Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
File:                     weOkSujPAkPx3_4mhOPdWo_IXXk.mft (raw, json)
Hash identifier:          pBx5fzZ9zkX4WGDZK6lsLkpumpbAQZOdR+KULwon7go=
Subject key identifier:   A0:AF:54:83:02:CD:23:37:B3:31:2A:07:F2:22:DA:D9:F8:54:3F:4A
Authority key identifier: C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
Certificate issuer:       /CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Certificate serial:       018F8748443FABA55A6B3B4D7850DAD6D2D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
Manifest number:          0FEC
Signing time:             Fri 17 May 2024 16:00:11 +0000
Manifest this update:     Fri 17 May 2024 16:00:11 +0000
Manifest next update:     Sat 18 May 2024 16:00:11 +0000
Files and hashes:         1: EVmGtDFJM6c9yCf53dNTVB1CClw.roa (hash: FKsZkXv7Kmvei3UE4dznKMs8aVAVhctV/URFoqTW4KA=)
                          2: weOkSujPAkPx3_4mhOPdWo_IXXk.crl (hash: 2dPxBrnuH63PrdD1wBWkNcw9/2bg5+wj3R7eznuyxgs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:44:3f:ab:a5:5a:6b:3b:4d:78:50:da:d6:d2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
        Validity
            Not Before: May 17 16:00:11 2024 GMT
            Not After : May 18 16:00:11 2024 GMT
        Subject: CN=a0af548302cd2337b3312a07f222dad9f8543f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:88:90:ea:d4:e8:cb:88:d9:49:86:fd:20:
                    f0:6b:e3:a1:01:97:04:0d:c7:b0:bb:7e:52:be:1d:
                    2b:01:13:13:70:d0:5f:9f:d1:4e:bc:de:d6:26:b7:
                    ef:3c:24:59:98:e9:71:f4:a0:bf:d2:a4:08:d4:dd:
                    7a:f2:3b:4c:0c:39:18:15:13:2a:4c:f7:81:e4:20:
                    03:28:a5:98:90:ad:d3:9d:b4:96:bc:f6:91:53:5b:
                    f5:d6:4c:1f:60:a1:9c:14:d6:b1:a7:75:e9:7b:a1:
                    1e:22:b3:9e:88:a8:3f:a2:19:81:10:61:22:f6:db:
                    94:fc:26:24:d1:77:49:ce:62:fc:3b:78:9f:17:bb:
                    f5:9d:d2:06:05:4f:a4:81:a8:8a:3f:be:33:0e:34:
                    16:21:58:c4:01:91:c5:84:14:1f:a2:9f:1a:c2:84:
                    74:0d:63:e5:f7:77:f2:58:96:bf:5f:9a:88:a0:06:
                    ec:72:aa:cb:9a:80:aa:48:4a:16:ab:15:86:ad:63:
                    af:88:8e:93:be:e1:09:2c:3c:75:fe:eb:e5:cd:85:
                    d3:92:25:10:d0:46:2c:8c:b8:0b:59:b8:b5:7b:4a:
                    dc:6d:f3:a5:7b:17:95:67:07:be:88:b9:72:0c:0f:
                    2b:c4:ac:c5:f7:f8:7a:0d:d4:91:ad:ab:59:be:3f:
                    71:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AF:54:83:02:CD:23:37:B3:31:2A:07:F2:22:DA:D9:F8:54:3F:4A
            X509v3 Authority Key Identifier:
