Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
File:                     byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json)
Hash identifier:          vvdtaFIMjC4tO3iBZ26vRPUHdRcZsyyfMXJBlvhkXpc=
Subject key identifier:   82:EC:0F:C0:FF:FF:2F:C6:BE:29:56:02:CA:A8:06:7E:D0:56:A8:17
Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
Certificate issuer:       /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Certificate serial:       018F8749DE0AB47D5718D71DCA56876762D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
Manifest number:          015A
Signing time:             Fri 17 May 2024 16:01:56 +0000
Manifest this update:     Fri 17 May 2024 16:01:56 +0000
Manifest next update:     Sat 18 May 2024 16:01:56 +0000
Files and hashes:         1: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: Cl/wdzNeElFybvXu8rNqumSHBqBroqEK8k7IJVq3EEU=)
                          2: j8ITAB9Pg34RHnq8S02XxLdYoL8.roa (hash: BvlHDdVeTg6vkfBBcvyRWN7Ij3Ogo1Jzy/wyqY3y9ok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:de:0a:b4:7d:57:18:d7:1d:ca:56:87:67:62:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
        Validity
            Not Before: May 17 16:01:56 2024 GMT
            Not After : May 18 16:01:56 2024 GMT
        Subject: CN=82ec0fc0ffff2fc6be295602caa8067ed056a817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c2:18:f4:f3:78:e6:7e:36:91:a8:ee:98:e6:
                    fa:3d:dc:43:17:0c:1c:42:fa:a4:68:af:22:6a:6c:
                    7c:df:2d:7f:83:9c:f2:bd:e8:c4:c3:7b:b6:15:7e:
                    4a:0b:d7:c7:d3:dd:52:04:1c:72:29:7f:d6:08:9e:
                    a1:12:79:c2:25:c1:3e:56:2d:4d:73:73:b3:08:31:
                    75:a4:70:4d:17:03:d4:c4:9f:8d:97:2f:3e:9d:8a:
                    ac:8a:88:69:83:fa:9e:33:62:82:12:b7:af:16:ab:
                    f4:d2:23:94:11:de:a2:39:37:62:7d:13:8f:42:58:
                    bc:0d:20:c4:42:9e:a9:97:26:94:70:4a:14:06:0c:
                    76:7e:a2:b8:71:fb:1e:b0:ef:e9:25:a0:8b:d1:2c:
                    1e:ce:ed:5f:6b:79:a9:b4:a4:0b:6a:2c:a5:1f:ae:
                    82:cf:fa:42:9f:8e:5d:92:b9:d0:83:f4:86:c8:12:
                    39:28:b2:8b:22:fb:7b:8a:ce:a9:bc:f6:f1:42:fd:
                    3b:7a:dc:50:39:50:b0:93:7b:b8:79:fa:1d:99:a9:
                    04:c0:69:b5:93:21:f9:2d:03:87:c0:e2:81:6d:64:
                    18:84:08:4a:99:3f:41:83:5b:7d:7b:52:ca:29:78:
                    6c:a6:57:2f:15:d9:cb:0e:fb:a5:7f:c0:17:6c:ce:
                    2f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EC:0F:C0:FF:FF:2F:C6:BE:29:56:02:CA:A8:06:7E:D0:56:A8:17
