Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
File:                     0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json)
Hash identifier:          dn0hWzH0260ON4ZxmZIWMhYDfO/F2vVxJJA8FnQF1R0=
Subject key identifier:   92:16:25:E1:D2:55:A8:A6:E4:EC:B9:09:E2:12:3B:C6:CB:6B:3D:4F
Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
Certificate issuer:       /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Certificate serial:       018F58F182B81D0CA026B28C6D972D797560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
Manifest number:          115F
Signing time:             Wed 08 May 2024 16:02:53 +0000
Manifest this update:     Wed 08 May 2024 16:02:53 +0000
Manifest next update:     Thu 09 May 2024 16:02:53 +0000
Files and hashes:         1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: RSOCS8XhPtTalg6fETBK1/FRqqVQJVjiUJA34Jdtxsk=)
                          2: nj-KYHgk-BCweKny_1XDjWvbM_Q.roa (hash: gX8WL540uksZhkT6OTgt15hq9BVQhctJqr1MNoOdv08=)
                          3: uIyn0rYDPV5V6d_JYdEI72IyG74.roa (hash: epSwPNgpIwrsUiUZdCwjvYtXGtSrL1S+qZ85hQN6KMQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:f1:82:b8:1d:0c:a0:26:b2:8c:6d:97:2d:79:75:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
        Validity
            Not Before: May  8 16:02:53 2024 GMT
            Not After : May  9 16:02:53 2024 GMT
        Subject: CN=921625e1d255a8a6e4ecb909e2123bc6cb6b3d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:80:b8:ec:ab:40:a0:9d:d0:4a:65:87:fc:
                    e2:c8:f7:14:e4:a0:29:24:d9:1a:95:83:da:6b:6b:
                    a3:bf:0b:59:16:34:4a:e0:c4:c5:26:cd:5f:41:ea:
                    ee:24:7d:2c:55:4c:60:e0:12:34:ed:f7:33:5e:34:
                    9c:f8:01:e7:ce:af:6a:98:57:70:f3:8b:29:55:6d:
                    c2:51:d0:ed:3f:a7:b1:64:22:f8:55:be:7f:fa:00:
                    f8:22:ce:91:7a:64:9b:d4:f2:c3:44:fb:f1:5b:17:
                    4b:55:c0:d9:ea:94:6e:95:63:71:60:17:5c:33:23:
                    df:e8:d2:df:a7:41:02:ae:a5:49:b5:7f:d5:12:4d:
                    5c:61:c7:37:25:79:81:f5:76:94:19:25:50:ff:16:
                    81:4e:94:bb:32:29:64:cb:c2:05:94:52:f1:54:33:
                    da:cd:d9:ec:87:6a:0c:32:02:78:f9:ca:6b:a9:e9:
                    8b:01:67:f1:12:4e:78:a3:ba:ae:f8:03:24:f9:d9:
                    82:e3:8e:56:3f:e7:70:2f:81:e1:c2:91:f3:00:09:
                    c8:7d:7a:fc:24:ee:34:2a:14:ed:7b:33:91:5e:f2:
                    34:14:3b:f5:f2:31:43:64:0f:03:00:22:d3:ef:9d:
                    8a:a5:ae:2e:69:3e:16:7d:7a:74:8d:86:3a:97:e9:
