Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
File:                     Lr_2z7gya0RylaEbEHhoIS5mX90.mft (raw, json)
Hash identifier:          /NVo3jse4T/dffnpjwB+PhPjsYCgc+8zsHmugJBBXX0=
Subject key identifier:   7E:F3:CE:BA:0F:EE:0F:34:35:EB:55:78:E3:28:B6:84:49:13:87:18
Authority key identifier: 2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
Certificate issuer:       /CN=2ebff6cfb8326b447295a11b107868212e665fdd
Certificate serial:       018FB3B4592C74EEBF5AEC702464BE7397F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
Manifest number:          026E
Signing time:             Sun 26 May 2024 07:01:31 +0000
Manifest this update:     Sun 26 May 2024 07:01:31 +0000
Manifest next update:     Mon 27 May 2024 07:01:31 +0000
Files and hashes:         1: Lr_2z7gya0RylaEbEHhoIS5mX90.crl (hash: IxSZ7Awoq2wmlGSRfYhBz62cW86jnx9FA+G5/WaKWAo=)
                          2: gHM6xuAr69APYekQj0DwqbGY8yo.roa (hash: VTMKW5xoxQwrL4XabkecmVnlryJsQoaHdO9PCCL8XCg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 07:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b3:b4:59:2c:74:ee:bf:5a:ec:70:24:64:be:73:97:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ebff6cfb8326b447295a11b107868212e665fdd
        Validity
            Not Before: May 26 07:01:31 2024 GMT
            Not After : May 27 07:01:31 2024 GMT
        Subject: CN=7ef3ceba0fee0f3435eb5578e328b68449138718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:06:06:4a:f3:a6:82:42:a1:9b:55:2e:79:d7:
                    13:3b:69:7f:0b:e2:0b:0b:98:c4:07:c3:b3:0e:11:
                    a6:af:40:b4:4a:7c:a6:7d:fd:3d:56:74:76:b1:92:
                    f2:e0:09:68:26:33:7e:2f:f9:ba:a5:f8:e9:35:fc:
                    41:89:63:1f:8a:81:ea:59:06:eb:06:01:ee:a8:c7:
                    78:33:92:f3:17:37:c6:93:c2:bb:71:e5:22:7f:bf:
                    8d:cd:9c:b6:0a:ec:70:8c:91:34:0f:dc:98:f6:48:
                    da:45:96:cf:9c:40:c2:98:9e:0f:41:e8:47:d8:a6:
                    93:a1:f2:c9:85:6f:26:d1:a8:20:c2:d4:19:58:9e:
                    c8:7d:c6:18:e4:77:d8:ae:fa:c8:89:8c:b0:19:a3:
                    f0:14:c0:69:b7:f4:fb:cb:0d:18:a8:37:17:fb:15:
                    ab:ba:f7:55:ac:48:a6:7a:d7:e2:cc:1c:71:9c:26:
                    6f:fe:26:55:fe:50:5d:22:fd:ea:d1:f0:a0:a6:80:
                    38:91:cd:a5:bf:6e:31:f4:a0:ed:2f:93:57:c7:c6:
                    0e:79:bd:c6:61:16:7b:76:1e:db:be:8b:e2:84:7e:
                    d0:4a:a0:f4:40:72:b8:aa:7c:96:40:9f:e2:a8:94:
                    d1:92:b5:cf:2d:d1:3f:8c:e2:06:81:48:e8:06:8f:
                    29:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F3:CE:BA:0F:EE:0F:34:35:EB:55:78:E3:28:B6:84:49:13:87:18
