Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
File:                     0zsy4F0KhdvURQ83pz5_ofYQCvw.mft (raw, json)
Hash identifier:          kCkwE6m4oSDH47w7ea7redOKmV5isJjIUqoloBsHo0Q=
Subject key identifier:   D4:5D:6F:B5:B7:FF:AB:23:EB:A2:F3:80:AC:36:3F:7B:51:E9:8D:58
Authority key identifier: D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
Certificate issuer:       /CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Certificate serial:       018F3A0AF43F05D5D87E83481BF29FB8DA9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
Manifest number:          0471
Signing time:             Thu 02 May 2024 16:02:27 +0000
Manifest this update:     Thu 02 May 2024 16:02:27 +0000
Manifest next update:     Fri 03 May 2024 16:02:27 +0000
Files and hashes:         1: 0zsy4F0KhdvURQ83pz5_ofYQCvw.crl (hash: ItWV6Q2DQX8ETUveE1ilJtQm6wVh7jeM67k4QZ4Wk0E=)
                          2: QxtKVMc-hVdwL5TdcKEJgyB4fwg.roa (hash: pshX4UkedbGUfccXq0B7aU1lGGGoNnHe8yhI1L+DJ6w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0a:f4:3f:05:d5:d8:7e:83:48:1b:f2:9f:b8:da:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
        Validity
            Not Before: May  2 16:02:27 2024 GMT
            Not After : May  3 16:02:27 2024 GMT
        Subject: CN=d45d6fb5b7ffab23eba2f380ac363f7b51e98d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4b:b8:a7:14:31:6d:a5:5e:2f:ff:97:45:ee:
                    e5:22:46:cd:6a:e4:92:38:3b:89:28:c3:59:c5:01:
                    63:69:aa:d7:c0:38:71:b6:11:b1:6a:24:87:27:2f:
                    f3:5d:8b:64:99:43:b3:eb:ea:58:5f:06:46:7a:28:
                    1f:a9:10:94:fc:73:5e:fb:32:6a:e5:d9:dd:22:9a:
                    cf:6c:ec:27:10:6a:2c:21:72:b7:91:aa:f9:b3:74:
                    26:b6:c3:15:0f:03:21:c6:72:63:eb:f1:84:cd:22:
                    8d:0c:4d:1e:07:10:6f:a2:66:52:e0:c3:60:73:9e:
                    2b:bc:b8:35:5e:dd:69:5a:2d:ac:a4:de:a5:b5:06:
                    ad:f2:fa:7d:df:90:dc:c4:04:29:cf:37:2a:6c:93:
                    9e:91:12:2e:83:02:a6:5f:ae:37:6f:51:9f:2f:c8:
                    6b:31:7e:61:90:dd:12:14:10:96:99:b7:41:6b:72:
                    63:d8:63:d7:8d:c6:c3:1f:d7:32:24:10:14:b6:f3:
                    61:ac:c3:c6:72:f6:26:bf:bb:e0:6e:db:76:a6:54:
                    d5:27:53:19:4d:ba:6a:d4:d1:53:7f:1f:db:2d:c0:
                    5c:d7:14:48:1a:31:fc:b5:13:51:e0:73:1c:7e:60:
                    eb:a6:2d:bd:77:5a:e6:14:ae:19:61:48:49:f2:45:
                    17:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5D:6F:B5:B7:FF:AB:23:EB:A2:F3:80:AC:36:3F:7B:51:E9:8D:58
            X509v3 Authority Key Identifier:
