Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
File:                     5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json)
Hash identifier:          EQng4loL0AtpTywpD7wGUQqN296j96kr0OreqtKUO08=
Subject key identifier:   05:75:60:EF:D0:2C:B4:15:18:39:B2:C6:DB:93:E0:31:DA:AD:0A:9B
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Certificate issuer:       /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial:       018F373FEDAC3E41D1D1248DF53B1A711279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
Manifest number:          0649
Signing time:             Thu 02 May 2024 03:01:27 +0000
Manifest this update:     Thu 02 May 2024 03:01:27 +0000
Manifest next update:     Fri 03 May 2024 03:01:27 +0000
Files and hashes:         1: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: plFKtX1Ut9p9RlLXmiZ8UjSALZS7RylibKUyT3I9Yr8=)
                          2: 94xA3wkFiu4LdZtjleGbuHc1kEc.roa (hash: M5/1E96340FSl75WyCVYJEFdyMnyxjJqmUyRALRlGoI=)
                          3: DghzU9EqeAAWzl6UGv-xjojUyks.roa (hash: FBV3wZzgirYgZDPNiA44b1JZZitCNVmi/BifVXADE3U=)
                          4: KA1t2qI4Iuks-q6_GU8MPbqgTFk.roa (hash: cxUcF6onkZSGgGZNAlNNLact16oI6Patwv6xM3CFYW4=)
                          5: nzwe5eztfoQ9FYhMhTIzFHHornA.roa (hash: glA3LgSxNSS+Dz1GACqw47ONZbOsU2onz2Sf+mparTE=)
                          6: wtqbZIYyVG1_x4_qhHJQfNzbaD8.roa (hash: JWu9hhE0ShvqWOgvQABRaaOn4f9O2HgvYu9c2Gx83e8=)
                          7: x-sdtI-1kMr0feM1naIhzRZDOFg.roa (hash: vlusISjW8zhLnYMEGa4gEyF4AZrjP3Wo+5BaRT7mwP0=)
                          8: xWKMqfI72Z9cP9g7XAsaj0nIxhA.roa (hash: jSUv9aKKCBFlubJFh33nIo1/cdGKoM86PasSrIpXoQ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 03:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:3f:ed:ac:3e:41:d1:d1:24:8d:f5:3b:1a:71:12:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
        Validity
            Not Before: May  2 03:01:27 2024 GMT
            Not After : May  3 03:01:27 2024 GMT
        Subject: CN=057560efd02cb4151839b2c6db93e031daad0a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3a:e4:16:b7:9d:d6:23:b7:c1:d2:f7:5d:ff:
                    f1:6f:60:3a:24:e7:34:43:11:97:51:cb:c3:7d:af:
                    9b:40:6a:f0:33:8e:52:a9:20:1e:44:b1:01:48:71:
                    a6:54:7e:78:8e:3d:29:59:d3:4c:a7:aa:f0:a6:84:
                    2c:ba:ae:a6:00:56:61:7a:2b:57:8e:88:d7:9d:52:
                    af:76:54:8d:ff:95:59:d6:ea:60:57:88:fa:91:05:
                    2e:0a:31:a0:d7:00:68:d7:0a:01:51:4f:61:d6:d8:
                    40:75:4a:2d:70:e5:62:02:59:6d:a0:7b:62:0a:70:
                    6b:14:b5:2e:72:da:6f:2c:6a:77:b4:27:35:1a:ab:
                    d5:38:f7:20:ee:5b:ab:d0:36:c1:1f:8a:05:38:88:
                    8f:6e:ca:69:0c:92:39:06:36:02:83:5d:e2:dd:ed:
                    f0:e6:44:6b:a8:bc:15:b1:a3:75:ad:89:df:eb:68:
