Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File:                     EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier:          YyZUswaqW58TqPShtzY+cZNwrYLi3GvvJMU8WlWjAV8=
Subject key identifier:   7E:7C:B9:3E:8E:1A:6B:B2:F7:22:5A:89:FC:12:B9:2F:91:29:00:90
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer:       /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial:       018F8748EEF8EFD2DB109AC5EB7DB9C5E5CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number:          015B
Signing time:             Fri 17 May 2024 16:00:54 +0000
Manifest this update:     Fri 17 May 2024 16:00:54 +0000
Manifest next update:     Sat 18 May 2024 16:00:54 +0000
Files and hashes:         1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: 0vPi2lYOGRJ+SD36y27c7rDAGTdT8oGF5bTjac/3PMs=)
                          2: GZ5yz25RSm-Wx6zNA-MOyUum7c8.roa (hash: HPy8Bj2XcaycfnfLW4+sVxIq8ilfGUvjjJFHNeQqvmk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:ee:f8:ef:d2:db:10:9a:c5:eb:7d:b9:c5:e5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
        Validity
            Not Before: May 17 16:00:54 2024 GMT
            Not After : May 18 16:00:54 2024 GMT
        Subject: CN=7e7cb93e8e1a6bb2f7225a89fc12b92f91290090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:c1:c7:df:4d:f1:d6:56:94:0e:a8:f5:8e:
                    0d:ff:ed:1b:e8:8c:d6:eb:f3:ef:86:7b:bb:0b:ba:
                    a0:eb:3c:2d:6b:af:6c:f5:b2:45:16:b7:e8:a3:d4:
                    09:04:22:8f:90:7b:03:bc:88:5a:d8:8a:c9:f9:9a:
                    92:8c:98:3d:66:69:d4:76:54:21:c3:7e:8c:6c:f8:
                    2e:05:99:8d:c7:06:5f:df:d6:d6:3a:b2:ac:a8:9c:
                    c1:61:a2:d6:da:6a:c6:60:63:bf:ee:7b:ae:cf:10:
                    79:20:e3:6d:c0:2f:c1:40:35:8b:5a:36:98:36:19:
                    a0:6e:08:d9:d1:94:a3:8f:04:4c:9e:88:76:cc:d3:
                    0e:44:13:ed:53:7e:a4:5d:d5:97:02:d5:ae:26:8e:
                    ed:33:62:59:bd:c3:64:b3:60:36:ea:46:e4:21:bb:
                    5e:c7:af:e7:4c:93:ad:cc:5d:4f:6f:b5:75:2b:fa:
                    dc:8a:0f:d9:03:b9:ae:15:8a:5c:97:86:4b:02:ec:
                    4c:6f:01:6d:b4:b6:31:87:ed:64:4d:db:e6:27:5e:
                    05:8a:c0:bb:d6:62:7b:14:db:3f:c3:d9:13:50:74:
                    78:89:db:1a:bc:ac:1c:5f:6d:1a:59:bc:ac:73:90:
                    4c:41:bb:4b:89:9e:e0:65:b6:81:57:fc:a1:e2:d9:
                    8e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7C:B9:3E:8E:1A:6B:B2:F7:22:5A:89:FC:12:B9:2F:91:29:00:90
            X509v3 Authority Key Identifier:
                keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:59:39:81:c1:7c:17:b1:6c:78:5a:ad:23:f2:24:37:1f:d8:
         63:85:1b:49:f8:57:99:25:b5:f9:1e:bb:8d:82:41:ee:36:b1:
         57:a6:ee:f1:b6:a4:46:02:dd:b3:5d:ab:17:81:37:e2:0b:b6:
         ed:1b:d6:3a:a8:62:61:ab:59:8b:3d:1d:a1:ec:ed:74:4d:b6:
         5d:a9:d9:40:a5:47:f3:23:30:13:ce:f7:6f:83:3d:e3:1a:e1:
         3f:50:f9:50:f3:2f:2c:77:18:e8:7f:9f:32:2a:30:8c:ac:6e:
         47:69:c5:7b:f8:52:0a:fc:c4:5b:29:d4:13:b6:e8:7e:51:2e:
         f7:f6:c7:57:74:3c:9f:e6:c6:6c:66:7f:22:32:e2:93:fc:da:
         00:aa:3c:61:d0:9e:85:20:d2:3a:80:c7:87:81:f1:14:03:e8:
         a8:a1:ca:5e:e1:4a:7f:85:73:6d:38:de:00:41:b9:39:f6:6f:
         ad:f4:a9:bf:63:b6:28:06:ae:07:d0:bf:84:00:1e:e9:07:a6:
         28:01:e2:0b:96:4a:39:ae:20:b9:12:8b:22:28:62:98:d2:c5:
         37:f0:31:b0:f4:2e:ee:49:44:ff:47:b1:00:84:7a:c0:fd:bd:
         cd:47:8a:ae:47:ed:f2:eb:97:de:26:d5:18:ec:2b:48:9d:3d:
         0a:91:b9:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSO7479LbEJrF6325xeXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYzgzNmU1Y2UyYmZlYjgyMWYzN2Q2NGE0OWMxNjE4NTVm
ZTJjNTIwHhcNMjQwNTE3MTYwMDU0WhcNMjQwNTE4MTYwMDU0WjAzMTEwLwYDVQQD
Eyg3ZTdjYjkzZThlMWE2YmIyZjcyMjVhODlmYzEyYjkyZjkxMjkwMDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrPBx99N8dZWlA6o9Y4N/+0b6IzW
6/Pvhnu7C7qg6zwta69s9bJFFrfoo9QJBCKPkHsDvIha2IrJ+ZqSjJg9ZmnUdlQh
w36MbPguBZmNxwZf39bWOrKsqJzBYaLW2mrGYGO/7nuuzxB5IONtwC/BQDWLWjaY
NhmgbgjZ0ZSjjwRMnoh2zNMORBPtU36kXdWXAtWuJo7tM2JZvcNks2A26kbkIbte
x6/nTJOtzF1Pb7V1K/rcig/ZA7muFYpcl4ZLAuxMbwFttLYxh+1kTdvmJ14FisC7
1mJ7FNs/w9kTUHR4idsavKwcX20aWbysc5BMQbtLiZ7gZbaBV/yh4tmOXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH58uT6OGmuy9yJaifwSuS+RKQCQMB8GA1UdIwQY
MBaAFBDINuXOK/64IfN9ZKScFhhV/ixSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4Yjgt
OWYzYzA5YmI3NDFjLzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4YjgtOWYzYzA5YmI3NDFj
LzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtlk5gcF8
F7FseFqtI/IkNx/YY4UbSfhXmSW1+R67jYJB7jaxV6bu8bakRgLds12rF4E34gu2
7RvWOqhiYatZiz0doeztdE22XanZQKVH8yMwE873b4M94xrhP1D5UPMvLHcY6H+f
MiowjKxuR2nFe/hSCvzEWynUE7boflEu9/bHV3Q8n+bGbGZ/IjLik/zaAKo8YdCe
hSDSOoDHh4HxFAPoqKHKXuFKf4VzbTjeAEG5OfZvrfSpv2O2KAauB9C/hAAe6Qem
KAHiC5ZKOa4guRKLIihimNLFN/AxsPQu7klE/0exAIR6wP29zUeKrkft8uuX3ibV
GOwrSJ09CpG5Zw==
-----END CERTIFICATE-----
Generated at Fri May 17 19:12:00 2024 by rpki-client on console-fra.rpki-client.org