Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
File:                     1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json)
Hash identifier:          EBAiWqOJtgNXQ80NkMWCv/hhqHWuoH4ydpR+nb/DQaw=
Subject key identifier:   31:31:DE:11:95:62:69:91:87:20:21:64:9B:61:06:63:3D:82:F7:3B
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Certificate issuer:       /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial:       018FB23379EE0213572821C03351EF2E047D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
Manifest number:          08EA
Signing time:             Sun 26 May 2024 00:01:08 +0000
Manifest this update:     Sun 26 May 2024 00:01:08 +0000
Manifest next update:     Mon 27 May 2024 00:01:08 +0000
Files and hashes:         1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: xW1Agt6ZkTA8jwJSs9+8owrio74Ys7VmZFoLH9hZELM=)
                          2: N2rAxaGJXtSz_t2H0mM81e4xFNc.roa (hash: 7a7ytZMlU7gGSHJGLd5UANb4K/WZT/BUAod6OQeElwY=)
                          3: x4Qoke6Qq6rPzL59tkEGtqitDb8.roa (hash: t2nwz2TTuuaruKkTaCYaHSEbCn+/EEEkH3I6q/OoPqQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:33:79:ee:02:13:57:28:21:c0:33:51:ef:2e:04:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
        Validity
            Not Before: May 26 00:01:08 2024 GMT
            Not After : May 27 00:01:08 2024 GMT
        Subject: CN=3131de1195626991872021649b6106633d82f73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:81:00:41:d5:08:69:56:f6:d4:16:9f:6b:
                    87:5a:94:01:ec:80:59:a9:25:c0:ef:e9:88:3c:29:
                    3b:85:10:ad:da:dd:43:dd:e7:41:61:dc:9d:2c:cf:
                    44:e0:01:3b:a4:f5:ce:1f:e3:02:e3:dd:95:c8:b5:
                    0b:b4:ed:d7:78:16:cf:f6:e6:e1:f4:85:a8:ab:73:
                    e1:40:8d:84:33:f2:14:d5:91:10:f9:29:aa:57:99:
                    44:05:94:bb:9c:89:6a:e7:6b:5f:06:14:81:63:b9:
                    2c:5e:64:69:70:ca:f0:d7:9c:b7:9a:20:e5:b8:e9:
                    e8:d2:0d:66:67:c7:ee:19:88:9e:2c:5a:ff:8d:a6:
                    bd:a5:79:90:f0:e7:21:74:5b:30:4a:b8:d7:49:2c:
                    58:21:82:78:c5:f2:df:f5:d0:e5:d6:a6:55:44:da:
                    99:ba:55:b2:d4:1a:2f:5a:f7:f9:12:c3:7f:24:fa:
                    c9:dc:64:6e:65:cb:6f:3a:52:f7:ad:c1:7c:68:33:
                    0f:87:41:1d:f8:4a:60:66:f1:4b:cf:67:a0:5f:63:
                    b3:52:43:ce:77:d7:12:87:74:ff:a6:01:b9:fc:d5:
                    2b:53:73:f5:5b:e1:6c:09:09:22:fc:c7:3c:d8:23:
                    0f:b3:c3:93:a9:e9:33:d1:de:c0:33:48:f8:99:31:
