Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/cF7mfUoS1TxE5wHL2JakhXXrJQM.mft
File:                     cF7mfUoS1TxE5wHL2JakhXXrJQM.mft (raw, json)
Hash identifier:          qpB7fqlIIjon7HDHjyRSWB8F9yEtlNHqtRf4gxXI67s=
Subject key identifier:   99:D7:64:C5:45:B1:A2:72:61:EB:C2:B1:12:6C:EA:69:55:4C:DD:F1
Authority key identifier: 70:5E:E6:7D:4A:12:D5:3C:44:E7:01:CB:D8:96:A4:85:75:EB:25:03
Certificate issuer:       /CN=705ee67d4a12d53c44e701cbd896a48575eb2503
Certificate serial:       018F9B7432ABACEC35DB93CE437A34C566B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cF7mfUoS1TxE5wHL2JakhXXrJQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/cF7mfUoS1TxE5wHL2JakhXXrJQM.mft
Manifest number:          07B5
Signing time:             Tue 21 May 2024 14:00:34 +0000
Manifest this update:     Tue 21 May 2024 14:00:34 +0000
Manifest next update:     Wed 22 May 2024 14:00:34 +0000
Files and hashes:         1: 1KU8ZrQonkpVgI9JI6vF7_XRmu8.roa (hash: tNFJay4/EO0rIYy7o57ROVrAdBfAImMgBd0FPMzEHtI=)
                          2: cF7mfUoS1TxE5wHL2JakhXXrJQM.crl (hash: 1wM0c49eBB6oy8oqSZEk/pl0bkQ1LlLjn/1BP1kt7YI=)
                          3: mYR1pe0nhTrUuscwPv1efG6KRFI.roa (hash: Wg9SYOSj96XT7SztucBteVoSgOpbEb+kPK3WiHCWRHM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/cF7mfUoS1TxE5wHL2JakhXXrJQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/cF7mfUoS1TxE5wHL2JakhXXrJQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cF7mfUoS1TxE5wHL2JakhXXrJQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9b:74:32:ab:ac:ec:35:db:93:ce:43:7a:34:c5:66:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=705ee67d4a12d53c44e701cbd896a48575eb2503
        Validity
            Not Before: May 21 14:00:34 2024 GMT
            Not After : May 22 14:00:34 2024 GMT
        Subject: CN=99d764c545b1a27261ebc2b1126cea69554cddf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e4:3a:a1:59:11:aa:e7:35:07:c8:64:f9:4a:
                    95:a6:28:f7:58:fc:50:e4:f7:b2:4d:92:06:d8:90:
                    2e:e4:00:59:b6:1e:b6:77:a6:90:26:fd:c4:89:b5:
                    09:98:bd:68:88:c3:6d:f6:f1:b6:06:48:88:41:47:
                    5b:e1:5d:2f:11:d7:59:af:40:b7:9c:e3:85:f3:1c:
                    f8:78:a4:34:23:0c:8a:25:07:33:73:77:22:8f:28:
                    ac:cb:92:2e:db:52:39:c3:9c:ab:5c:95:b1:8b:a4:
                    27:24:ae:ab:ca:0a:d5:9e:f8:dc:38:63:c3:a1:eb:
                    59:65:fe:ca:a7:78:17:24:3a:0f:f2:96:fb:e1:c0:
                    5d:73:d8:6b:fd:7e:35:95:21:2d:81:ec:df:37:5c:
                    47:e4:ef:ab:ab:16:9c:ad:8f:0c:fa:e6:bf:a9:be:
                    29:6c:6a:ee:a7:33:3f:38:b9:51:dc:27:5a:bd:0f:
                    13:99:4a:4d:a7:af:e7:d5:19:9d:a2:a8:b9:46:aa:
                    8a:2e:35:df:3e:c9:10:45:d0:14:7a:3f:ff:27:4d:
                    73:8d:55:c9:69:a4:f7:d5:86:db:5b:ca:db:b8:14:
                    c0:20:f2:51:37:4a:58:c1:a1:99:ab:d0:4e:79:c5:
                    bc:f5:9e:c7:01:71:7b:0d:25:e3:db:00:cf:86:1b:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D7:64:C5:45:B1:A2:72:61:EB:C2:B1:12:6C:EA:69:55:4C:DD:F1
