Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File:                     D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier:          WcNHs+0ECuTDfIy945MQEgiPx3zO+689vCE1gcL1y5g=
Subject key identifier:   15:22:73:35:5C:85:FE:B8:DD:70:B3:80:80:7D:1A:53:5D:03:D8:21
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer:       /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial:       018F3DE6A9FFE7086FB4801B2B7B81D337A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number:          07E7
Signing time:             Fri 03 May 2024 10:01:17 +0000
Manifest this update:     Fri 03 May 2024 10:01:17 +0000
Manifest next update:     Sat 04 May 2024 10:01:17 +0000
Files and hashes:         1: 7OBhVCWGPb4C8DuwHr_IKYVl85U.roa (hash: 1WmncQZLHYUxN4dr5t90mmtAep9gtOGQgsFy43AbUBU=)
                          2: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: yBPeeuNeUr6/u83qoM8EchyAy8JR4ePAr/GyEtgSuRU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e6:a9:ff:e7:08:6f:b4:80:1b:2b:7b:81:d3:37:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
        Validity
            Not Before: May  3 10:01:17 2024 GMT
            Not After : May  4 10:01:17 2024 GMT
        Subject: CN=152273355c85feb8dd70b380807d1a535d03d821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:5e:1d:f6:b0:f5:0f:4e:ac:c6:7c:21:c3:
                    b3:ce:7a:98:6b:c6:95:cb:3a:4a:6a:05:50:e8:97:
                    80:ee:1a:b8:7d:3e:97:83:35:52:9d:16:6b:c0:29:
                    7e:39:1f:0e:46:86:21:67:29:4a:4d:2e:cb:33:63:
                    3d:99:3e:50:4e:6e:bd:c2:02:1e:0c:f5:6c:c2:e8:
                    21:8d:28:01:4e:52:a0:65:0a:43:17:32:fc:e5:d6:
                    2c:e0:dd:e0:f2:75:49:e9:38:0c:14:a4:21:e1:3b:
                    d4:35:a4:83:59:79:cf:5e:ed:7e:7a:a2:a9:21:40:
                    58:a6:54:c7:a3:0b:49:b3:93:16:b7:21:83:49:60:
                    9c:1c:af:76:0c:bc:cc:4c:42:be:c5:e4:eb:d2:04:
                    1b:16:9d:18:2f:05:19:df:a7:18:3e:e4:94:a3:fd:
                    07:7c:59:fe:c7:ff:b1:67:c1:f1:fa:d0:57:6c:0a:
                    32:08:83:aa:0b:70:c3:50:08:4e:1b:3d:28:72:8b:
                    9c:61:a1:4c:5f:4e:d1:5c:80:65:07:8c:f5:0d:bf:
                    a8:8d:10:77:50:27:59:eb:be:26:71:e7:6a:25:4f:
                    d1:21:3c:ea:5d:ef:16:d0:d5:4d:45:13:8f:6e:22:
                    ea:d0:7b:c6:32:64:d7:0c:37:c8:47:3b:aa:9b:d5:
                    40:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:22:73:35:5C:85:FE:B8:DD:70:B3:80:80:7D:1A:53:5D:03:D8:21
            X509v3 Authority Key Identifier:
                keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:af:d1:4d:83:b2:85:67:14:92:2a:1f:22:df:87:0f:64:87:
         f8:ff:a0:41:f3:3e:c9:85:2f:e7:2a:f8:b9:9c:05:df:76:e0:
         65:93:18:f5:c1:00:f0:6e:72:06:f0:f9:e1:65:d0:42:5b:af:
         cf:f1:a1:f0:de:02:89:47:88:2c:b9:5d:7f:35:06:57:ea:32:
         32:32:0b:52:23:8a:9e:ed:98:dd:50:1d:86:36:4c:7c:23:0e:
         2e:82:a6:58:c4:66:2d:1f:07:f6:c1:25:25:eb:70:70:77:41:
         39:6e:d9:3d:73:de:fc:55:8b:32:ea:ac:18:fb:76:1a:09:b2:
         a1:fb:72:3d:6e:32:0a:f5:88:05:ff:95:46:a1:f8:07:e3:b4:
         f8:ea:00:4a:66:9c:ad:5e:37:75:18:d2:d9:92:0e:66:de:fe:
         ad:fc:9d:62:45:6c:95:6a:85:a7:60:85:7b:cc:74:7a:e7:20:
         5c:34:f6:df:4b:ae:4e:0e:a2:e5:c0:f3:20:7d:0c:8a:2b:89:
         18:ca:3b:79:7a:2e:69:a9:01:7c:03:38:c9:74:cb:84:0e:c6:
         42:d7:02:2e:ee:82:ba:78:72:2b:af:c4:d4:c0:4c:6d:2d:19:
         49:75:66:12:bc:d0:10:02:1d:2c:83:9b:db:96:39:2d:7f:1c:
         b7:75:fc:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY895qn/5whvtIAbK3uB0zeiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmODMyYzEwMTQ0ZTRkN2Y2YTY0MmM2MGRjZWFlMTQzNmZj
OTljYTEwHhcNMjQwNTAzMTAwMTE3WhcNMjQwNTA0MTAwMTE3WjAzMTEwLwYDVQQD
EygxNTIyNzMzNTVjODVmZWI4ZGQ3MGIzODA4MDdkMWE1MzVkMDNkODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwteHfaw9Q9OrMZ8IcOzznqYa8aV
yzpKagVQ6JeA7hq4fT6XgzVSnRZrwCl+OR8ORoYhZylKTS7LM2M9mT5QTm69wgIe
DPVswughjSgBTlKgZQpDFzL85dYs4N3g8nVJ6TgMFKQh4TvUNaSDWXnPXu1+eqKp
IUBYplTHowtJs5MWtyGDSWCcHK92DLzMTEK+xeTr0gQbFp0YLwUZ36cYPuSUo/0H
fFn+x/+xZ8Hx+tBXbAoyCIOqC3DDUAhOGz0ocoucYaFMX07RXIBlB4z1Db+ojRB3
UCdZ674mcedqJU/RITzqXe8W0NVNRROPbiLq0HvGMmTXDDfIRzuqm9VAowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUiczVchf643XCzgIB9GlNdA9ghMB8GA1UdIwQY
MBaAFA+DLBAUTk1/amQsYNzq4UNvyZyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81YzUxY2UtNzYwZC00NGEwLWEzMzkt
Y2M2OGUzN2QyNDVmLzEvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy81YzUxY2UtNzYwZC00NGEwLWEzMzktY2M2OGUzN2QyNDVm
LzEvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlq/RTYOy
hWcUkiofIt+HD2SH+P+gQfM+yYUv5yr4uZwF33bgZZMY9cEA8G5yBvD54WXQQluv
z/Gh8N4CiUeILLldfzUGV+oyMjILUiOKnu2Y3VAdhjZMfCMOLoKmWMRmLR8H9sEl
JetwcHdBOW7ZPXPe/FWLMuqsGPt2GgmyoftyPW4yCvWIBf+VRqH4B+O0+OoASmac
rV43dRjS2ZIOZt7+rfydYkVslWqFp2CFe8x0eucgXDT230uuTg6i5cDzIH0MiiuJ
GMo7eXouaakBfAM4yXTLhA7GQtcCLu6CunhyK6/E1MBMbS0ZSXVmErzQEAIdLIOb
25Y5LX8ct3X8qg==
-----END CERTIFICATE-----
Generated at Fri May 3 13:58:21 2024 by rpki-client on console-ams.rpki-client.org