Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
File:                     EkSUR-va8tRKSYs9rlJaL1In8Yo.mft (raw, json)
Hash identifier:          857JJQ2FSulPMCr0ePbqpCaRzYOc5+8KWYi7V34Z1G8=
Subject key identifier:   44:2F:64:BF:FD:2F:D3:48:C8:18:65:57:44:8D:32:70:47:52:DC:23
Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
Certificate issuer:       /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Certificate serial:       018F3C9D180CAF3BFFF262AF98DB49D02F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
Manifest number:          0D63
Signing time:             Fri 03 May 2024 04:01:19 +0000
Manifest this update:     Fri 03 May 2024 04:01:19 +0000
Manifest next update:     Sat 04 May 2024 04:01:19 +0000
Files and hashes:         1: EkSUR-va8tRKSYs9rlJaL1In8Yo.crl (hash: bA9DsjHJHP/d6LvwugF7woBUeiEXkJExFqF3xYqMJTI=)
                          2: UOMV9Ybrd_tAcVHqTWmjGDNoYBU.roa (hash: ZY5xYbSSfdTH+OCsgxV1iiBrF2a/yBFsq8Gz+KaQsZA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:9d:18:0c:af:3b:ff:f2:62:af:98:db:49:d0:2f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
        Validity
            Not Before: May  3 04:01:19 2024 GMT
            Not After : May  4 04:01:19 2024 GMT
        Subject: CN=442f64bffd2fd348c8186557448d32704752dc23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bb:4d:71:18:66:bc:45:cd:2e:02:8f:ed:5a:
                    c7:c0:49:08:0d:b9:6e:98:b5:44:f0:4d:41:f5:9f:
                    f3:aa:6a:7a:f7:3a:f1:ea:82:8b:00:ab:65:c6:8b:
                    24:5f:d7:e6:ca:21:4f:8c:96:06:30:f4:d5:bd:4d:
                    f8:21:e0:42:7d:58:c2:d1:b4:98:72:95:1f:ae:fb:
                    48:aa:2d:ae:78:a7:2b:fd:ac:c4:95:5e:0f:15:08:
                    72:10:98:97:ac:36:bc:18:90:17:c4:f6:28:ac:b4:
                    c8:69:a4:62:ec:55:a8:58:c4:83:9f:21:ea:9f:65:
                    c5:d3:9e:53:0d:15:e8:00:0b:07:81:d7:b1:3b:2e:
                    b4:d2:91:0b:bf:9a:fe:26:92:bb:ad:22:dc:9e:56:
                    26:68:85:6e:46:9a:a6:a9:30:7c:5f:42:1d:d3:07:
                    f8:91:19:d0:f5:83:65:ad:9a:a0:da:d1:a7:8d:d8:
                    18:a9:82:15:f5:33:79:f4:45:93:a1:25:84:d7:98:
                    55:31:c9:34:ef:9b:d9:8e:79:55:fc:7e:2b:b7:06:
                    24:ea:81:36:8c:3f:0d:24:fd:07:2a:39:84:14:ff:
                    54:69:9a:48:02:92:fb:c1:06:b4:ac:08:b6:c1:78:
                    5c:86:17:ac:f1:f5:93:47:18:df:ae:d3:14:a1:52:
                    4f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2F:64:BF:FD:2F:D3:48:C8:18:65:57:44:8D:32:70:47:52:DC:23
