Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
File:                     6Fgzjepq5N27JIUKBwf0OqF5TD8.mft (raw, json)
Hash identifier:          4ATDnYxlpgsIozSG+Z2cI8e3M6GInZKLdCfgi8f5kVY=
Subject key identifier:   44:C2:66:C5:DF:8B:1C:33:6B:F3:DF:E4:4B:FF:41:E2:38:01:60:DA
Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Certificate issuer:       /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Certificate serial:       018F48330F5BAD04E14719987D67E9C1BE5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
Manifest number:          1124
Signing time:             Sun 05 May 2024 10:00:56 +0000
Manifest this update:     Sun 05 May 2024 10:00:56 +0000
Manifest next update:     Mon 06 May 2024 10:00:56 +0000
Files and hashes:         1: 6Fgzjepq5N27JIUKBwf0OqF5TD8.crl (hash: 3n6BJcjgctSX3Bl1RSVxxyl9YRpUpbDMrnt8ohxjFUA=)
                          2: TTcKd2jkze2Y5we1tFSD_F_NGeQ.roa (hash: s3hqx1zfNHae+yr5XZBLiHp0rU5+qfo41icgwJHr79k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:33:0f:5b:ad:04:e1:47:19:98:7d:67:e9:c1:be:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
        Validity
            Not Before: May  5 10:00:56 2024 GMT
            Not After : May  6 10:00:56 2024 GMT
        Subject: CN=44c266c5df8b1c336bf3dfe44bff41e2380160da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f2:27:36:f2:21:e4:14:0b:72:28:c3:52:38:
                    b0:d9:68:93:a5:6e:59:f7:6c:1b:1b:74:05:ef:04:
                    d6:c0:b3:6c:41:b5:42:e6:0c:78:82:8f:09:ae:fe:
                    82:03:b7:64:3c:10:2c:72:47:33:c6:9e:42:c1:ba:
                    07:95:3b:8e:1a:bd:02:e7:67:0a:73:88:88:a8:98:
                    6b:f1:b3:2c:92:be:5a:90:3d:c4:52:b2:9b:67:54:
                    c7:74:e0:b0:64:c5:33:d5:8a:9e:16:70:d0:3a:0e:
                    53:4c:60:0c:7a:2e:31:75:71:0f:77:65:70:de:b2:
                    6b:74:f6:72:3a:a4:ce:b6:1b:b6:92:40:5d:e7:e1:
                    32:22:0a:1a:ce:69:eb:81:ca:92:b9:4e:71:10:6b:
                    65:35:cb:bb:80:76:52:95:be:26:e5:30:72:33:6d:
                    49:4e:ac:87:96:ee:9f:d6:cb:27:89:19:8d:77:6a:
                    38:a7:e3:0c:ed:f7:af:77:b3:2c:3d:80:07:44:8f:
                    bf:72:74:c1:71:98:83:15:ab:87:02:cd:ac:ec:97:
                    6d:85:56:16:ca:a4:dc:dc:17:8c:08:51:07:0c:a0:
                    51:6c:2f:e5:70:d8:e8:60:d1:e2:b4:2f:cf:3a:0b:
                    d1:e3:44:66:04:ad:4d:c5:e7:97:b8:b2:9a:f8:39:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C2:66:C5:DF:8B:1C:33:6B:F3:DF:E4:4B:FF:41:E2:38:01:60:DA
