Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft
File:                     1TOS85C0La1wA2dOvC0B3z3tgbw.mft (raw, json)
Hash identifier:          ey9aqBeWCKz+VBHM8ZBPVLc/P8PxHzTo4M44bdKVUlI=
Subject key identifier:   F3:54:40:CE:F7:EC:7B:C3:03:CB:59:BC:40:3A:FF:D2:C2:A9:FF:26
Authority key identifier: D5:33:92:F3:90:B4:2D:AD:70:03:67:4E:BC:2D:01:DF:3D:ED:81:BC
Certificate issuer:       /CN=d53392f390b42dad7003674ebc2d01df3ded81bc
Certificate serial:       018F4E6CAD00B29FDE181145BDEA2525CE2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TOS85C0La1wA2dOvC0B3z3tgbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft
Manifest number:          0530
Signing time:             Mon 06 May 2024 15:01:36 +0000
Manifest this update:     Mon 06 May 2024 15:01:36 +0000
Manifest next update:     Tue 07 May 2024 15:01:36 +0000
Files and hashes:         1: 1TOS85C0La1wA2dOvC0B3z3tgbw.crl (hash: g3pbB4I33LOyHCOpRK09Uf/TvihDCxRMBYn33emhBVc=)
                          2: Et5dSxuAi_KihXUlNVsAbWbHrTo.roa (hash: xCLuycrSgiM/xyh0qJcxYCnQMVMP0r4rUs9JwW6rQ68=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1TOS85C0La1wA2dOvC0B3z3tgbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 15:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:6c:ad:00:b2:9f:de:18:11:45:bd:ea:25:25:ce:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53392f390b42dad7003674ebc2d01df3ded81bc
        Validity
            Not Before: May  6 15:01:36 2024 GMT
            Not After : May  7 15:01:36 2024 GMT
        Subject: CN=f35440cef7ec7bc303cb59bc403affd2c2a9ff26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:29:75:12:7d:cf:a3:0d:17:67:fc:d0:3f:f3:
                    51:fc:63:fb:0b:ed:72:07:fa:6e:0f:bb:b2:0d:42:
                    9a:80:90:97:da:3b:05:cf:a8:da:79:e4:10:37:da:
                    18:b4:98:39:32:51:16:ae:cd:56:9a:2d:6f:fa:5d:
                    07:6c:50:9c:e2:aa:b2:33:29:0c:93:15:83:e4:0f:
                    62:a3:4f:83:0b:48:0d:29:31:1a:bb:81:4b:cd:93:
                    f8:aa:81:8a:4b:38:10:94:3e:a4:9f:18:95:27:13:
                    4d:2c:1d:2f:cd:77:01:d3:20:f2:9e:45:cd:8d:ef:
                    00:e9:ad:70:f7:90:2f:d5:18:c1:8e:03:16:41:8a:
                    4f:ab:f5:3b:00:be:5e:50:6a:9e:7a:d8:00:95:f3:
                    cc:60:3a:eb:e8:d6:e9:0b:1c:5b:b2:a8:af:ae:c8:
                    41:55:e6:7f:90:b0:36:fa:a7:d7:f8:fe:10:50:8c:
                    bf:93:60:be:3f:cb:f8:53:f3:46:42:d2:e1:70:cc:
                    27:e0:43:fd:af:f1:dd:25:95:67:b6:44:5a:27:0e:
                    8d:e7:9a:96:b9:26:58:b4:8d:c6:c7:5f:be:88:8a:
                    86:b0:aa:75:ec:c6:0e:02:5b:42:bc:c9:87:82:1c:
                    f2:9b:48:19:a6:ff:32:f2:9f:36:b0:90:d4:3f:56:
                    ad:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:54:40:CE:F7:EC:7B:C3:03:CB:59:BC:40:3A:FF:D2:C2:A9:FF:26