                    0d:32:af:7f:da:a8:1e:77:e5:9e:67:75:7a:56:04:
                    fa:3c:f4:94:87:4e:fe:57:bd:8d:c7:dd:54:04:ec:
                    37:b9:04:fc:f5:dd:ee:ce:b8:d4:5a:7d:4a:c3:b3:
                    df:d1:72:c0:71:24:9d:6a:4f:93:a6:ea:c0:60:01:
                    27:ff:d9:8a:c4:78:96:85:6a:59:c1:b2:d4:4d:70:
                    dc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:75:60:EF:D0:2C:B4:15:18:39:B2:C6:DB:93:E0:31:DA:AD:0A:9B
            X509v3 Authority Key Identifier:
                keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:ff:29:b6:d3:25:2b:a9:10:8e:8b:22:79:38:44:c5:65:d4:
         a7:e2:be:27:50:b4:5a:03:29:20:63:79:6b:01:5f:e3:f6:6b:
         69:cb:86:31:7e:1a:62:10:c5:fd:99:11:e8:0f:41:d1:4e:07:
         e3:c9:3a:50:5b:1b:09:44:24:2c:9f:92:0c:a2:f9:6b:31:ac:
         54:06:71:cd:ba:29:a3:0f:5e:45:1a:67:b1:3a:0c:d1:aa:eb:
         30:89:c3:aa:fb:f0:a8:95:45:b9:44:ab:1e:0d:a9:e1:ea:41:
         e7:0c:be:50:e2:53:98:54:dd:17:d8:ca:d0:27:4f:2d:11:c1:
         39:49:e7:34:e3:d2:3e:b9:1f:79:3c:de:2e:e4:46:35:4d:d5:
         df:e6:85:67:2d:0c:09:d9:35:15:c5:df:08:33:d9:67:fa:d3:
         c3:2f:af:15:a1:65:d9:7e:d7:b4:9f:2c:05:83:b4:4b:39:c4:
         ab:fe:3a:90:b4:58:df:25:29:76:96:51:21:fb:1b:49:28:8d:
         ec:5a:98:5d:a1:6e:4b:6c:44:7e:94:5e:bf:9b:0e:cb:77:9f:
         b3:f3:0f:f0:74:ba:48:9f:77:a5:c9:13:c7:8e:65:21:c9:04:
         9f:8c:e1:08:10:e2:43:50:50:63:46:1a:d9:bc:27:23:19:55:
         7c:00:cd:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY83P+2sPkHR0SSN9TsacRJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh
N2IwYmEwHhcNMjQwNTAyMDMwMTI3WhcNMjQwNTAzMDMwMTI3WjAzMTEwLwYDVQQD
EygwNTc1NjBlZmQwMmNiNDE1MTgzOWIyYzZkYjkzZTAzMWRhYWQwYTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTrkFred1iO3wdL3Xf/xb2A6JOc0
QxGXUcvDfa+bQGrwM45SqSAeRLEBSHGmVH54jj0pWdNMp6rwpoQsuq6mAFZheitX
jojXnVKvdlSN/5VZ1upgV4j6kQUuCjGg1wBo1woBUU9h1thAdUotcOViAlltoHti
CnBrFLUuctpvLGp3tCc1GqvVOPcg7lur0DbBH4oFOIiPbsppDJI5BjYCg13i3e3w
5kRrqLwVsaN1rYnf62gNMq9/2qged+WeZ3V6VgT6PPSUh07+V72Nx91UBOw3uQT8
9d3uzrjUWn1Kw7Pf0XLAcSSdak+TpurAYAEn/9mKxHiWhWpZwbLUTXDciQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAV1YO/QLLQVGDmyxtuT4DHarQqbMB8GA1UdIwQY
MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt
ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx
LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx/8pttMl
K6kQjosieThExWXUp+K+J1C0WgMpIGN5awFf4/ZracuGMX4aYhDF/ZkR6A9B0U4H
48k6UFsbCUQkLJ+SDKL5azGsVAZxzbopow9eRRpnsToM0arrMInDqvvwqJVFuUSr
Hg2p4epB5wy+UOJTmFTdF9jK0CdPLRHBOUnnNOPSPrkfeTzeLuRGNU3V3+aFZy0M
Cdk1FcXfCDPZZ/rTwy+vFaFl2X7XtJ8sBYO0SznEq/46kLRY3yUpdpZRIfsbSSiN
7FqYXaFuS2xEfpRev5sOy3efs/MP8HS6SJ93pckTx45lIckEn4zhCBDiQ1BQY0Ya
2bwnIxlVfADNeg==
-----END CERTIFICATE-----
Generated at Thu May 2 11:22:22 2024 by rpki-client on console-ams.rpki-client.org