Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
File:                     7ouogkxcjSBzJqSjq4k-u49Qlq0.mft (raw, json)
Hash identifier:          PR1eLZKkRi9tJaEEiCy5Kz+DL3gw2mM+z8JOebIft3A=
Subject key identifier:   24:B8:D6:66:8A:23:F4:F4:F3:DA:96:37:2F:86:C0:26:EA:AF:DE:D2
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Certificate issuer:       /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial:       018F48D80CCEB33C5D37DBEA4838DBC93AB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
Manifest number:          11FA
Signing time:             Sun 05 May 2024 13:01:09 +0000
Manifest this update:     Sun 05 May 2024 13:01:09 +0000
Manifest next update:     Mon 06 May 2024 13:01:09 +0000
Files and hashes:         1: 7ouogkxcjSBzJqSjq4k-u49Qlq0.crl (hash: qZGai2sao2sB2N6v8tE9AgfFw5Dl3bnUs/Tx9GcZ70k=)
                          2: BpCPAalGOWy9DULFPw7RHM1sIaY.roa (hash: 9N/LmMpSKYJiDU+sQ1Qp8AG1DalJxqY0KM0ItcUt15U=)
                          3: H5jmEuiiT1FFBIwTzdTbO1FVD3Q.roa (hash: 4dqqq/V91J490LQDWVyGZ+FN1d8B+PO5WPJim5mXj88=)
                          4: hFiYcjc5T-AOtTGLXhWbkO_SGl8.roa (hash: gFdJtltQDkQCEX9Ma0dTe94IPk5E2PTpxFFNtTgaiyc=)
                          5: i6VGNw8lc-FYQpsHvgRSugY9Dqw.roa (hash: 4KKxxwsg2BXZTAxXF5n7+WSSdboLSKVjBi8PnDJwjJg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 13:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:d8:0c:ce:b3:3c:5d:37:db:ea:48:38:db:c9:3a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
        Validity
            Not Before: May  5 13:01:09 2024 GMT
            Not After : May  6 13:01:09 2024 GMT
        Subject: CN=24b8d6668a23f4f4f3da96372f86c026eaafded2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:83:a8:02:7b:dc:5a:8c:ee:41:c3:65:8d:c7:
                    93:e0:e2:92:42:7f:25:50:4a:82:41:df:59:b4:ac:
                    02:b1:ab:8e:1f:df:e5:f0:56:02:29:f3:5a:d0:3d:
                    11:96:49:aa:7c:b0:bc:22:44:74:31:d0:92:ab:c8:
                    16:f5:75:83:01:9e:85:dc:9f:8f:f8:14:99:60:61:
                    f1:86:fb:0f:f5:be:65:4f:7b:f3:80:f9:73:35:97:
                    cb:3d:ef:90:e7:bf:a6:7c:22:31:6f:cd:91:38:66:
                    2f:50:68:84:13:02:4e:62:e6:5a:3d:6c:62:79:ff:
                    7c:9c:55:35:b0:d3:55:66:e3:ea:cb:c7:2a:62:3e:
                    0b:e5:68:e6:2b:da:ef:29:6d:44:8d:b2:a5:0d:ff:
                    0e:f8:c9:af:6c:38:3a:38:7e:c8:b9:a1:a6:84:71:
                    36:74:26:16:66:c0:a6:ec:72:c8:8e:b4:04:d0:79:
                    5f:68:49:02:05:22:ff:04:dd:40:d8:ef:d2:a0:96:
                    d6:14:9c:e6:d6:ed:6a:fb:5e:c8:1f:a4:dd:bd:66:
                    17:32:63:f9:da:4d:7f:23:d1:08:c3:c2:72:94:51:
                    a9:2e:6c:22:0f:91:d4:25:0b:0f:46:a3:ff:17:c1:
