Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File:                     8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier:          sFhQFokNp5/3xKZRvh11Z6wJ2njndtI3R2MrLQ1oK0o=
Subject key identifier:   EC:C4:CA:12:C0:8F:80:9D:3B:0A:F8:EB:30:9F:D0:B9:C7:4A:72:59
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer:       /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial:       018F91951FA53CED5686D23339937D602120
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number:          117E
Signing time:             Sun 19 May 2024 16:00:20 +0000
Manifest this update:     Sun 19 May 2024 16:00:20 +0000
Manifest next update:     Mon 20 May 2024 16:00:20 +0000
Files and hashes:         1: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: 3SFlDBk8efB5JprET0OUiUZTNuccPautv+fpfwec+Mo=)
                          2: KSJEDKrf-Z0fTUd_4TdafrtV4ls.roa (hash: WqllEbKcC8BLeN2qGqX6H+0m3QrEujRn9usXt+0M4mI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:91:95:1f:a5:3c:ed:56:86:d2:33:39:93:7d:60:21:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
        Validity
            Not Before: May 19 16:00:20 2024 GMT
            Not After : May 20 16:00:20 2024 GMT
        Subject: CN=ecc4ca12c08f809d3b0af8eb309fd0b9c74a7259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:18:16:13:c4:60:2d:dc:fd:ea:59:42:62:
                    a3:7e:18:25:1f:ca:e5:fa:4e:ad:62:b8:fa:39:85:
                    74:60:01:3b:ca:a4:91:80:55:e3:2f:15:9f:f6:16:
                    6f:ff:53:37:c6:8d:01:78:a8:77:3d:71:cc:40:9d:
                    26:c4:86:f4:9a:a6:6a:2f:04:e1:8c:19:87:eb:11:
                    a7:71:43:51:47:b5:d3:79:5f:7f:51:a0:e6:09:dc:
                    f8:52:39:39:2a:b2:d3:b0:30:e2:1f:b5:2a:c8:5e:
                    8b:cb:e0:08:94:4e:67:0c:78:15:0d:b8:d3:de:38:
                    ed:24:22:75:81:68:58:04:23:af:f1:9b:3b:20:78:
                    fe:d1:28:fc:bb:8f:39:98:b0:1b:5f:df:f1:84:28:
                    f2:80:22:c4:bd:fa:0d:2a:09:14:24:49:7d:05:13:
                    0f:b5:cc:ab:8d:79:e4:24:e0:45:49:c6:bf:d8:a4:
                    45:32:21:73:b2:33:3c:55:f9:83:8c:a0:82:c5:78:
                    bf:29:0c:2d:c0:8c:7e:c9:a5:0e:a9:10:23:f3:62:
                    f4:69:92:5a:84:4b:a8:21:32:51:8f:c7:28:9e:1a:
                    73:e6:12:62:a5:52:20:0a:5e:7a:64:65:3e:49:8c:
                    f3:c3:95:3f:10:ac:43:6c:f5:36:3c:74:67:6f:fe:
                    a1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C4:CA:12:C0:8F:80:9D:3B:0A:F8:EB:30:9F:D0:B9:C7:4A:72:59
            X509v3 Authority Key Identifier:
                keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:5b:e2:fb:da:69:d0:be:33:5d:7c:1f:5c:d6:d7:22:ab:6d:
         ae:97:a8:6f:21:f7:b0:c7:ec:db:a0:e7:52:47:55:4a:1e:12:
         ae:a9:d8:16:60:d1:b6:e1:94:cf:8d:48:59:c7:de:10:be:68:
         b5:ac:4c:94:b2:0b:18:bb:a5:2f:51:2b:08:3b:7b:6d:67:7e:
         68:93:f0:5c:4f:b9:78:78:fa:22:8b:43:5c:9b:89:b0:63:e3:
         c0:4c:1e:41:bf:ed:24:e0:fa:90:32:1f:3b:13:dc:df:31:6c:
         76:f9:b9:46:84:50:6d:78:1b:e3:60:ae:6c:0a:6a:47:b1:5d:
         86:0f:d4:8e:a8:e7:c6:da:c8:bc:fe:bc:b7:dc:10:89:29:3c:
         2c:bf:23:33:87:da:81:c9:d5:97:4b:c2:3a:b9:b6:e4:42:ed:
         63:5c:12:dd:76:82:e7:97:44:b1:e6:a4:2a:c4:35:c9:31:0d:
         6d:48:8f:c5:d3:49:5a:72:f3:38:97:10:42:cd:7f:bb:97:bd:
         f2:25:4a:2c:49:ee:3c:f0:0c:1e:b8:88:92:63:73:bc:62:40:
         5a:5c:57:a4:c9:cc:92:23:3f:ae:77:23:40:b0:4c:ef:b9:a8:
         77:40:f8:d1:e8:9e:ac:8b:e0:26:0e:db:21:38:b8:2b:2b:33:
         b6:c1:54:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+RlR+lPO1WhtIzOZN9YCEgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmUyOGU4YWM3YWIxOGM3MzA3OWRlODRjODA5N2Q3ODJh
YWI2OWEwHhcNMjQwNTE5MTYwMDIwWhcNMjQwNTIwMTYwMDIwWjAzMTEwLwYDVQQD
EyhlY2M0Y2ExMmMwOGY4MDlkM2IwYWY4ZWIzMDlmZDBiOWM3NGE3MjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iUYFhPEYC3c/epZQmKjfhglH8rl
+k6tYrj6OYV0YAE7yqSRgFXjLxWf9hZv/1M3xo0BeKh3PXHMQJ0mxIb0mqZqLwTh
jBmH6xGncUNRR7XTeV9/UaDmCdz4Ujk5KrLTsDDiH7UqyF6Ly+AIlE5nDHgVDbjT
3jjtJCJ1gWhYBCOv8Zs7IHj+0Sj8u485mLAbX9/xhCjygCLEvfoNKgkUJEl9BRMP
tcyrjXnkJOBFSca/2KRFMiFzsjM8VfmDjKCCxXi/KQwtwIx+yaUOqRAj82L0aZJa
hEuoITJRj8conhpz5hJipVIgCl56ZGU+SYzzw5U/EKxDbPU2PHRnb/6hKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzEyhLAj4CdOwr46zCf0LnHSnJZMB8GA1UdIwQY
MBaAFPAuKOiserGMcwed6EyAl9eCqraaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODkt
OWZmYjBlNDFjNGVmLzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODktOWZmYjBlNDFjNGVm
LzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1vi+9pp
0L4zXXwfXNbXIqttrpeobyH3sMfs26DnUkdVSh4SrqnYFmDRtuGUz41IWcfeEL5o
taxMlLILGLulL1ErCDt7bWd+aJPwXE+5eHj6IotDXJuJsGPjwEweQb/tJOD6kDIf
OxPc3zFsdvm5RoRQbXgb42CubApqR7Fdhg/UjqjnxtrIvP68t9wQiSk8LL8jM4fa
gcnVl0vCOrm25ELtY1wS3XaC55dEseakKsQ1yTENbUiPxdNJWnLzOJcQQs1/u5e9
8iVKLEnuPPAMHriIkmNzvGJAWlxXpMnMkiM/rncjQLBM77mod0D40eierIvgJg7b
ITi4KysztsFU3g==
-----END CERTIFICATE-----
Generated at Sun May 19 17:33:43 2024 by rpki-client on console-ams.rpki-client.org