Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File:                     0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier:          WZlRwfhURn+Is7h0cdaethjvHzbS0NQrs301QNvir78=
Subject key identifier:   FB:CA:4A:A3:A3:55:06:C0:47:F3:51:53:0B:67:06:A1:46:F1:EE:A6
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer:       /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial:       018F4F47E1685D26F4F91C817B8AA088F8BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number:          0531
Signing time:             Mon 06 May 2024 19:01:01 +0000
Manifest this update:     Mon 06 May 2024 19:01:01 +0000
Manifest next update:     Tue 07 May 2024 19:01:01 +0000
Files and hashes:         1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: 4wCPb5yC9uvLddO9pzSB9j0POK2GjeFzjjwQ7t+MdDE=)
                          2: xtR6W7mC3WW3eyee85HtiuDx77M.roa (hash: 4XZoqHMGs7CPvobzpJc98g+xmplusYSGbCHx5rsJt5o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:47:e1:68:5d:26:f4:f9:1c:81:7b:8a:a0:88:f8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
        Validity
            Not Before: May  6 19:01:01 2024 GMT
            Not After : May  7 19:01:01 2024 GMT
        Subject: CN=fbca4aa3a35506c047f351530b6706a146f1eea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:15:83:4b:1a:b7:37:3e:30:f1:4b:fd:1a:
                    b3:d0:f3:e0:79:6b:b7:cc:b6:72:74:51:09:e3:8e:
                    cc:c6:83:6d:ac:e2:ef:d3:5c:5c:c5:57:03:99:50:
                    06:d3:d5:35:8d:5b:4e:85:bd:fd:fd:7a:47:56:30:
                    93:50:e3:ef:13:0e:71:0c:c1:ed:19:6d:30:9f:35:
                    67:6e:8e:3f:1b:04:85:82:81:3b:33:82:8b:57:63:
                    08:00:77:68:11:42:1c:2d:6c:ad:99:f5:f2:d8:5d:
                    ea:fe:88:24:a3:73:da:22:b5:16:cf:1f:5e:52:81:
                    b6:06:9c:9b:f4:67:cd:3e:09:2b:6d:27:29:84:aa:
                    71:9d:be:ac:7c:68:43:74:7c:ee:62:cd:17:06:70:
                    7b:f7:f9:53:5b:8c:0c:4d:d0:75:ce:75:17:6b:ce:
                    9c:29:bf:6b:90:b5:05:0d:5a:0f:0c:26:1c:86:a7:
                    4e:18:5a:06:fa:2f:8c:6f:7b:c4:1b:7a:14:ae:ef:
                    cf:f6:7d:cc:fe:92:14:2a:d2:fe:de:9c:fd:7e:4e:
                    0c:43:19:27:41:1e:c9:48:25:ab:af:bd:3e:59:39:
                    b9:ca:23:a3:0c:1e:d8:c4:30:49:cd:e9:8a:6c:81:
                    18:9d:27:89:6f:03:05:35:a9:96:e1:9d:1b:da:c6:
                    dc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CA:4A:A3:A3:55:06:C0:47:F3:51:53:0B:67:06:A1:46:F1:EE:A6
            X509v3 Authority Key Identifier:
                keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ac:33:6f:8c:3e:ed:1a:ed:c4:b3:c1:f0:2c:80:b6:1f:d2:
         d0:df:8c:c1:e7:9c:bc:39:9f:ae:1e:8f:7d:a2:1f:a2:9a:a0:
         fb:d1:a0:78:1c:5b:73:9a:b1:80:c0:83:43:19:52:00:ed:40:
         12:c1:42:16:06:81:c4:e8:f8:b0:d3:fa:d1:10:0a:ed:78:e6:
         12:91:52:5a:a0:a8:c4:ea:ed:47:7c:76:ba:70:6d:10:88:52:
         40:0b:22:7d:f6:f6:a9:49:3b:94:71:91:19:75:48:3d:13:78:
         4c:f9:44:ff:ec:4e:23:34:13:da:f0:5d:44:32:f0:15:ae:2a:
         1c:86:4f:d0:1e:1c:8b:9a:71:0c:c5:f4:ac:cc:ba:cd:c1:0d:
         5f:14:11:c3:73:6f:b7:08:3a:53:1d:e6:70:61:54:f8:42:c4:
         b5:f8:6a:2b:43:ac:53:5c:e8:a4:89:e4:20:d7:40:cf:c2:4b:
         1a:f6:d8:44:d4:18:7a:77:83:bc:19:69:e6:fc:8c:c8:1a:5a:
         4a:d4:6b:36:da:ac:f7:a5:f5:91:40:ba:96:95:93:86:e3:69:
         6c:e8:c6:b1:4c:ed:83:bd:c4:97:b4:7d:3a:8c:bd:5a:1c:e4:
         65:b9:86:46:71:f3:6e:0d:60:52:9f:fb:b5:72:ac:47:49:f1:
         c2:b2:81:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9PR+FoXSb0+RyBe4qgiPi/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYzgxYzYyZDM5NDIwMzNkMGE3NDA0NGIwYzVhNGYxMTNl
NDNkZjMwHhcNMjQwNTA2MTkwMTAxWhcNMjQwNTA3MTkwMTAxWjAzMTEwLwYDVQQD
EyhmYmNhNGFhM2EzNTUwNmMwNDdmMzUxNTMwYjY3MDZhMTQ2ZjFlZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8gVg0satzc+MPFL/Rqz0PPgeWu3
zLZydFEJ447MxoNtrOLv01xcxVcDmVAG09U1jVtOhb39/XpHVjCTUOPvEw5xDMHt
GW0wnzVnbo4/GwSFgoE7M4KLV2MIAHdoEUIcLWytmfXy2F3q/ogko3PaIrUWzx9e
UoG2Bpyb9GfNPgkrbScphKpxnb6sfGhDdHzuYs0XBnB79/lTW4wMTdB1znUXa86c
Kb9rkLUFDVoPDCYchqdOGFoG+i+Mb3vEG3oUru/P9n3M/pIUKtL+3pz9fk4MQxkn
QR7JSCWrr70+WTm5yiOjDB7YxDBJzemKbIEYnSeJbwMFNamW4Z0b2sbcxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvKSqOjVQbAR/NRUwtnBqFG8e6mMB8GA1UdIwQY
MBaAFNHIHGLTlCAz0KdARLDFpPET5D3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84N2Y5NzMtZWE2ZS00N2RmLWIxYjAt
ZGYzMTM4YjQzNGM4LzEvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi84N2Y5NzMtZWE2ZS00N2RmLWIxYjAtZGYzMTM4YjQzNGM4
LzEvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZawzb4w+
7RrtxLPB8CyAth/S0N+MweecvDmfrh6PfaIfopqg+9GgeBxbc5qxgMCDQxlSAO1A
EsFCFgaBxOj4sNP60RAK7XjmEpFSWqCoxOrtR3x2unBtEIhSQAsiffb2qUk7lHGR
GXVIPRN4TPlE/+xOIzQT2vBdRDLwFa4qHIZP0B4ci5pxDMX0rMy6zcENXxQRw3Nv
twg6Ux3mcGFU+ELEtfhqK0OsU1zopInkINdAz8JLGvbYRNQYeneDvBlp5vyMyBpa
StRrNtqs96X1kUC6lpWThuNpbOjGsUztg73El7R9Ooy9WhzkZbmGRnHzbg1gUp/7
tXKsR0nxwrKB8A==
-----END CERTIFICATE-----
Generated at Mon May 6 21:44:44 2024 by rpki-client on console-fra.rpki-client.org