            X509v3 Authority Key Identifier:
                keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f8:8a:65:bd:3c:ee:3c:25:52:8f:c2:3a:89:b2:b7:7c:97:
         3c:65:d0:49:91:c0:f9:e4:78:19:e5:50:9f:b2:d8:47:40:eb:
         40:5d:5b:89:db:ee:27:f4:88:50:26:09:72:93:6c:25:ef:7f:
         d2:8b:69:c6:1f:ae:6f:c2:79:0f:ff:e5:68:b5:40:26:6f:c0:
         0e:c5:4c:49:cf:7f:15:05:42:65:c1:01:5e:46:3e:22:d2:3c:
         dc:83:c0:0b:7c:e4:91:de:f5:69:65:3f:61:24:08:4b:1e:a9:
         52:86:6b:84:7d:9c:d8:10:8f:8c:88:11:6d:17:6e:71:7d:9f:
         e5:1f:84:e2:3a:19:3e:1a:af:83:6d:c0:2f:8f:67:e8:e0:38:
         10:c9:14:d1:81:27:e4:70:f4:a8:6d:26:47:1d:e9:94:dc:66:
         67:b1:dd:13:b7:9c:bf:10:fe:8f:d7:1a:60:28:2b:7e:2c:79:
         41:c0:d9:bb:4d:be:fd:e4:fe:b6:df:9a:2d:80:64:bf:3a:72:
         ae:a7:d1:9f:03:c8:63:66:0b:28:7c:c4:b5:12:36:1c:87:72:
         db:e9:35:cf:a7:90:ef:e2:8f:c9:25:f3:18:a1:30:d7:49:a9:
         14:77:ee:30:3f:d4:9c:31:0f:79:03:be:d8:7d:e9:63:a2:b2:
         04:61:de:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9IMw9brQThRxmYfWfpwb5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NTgzMzhkZWE2YWU0ZGRiYjI0ODUwYTA3MDdmNDNhYTE3
OTRjM2YwHhcNMjQwNTA1MTAwMDU2WhcNMjQwNTA2MTAwMDU2WjAzMTEwLwYDVQQD
Eyg0NGMyNjZjNWRmOGIxYzMzNmJmM2RmZTQ0YmZmNDFlMjM4MDE2MGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/InNvIh5BQLcijDUjiw2WiTpW5Z
92wbG3QF7wTWwLNsQbVC5gx4go8Jrv6CA7dkPBAsckczxp5CwboHlTuOGr0C52cK
c4iIqJhr8bMskr5akD3EUrKbZ1THdOCwZMUz1YqeFnDQOg5TTGAMei4xdXEPd2Vw
3rJrdPZyOqTOthu2kkBd5+EyIgoazmnrgcqSuU5xEGtlNcu7gHZSlb4m5TByM21J
TqyHlu6f1ssniRmNd2o4p+MM7fevd7MsPYAHRI+/cnTBcZiDFauHAs2s7JdthVYW
yqTc3BeMCFEHDKBRbC/lcNjoYNHitC/POgvR40RmBK1NxeeXuLKa+DnVzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETCZsXfixwza/Pf5Ev/QeI4AWDaMB8GA1UdIwQY
MBaAFOhYM43qauTduySFCgcH9DqheUw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zNzY2NjItODdlYi00Yzk3LTkzNzMt
YTFkY2U2YWQxNTBjLzEvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zNzY2NjItODdlYi00Yzk3LTkzNzMtYTFkY2U2YWQxNTBj
LzEvNkZnemplcHE1TjI3SklVS0J3ZjBPcUY1VEQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPiKZb08
7jwlUo/COomyt3yXPGXQSZHA+eR4GeVQn7LYR0DrQF1bidvuJ/SIUCYJcpNsJe9/
0otpxh+ub8J5D//laLVAJm/ADsVMSc9/FQVCZcEBXkY+ItI83IPAC3zkkd71aWU/
YSQISx6pUoZrhH2c2BCPjIgRbRducX2f5R+E4joZPhqvg23AL49n6OA4EMkU0YEn
5HD0qG0mRx3plNxmZ7HdE7ecvxD+j9caYCgrfix5QcDZu02+/eT+tt+aLYBkvzpy
rqfRnwPIY2YLKHzEtRI2HIdy2+k1z6eQ7+KPySXzGKEw10mpFHfuMD/UnDEPeQO+
2H3pY6KyBGHepA==
-----END CERTIFICATE-----
Generated at Sun May 5 14:08:50 2024 by rpki-client on console-fra.rpki-client.org