                keyid:D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ed:9e:50:42:ef:da:d0:8a:dc:90:bd:9d:0a:aa:dc:83:72:
         6d:81:9b:91:2b:35:26:f7:ef:e7:be:6c:4b:e7:56:f9:61:be:
         e9:6b:b2:1d:10:26:ea:3a:2f:43:97:4f:08:cd:25:1c:fe:4a:
         62:31:b8:04:30:d8:17:11:d4:07:b7:7e:f0:1b:61:ce:a8:65:
         82:4c:b3:dc:55:99:b1:f9:b6:b9:ff:94:3b:e6:88:31:9a:12:
         02:37:be:e0:e1:5f:f8:a7:c2:51:cc:45:e4:de:e0:20:dc:1e:
         ca:f5:4d:ed:21:ed:75:f4:35:f1:81:2e:19:42:00:9a:28:21:
         ac:f2:65:48:bd:dc:bb:1b:f3:7f:d2:0f:a0:45:06:4a:ef:19:
         d8:ba:25:a2:d1:58:0f:75:96:f5:4d:53:5e:b7:80:f2:b0:b3:
         e8:30:70:5b:0d:26:40:82:4b:be:a6:dc:00:3c:e7:fe:11:a0:
         42:99:61:27:94:9f:fa:a0:95:f4:d5:a7:94:b3:74:e0:52:82:
         fd:1c:a6:b9:6f:30:7d:8a:b9:28:a6:14:22:de:c1:35:1e:3d:
         d2:8e:a1:22:35:75:d8:5c:3f:1d:d9:24:c9:bd:95:47:de:ea:
         b1:1b:76:4c:34:7d:f7:2b:b3:4a:98:1c:82:d0:be:cf:60:51:
         2a:8e:38:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY86CvQ/BdXYfoNIG/KfuNqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzM2IzMmUwNWQwYTg1ZGJkNDQ1MGYzN2E3M2U3ZmExZjYx
MDBhZmMwHhcNMjQwNTAyMTYwMjI3WhcNMjQwNTAzMTYwMjI3WjAzMTEwLwYDVQQD
EyhkNDVkNmZiNWI3ZmZhYjIzZWJhMmYzODBhYzM2M2Y3YjUxZTk4ZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUu4pxQxbaVeL/+XRe7lIkbNauSS
ODuJKMNZxQFjaarXwDhxthGxaiSHJy/zXYtkmUOz6+pYXwZGeigfqRCU/HNe+zJq
5dndIprPbOwnEGosIXK3kar5s3QmtsMVDwMhxnJj6/GEzSKNDE0eBxBvomZS4MNg
c54rvLg1Xt1pWi2spN6ltQat8vp935DcxAQpzzcqbJOekRIugwKmX643b1GfL8hr
MX5hkN0SFBCWmbdBa3Jj2GPXjcbDH9cyJBAUtvNhrMPGcvYmv7vgbtt2plTVJ1MZ
Tbpq1NFTfx/bLcBc1xRIGjH8tRNR4HMcfmDrpi29d1rmFK4ZYUhJ8kUX1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRdb7W3/6sj66LzgKw2P3tR6Y1YMB8GA1UdIwQY
MBaAFNM7MuBdCoXb1EUPN6c+f6H2EAr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpzeTRGMEtoZHZVUlE4M3B6NV9vZllRQ3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jZjg3OTEtOTk4MC00Yzc5LTljMjgt
MGUxNmJhZWY3MTEzLzEvMHpzeTRGMEtoZHZVUlE4M3B6NV9vZllRQ3Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jZjg3OTEtOTk4MC00Yzc5LTljMjgtMGUxNmJhZWY3MTEz
LzEvMHpzeTRGMEtoZHZVUlE4M3B6NV9vZllRQ3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHO2eUELv
2tCK3JC9nQqq3INybYGbkSs1Jvfv575sS+dW+WG+6WuyHRAm6jovQ5dPCM0lHP5K
YjG4BDDYFxHUB7d+8Bthzqhlgkyz3FWZsfm2uf+UO+aIMZoSAje+4OFf+KfCUcxF
5N7gINweyvVN7SHtdfQ18YEuGUIAmighrPJlSL3cuxvzf9IPoEUGSu8Z2LolotFY
D3WW9U1TXreA8rCz6DBwWw0mQIJLvqbcADzn/hGgQplhJ5Sf+qCV9NWnlLN04FKC
/RymuW8wfYq5KKYUIt7BNR490o6hIjV12Fw/Hdkkyb2VR97qsRt2TDR99yuzSpgc
gtC+z2BRKo447A==
-----END CERTIFICATE-----
Generated at Thu May 2 19:27:43 2024 by rpki-client on console-fra.rpki-client.org