            X509v3 Authority Key Identifier:
                keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:50:c9:fa:83:9a:01:7e:b9:e3:fd:3b:4d:1a:36:62:f2:04:
         59:13:57:91:14:a8:ee:e9:3a:e4:51:6c:32:ef:3a:77:0c:6d:
         e0:01:a3:e2:1d:6d:f1:32:76:03:f7:c9:46:1f:af:37:d2:14:
         13:fc:3d:13:36:67:a5:34:c2:e2:96:79:b1:2e:cb:24:a9:60:
         46:f8:9b:96:25:97:cb:7a:c9:01:06:b1:b5:55:e2:92:a5:6d:
         13:55:9a:c9:e3:ec:7e:d8:1c:b9:1b:5d:fc:20:ba:ec:1b:31:
         23:c2:27:26:43:6c:55:34:59:1e:21:9d:ad:39:e2:29:a8:ad:
         ac:d8:32:01:0d:d1:7d:ef:03:9f:ac:95:d4:4f:e1:41:12:d3:
         36:c5:28:9e:34:e1:5c:31:c0:cd:71:9e:0a:4c:df:f9:65:41:
         b4:e3:7b:9e:7e:a4:2b:c8:8c:d7:80:e1:14:13:5d:e8:c4:31:
         1e:79:27:cd:6e:73:fb:f1:cf:fc:ab:37:a4:78:21:99:bb:ea:
         d1:8b:27:ba:9d:1c:c0:51:2a:70:bd:3c:82:09:66:86:4d:0e:
         76:a8:96:ea:fc:a7:96:01:1a:5c:62:ed:98:e5:dd:03:77:70:
         d8:46:df:f7:d2:03:cd:10:c8:62:86:69:8d:a6:81:70:c5:97:
         10:52:96:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY88nRgMrzv/8mKvmNtJ0C9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNDQ5NDQ3ZWJkYWYyZDQ0YTQ5OGIzZGFlNTI1YTJmNTIy
N2YxOGEwHhcNMjQwNTAzMDQwMTE5WhcNMjQwNTA0MDQwMTE5WjAzMTEwLwYDVQQD
Eyg0NDJmNjRiZmZkMmZkMzQ4YzgxODY1NTc0NDhkMzI3MDQ3NTJkYzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbtNcRhmvEXNLgKP7VrHwEkIDblu
mLVE8E1B9Z/zqmp69zrx6oKLAKtlxoskX9fmyiFPjJYGMPTVvU34IeBCfVjC0bSY
cpUfrvtIqi2ueKcr/azElV4PFQhyEJiXrDa8GJAXxPYorLTIaaRi7FWoWMSDnyHq
n2XF055TDRXoAAsHgdexOy600pELv5r+JpK7rSLcnlYmaIVuRpqmqTB8X0Id0wf4
kRnQ9YNlrZqg2tGnjdgYqYIV9TN59EWToSWE15hVMck075vZjnlV/H4rtwYk6oE2
jD8NJP0HKjmEFP9UaZpIApL7wQa0rAi2wXhchhes8fWTRxjfrtMUoVJPlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQvZL/9L9NIyBhlV0SNMnBHUtwjMB8GA1UdIwQY
MBaAFBJElEfr2vLUSkmLPa5SWi9SJ/GKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZmIxNzEtMTFmNC00YzVmLTgzZTct
MmVkMWZkZTY4NTE2LzEvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85ZmIxNzEtMTFmNC00YzVmLTgzZTctMmVkMWZkZTY4NTE2
LzEvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFDJ+oOa
AX654/07TRo2YvIEWRNXkRSo7uk65FFsMu86dwxt4AGj4h1t8TJ2A/fJRh+vN9IU
E/w9EzZnpTTC4pZ5sS7LJKlgRvibliWXy3rJAQaxtVXikqVtE1WayePsftgcuRtd
/CC67BsxI8InJkNsVTRZHiGdrTniKaitrNgyAQ3Rfe8Dn6yV1E/hQRLTNsUonjTh
XDHAzXGeCkzf+WVBtON7nn6kK8iM14DhFBNd6MQxHnknzW5z+/HP/Ks3pHghmbvq
0Ysnup0cwFEqcL08gglmhk0OdqiW6vynlgEaXGLtmOXdA3dw2Ebf99IDzRDIYoZp
jaaBcMWXEFKWvg==
-----END CERTIFICATE-----
Generated at Fri May 3 07:08:27 2024 by rpki-client on console-ams.rpki-client.org