Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File:                     5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier:          HEFQRHfTZZYX17Cw7HQ2h1xXEZ4FItebbjVdlmZYfBU=
Subject key identifier:   90:74:6F:F7:CD:35:76:6C:19:10:9C:26:2E:B5:87:AC:B8:5C:6F:42
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer:       /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial:       019406EA9C98342F6597D04BC992D11A25E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number:          0A58
Signing time:             Fri 27 Dec 2024 07:00:26 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:26 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:26 +0000
Files and hashes:         1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: DaT39dGVpigKxazm9MJZlsS+6q5tD0lCFwswoLE3hd8=)
                          2: YQeRJqgRleqW4EwBdTJ9nWFg_7g.roa (hash: O6bJdgqBmKQ2xbFoK7ZE6jFr/Nct5UXmjDzAZPJl6tk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 07:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:ea:9c:98:34:2f:65:97:d0:4b:c9:92:d1:1a:25:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
        Validity
            Not Before: Dec 27 07:00:26 2024 GMT
            Not After : Dec 28 07:00:26 2024 GMT
        Subject: CN=90746ff7cd35766c19109c262eb587acb85c6f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:27:9f:6c:21:74:63:31:77:81:ee:6e:65:
                    d8:64:33:fc:7b:0b:de:0d:1f:0d:86:26:9e:69:21:
                    ce:5f:f6:f5:48:6e:08:de:43:41:85:e3:cd:f9:d0:
                    cd:70:5b:45:a3:06:b6:5c:e8:a6:09:44:f2:e6:d3:
                    72:1c:bc:95:d9:08:78:b6:e1:6d:e8:c8:b4:97:bb:
                    e9:8f:4c:09:f5:02:f9:e2:26:e5:09:e3:45:e6:74:
                    85:88:8e:a3:99:7f:62:6d:cb:32:b2:f2:0b:5c:c8:
                    26:f5:83:48:c1:46:07:14:52:9e:57:9d:a6:f1:6d:
                    c9:dc:58:bd:c3:56:fd:5d:2a:5a:78:c6:d4:79:b8:
                    bd:f9:4a:04:21:07:93:4c:f9:46:5a:28:6f:ec:7e:
                    5a:36:82:02:2b:9d:50:01:f4:eb:40:ad:8c:39:99:
                    a8:d8:c6:bd:2a:d9:35:70:4b:8d:17:26:26:76:ed:
                    f4:0e:fd:47:ab:53:18:88:3b:87:de:b0:e8:3e:ce:
                    d4:dd:d3:01:5b:8a:5d:76:0d:9b:10:38:e2:68:e7:
                    04:ca:ba:69:c9:49:12:7b:6b:02:96:f9:9d:18:ce:
                    44:9e:09:5a:28:01:4f:0b:33:27:12:98:f0:7a:bf:
                    7b:55:ac:ad:b8:cc:31:62:49:83:f8:80:3a:71:0f:
                    79:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:74:6F:F7:CD:35:76:6C:19:10:9C:26:2E:B5:87:AC:B8:5C:6F:42
            X509v3 Authority Key Identifier:
                keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:9d:55:09:44:04:23:c9:f2:1d:29:cf:4c:94:1b:dd:0d:36:
         19:ce:a5:5a:5e:02:4a:30:10:0d:ab:d9:e3:fe:cd:54:f9:37:
         04:a4:06:2d:9d:9c:f5:9a:c3:bd:78:8c:30:d1:b9:2d:81:38:
         a9:bd:73:6e:aa:8a:5a:cc:7e:d6:aa:d3:3c:e9:36:64:e7:28:
         f2:8f:20:fc:d7:0c:e3:7e:8f:51:97:78:2e:2d:10:de:61:f4:
         05:12:47:b7:55:41:6e:f3:41:95:09:47:07:f3:67:36:d2:88:
         4a:eb:a1:43:b5:c2:0a:bc:6b:ec:4f:a2:41:c0:b0:b8:db:a3:
         f6:ab:b4:0a:9a:30:31:5d:c7:37:68:fc:36:4c:3f:74:83:55:
         9c:5f:33:ce:6c:14:e2:ff:b3:1c:d6:0c:e2:9d:93:1f:06:32:
         f9:9e:59:39:33:56:f9:2a:31:5e:75:17:d0:f7:09:99:1a:d2:
         e8:11:4d:b5:d5:8d:0b:0f:ed:c5:c4:f2:bb:17:19:30:28:16:
         f7:67:a0:6e:3d:8e:ca:b4:db:09:b0:70:3e:dc:c8:2e:c0:89:
         18:8f:3a:05:31:d0:0e:09:40:8f:1d:33:f9:ee:ce:1d:1d:2e:
         06:57:70:8d:a8:79:e5:cd:59:a8:d0:8e:d8:29:71:9f:07:78:
         81:31:59:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQG6pyYNC9ll9BLyZLRGiXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTAyMjAwYTZlNjNmNzYzOTdhZGI5NGRmZDgzNGMxMTY4
MDliOWYwHhcNMjQxMjI3MDcwMDI2WhcNMjQxMjI4MDcwMDI2WjAzMTEwLwYDVQQD
Eyg5MDc0NmZmN2NkMzU3NjZjMTkxMDljMjYyZWI1ODdhY2I4NWM2ZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA8nn2whdGMxd4HubmXYZDP8ewve
DR8NhiaeaSHOX/b1SG4I3kNBhePN+dDNcFtFowa2XOimCUTy5tNyHLyV2Qh4tuFt
6Mi0l7vpj0wJ9QL54iblCeNF5nSFiI6jmX9ibcsysvILXMgm9YNIwUYHFFKeV52m
8W3J3Fi9w1b9XSpaeMbUebi9+UoEIQeTTPlGWihv7H5aNoICK51QAfTrQK2MOZmo
2Ma9Ktk1cEuNFyYmdu30Dv1Hq1MYiDuH3rDoPs7U3dMBW4pddg2bEDjiaOcEyrpp
yUkSe2sClvmdGM5EnglaKAFPCzMnEpjwer97VaytuMwxYkmD+IA6cQ95SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJB0b/fNNXZsGRCcJi61h6y4XG9CMB8GA1UdIwQY
MBaAFOZQIgCm5j92OXrblN/YNMEWgJufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy85ZmY2MDItYjBiZC00YzNmLWFmOTQt
MmZjMzRhZDlkZDQ3LzEvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy85ZmY2MDItYjBiZC00YzNmLWFmOTQtMmZjMzRhZDlkZDQ3
LzEvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJ1VCUQE
I8nyHSnPTJQb3Q02Gc6lWl4CSjAQDavZ4/7NVPk3BKQGLZ2c9ZrDvXiMMNG5LYE4
qb1zbqqKWsx+1qrTPOk2ZOco8o8g/NcM436PUZd4Li0Q3mH0BRJHt1VBbvNBlQlH
B/NnNtKISuuhQ7XCCrxr7E+iQcCwuNuj9qu0CpowMV3HN2j8Nkw/dINVnF8zzmwU
4v+zHNYM4p2THwYy+Z5ZOTNW+SoxXnUX0PcJmRrS6BFNtdWNCw/txcTyuxcZMCgW
92egbj2OyrTbCbBwPtzILsCJGI86BTHQDglAjx0z+e7OHR0uBldwjah55c1ZqNCO
2Clxnwd4gTFZ/g==
-----END CERTIFICATE-----
Generated at Fri Dec 27 11:10:06 2024 by rpki-client on console-fra.rpki-client.org