Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File:                     ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier:          MhWV0QvtGzie0nSKk1tuHhc0js89i+aUEnbnQSzVh0Y=
Subject key identifier:   36:E8:48:60:DA:E1:9E:F2:65:DB:2E:D1:47:C6:1B:B2:13:7A:54:B5
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer:       /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial:       018F874A43A9B93DEBA550F6DABEECA60850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number:          01FB
Signing time:             Fri 17 May 2024 16:02:22 +0000
Manifest this update:     Fri 17 May 2024 16:02:22 +0000
Manifest next update:     Sat 18 May 2024 16:02:22 +0000
Files and hashes:         1: 1ZhvohqJa0haJF59cBkamXwUyuU.roa (hash: rUega7rZ2RAsTeGHrogjaNxjs4yKk/fYdC7luGAJYFE=)
                          2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: g/ZWIzsXpgaTsbJrOQdf10+q3w77DeJ6o4LxflOal3E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:43:a9:b9:3d:eb:a5:50:f6:da:be:ec:a6:08:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
        Validity
            Not Before: May 17 16:02:22 2024 GMT
            Not After : May 18 16:02:22 2024 GMT
        Subject: CN=36e84860dae19ef265db2ed147c61bb2137a54b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d1:df:7c:b9:44:b6:84:27:05:73:59:af:c1:
                    26:6f:93:9a:07:b3:f1:ac:ee:85:8f:b3:b0:8a:4e:
                    d3:2a:af:49:4f:13:d0:b0:ba:90:72:0e:bf:8a:e7:
                    5a:e3:72:37:71:a2:65:51:7c:dc:95:ac:09:4b:bf:
                    9d:d0:11:a7:2e:16:19:24:e9:87:14:de:1c:f5:dc:
                    c0:f2:df:a8:d4:a2:73:57:5f:d9:69:3a:ae:f6:c3:
                    2c:41:a0:4b:38:2e:04:d9:44:15:92:29:44:16:aa:
                    08:d9:f5:dc:6f:7b:69:8e:2a:d8:c8:cb:48:6b:10:
                    10:1d:17:50:e5:9d:a7:c4:cd:7d:36:1b:44:5a:5e:
                    8c:71:b6:a4:d7:d6:09:a4:8c:46:17:84:2e:f4:c3:
                    f6:c0:e3:b6:22:72:78:e6:a3:aa:85:0d:d1:e1:5a:
                    47:d3:16:fd:b1:7b:68:da:54:b1:14:1d:ec:fe:1c:
                    4b:75:87:b0:12:f6:f8:e2:66:e6:82:18:33:a5:78:
                    02:bd:14:7a:ef:20:28:0a:8d:5e:63:a7:9e:2d:15:
                    db:d8:3e:40:1d:5d:95:27:98:ff:67:22:60:fa:7c:
                    3a:ff:3c:56:4a:98:f9:a7:1b:f6:40:47:0a:fe:e5:
                    5e:4a:1a:ab:0b:a3:5d:99:f4:00:51:64:33:3b:6c:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E8:48:60:DA:E1:9E:F2:65:DB:2E:D1:47:C6:1B:B2:13:7A:54:B5
            X509v3 Authority Key Identifier:
                keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:06:1f:50:40:67:4f:42:f9:e5:67:d3:50:52:0b:f0:10:86:
         0a:66:63:fc:9c:86:21:3b:eb:49:ce:e3:3b:8c:84:36:62:0f:
         05:21:8f:d9:db:fc:71:62:1b:14:ea:76:6b:36:49:9d:3c:75:
         5d:32:58:1b:38:c8:d9:eb:dc:1b:f0:f1:f9:c2:aa:78:ef:8c:
         f1:5c:ef:94:1e:ad:0b:0b:90:92:22:b3:00:86:e6:c6:b0:c6:
         e9:e0:1b:3f:ec:eb:95:1c:6d:41:17:07:45:6f:41:6e:0a:25:
         b7:97:82:ec:a0:c9:49:e6:4f:ea:23:2b:29:1b:6e:74:08:07:
         fc:f2:ba:3e:21:69:af:1c:64:39:20:66:c3:65:34:75:fe:dc:
         01:42:b2:de:65:7e:95:ae:e3:6d:a5:0d:a2:06:f4:bb:ba:7f:
         6a:4c:36:8b:5b:af:3b:53:b1:f1:e5:db:5e:f7:a4:98:3d:c8:
         d1:41:55:ce:3b:ac:47:2f:7d:69:5f:48:8e:47:18:76:f3:6d:
         61:ce:af:c3:db:15:8b:41:78:77:27:42:b9:f9:2f:a1:92:97:
         94:11:1d:0d:4b:2a:08:f8:8b:5c:4a:9d:e5:ec:00:55:bb:d6:
         df:15:f9:f6:74:e3:de:a0:81:3e:4a:2f:a7:f1:50:33:83:99:
         cd:db:8e:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSkOpuT3rpVD22r7spghQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjE2NzRiYmYwZDExOGYyNTU0ZjgwY2FmZDNlZjFiMzlk
OGFlM2YwHhcNMjQwNTE3MTYwMjIyWhcNMjQwNTE4MTYwMjIyWjAzMTEwLwYDVQQD
EygzNmU4NDg2MGRhZTE5ZWYyNjVkYjJlZDE0N2M2MWJiMjEzN2E1NGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9HffLlEtoQnBXNZr8Emb5OaB7Px
rO6Fj7Owik7TKq9JTxPQsLqQcg6/iuda43I3caJlUXzclawJS7+d0BGnLhYZJOmH
FN4c9dzA8t+o1KJzV1/ZaTqu9sMsQaBLOC4E2UQVkilEFqoI2fXcb3tpjirYyMtI
axAQHRdQ5Z2nxM19NhtEWl6Mcbak19YJpIxGF4Qu9MP2wOO2InJ45qOqhQ3R4VpH
0xb9sXto2lSxFB3s/hxLdYewEvb44mbmghgzpXgCvRR67yAoCo1eY6eeLRXb2D5A
HV2VJ5j/ZyJg+nw6/zxWSpj5pxv2QEcK/uVeShqrC6NdmfQAUWQzO2zkMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDboSGDa4Z7yZdsu0UfGG7ITelS1MB8GA1UdIwQY
MBaAFBKxZ0u/DRGPJVT4DK/T7xs52K4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgt
ZjM3MWY5OGE3NTNiLzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgtZjM3MWY5OGE3NTNi
LzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvwYfUEBn
T0L55WfTUFIL8BCGCmZj/JyGITvrSc7jO4yENmIPBSGP2dv8cWIbFOp2azZJnTx1
XTJYGzjI2evcG/Dx+cKqeO+M8VzvlB6tCwuQkiKzAIbmxrDG6eAbP+zrlRxtQRcH
RW9Bbgolt5eC7KDJSeZP6iMrKRtudAgH/PK6PiFprxxkOSBmw2U0df7cAUKy3mV+
la7jbaUNogb0u7p/akw2i1uvO1Ox8eXbXvekmD3I0UFVzjusRy99aV9IjkcYdvNt
Yc6vw9sVi0F4dydCufkvoZKXlBEdDUsqCPiLXEqd5ewAVbvW3xX59nTj3qCBPkov
p/FQM4OZzduO1g==
-----END CERTIFICATE-----
Generated at Fri May 17 19:04:44 2024 by rpki-client on console-fra.rpki-client.org