Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
File:                     eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft (raw, json)
Hash identifier:          8Wzt7EUYRe73HQ6G7FTxN5zgEMG6zvEy6aXhTqtLHkc=
Subject key identifier:   C0:79:A4:BC:86:CE:31:53:0B:C1:70:70:FC:DA:C3:77:22:EE:73:C2
Authority key identifier: 78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
Certificate issuer:       /CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Certificate serial:       018F88240119AC4AAB0917B8631D0B81709B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
Manifest number:          0153
Signing time:             Fri 17 May 2024 20:00:11 +0000
Manifest this update:     Fri 17 May 2024 20:00:11 +0000
Manifest next update:     Sat 18 May 2024 20:00:11 +0000
Files and hashes:         1: 2b_nuwk5o0O1Zhj88K3TfNHlA2Q.roa (hash: zcdIxn071lfoO1ri0vIJGk69bBw0Ypwxb3kXKwrwiOY=)
                          2: eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl (hash: VthhIwc3H4f0h/584wctRMhw35viMSoyjsLKdYuk2/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:01:19:ac:4a:ab:09:17:b8:63:1d:0b:81:70:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
        Validity
            Not Before: May 17 20:00:11 2024 GMT
            Not After : May 18 20:00:11 2024 GMT
        Subject: CN=c079a4bc86ce31530bc17070fcdac37722ee73c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c1:0c:8a:94:90:0c:8f:1a:ef:bf:6e:91:b6:
                    a0:64:e6:64:66:ac:22:84:20:0e:12:8f:f5:d5:11:
                    5e:72:7e:67:9b:56:53:23:e1:10:42:b0:2d:02:26:
                    fe:67:dd:b0:16:ec:a9:9b:e8:32:1e:5f:42:b7:e7:
                    7e:6e:27:64:4e:54:9d:a8:d8:27:a3:68:ce:c5:1a:
                    45:d5:90:0d:7a:15:b7:99:0f:f2:89:6b:ac:7a:00:
                    b4:cc:89:41:08:0f:3f:33:d3:6a:fd:17:9a:bb:8f:
                    35:63:32:1c:cc:b3:28:f3:9b:1d:fe:c1:a7:53:4d:
                    4d:3d:fa:01:6b:4a:97:32:11:d2:84:df:80:63:e0:
                    78:58:28:96:a5:00:a1:36:36:72:bf:90:f0:cd:a4:
                    41:0b:9e:13:d8:a3:26:c3:e6:ad:19:12:82:bf:c6:
                    8a:e8:df:5c:2a:7e:c6:27:7a:e1:c4:0f:21:2e:0b:
                    eb:ac:a9:16:f4:4a:43:96:2e:f0:ae:48:09:9e:2c:
                    9d:09:3e:61:14:d3:bc:c6:68:a2:01:52:66:1e:d6:
                    e1:18:34:32:e7:ea:1d:b8:73:12:8a:cb:90:bf:7b:
                    92:bf:90:09:12:a9:4a:36:8d:c0:5a:33:08:75:7c:
                    05:96:f3:f6:23:3e:25:04:74:11:56:f9:70:b3:17:
                    70:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:79:A4:BC:86:CE:31:53:0B:C1:70:70:FC:DA:C3:77:22:EE:73:C2
            X509v3 Authority Key Identifier:
                keyid:78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:81:e3:cc:9b:84:89:d1:c0:e2:3d:af:6d:01:72:14:00:4c:
         52:28:f2:16:7e:f9:eb:4c:72:c8:bf:d3:e1:39:58:0f:0d:57:
         79:d6:ac:44:ee:a9:8f:fb:34:85:4e:56:76:61:31:d5:82:d6:
         af:a9:28:a7:f1:77:be:8f:0f:b5:68:c9:1f:de:26:79:62:84:
         c4:52:29:53:9f:cc:5a:f3:2a:19:3e:69:e0:20:03:73:06:80:
         10:df:49:45:26:66:55:23:72:00:68:93:20:22:f5:e4:94:14:
         1a:0d:a0:ae:54:41:c1:26:23:79:63:aa:d7:71:c3:16:d2:ac:
         17:c2:20:4f:1b:8d:cf:ff:b6:e8:fd:b5:dd:1f:ba:89:c0:ab:
         5b:83:c7:f2:09:17:72:ab:fd:60:52:01:1c:e6:69:7d:57:47:
         8f:46:3f:d2:ef:a9:0c:d3:c0:30:8f:49:e1:c7:ec:bd:91:f2:
         a6:bd:e9:6a:3d:71:23:2e:d3:45:29:b2:32:2e:c5:8e:51:f9:
         9d:e0:dd:37:5c:38:5e:b5:7c:33:6e:73:73:18:a8:ac:ba:80:
         85:c1:0b:c1:3b:ea:5d:f3:2d:90:83:85:29:86:e1:2a:01:09:
         2f:df:44:ff:b7:77:44:9b:a8:04:92:be:82:99:88:94:b1:a7:
         9e:dc:4b:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJAEZrEqrCRe4Yx0LgXCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YjBiMTlkNTBkNjFhN2UzMzNmM2QzMDBmMTE0OWNlZmRl
N2I2NGYwHhcNMjQwNTE3MjAwMDExWhcNMjQwNTE4MjAwMDExWjAzMTEwLwYDVQQD
EyhjMDc5YTRiYzg2Y2UzMTUzMGJjMTcwNzBmY2RhYzM3NzIyZWU3M2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cEMipSQDI8a779ukbagZOZkZqwi
hCAOEo/11RFecn5nm1ZTI+EQQrAtAib+Z92wFuypm+gyHl9Ct+d+bidkTlSdqNgn
o2jOxRpF1ZANehW3mQ/yiWusegC0zIlBCA8/M9Nq/Reau481YzIczLMo85sd/sGn
U01NPfoBa0qXMhHShN+AY+B4WCiWpQChNjZyv5DwzaRBC54T2KMmw+atGRKCv8aK
6N9cKn7GJ3rhxA8hLgvrrKkW9EpDli7wrkgJniydCT5hFNO8xmiiAVJmHtbhGDQy
5+oduHMSisuQv3uSv5AJEqlKNo3AWjMIdXwFlvP2Iz4lBHQRVvlwsxdwhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB5pLyGzjFTC8FwcPzaw3ci7nPCMB8GA1UdIwQY
MBaAFHiwsZ1Q1hp+Mz89MA8RSc7957ZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lOGNmYjAtOTU2OC00MTU3LWI4MDIt
ZjBlZDlhMmFiNjU0LzEvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lOGNmYjAtOTU2OC00MTU3LWI4MDItZjBlZDlhMmFiNjU0
LzEvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwYHjzJuE
idHA4j2vbQFyFABMUijyFn7560xyyL/T4TlYDw1XedasRO6pj/s0hU5WdmEx1YLW
r6kop/F3vo8PtWjJH94meWKExFIpU5/MWvMqGT5p4CADcwaAEN9JRSZmVSNyAGiT
ICL15JQUGg2grlRBwSYjeWOq13HDFtKsF8IgTxuNz/+26P213R+6icCrW4PH8gkX
cqv9YFIBHOZpfVdHj0Y/0u+pDNPAMI9J4cfsvZHypr3paj1xIy7TRSmyMi7FjlH5
neDdN1w4XrV8M25zcxiorLqAhcELwTvqXfMtkIOFKYbhKgEJL99E/7d3RJuoBJK+
gpmIlLGnntxLEg==
-----END CERTIFICATE-----
Generated at Fri May 17 21:02:49 2024 by rpki-client on console-fra.rpki-client.org