                    d2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:16:25:E1:D2:55:A8:A6:E4:EC:B9:09:E2:12:3B:C6:CB:6B:3D:4F
            X509v3 Authority Key Identifier:
                keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c0:92:58:4a:40:b1:f9:68:9e:56:99:30:80:47:fd:d6:1c:
         ff:60:89:92:39:1f:e8:f4:d7:5c:b4:9a:70:1d:49:f1:c8:92:
         72:a8:7b:31:d1:5b:2f:b0:47:7a:a9:08:2e:ff:b3:75:cb:9b:
         5b:90:cd:39:5c:79:4e:6d:1a:64:fb:03:33:6c:db:9d:a4:21:
         ac:c8:70:6b:c2:ad:61:58:6f:c5:21:f1:0b:6d:f1:6c:ba:c4:
         8c:b8:6d:9b:87:2e:da:52:50:ff:11:53:82:97:5f:15:5f:82:
         1a:99:2b:aa:11:86:f4:9a:3b:41:01:93:3c:86:e7:c6:7f:d8:
         08:8e:54:c5:66:35:33:07:60:ad:49:e5:98:48:88:36:b2:61:
         2c:00:2b:6c:24:5d:ba:5d:15:b3:cf:0b:7a:39:7c:e3:30:af:
         a4:68:44:28:84:c3:de:dc:53:32:fc:cb:03:c8:dd:7a:02:c4:
         10:12:f7:f3:2b:9c:59:67:65:ae:5b:56:87:e2:dc:7b:ba:ff:
         22:f2:09:c4:99:38:bb:5b:72:0a:71:89:2f:6a:3f:b9:28:0a:
         4d:a5:f9:62:57:72:44:94:2d:e2:61:94:4c:62:c3:03:c8:83:
         1e:62:10:db:2a:06:8d:4a:91:58:b5:82:02:c4:c0:5b:25:73:
         f7:85:cc:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Y8YK4HQygJrKMbZcteXVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2RjMzVlYmNkODhkZDBlMmE4ZGIzYTVhMDg2NTRiYzNi
ZTAyNjIwHhcNMjQwNTA4MTYwMjUzWhcNMjQwNTA5MTYwMjUzWjAzMTEwLwYDVQQD
Eyg5MjE2MjVlMWQyNTVhOGE2ZTRlY2I5MDllMjEyM2JjNmNiNmIzZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06aAuOyrQKCd0Eplh/ziyPcU5KAp
JNkalYPaa2ujvwtZFjRK4MTFJs1fQeruJH0sVUxg4BI07fczXjSc+AHnzq9qmFdw
84spVW3CUdDtP6exZCL4Vb5/+gD4Is6RemSb1PLDRPvxWxdLVcDZ6pRulWNxYBdc
MyPf6NLfp0ECrqVJtX/VEk1cYcc3JXmB9XaUGSVQ/xaBTpS7Milky8IFlFLxVDPa
zdnsh2oMMgJ4+cprqemLAWfxEk54o7qu+AMk+dmC445WP+dwL4HhwpHzAAnIfXr8
JO40KhTtezORXvI0FDv18jFDZA8DACLT752Kpa4uaT4WfXp0jYY6l+nS8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIWJeHSVaim5Oy5CeISO8bLaz1PMB8GA1UdIwQY
MBaAFNB9w1682I3Q4qjbOloIZUvDvgJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xYzcxOGQtZTdhMC00MGFjLWExODEt
Y2JhYTQyYTYyNzI3LzEvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8xYzcxOGQtZTdhMC00MGFjLWExODEtY2JhYTQyYTYyNzI3
LzEvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisCSWEpA
sflonlaZMIBH/dYc/2CJkjkf6PTXXLSacB1J8ciScqh7MdFbL7BHeqkILv+zdcub
W5DNOVx5Tm0aZPsDM2zbnaQhrMhwa8KtYVhvxSHxC23xbLrEjLhtm4cu2lJQ/xFT
gpdfFV+CGpkrqhGG9Jo7QQGTPIbnxn/YCI5UxWY1MwdgrUnlmEiINrJhLAArbCRd
ul0Vs88Lejl84zCvpGhEKITD3txTMvzLA8jdegLEEBL38yucWWdlrltWh+Lce7r/
IvIJxJk4u1tyCnGJL2o/uSgKTaX5YldyRJQt4mGUTGLDA8iDHmIQ2yoGjUqRWLWC
AsTAWyVz94XMgQ==
-----END CERTIFICATE-----
Generated at Wed May 8 22:22:35 2024 by rpki-client on console-fra.rpki-client.org