         7e:2c:5a:1f:5b:93:b7:7f:c4:ea:f3:b0:51:e8:30:34:d2:e2:
         14:1e:2b:f4:fd:14:7d:8f:89:62:85:ff:b2:b1:b5:cd:d4:dc:
         f7:e5:f3:00:c8:a7:b0:44:8b:b1:a1:1a:dc:cf:ac:7d:49:3e:
         62:2c:54:ac:01:8f:76:a3:e9:f3:60:0b:04:c1:4a:6e:81:f1:
         68:dc:3b:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9HkPhRatbQXmavGNlPYEojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZjVkNWU2MWIwYmE0ZGM3YmNjNzMzZTVhYjIxMjU3MzUz
NTZiMmYwHhcNMjQwNTA1MDcwMzU0WhcNMjQwNTA2MDcwMzU0WjAzMTEwLwYDVQQD
Eyg5NTlhM2UxZjIzMWJkNDc3YzE4YTBhMzFiZjA2MDQzMTZiNDMxYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqagrHIFTBFuScCyNYucbMvBxuxK
D8LcGyxjYUOrCRap4W6FzePFbpyXt1LsA+gb3yIQkcwvf6NDRjIQ5hSGzvu2EoLL
8Zao4We4Xfj9GzICjys22p+FASeQf3PpzmB/7Rab/RCVpKkHxwHFEyB1xoF7SU7L
Mh1RFnlsnfCQFJBgD8VBq+Gua949cpnBV6p/E3XmI9IToa5EVdxtN34SDLpB/Ys0
i6vkDB8/512uduru/pkSengfeecUn5Zaa5i1hY/gmSbcwvfo6TLpLl8R/o2Zl/k5
ai+NI+d7kDjmR+9z9NJmIbcL8Yzdkfgpq9iPw6ZuEHPyRl+kMzVvdLeIpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWaPh8jG9R3wYoKMb8GBDFrQxuPMB8GA1UdIwQY
MBaAFBH11eYbC6Tce8xzPlqyElc1NWsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWZYVjVoc0xwTng3ekhNLVdySVNWelUxYXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS83NzdjNzQtYzZjMC00Njc5LWIwYmMt
NDMzMWExZjFhYmQwLzEvRWZYVjVoc0xwTng3ekhNLVdySVNWelUxYXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS83NzdjNzQtYzZjMC00Njc5LWIwYmMtNDMzMWExZjFhYmQw
LzEvRWZYVjVoc0xwTng3ekhNLVdySVNWelUxYXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoL4vQGHq
VrXsTySVL2DRFJdXeYVoQL8gVBkl0mS+FDcZfgLn46KFde+LSfA2W77KP+Do812H
e9saKnJAwZv+FDaxMsQvDyQW+6W73+2VkmJTQ35EM4w9WrqrdR80fXsDU0PiAMNe
qUsBdW+2F85Hgp+ZHNfUVOvwRDUcvISP7I8X4YXhHVWDj+8wMdFeq/BW78ExEhJ/
FVsOEUWJkNCX6M4uaGl+HtweFUQ2yl8Yrr7FQ8ngfixaH1uTt3/E6vOwUegwNNLi
FB4r9P0UfY+JYoX/srG1zdTc9+XzAMinsESLsaEa3M+sfUk+YixUrAGPdqPp82AL
BMFKboHxaNw7Iw==
-----END CERTIFICATE-----
Generated at Sun May 5 13:25:45 2024 by rpki-client on console-fra.rpki-client.org