            X509v3 Authority Key Identifier:
                keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:89:a8:65:ff:5f:fb:82:c6:8e:98:b3:4f:59:30:4b:3a:48:
         57:78:0b:b2:4c:f9:21:3b:9b:42:09:5a:bf:85:9a:51:c1:80:
         ac:d4:77:4e:bd:1c:e8:a7:c7:fd:87:32:07:6e:86:90:ad:32:
         a4:52:d6:fa:19:80:2d:45:9f:87:47:d6:7c:1f:c0:9c:98:ff:
         da:06:3d:0b:35:a2:7f:c8:4e:90:5d:b3:26:fa:aa:56:79:53:
         f2:f5:de:82:c5:ee:94:08:44:bc:db:3b:61:8e:c0:fc:24:86:
         f8:0d:42:f5:e0:55:a9:74:13:71:cb:22:38:c5:71:51:92:d3:
         6e:8f:ac:56:b4:4a:82:22:a4:f1:28:71:90:dc:83:8b:ce:0e:
         24:c7:ce:4b:e8:93:ec:71:0a:88:e8:55:cd:e0:ac:48:12:0e:
         c4:fa:95:5c:13:c4:f5:86:55:36:97:d0:63:20:3f:d6:ed:d9:
         3a:b7:ea:c5:fc:10:13:4a:3b:3b:78:05:d4:5c:c2:27:1f:ea:
         e5:40:bd:f0:22:02:83:ad:52:2d:09:4e:9f:2d:f6:ef:f9:17:
         0f:37:0e:43:19:95:c2:45:d7:c8:24:fa:48:9f:64:6b:19:ba:
         ac:76:64:8d:fd:a4:65:94:32:a1:61:cc:87:88:a0:bb:e3:b2:
         df:cb:1c:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSd4KtH1XGNcdylaHZ2LQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMjdlOGIzMDdlNjU2ZTliZWQ5YTQwZTk5YjRmMDM5Nzdi
N2E4ZDAwHhcNMjQwNTE3MTYwMTU2WhcNMjQwNTE4MTYwMTU2WjAzMTEwLwYDVQQD
Eyg4MmVjMGZjMGZmZmYyZmM2YmUyOTU2MDJjYWE4MDY3ZWQwNTZhODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcIY9PN45n42kajumOb6PdxDFwwc
QvqkaK8iamx83y1/g5zyvejEw3u2FX5KC9fH091SBBxyKX/WCJ6hEnnCJcE+Vi1N
c3OzCDF1pHBNFwPUxJ+Nly8+nYqsiohpg/qeM2KCErevFqv00iOUEd6iOTdifROP
Qli8DSDEQp6plyaUcEoUBgx2fqK4cfsesO/pJaCL0Swezu1fa3mptKQLaiylH66C
z/pCn45dkrnQg/SGyBI5KLKLIvt7is6pvPbxQv07etxQOVCwk3u4efodmakEwGm1
kyH5LQOHwOKBbWQYhAhKmT9Bg1t9e1LKKXhsplcvFdnLDvulf8AXbM4v/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILsD8D//y/GvilWAsqoBn7QVqgXMB8GA1UdIwQY
MBaAFG8n6LMH5lbpvtmkDpm08Dl3t6jQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wZDI0OGEtMzVlMC00ODNkLThmNGMt
YjkzMWFlNTM5ZTdkLzEvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wZDI0OGEtMzVlMC00ODNkLThmNGMtYjkzMWFlNTM5ZTdk
LzEvYnlmb3N3Zm1WdW0tMmFRT21iVHdPWGUzcU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4ImoZf9f
+4LGjpizT1kwSzpIV3gLskz5ITubQglav4WaUcGArNR3Tr0c6KfH/YcyB26GkK0y
pFLW+hmALUWfh0fWfB/AnJj/2gY9CzWif8hOkF2zJvqqVnlT8vXegsXulAhEvNs7
YY7A/CSG+A1C9eBVqXQTccsiOMVxUZLTbo+sVrRKgiKk8ShxkNyDi84OJMfOS+iT
7HEKiOhVzeCsSBIOxPqVXBPE9YZVNpfQYyA/1u3ZOrfqxfwQE0o7O3gF1FzCJx/q
5UC98CICg61SLQlOny327/kXDzcOQxmVwkXXyCT6SJ9kaxm6rHZkjf2kZZQyoWHM
h4igu+Oy38sc1Q==
-----END CERTIFICATE-----
Generated at Sat May 18 00:26:46 2024 by rpki-client on console-ams.rpki-client.org