Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File:                     43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier:          qg63hUgQqs4Di04Dpm8q3bzmxiNK7VCz/kOYe0ysHn8=
Subject key identifier:   FD:2C:4C:D2:A8:55:1A:48:9B:A5:18:AE:55:9B:EC:9A:EE:E6:9F:EF
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer:       /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial:       018F32506A53E4534515856585A54515D969
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number:          10DD
Signing time:             Wed 01 May 2024 04:01:21 +0000
Manifest this update:     Wed 01 May 2024 04:01:21 +0000
Manifest next update:     Thu 02 May 2024 04:01:21 +0000
Files and hashes:         1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: PAxh7ZD5WrQEjMbGR6sYPe7CqY4sV7iKu9azNUw5gXU=)
                          2: wn20NsIm9fETMQINaNPQXrLL3_k.roa (hash: qHXrtS0sV6je8EXjEvl8aYLqaTl/4KBJTkjHBZqG0d8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:32:50:6a:53:e4:53:45:15:85:65:85:a5:45:15:d9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
        Validity
            Not Before: May  1 04:01:21 2024 GMT
            Not After : May  2 04:01:21 2024 GMT
        Subject: CN=fd2c4cd2a8551a489ba518ae559bec9aeee69fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:09:a0:c8:1a:b0:f3:8a:32:6a:e9:54:b7:73:
                    4c:f6:bb:41:26:64:09:b7:be:4c:af:0e:e8:6b:b0:
                    1a:24:aa:7c:8c:01:d6:98:1e:bf:88:76:9d:57:3a:
                    f9:7c:9b:bb:ed:f2:7c:13:2b:72:fc:33:8e:27:8e:
                    18:a7:99:fd:d7:f3:76:f6:33:5c:2b:94:d7:e8:aa:
                    7e:85:87:72:83:2a:d6:ba:df:a0:da:bd:5d:c7:a4:
                    2d:dd:70:6f:de:2a:65:ea:81:e7:93:23:fe:d9:8d:
                    87:1f:72:f6:a3:9b:1c:f2:3a:e7:96:75:7d:aa:bd:
                    b8:d6:32:fa:a7:95:01:0d:c5:a6:6d:86:85:68:31:
                    b3:d0:a1:f8:b1:05:62:78:e4:fa:22:9f:af:af:78:
                    60:dc:9a:fb:8b:da:0f:e5:c7:01:7e:45:59:9d:2b:
                    1b:c8:27:05:ae:53:5d:cd:7e:6f:1d:77:fd:6e:e8:
                    74:e2:18:39:e2:c1:da:08:d8:29:62:e7:82:7b:3d:
                    81:29:38:b3:df:50:db:38:08:84:c9:c8:46:20:a5:
                    20:6c:25:9e:87:b0:c8:ad:9a:c4:dd:7e:39:28:fd:
                    62:b7:3c:19:74:8a:60:7f:9a:9b:0f:a7:56:04:80:
                    eb:81:9c:0a:c1:03:54:54:3c:da:e5:93:e1:9b:05:
                    fe:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2C:4C:D2:A8:55:1A:48:9B:A5:18:AE:55:9B:EC:9A:EE:E6:9F:EF
            X509v3 Authority Key Identifier:
                keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:fd:54:5f:fd:05:b3:e8:63:79:9e:55:df:12:8b:93:6b:92:
         86:fc:67:f7:30:52:e9:cf:76:8e:1d:33:3b:29:4d:0c:de:e3:
         ff:bc:4d:5d:c2:5b:99:32:33:2f:f8:aa:de:7e:fc:a2:3d:aa:
         b0:e2:1d:63:4a:24:05:1d:f8:d6:e3:dc:af:07:ce:56:2e:54:
         06:a2:6b:4e:00:1d:92:bf:c6:42:33:03:36:5d:2e:4e:c8:8f:
         55:ef:27:e1:09:db:c3:e5:db:13:6f:5b:92:9d:86:be:1a:ec:
         d3:c3:87:37:f4:79:66:7e:61:c7:3f:fc:a3:4a:23:e9:c3:7b:
         24:09:d2:83:0e:03:5c:20:a3:4f:44:66:9c:21:39:71:1f:b7:
         fc:5f:52:6e:ee:7c:d6:20:c7:5b:b2:15:81:c5:ed:12:d4:78:
         ee:17:d5:b0:a9:3b:49:7c:ab:96:8f:92:e8:c7:ce:f5:ab:38:
         21:7f:fd:42:48:0d:30:1a:03:e6:c2:51:15:3a:33:6c:e1:b2:
         cd:75:75:cb:32:8c:53:b5:0c:db:d1:24:bb:24:52:8b:59:7b:
         3e:ef:5f:26:17:12:b2:9e:20:25:24:2e:0d:a1:be:e2:1d:12:
         9d:48:25:35:5e:b7:9d:27:3d:88:52:24:9a:05:b1:0b:ce:e3:
         d6:0b:28:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8yUGpT5FNFFYVlhaVFFdlpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzEwNjA3YmE3YTgxNWU5MTFjNDg5MmY5NjhiMThhZTY2
MDQzODkwHhcNMjQwNTAxMDQwMTIxWhcNMjQwNTAyMDQwMTIxWjAzMTEwLwYDVQQD
EyhmZDJjNGNkMmE4NTUxYTQ4OWJhNTE4YWU1NTliZWM5YWVlZTY5ZmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QmgyBqw84oyaulUt3NM9rtBJmQJ
t75Mrw7oa7AaJKp8jAHWmB6/iHadVzr5fJu77fJ8Eyty/DOOJ44Yp5n91/N29jNc
K5TX6Kp+hYdygyrWut+g2r1dx6Qt3XBv3ipl6oHnkyP+2Y2HH3L2o5sc8jrnlnV9
qr241jL6p5UBDcWmbYaFaDGz0KH4sQVieOT6Ip+vr3hg3Jr7i9oP5ccBfkVZnSsb
yCcFrlNdzX5vHXf9buh04hg54sHaCNgpYueCez2BKTiz31DbOAiEychGIKUgbCWe
h7DIrZrE3X45KP1itzwZdIpgf5qbD6dWBIDrgZwKwQNUVDza5ZPhmwX+LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0sTNKoVRpIm6UYrlWb7Jru5p/vMB8GA1UdIwQY
MBaAFONxBge6eoFekRxIkvlosYrmYEOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUt
MTI2ZDVlNjBmZGQxLzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wNDU5ODYtYjNhNC00OWU0LThmNDUtMTI2ZDVlNjBmZGQx
LzEvNDNFR0I3cDZnVjZSSEVpUy1XaXhpdVpnUTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWP1UX/0F
s+hjeZ5V3xKLk2uShvxn9zBS6c92jh0zOylNDN7j/7xNXcJbmTIzL/iq3n78oj2q
sOIdY0okBR341uPcrwfOVi5UBqJrTgAdkr/GQjMDNl0uTsiPVe8n4Qnbw+XbE29b
kp2Gvhrs08OHN/R5Zn5hxz/8o0oj6cN7JAnSgw4DXCCjT0RmnCE5cR+3/F9Sbu58
1iDHW7IVgcXtEtR47hfVsKk7SXyrlo+S6MfO9as4IX/9QkgNMBoD5sJRFTozbOGy
zXV1yzKMU7UM29EkuyRSi1l7Pu9fJhcSsp4gJSQuDaG+4h0SnUglNV63nSc9iFIk
mgWxC87j1gsosA==
-----END CERTIFICATE-----
Generated at Wed May 1 09:20:48 2024 by rpki-client on console-fra.rpki-client.org