Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
File:                     0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft (raw, json)
Hash identifier:          ggORFDzu+iUwqskJNN0QfaHdZZxlwS+TbHnjG+A/Wh4=
Subject key identifier:   70:59:0B:00:EB:C4:CC:64:F4:69:B2:82:FC:85:28:B6:CD:91:4B:E2
Authority key identifier: D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1
Certificate issuer:       /CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
Certificate serial:       018F38BFE88474D2276C2CA0C5D33F42D61B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
Manifest number:          0E74
Signing time:             Thu 02 May 2024 10:00:51 +0000
Manifest this update:     Thu 02 May 2024 10:00:51 +0000
Manifest next update:     Fri 03 May 2024 10:00:51 +0000
Files and hashes:         1: 0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl (hash: Ctd4707nT9w6yd3KHNNVX1pLJVVJ0vs9wfneGADKGJU=)
                          2: fSrMTla0YP_I16M2TFYqhj6aqKk.roa (hash: Vxg+v+7WTNY2pucnVWIab+OcZaOnJA8dKIsyr/9zPbk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:bf:e8:84:74:d2:27:6c:2c:a0:c5:d3:3f:42:d6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
        Validity
            Not Before: May  2 10:00:51 2024 GMT
            Not After : May  3 10:00:51 2024 GMT
        Subject: CN=70590b00ebc4cc64f469b282fc8528b6cd914be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5b:55:86:2a:6c:e3:ac:24:2b:b5:4e:a0:91:
                    65:0b:78:c9:98:e6:02:ff:ea:a3:41:36:f8:c7:49:
                    65:a6:5b:f1:83:7a:53:b5:a4:16:d3:eb:7a:5e:8b:
                    c8:d3:fa:d9:1f:cb:c5:09:a0:ec:8e:d7:2a:99:52:
                    04:f6:c3:2f:e1:b9:0c:aa:0a:70:ef:4c:ce:a7:d7:
                    67:f2:da:56:25:5c:c2:ca:5a:3a:d4:c3:86:0e:fb:
                    32:5f:e7:09:d8:5c:30:0b:c7:22:11:bd:ba:de:85:
                    0b:0a:16:39:37:23:62:86:7a:b8:8f:3a:85:2d:44:
                    cf:e6:76:40:13:ad:8a:e7:cc:c4:1b:3d:2f:15:37:
                    2c:97:ed:c3:4f:5e:0b:a9:e8:34:c2:b0:25:a0:c6:
                    61:1a:a0:f4:04:fc:d3:f1:e3:9d:ae:82:5e:1b:32:
                    fa:67:72:37:69:f9:24:1d:3d:f4:c1:94:73:6d:d4:
                    83:e8:b5:93:ed:d0:38:3d:6e:3b:db:c6:40:d2:95:
                    9e:84:2a:6a:5b:82:9d:d1:d1:a0:4a:92:01:0a:b5:
                    53:c9:98:f0:45:db:eb:ee:99:e3:15:44:6d:bb:6a:
                    5b:62:4e:03:8b:c3:7e:22:52:0c:f4:ee:e6:58:5e:
                    fd:39:1e:65:c8:e7:52:83:97:45:89:9f:04:90:e6:
                    a9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:59:0B:00:EB:C4:CC:64:F4:69:B2:82:FC:85:28:B6:CD:91:4B:E2