                    f9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:31:DE:11:95:62:69:91:87:20:21:64:9B:61:06:63:3D:82:F7:3B
            X509v3 Authority Key Identifier:
                keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:64:6f:e1:d1:28:04:ee:50:04:65:2e:49:43:2b:86:47:f2:
         d5:cf:de:8c:12:fe:dd:15:c7:52:63:3c:80:91:9b:8b:4c:f3:
         86:b3:41:d1:ab:9d:43:d1:3e:ab:c3:e5:75:01:23:37:ea:af:
         5c:45:96:09:b8:a9:2b:c7:f7:f7:5b:4d:03:cb:c9:ea:69:d0:
         e3:34:e2:02:3b:60:ef:18:e1:9d:25:fc:ff:78:4a:55:87:80:
         1c:18:89:dc:d9:f3:47:5b:ad:57:27:a9:e3:6d:2b:fa:38:5a:
         d8:1d:19:a3:b4:93:c0:5b:c2:40:9b:40:5b:d5:72:79:bd:ac:
         5f:62:a4:15:a4:0a:ac:ee:f6:17:7d:74:b2:11:f4:af:11:62:
         a9:3a:9e:4c:d4:00:d3:a2:ab:f0:82:4c:e5:96:f8:53:bd:b8:
         f5:d1:38:f3:c1:dd:92:74:75:8e:7d:e2:26:f5:5d:71:81:6e:
         32:3d:da:87:6e:2a:f5:dc:23:b1:e2:f0:e9:1f:7b:86:44:ca:
         33:10:07:f6:1a:bd:62:8d:80:27:c0:54:d6:ae:cb:db:ed:97:
         bf:49:31:a8:f2:53:20:74:e3:e0:a4:72:bd:c6:7e:c4:e8:22:
         b0:e8:41:0c:84:18:2d:4f:c4:4a:60:9c:31:19:cb:1a:69:c0:
         87:72:0f:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+yM3nuAhNXKCHAM1HvLgR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NDc4MTNjZTUyYTgyM2VhMWVmYzlhMGY0OTMzYzVkMzM1
M2VlMmIwHhcNMjQwNTI2MDAwMTA4WhcNMjQwNTI3MDAwMTA4WjAzMTEwLwYDVQQD
EygzMTMxZGUxMTk1NjI2OTkxODcyMDIxNjQ5YjYxMDY2MzNkODJmNzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyCBAEHVCGlW9tQWn2uHWpQB7IBZ
qSXA7+mIPCk7hRCt2t1D3edBYdydLM9E4AE7pPXOH+MC492VyLULtO3XeBbP9ubh
9IWoq3PhQI2EM/IU1ZEQ+SmqV5lEBZS7nIlq52tfBhSBY7ksXmRpcMrw15y3miDl
uOno0g1mZ8fuGYieLFr/jaa9pXmQ8OchdFswSrjXSSxYIYJ4xfLf9dDl1qZVRNqZ
ulWy1BovWvf5EsN/JPrJ3GRuZctvOlL3rcF8aDMPh0Ed+EpgZvFLz2egX2OzUkPO
d9cSh3T/pgG5/NUrU3P1W+FsCQki/Mc82CMPs8OTqekz0d7AM0j4mTH5zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEx3hGVYmmRhyAhZJthBmM9gvc7MB8GA1UdIwQY
MBaAFNRHgTzlKoI+oe/JoPSTPF0zU+4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2Yt
ZGM3ZTEyNmNhMjM0LzEvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2YtZGM3ZTEyNmNhMjM0
LzEvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2Rv4dEo
BO5QBGUuSUMrhkfy1c/ejBL+3RXHUmM8gJGbi0zzhrNB0audQ9E+q8PldQEjN+qv
XEWWCbipK8f391tNA8vJ6mnQ4zTiAjtg7xjhnSX8/3hKVYeAHBiJ3NnzR1utVyep
420r+jha2B0Zo7STwFvCQJtAW9Vyeb2sX2KkFaQKrO72F310shH0rxFiqTqeTNQA
06Kr8IJM5Zb4U7249dE488HdknR1jn3iJvVdcYFuMj3ah24q9dwjseLw6R97hkTK
MxAH9hq9Yo2AJ8BU1q7L2+2Xv0kxqPJTIHTj4KRyvcZ+xOgisOhBDIQYLU/ESmCc
MRnLGmnAh3IPlA==
-----END CERTIFICATE-----
Generated at Sun May 26 07:07:53 2024 by rpki-client on console-fra.rpki-client.org