Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
File:                     5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft (raw, json)
Hash identifier:          B1u5V7fcbSjbsc1ydR8tyaUQBFeEWg6CSlG36YeCOx8=
Subject key identifier:   1B:71:5A:8D:52:BC:B5:BE:15:B8:EC:71:71:12:D5:E1:48:60:81:87
Authority key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
Certificate issuer:       /CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Certificate serial:       018FD867543C408948CB841EA3BA4B4C60CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
Manifest number:          11A2
Signing time:             Sun 02 Jun 2024 10:03:21 +0000
Manifest this update:     Sun 02 Jun 2024 10:03:21 +0000
Manifest next update:     Mon 03 Jun 2024 10:03:21 +0000
Files and hashes:         1: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl (hash: OEWAc2z/JTpmRCP3Vf//ubfnqzOXCBv+d3KFN8jvruU=)
                          2: XXvHEew-WLqrY69xSQw9hdhUvco.roa (hash: 0Ua2MXgy/wd/6ovwq5m+O7l1jxyA+KfDGA1/Drsouio=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d8:67:54:3c:40:89:48:cb:84:1e:a3:ba:4b:4c:60:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e57731ea857b903aa40a8e5fd8d88446505b5233
        Validity
            Not Before: Jun  2 10:03:21 2024 GMT
            Not After : Jun  3 10:03:21 2024 GMT
        Subject: CN=1b715a8d52bcb5be15b8ec717112d5e148608187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e0:61:7b:9b:92:14:fa:00:b9:65:ea:dd:d7:
                    ee:68:79:8c:ec:01:85:8e:5c:35:d2:09:95:08:30:
                    56:ae:7a:83:72:2d:c1:b1:e3:f5:1b:9b:24:42:e4:
                    02:1f:db:6d:8b:42:16:b4:52:e1:c1:1b:55:34:03:
                    65:c2:7e:80:62:53:ef:6c:ce:db:24:3d:26:01:aa:
                    49:70:0e:70:aa:ef:68:48:6a:bd:ec:1c:ce:1f:a3:
                    61:da:aa:95:0a:b4:d3:ca:9a:c3:17:09:bb:06:eb:
                    4a:99:57:c0:f9:24:e9:97:b7:b1:52:8c:ef:98:6b:
                    0b:4b:c2:55:01:32:31:9d:3f:84:1c:25:52:d2:ef:
                    b6:d4:42:2f:83:d7:5b:14:c1:c8:2a:f9:5f:9a:a2:
                    ad:c6:ef:c7:60:7f:0a:a2:36:d8:cf:da:fe:c3:a4:
                    ef:de:74:7b:c1:6d:b5:ef:e5:f9:4f:4c:30:b0:de:
                    d1:22:93:fa:f3:98:65:95:21:3c:b4:9d:ff:3c:d5:
                    e6:ee:c2:16:14:10:9c:1d:82:62:51:12:9c:e2:1f:
                    48:1f:f6:f3:84:00:bf:30:e5:a1:1a:df:4b:a7:36:
                    9e:95:ae:4a:06:4c:56:bd:7c:22:be:1a:e7:36:6b:
                    ba:df:cd:8e:13:83:f2:38:79:ae:4b:7f:74:e8:d8:
                    20:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:71:5A:8D:52:BC:B5:BE:15:B8:EC:71:71:12:D5:E1:48:60:81:87