                    44:17:8e:1c:93:64:26:85:49:bc:16:ff:27:76:4a:
                    c5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B8:D6:66:8A:23:F4:F4:F3:DA:96:37:2F:86:C0:26:EA:AF:DE:D2
            X509v3 Authority Key Identifier:
                keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:48:8e:63:e6:dd:e9:06:09:ca:05:51:06:4a:0e:48:3d:0a:
         db:e1:3e:41:a3:94:83:dc:ac:68:6b:e6:e7:45:0c:5b:26:9a:
         9a:fe:19:57:5f:88:de:7c:b4:65:cb:4c:89:38:13:46:fb:fe:
         2d:80:fd:9b:09:81:ff:56:23:d2:3c:34:57:9a:df:18:6d:8b:
         ed:fd:c5:5a:b2:ef:01:06:ae:85:ef:44:08:01:d4:01:d1:14:
         35:b9:25:59:9e:9c:4a:c7:56:ec:76:e1:ff:1e:ce:76:c8:97:
         26:c9:fc:73:73:bd:78:b6:d1:8c:72:2d:3d:23:53:bb:d6:ae:
         6c:c6:e8:d9:b7:67:91:b1:0c:17:02:12:69:1c:3d:4d:57:ce:
         e3:85:99:c5:c3:41:ac:17:8b:05:29:ae:dc:d2:70:56:29:ec:
         66:8b:45:fd:7a:da:6b:81:ad:db:fa:f3:f4:fb:ff:bc:1b:53:
         71:bd:69:2b:6a:a1:c7:61:a4:4e:14:93:fe:10:be:e4:7a:0c:
         9f:96:8f:05:6c:ce:f4:9e:c7:3c:88:9e:9d:e8:72:3a:ca:fc:
         06:c0:29:88:a3:8e:13:70:fe:fb:a9:4d:9f:77:4e:17:1e:88:
         6c:57:e6:fc:5a:97:18:72:af:81:a7:aa:6d:55:7b:95:bb:87:
         ff:67:6d:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9I2AzOszxdN9vqSDjbyTq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlOGJhODgyNGM1YzhkMjA3MzI2YTRhM2FiODkzZWJiOGY1
MDk2YWQwHhcNMjQwNTA1MTMwMTA5WhcNMjQwNTA2MTMwMTA5WjAzMTEwLwYDVQQD
EygyNGI4ZDY2NjhhMjNmNGY0ZjNkYTk2MzcyZjg2YzAyNmVhYWZkZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooOoAnvcWozuQcNljceT4OKSQn8l
UEqCQd9ZtKwCsauOH9/l8FYCKfNa0D0RlkmqfLC8IkR0MdCSq8gW9XWDAZ6F3J+P
+BSZYGHxhvsP9b5lT3vzgPlzNZfLPe+Q57+mfCIxb82ROGYvUGiEEwJOYuZaPWxi
ef98nFU1sNNVZuPqy8cqYj4L5WjmK9rvKW1EjbKlDf8O+MmvbDg6OH7IuaGmhHE2
dCYWZsCm7HLIjrQE0HlfaEkCBSL/BN1A2O/SoJbWFJzm1u1q+17IH6TdvWYXMmP5
2k1/I9EIw8JylFGpLmwiD5HUJQsPRqP/F8FEF44ck2QmhUm8Fv8ndkrFDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCS41maKI/T089qWNy+GwCbqr97SMB8GA1UdIwQY
MBaAFO6LqIJMXI0gcyako6uJPruPUJatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82MzUwOWMtNTY3Ni00ZWFmLTk5ZDQt
ZWVjZDI4ZTI4ZTM1LzEvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82MzUwOWMtNTY3Ni00ZWFmLTk5ZDQtZWVjZDI4ZTI4ZTM1
LzEvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekiOY+bd
6QYJygVRBkoOSD0K2+E+QaOUg9ysaGvm50UMWyaamv4ZV1+I3ny0ZctMiTgTRvv+
LYD9mwmB/1Yj0jw0V5rfGG2L7f3FWrLvAQauhe9ECAHUAdEUNbklWZ6cSsdW7Hbh
/x7OdsiXJsn8c3O9eLbRjHItPSNTu9aubMbo2bdnkbEMFwISaRw9TVfO44WZxcNB
rBeLBSmu3NJwVinsZotF/Xraa4Gt2/rz9Pv/vBtTcb1pK2qhx2GkThST/hC+5HoM
n5aPBWzO9J7HPIienehyOsr8BsApiKOOE3D++6lNn3dOFx6IbFfm/FqXGHKvgaeq
bVV7lbuH/2dtzQ==
-----END CERTIFICATE-----
Generated at Sun May 5 19:54:02 2024 by rpki-client on console-fra.rpki-client.org