                keyid:C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e5:dc:a5:be:66:ed:1a:ae:b8:eb:e2:66:1d:f4:1b:02:76:
         6f:a8:62:04:64:53:ff:82:7b:a8:d7:5e:6b:36:c9:05:c1:da:
         a5:1d:45:9a:3c:a6:59:6d:fd:4f:c4:3b:f6:8a:aa:a7:c6:5f:
         d4:fb:11:f1:f5:74:3a:84:2f:70:f4:7c:05:6b:f3:c8:e9:48:
         6b:ba:22:05:bc:c9:6a:b4:00:ed:ba:81:5e:7f:b3:0e:1f:99:
         ef:8f:75:cf:39:6a:bf:69:c0:f6:5d:d4:3a:dc:66:44:4e:e7:
         30:2e:d9:3c:ac:1f:c3:72:a0:18:4c:77:c9:b1:d9:d0:0d:60:
         cf:60:2c:00:77:c3:4a:73:29:2f:42:2f:81:0f:b2:3d:7f:1c:
         b5:07:ee:ee:c9:80:06:71:45:93:6a:fc:ae:69:2d:8e:a9:6a:
         b0:f5:7c:24:e0:b9:76:09:18:4f:11:0c:7e:c0:7b:cb:4b:aa:
         92:92:69:a7:d6:7d:f6:08:2f:7f:ba:db:af:87:91:fe:b3:f9:
         1d:98:87:1c:99:18:98:5c:ee:03:e1:cb:68:9a:38:d7:5f:69:
         34:88:3a:34:4e:e4:c0:8e:e4:1f:31:ec:a0:0d:39:5f:f1:81:
         6c:a3:90:c7:56:7d:a3:33:f0:0f:3d:a9:8b:8a:c7:12:25:d6:
         9e:a0:23:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSEQ/q6VaaztNeFDa1tLVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZTNhNDRhZThjZjAyNDNmMWRmZmUyNjg0ZTNkZDVhOGZj
ODVkNzkwHhcNMjQwNTE3MTYwMDExWhcNMjQwNTE4MTYwMDExWjAzMTEwLwYDVQQD
EyhhMGFmNTQ4MzAyY2QyMzM3YjMzMTJhMDdmMjIyZGFkOWY4NTQzZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt+IkOrU6MuI2UmG/SDwa+OhAZcE
Dcewu35Svh0rARMTcNBfn9FOvN7WJrfvPCRZmOlx9KC/0qQI1N168jtMDDkYFRMq
TPeB5CADKKWYkK3TnbSWvPaRU1v11kwfYKGcFNaxp3Xpe6EeIrOeiKg/ohmBEGEi
9tuU/CYk0XdJzmL8O3ifF7v1ndIGBU+kgaiKP74zDjQWIVjEAZHFhBQfop8awoR0
DWPl93fyWJa/X5qIoAbscqrLmoCqSEoWqxWGrWOviI6TvuEJLDx1/uvlzYXTkiUQ
0EYsjLgLWbi1e0rcbfOlexeVZwe+iLlyDA8rxKzF9/h6DdSRratZvj9xHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCvVIMCzSM3szEqB/Ii2tn4VD9KMB8GA1UdIwQY
MBaAFMHjpErozwJD8d/+JoTj3VqPyF15MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2VPa1N1alBBa1B4M180bWhPUGRXb19JWFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iZjRhNDQtYmI4YS00NjUxLWEwYWEt
MzhkMjkyZDBmN2VjLzEvd2VPa1N1alBBa1B4M180bWhPUGRXb19JWFhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iZjRhNDQtYmI4YS00NjUxLWEwYWEtMzhkMjkyZDBmN2Vj
LzEvd2VPa1N1alBBa1B4M180bWhPUGRXb19JWFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeXcpb5m
7RquuOviZh30GwJ2b6hiBGRT/4J7qNdeazbJBcHapR1FmjymWW39T8Q79oqqp8Zf
1PsR8fV0OoQvcPR8BWvzyOlIa7oiBbzJarQA7bqBXn+zDh+Z7491zzlqv2nA9l3U
OtxmRE7nMC7ZPKwfw3KgGEx3ybHZ0A1gz2AsAHfDSnMpL0IvgQ+yPX8ctQfu7smA
BnFFk2r8rmktjqlqsPV8JOC5dgkYTxEMfsB7y0uqkpJpp9Z99ggvf7rbr4eR/rP5
HZiHHJkYmFzuA+HLaJo4119pNIg6NE7kwI7kHzHsoA05X/GBbKOQx1Z9ozPwDz2p
i4rHEiXWnqAjMQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:48:47 2024 by rpki-client on console-ams.rpki-client.org