Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft
File:                     7uVzCEEAtB18weRHKVunHQGdUZI.mft (raw, json)
Hash identifier:          Ga7TeBtffYNh3V9i7aW6TojttrcIVjYRXlhTe7g+Vg4=
Subject key identifier:   37:5B:C0:62:AE:D0:72:A6:96:3B:30:1E:82:E0:6F:6F:15:2C:97:F3
Authority key identifier: EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92
Certificate issuer:       /CN=eee573084100b41d7cc1e447295ba71d019d5192
Certificate serial:       018F47C55318D55C31C424AFA6D31F44A757
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft
Manifest number:          1157
Signing time:             Sun 05 May 2024 08:01:05 +0000
Manifest this update:     Sun 05 May 2024 08:01:05 +0000
Manifest next update:     Mon 06 May 2024 08:01:05 +0000
Files and hashes:         1: 7uVzCEEAtB18weRHKVunHQGdUZI.crl (hash: VYBYiSxELERVXMPjrhciyfX0k6DiVWS27RxVl/ZdW3s=)
                          2: e0eOhv2UQ_WUF5JLxyu3WtwVadI.roa (hash: +MEuiVZGCck/cRV1iXddP/QNjO9dZfyAYvi58H4HDbo=)
                          3: kBfkSNOloby9IpCmR9oQ66CR6n0.roa (hash: QZDbR1zQq6/rj4WTU3V4dPAr9cebCSZeZwWOF8BWUos=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:c5:53:18:d5:5c:31:c4:24:af:a6:d3:1f:44:a7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee573084100b41d7cc1e447295ba71d019d5192
        Validity
            Not Before: May  5 08:01:05 2024 GMT
            Not After : May  6 08:01:05 2024 GMT
        Subject: CN=375bc062aed072a6963b301e82e06f6f152c97f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:ba:72:8f:2c:a3:f3:3c:05:45:19:e1:9e:
                    61:1d:78:ef:5e:f8:d0:79:97:ac:bf:a7:87:88:f8:
                    0e:3b:8d:0c:d0:5d:34:16:4b:d5:1a:7f:bb:7f:36:
                    c9:98:0b:c3:ff:71:66:7a:64:0b:36:b0:73:f4:ba:
                    37:ec:48:b7:a4:b1:5a:65:cd:ed:ce:7e:76:07:9c:
                    49:d7:19:4a:48:40:52:81:06:be:d2:4a:7a:68:27:
                    cd:79:a0:9a:cb:4f:f5:e5:2c:e7:f3:58:68:2c:31:
                    7c:8d:bc:8a:99:29:81:14:5e:b3:d6:01:5a:f9:02:
                    92:91:e9:22:04:a2:01:e1:5a:db:8c:73:4b:1e:d6:
                    c2:cc:79:5c:9e:b6:0e:fc:49:f6:5c:d1:cb:bb:f8:
                    60:7f:e5:a3:4c:70:9f:f3:80:57:70:7f:22:76:e4:
                    9b:56:8a:07:c7:07:72:45:cf:a2:66:c0:99:7d:b3:
                    4b:b5:c5:04:1b:80:00:ea:3d:df:8a:80:7c:07:d2:
                    a9:4d:dd:11:f6:e1:09:87:88:e0:a8:c6:41:b3:5d:
                    38:18:dd:c7:e3:3d:f3:79:4d:e3:90:24:96:5a:f5:
                    d7:f2:91:7f:83:d2:f7:00:cd:54:f2:cd:ce:44:7a:
                    2d:2a:95:9b:f4:83:3c:a9:55:f9:01:ba:cd:18:02:
                    17:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5B:C0:62:AE:D0:72:A6:96:3B:30:1E:82:E0:6F:6F:15:2C:97:F3