            X509v3 Authority Key Identifier:
                keyid:D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:6b:15:59:3e:37:e0:16:4c:4c:7e:aa:18:92:93:d4:76:14:
         f0:6e:85:74:93:42:82:77:28:e0:6f:aa:73:92:d3:a5:27:16:
         f1:1b:4b:cc:68:cf:16:df:64:28:9a:da:cc:bc:c2:91:a3:7d:
         c7:8d:f3:4e:0e:b8:fe:77:fb:4f:2b:a3:82:33:4a:05:57:8b:
         43:00:0e:dd:60:26:3b:3b:b6:35:ab:28:b4:c3:9d:30:14:e6:
         64:a9:8d:9d:7d:db:73:56:8b:8b:79:83:44:dd:f8:d3:ca:d7:
         13:7f:3d:c6:77:63:29:8c:ee:3d:f0:7d:00:cb:61:b7:02:06:
         87:a7:93:0d:fd:d9:84:54:c4:c9:4a:01:08:2a:e7:64:df:b3:
         71:aa:d6:05:a2:a6:1d:96:b2:48:67:55:39:7d:a8:74:c1:11:
         86:a6:a4:55:ed:5c:bb:d1:ef:65:04:17:d8:b7:71:96:b7:00:
         4d:82:79:3d:ee:6e:52:9b:33:97:0a:96:1f:5f:18:29:ed:7b:
         33:bd:1c:c4:a4:87:18:be:05:7e:6e:3f:a3:d5:53:0c:a1:e7:
         0b:94:98:3d:47:60:73:ab:7f:8e:50:a6:21:6a:32:a9:42:d6:
         91:b9:68:ac:c0:89:1f:f8:ae:0e:5a:17:88:57:30:fd:b6:9f:
         42:47:11:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY84v+iEdNInbCygxdM/QtYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYmQ2NGNjOTRhNGE4NTE4YTcxZjk2ZWY4Yjc3NjI1YWZh
NTI3ZDEwHhcNMjQwNTAyMTAwMDUxWhcNMjQwNTAzMTAwMDUxWjAzMTEwLwYDVQQD
Eyg3MDU5MGIwMGViYzRjYzY0ZjQ2OWIyODJmYzg1MjhiNmNkOTE0YmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFtVhips46wkK7VOoJFlC3jJmOYC
/+qjQTb4x0llplvxg3pTtaQW0+t6XovI0/rZH8vFCaDsjtcqmVIE9sMv4bkMqgpw
70zOp9dn8tpWJVzCylo61MOGDvsyX+cJ2FwwC8ciEb263oULChY5NyNihnq4jzqF
LUTP5nZAE62K58zEGz0vFTcsl+3DT14Lqeg0wrAloMZhGqD0BPzT8eOdroJeGzL6
Z3I3afkkHT30wZRzbdSD6LWT7dA4PW4728ZA0pWehCpqW4Kd0dGgSpIBCrVTyZjw
Rdvr7pnjFURtu2pbYk4Di8N+IlIM9O7mWF79OR5lyOdSg5dFiZ8EkOapCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBZCwDrxMxk9GmygvyFKLbNkUviMB8GA1UdIwQY
MBaAFNG9ZMyUpKhRinH5bvi3diWvpSfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTct
MDgyNmYzNmZmMjhmLzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yZWZhNTAtZjQ4My00YjUzLWIxZTctMDgyNmYzNmZmMjhm
LzEvMGIxa3pKU2txRkdLY2ZsdS1MZDJKYS1sSjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGsVWT43
4BZMTH6qGJKT1HYU8G6FdJNCgnco4G+qc5LTpScW8RtLzGjPFt9kKJrazLzCkaN9
x43zTg64/nf7TyujgjNKBVeLQwAO3WAmOzu2NasotMOdMBTmZKmNnX3bc1aLi3mD
RN3408rXE389xndjKYzuPfB9AMthtwIGh6eTDf3ZhFTEyUoBCCrnZN+zcarWBaKm
HZaySGdVOX2odMERhqakVe1cu9HvZQQX2LdxlrcATYJ5Pe5uUpszlwqWH18YKe17
M70cxKSHGL4Ffm4/o9VTDKHnC5SYPUdgc6t/jlCmIWoyqULWkblorMCJH/iuDloX
iFcw/bafQkcRpQ==
-----END CERTIFICATE-----
Generated at Thu May 2 13:38:20 2024 by rpki-client on console-ams.rpki-client.org