            X509v3 Authority Key Identifier:
                keyid:D5:33:92:F3:90:B4:2D:AD:70:03:67:4E:BC:2D:01:DF:3D:ED:81:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOS85C0La1wA2dOvC0B3z3tgbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:25:e3:3a:e5:09:cc:07:2e:06:e6:1e:2b:0e:a8:de:4c:a4:
         51:f1:ff:84:b3:58:10:d6:54:e9:99:0e:e8:43:b2:42:44:ca:
         a5:71:4f:4e:09:b2:e1:bf:1a:c3:45:de:85:7d:76:d7:cd:f6:
         e5:5d:ff:7f:8f:f6:50:98:71:aa:ce:a0:68:ab:e0:93:4d:d6:
         2f:84:28:c4:9b:39:58:ba:20:31:96:a1:df:6a:f8:04:c5:35:
         28:3d:28:74:34:c3:f6:5a:53:35:3e:71:1a:8b:58:2d:12:74:
         10:60:1b:83:69:e6:40:e8:84:4d:10:99:ed:4a:d7:29:9d:54:
         73:aa:e3:90:1d:89:aa:3b:01:31:94:43:2c:3f:87:e9:e9:93:
         18:bf:83:a2:3e:95:fb:d5:c7:31:02:dc:cf:94:2f:f3:71:2e:
         82:41:3c:6e:2a:6f:32:13:2c:63:82:6e:51:50:1a:ce:27:fb:
         a6:ab:3f:54:bb:20:b0:26:d2:35:99:9f:16:ca:f8:85:2c:b2:
         35:6f:c5:22:5b:99:3f:d3:aa:6c:8b:57:b7:4c:09:ee:28:d3:
         5c:de:b1:8e:67:5c:d1:89:f5:3b:67:17:9a:b7:3c:7c:49:82:
         58:f4:56:7a:6b:c9:ba:09:0a:41:81:c6:06:b0:d7:30:d4:ca:
         7d:c8:55:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ObK0Asp/eGBFFveolJc4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MzM5MmYzOTBiNDJkYWQ3MDAzNjc0ZWJjMmQwMWRmM2Rl
ZDgxYmMwHhcNMjQwNTA2MTUwMTM2WhcNMjQwNTA3MTUwMTM2WjAzMTEwLwYDVQQD
EyhmMzU0NDBjZWY3ZWM3YmMzMDNjYjU5YmM0MDNhZmZkMmMyYTlmZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Cl1En3Pow0XZ/zQP/NR/GP7C+1y
B/puD7uyDUKagJCX2jsFz6jaeeQQN9oYtJg5MlEWrs1Wmi1v+l0HbFCc4qqyMykM
kxWD5A9io0+DC0gNKTEau4FLzZP4qoGKSzgQlD6knxiVJxNNLB0vzXcB0yDynkXN
je8A6a1w95Av1RjBjgMWQYpPq/U7AL5eUGqeetgAlfPMYDrr6NbpCxxbsqivrshB
VeZ/kLA2+qfX+P4QUIy/k2C+P8v4U/NGQtLhcMwn4EP9r/HdJZVntkRaJw6N55qW
uSZYtI3Gx1++iIqGsKp17MYOAltCvMmHghzym0gZpv8y8p82sJDUP1atQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNUQM737HvDA8tZvEA6/9LCqf8mMB8GA1UdIwQY
MBaAFNUzkvOQtC2tcANnTrwtAd897YG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVRPUzg1QzBMYTF3QTJkT3ZDMEIzejN0Z2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iYjNlNzEtZDMwOC00YjFjLWI2OGEt
MzRiZDJhMWRkODBhLzEvMVRPUzg1QzBMYTF3QTJkT3ZDMEIzejN0Z2J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iYjNlNzEtZDMwOC00YjFjLWI2OGEtMzRiZDJhMWRkODBh
LzEvMVRPUzg1QzBMYTF3QTJkT3ZDMEIzejN0Z2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCXjOuUJ
zAcuBuYeKw6o3kykUfH/hLNYENZU6ZkO6EOyQkTKpXFPTgmy4b8aw0XehX121832
5V3/f4/2UJhxqs6gaKvgk03WL4QoxJs5WLogMZah32r4BMU1KD0odDTD9lpTNT5x
GotYLRJ0EGAbg2nmQOiETRCZ7UrXKZ1Uc6rjkB2JqjsBMZRDLD+H6emTGL+Doj6V
+9XHMQLcz5Qv83EugkE8bipvMhMsY4JuUVAazif7pqs/VLsgsCbSNZmfFsr4hSyy
NW/FIluZP9OqbItXt0wJ7ijTXN6xjmdc0Yn1O2cXmrc8fEmCWPRWemvJugkKQYHG
BrDXMNTKfchVkA==
-----END CERTIFICATE-----
Generated at Mon May 6 23:44:29 2024 by rpki-client on console-ams.rpki-client.org