            X509v3 Authority Key Identifier:
                keyid:70:5E:E6:7D:4A:12:D5:3C:44:E7:01:CB:D8:96:A4:85:75:EB:25:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF7mfUoS1TxE5wHL2JakhXXrJQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/cF7mfUoS1TxE5wHL2JakhXXrJQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/cF7mfUoS1TxE5wHL2JakhXXrJQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a0:50:55:8b:d9:36:99:00:dd:1b:ba:f0:27:83:00:18:7a:
         2c:56:b3:83:37:57:ac:18:99:2d:29:14:8c:66:56:ae:27:55:
         14:a1:19:c1:ba:de:48:a4:6a:a2:e4:27:40:87:36:f5:a9:16:
         ec:26:41:89:22:33:9a:ce:36:ac:0a:9e:3b:d7:e6:14:b9:d0:
         c2:a4:6c:be:94:76:d6:88:e7:51:83:35:3e:c1:96:f6:44:46:
         57:94:6a:ba:c0:89:03:eb:db:73:3c:b9:e4:bf:c4:52:d5:d1:
         d8:e3:a3:ec:07:e8:cb:5f:9a:52:29:ca:9c:f8:eb:d4:8b:ed:
         60:db:ad:dd:9d:74:6b:3b:9f:24:3e:d6:54:cc:b6:96:d9:26:
         a4:20:5f:ac:83:6b:76:46:7d:28:b3:20:d1:96:d3:21:7d:5c:
         bf:ac:fc:0b:24:a9:9a:a3:9a:15:2e:6a:55:2f:98:b2:cd:91:
         14:ad:83:2f:ae:eb:69:60:d5:2f:7f:8d:e7:03:a5:8f:b2:88:
         48:12:3f:dd:21:70:e3:b7:26:7d:62:a5:d8:13:c9:55:82:d6:
         34:89:85:5e:ee:b7:d1:35:3d:b8:53:30:21:f3:69:a6:dd:e4:
         c8:a9:37:a4:00:35:28:1b:50:c3:a9:4a:4c:27:cd:2d:af:07:
         1c:0b:85:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+bdDKrrOw125POQ3o0xWa4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNWVlNjdkNGExMmQ1M2M0NGU3MDFjYmQ4OTZhNDg1NzVl
YjI1MDMwHhcNMjQwNTIxMTQwMDM0WhcNMjQwNTIyMTQwMDM0WjAzMTEwLwYDVQQD
Eyg5OWQ3NjRjNTQ1YjFhMjcyNjFlYmMyYjExMjZjZWE2OTU1NGNkZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOQ6oVkRquc1B8hk+UqVpij3WPxQ
5PeyTZIG2JAu5ABZth62d6aQJv3EibUJmL1oiMNt9vG2BkiIQUdb4V0vEddZr0C3
nOOF8xz4eKQ0IwyKJQczc3cijyisy5Iu21I5w5yrXJWxi6QnJK6rygrVnvjcOGPD
oetZZf7Kp3gXJDoP8pb74cBdc9hr/X41lSEtgezfN1xH5O+rqxacrY8M+ua/qb4p
bGrupzM/OLlR3CdavQ8TmUpNp6/n1Rmdoqi5RqqKLjXfPskQRdAUej//J01zjVXJ
aaT31YbbW8rbuBTAIPJRN0pYwaGZq9BOecW89Z7HAXF7DSXj2wDPhhvLlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnXZMVFsaJyYevCsRJs6mlVTN3xMB8GA1UdIwQY
MBaAFHBe5n1KEtU8ROcBy9iWpIV16yUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0Y3bWZVb1MxVHhFNXdITDJKYWtoWFhySlFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kNjc1MjItNmUyMS00MzdiLWJkMjQt
Njg5YTRkOTc2Zjk1LzEvY0Y3bWZVb1MxVHhFNXdITDJKYWtoWFhySlFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kNjc1MjItNmUyMS00MzdiLWJkMjQtNjg5YTRkOTc2Zjk1
LzEvY0Y3bWZVb1MxVHhFNXdITDJKYWtoWFhySlFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKBQVYvZ
NpkA3Ru68CeDABh6LFazgzdXrBiZLSkUjGZWridVFKEZwbreSKRqouQnQIc29akW
7CZBiSIzms42rAqeO9fmFLnQwqRsvpR21ojnUYM1PsGW9kRGV5RqusCJA+vbczy5
5L/EUtXR2OOj7Afoy1+aUinKnPjr1IvtYNut3Z10azufJD7WVMy2ltkmpCBfrINr
dkZ9KLMg0ZbTIX1cv6z8CySpmqOaFS5qVS+Yss2RFK2DL67raWDVL3+N5wOlj7KI
SBI/3SFw47cmfWKl2BPJVYLWNImFXu630TU9uFMwIfNppt3kyKk3pAA1KBtQw6lK
TCfNLa8HHAuFlw==
-----END CERTIFICATE-----
Generated at Tue May 21 21:36:49 2024 by rpki-client on console-ams.rpki-client.org