            X509v3 Authority Key Identifier:
                keyid:EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:1d:2a:8b:ca:b6:a8:cb:0d:22:36:20:6d:d1:7f:4a:62:3c:
         c5:bd:37:fa:98:26:86:97:0c:08:99:94:f3:84:a2:44:e9:6c:
         ef:08:e0:41:b5:7a:67:3a:94:4c:95:3d:ab:df:c5:82:b6:a1:
         03:23:89:83:4d:f2:47:52:dd:22:e6:9a:41:4c:3e:1e:5e:cd:
         5e:de:07:b7:3c:62:f1:e4:42:93:e7:b8:4b:f4:e8:86:48:6a:
         e8:e3:aa:cc:f1:6f:cf:ce:cc:32:fa:a1:79:30:33:32:c1:03:
         0c:cb:ac:13:60:ab:b3:e9:04:4a:7c:51:48:08:65:7d:ec:a8:
         44:75:ed:65:bc:1c:84:e6:3a:40:c4:48:a4:33:6f:f7:80:c2:
         60:51:0c:9d:e3:4c:b6:b4:c3:f5:16:22:7f:0b:2d:0a:dc:f8:
         33:b0:2a:25:7d:4a:04:92:5d:e7:1b:ef:d3:4c:eb:9b:d2:56:
         fe:50:2d:d0:c7:7a:84:9a:e7:72:59:23:5b:5f:43:c3:f0:e8:
         0d:83:82:da:6b:fa:2c:00:af:fb:97:26:93:97:d8:c5:f7:f8:
         d9:d1:18:b0:6b:62:a6:64:d9:dd:81:3f:43:85:58:47:16:6e:
         2b:17:ee:3d:a2:4a:0d:2d:02:bf:0b:56:ad:4b:2d:3a:56:5d:
         dc:51:fd:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9HxVMY1VwxxCSvptMfRKdXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTU3MzA4NDEwMGI0MWQ3Y2MxZTQ0NzI5NWJhNzFkMDE5
ZDUxOTIwHhcNMjQwNTA1MDgwMTA1WhcNMjQwNTA2MDgwMTA1WjAzMTEwLwYDVQQD
EygzNzViYzA2MmFlZDA3MmE2OTYzYjMwMWU4MmUwNmY2ZjE1MmM5N2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjK6co8so/M8BUUZ4Z5hHXjvXvjQ
eZesv6eHiPgOO40M0F00FkvVGn+7fzbJmAvD/3FmemQLNrBz9Lo37Ei3pLFaZc3t
zn52B5xJ1xlKSEBSgQa+0kp6aCfNeaCay0/15Szn81hoLDF8jbyKmSmBFF6z1gFa
+QKSkekiBKIB4VrbjHNLHtbCzHlcnrYO/En2XNHLu/hgf+WjTHCf84BXcH8iduSb
VooHxwdyRc+iZsCZfbNLtcUEG4AA6j3fioB8B9KpTd0R9uEJh4jgqMZBs104GN3H
4z3zeU3jkCSWWvXX8pF/g9L3AM1U8s3ORHotKpWb9IM8qVX5AbrNGAIXMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdbwGKu0HKmljswHoLgb28VLJfzMB8GA1UdIwQY
MBaAFO7lcwhBALQdfMHkRylbpx0BnVGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VWekNFRUF0QjE4d2VSSEtWdW5IUUdkVVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xMWE4NjQtZDFjYi00MDAwLWIyYmMt
MTllZTNkOGI1NzdlLzEvN3VWekNFRUF0QjE4d2VSSEtWdW5IUUdkVVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8xMWE4NjQtZDFjYi00MDAwLWIyYmMtMTllZTNkOGI1Nzdl
LzEvN3VWekNFRUF0QjE4d2VSSEtWdW5IUUdkVVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOh0qi8q2
qMsNIjYgbdF/SmI8xb03+pgmhpcMCJmU84SiROls7wjgQbV6ZzqUTJU9q9/Fgrah
AyOJg03yR1LdIuaaQUw+Hl7NXt4Htzxi8eRCk+e4S/Tohkhq6OOqzPFvz87MMvqh
eTAzMsEDDMusE2Crs+kESnxRSAhlfeyoRHXtZbwchOY6QMRIpDNv94DCYFEMneNM
trTD9RYifwstCtz4M7AqJX1KBJJd5xvv00zrm9JW/lAt0Md6hJrnclkjW19Dw/Do
DYOC2mv6LACv+5cmk5fYxff42dEYsGtipmTZ3YE/Q4VYRxZuKxfuPaJKDS0CvwtW
rUstOlZd3FH9zw==
-----END CERTIFICATE-----
Generated at Sun May 5 11:19:55 2024 by rpki-client on console-fra.rpki-client.org