            X509v3 Authority Key Identifier:
                keyid:E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:23:22:40:5f:54:f8:ae:eb:73:af:55:fd:a7:95:da:8c:05:
         85:4f:63:b9:69:b4:c5:a4:00:2c:d5:f2:34:55:34:ec:25:21:
         83:cc:76:1b:98:6c:ed:f2:68:17:72:9e:8e:d9:08:8c:3f:38:
         f9:e4:99:d4:d5:b2:7d:d4:6d:ad:a9:6f:4c:e5:ee:de:39:fc:
         c5:60:e7:18:1b:4c:54:f0:8a:06:ff:ef:47:88:80:3d:f9:bc:
         a9:52:c2:ae:2c:01:f9:e7:5a:fd:ce:88:b6:b5:17:f2:fb:f3:
         45:61:cc:eb:03:6f:73:de:61:ac:7f:65:9e:9f:56:fc:d7:0c:
         c0:e3:33:fe:9b:e7:e1:e3:8f:88:fc:a3:46:e3:1c:7b:ff:1a:
         46:ad:cf:3e:6b:1a:ab:fb:13:cf:fd:61:17:6b:c4:34:49:77:
         1d:6e:ae:3e:81:2b:bd:37:95:b8:c0:64:77:62:de:0f:4e:41:
         d8:22:b0:22:66:9a:43:47:27:41:70:66:96:e9:4f:01:e7:7f:
         50:16:5b:ec:d2:b1:a3:06:02:81:9b:a6:44:50:c1:9f:bb:a3:
         bf:27:51:81:25:58:6f:20:56:db:9b:c8:57:e8:5e:7f:fe:8e:
         ed:26:fa:00:db:96:22:8c:86:15:b3:dd:8b:ca:5b:a1:a0:f9:
         0f:ff:27:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY/YZ1Q8QIlIy4Qeo7pLTGDOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzczMWVhODU3YjkwM2FhNDBhOGU1ZmQ4ZDg4NDQ2NTA1
YjUyMzMwHhcNMjQwNjAyMTAwMzIxWhcNMjQwNjAzMTAwMzIxWjAzMTEwLwYDVQQD
EygxYjcxNWE4ZDUyYmNiNWJlMTViOGVjNzE3MTEyZDVlMTQ4NjA4MTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguBhe5uSFPoAuWXq3dfuaHmM7AGF
jlw10gmVCDBWrnqDci3BseP1G5skQuQCH9tti0IWtFLhwRtVNANlwn6AYlPvbM7b
JD0mAapJcA5wqu9oSGq97BzOH6Nh2qqVCrTTyprDFwm7ButKmVfA+STpl7exUozv
mGsLS8JVATIxnT+EHCVS0u+21EIvg9dbFMHIKvlfmqKtxu/HYH8KojbYz9r+w6Tv
3nR7wW217+X5T0wwsN7RIpP685hllSE8tJ3/PNXm7sIWFBCcHYJiURKc4h9IH/bz
hAC/MOWhGt9Lpzaela5KBkxWvXwivhrnNmu6382OE4PyOHmuS3906NggpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtxWo1SvLW+FbjscXES1eFIYIGHMB8GA1UdIwQY
MBaAFOV3MeqFe5A6pAqOX9jYhEZQW1IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hZmJiNjItMDA5OC00MmIzLTgxYWUt
ZjBiYjJlMTVmNmQwLzEvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hZmJiNjItMDA5OC00MmIzLTgxYWUtZjBiYjJlMTVmNmQw
LzEvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyMiQF9U
+K7rc69V/aeV2owFhU9juWm0xaQALNXyNFU07CUhg8x2G5hs7fJoF3KejtkIjD84
+eSZ1NWyfdRtralvTOXu3jn8xWDnGBtMVPCKBv/vR4iAPfm8qVLCriwB+eda/c6I
trUX8vvzRWHM6wNvc95hrH9lnp9W/NcMwOMz/pvn4eOPiPyjRuMce/8aRq3PPmsa
q/sTz/1hF2vENEl3HW6uPoErvTeVuMBkd2LeD05B2CKwImaaQ0cnQXBmlulPAed/
UBZb7NKxowYCgZumRFDBn7ujvydRgSVYbyBW25vIV+hef/6O7Sb6ANuWIoyGFbPd
i8pboaD5D/8nSQ==
-----END CERTIFICATE-----
Generated at Sun Jun 2 11:11:16 2024 by rpki-client on console-fra.rpki-client.org