            X509v3 Authority Key Identifier:
                keyid:2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8f:99:4b:bd:bc:56:84:0c:35:c2:f0:8d:00:f9:d2:80:09:
         8f:13:48:f4:91:c7:55:f2:f6:e1:e9:b6:a7:ae:db:f9:48:73:
         4b:5d:ad:eb:cb:5a:27:99:2f:4e:2c:e8:e7:92:95:48:b5:d5:
         fe:79:f5:df:a2:d2:68:0b:99:10:f7:f1:8d:04:5b:5b:78:97:
         9d:a2:fe:5a:0f:a7:c9:07:bf:e9:bd:15:60:69:36:93:7d:eb:
         06:87:b1:d3:cd:ae:1c:7b:0f:11:e8:51:9e:3b:32:65:29:78:
         f0:85:7b:97:b3:b9:a5:ad:aa:f9:8b:08:8d:4b:46:36:6d:e0:
         81:5b:17:49:a9:b0:3f:49:be:70:68:b1:55:b9:18:b7:f9:c8:
         ce:fc:d5:92:9a:b8:db:89:a3:aa:94:2a:07:f9:fe:88:11:bb:
         bc:77:52:37:e4:ff:e1:5c:71:5b:1b:37:2e:6e:29:d7:25:e6:
         91:a4:cf:ed:0a:fa:8a:6a:9a:fa:9b:2c:4a:43:c4:99:69:49:
         a7:f5:01:98:cc:77:28:5d:8a:4c:52:bd:66:71:10:df:5f:03:
         bb:8e:96:9a:66:e8:43:91:30:6d:88:66:43:9d:75:f9:15:6f:
         5e:81:29:72:c0:c7:2a:81:57:8a:75:3b:de:ce:51:0e:67:8d:
         83:d3:01:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+ztFksdO6/WuxwJGS+c5fyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYmZmNmNmYjgzMjZiNDQ3Mjk1YTExYjEwNzg2ODIxMmU2
NjVmZGQwHhcNMjQwNTI2MDcwMTMxWhcNMjQwNTI3MDcwMTMxWjAzMTEwLwYDVQQD
Eyg3ZWYzY2ViYTBmZWUwZjM0MzVlYjU1NzhlMzI4YjY4NDQ5MTM4NzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgYGSvOmgkKhm1UuedcTO2l/C+IL
C5jEB8OzDhGmr0C0Snymff09VnR2sZLy4AloJjN+L/m6pfjpNfxBiWMfioHqWQbr
BgHuqMd4M5LzFzfGk8K7ceUif7+NzZy2CuxwjJE0D9yY9kjaRZbPnEDCmJ4PQehH
2KaTofLJhW8m0aggwtQZWJ7IfcYY5HfYrvrIiYywGaPwFMBpt/T7yw0YqDcX+xWr
uvdVrEimetfizBxxnCZv/iZV/lBdIv3q0fCgpoA4kc2lv24x9KDtL5NXx8YOeb3G
YRZ7dh7bvovihH7QSqD0QHK4qnyWQJ/iqJTRkrXPLdE/jOIGgUjoBo8pkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7zzroP7g80NetVeOMotoRJE4cYMB8GA1UdIwQY
MBaAFC6/9s+4MmtEcpWhGxB4aCEuZl/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJfMno3Z3lhMFJ5bGFFYkVIaG9JUzVtWDkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yZGFmYmMtNTJlZS00YzdiLWIwMDYt
YTc4NmNlYmUyMGQzLzEvTHJfMno3Z3lhMFJ5bGFFYkVIaG9JUzVtWDkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8yZGFmYmMtNTJlZS00YzdiLWIwMDYtYTc4NmNlYmUyMGQz
LzEvTHJfMno3Z3lhMFJ5bGFFYkVIaG9JUzVtWDkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApY+ZS728
VoQMNcLwjQD50oAJjxNI9JHHVfL24em2p67b+UhzS12t68taJ5kvTizo55KVSLXV
/nn136LSaAuZEPfxjQRbW3iXnaL+Wg+nyQe/6b0VYGk2k33rBoex082uHHsPEehR
njsyZSl48IV7l7O5pa2q+YsIjUtGNm3ggVsXSamwP0m+cGixVbkYt/nIzvzVkpq4
24mjqpQqB/n+iBG7vHdSN+T/4VxxWxs3Lm4p1yXmkaTP7Qr6imqa+pssSkPEmWlJ
p/UBmMx3KF2KTFK9ZnEQ318Du46WmmboQ5EwbYhmQ511+RVvXoEpcsDHKoFXinU7
3s5RDmeNg9MBxg==
-----END CERTIFICATE-----
Generated at Sun May 26 17:00:35 2024 by rpki-client on console-ams.rpki-client.org