Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/58bac7-0f52-4e70-9d9f-6a0ad6bc8240/1/V7ArX2gsCVX0z0ejX4uwwrV_OnU.mft
File:                     V7ArX2gsCVX0z0ejX4uwwrV_OnU.mft (raw, json)
Hash identifier:          oiHOUoCTTAxiEfapZB2/SpaFRiEa+oGTgYrRlBIt0es=
Subject key identifier:   EE:77:B9:5B:2D:57:95:32:9F:4A:12:F3:E1:1E:0D:2E:A4:11:9E:9A
Authority key identifier: 57:B0:2B:5F:68:2C:09:55:F4:CF:47:A3:5F:8B:B0:C2:B5:7F:3A:75
Certificate issuer:       /CN=57b02b5f682c0955f4cf47a35f8bb0c2b57f3a75
Certificate serial:       018F882438197188DBE109C001B7F80758A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7ArX2gsCVX0z0ejX4uwwrV_OnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/58bac7-0f52-4e70-9d9f-6a0ad6bc8240/1/V7ArX2gsCVX0z0ejX4uwwrV_OnU.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 20:00:26 +0000
Manifest this update:     Fri 17 May 2024 20:00:26 +0000
Manifest next update:     Sat 18 May 2024 20:00:26 +0000
Files and hashes:         1: V7ArX2gsCVX0z0ejX4uwwrV_OnU.crl (hash: xQlaCUd6MJJO57iUhxe82vgpDxPjowXQ8+QkqNpJq50=)
                          2: r6xm8fSrowJE4VDAG0Tv5y69yXw.roa (hash: xmTr9l+GWel6P7vwRsLssU3jPvkIFNJ1vWrnDnU/0VU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/58bac7-0f52-4e70-9d9f-6a0ad6bc8240/1/V7ArX2gsCVX0z0ejX4uwwrV_OnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/58bac7-0f52-4e70-9d9f-6a0ad6bc8240/1/V7ArX2gsCVX0z0ejX4uwwrV_OnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7ArX2gsCVX0z0ejX4uwwrV_OnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:38:19:71:88:db:e1:09:c0:01:b7:f8:07:58:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b02b5f682c0955f4cf47a35f8bb0c2b57f3a75
        Validity
            Not Before: May 17 20:00:26 2024 GMT
            Not After : May 18 20:00:26 2024 GMT
        Subject: CN=ee77b95b2d5795329f4a12f3e11e0d2ea4119e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:51:27:01:d1:f1:7c:53:ea:7d:f1:85:df:
                    36:ac:dd:62:3a:95:3a:52:d5:42:fa:43:8f:3e:25:
                    e3:a6:79:27:6f:4a:06:da:bf:54:da:5a:a8:c1:8d:
                    e5:c0:00:33:f7:3b:49:a2:7b:f7:2f:5d:3b:81:dc:
                    03:d6:31:b5:58:53:26:88:e4:6a:e9:07:46:41:57:
                    6a:82:b0:54:da:b2:9a:36:03:e8:ae:a8:9f:8c:93:
                    f9:25:76:e0:b4:32:fa:38:a0:47:13:8b:73:ce:e7:
                    bb:d9:fc:c2:c5:70:a1:ac:2f:92:bc:6c:38:94:86:
                    c7:96:d1:52:aa:e2:5e:a5:b8:98:ea:10:d1:d0:45:
                    77:82:d5:25:20:6f:d0:3d:c9:95:2b:10:be:86:e7:
                    a2:4e:4d:9f:f2:b1:f8:46:23:89:23:e8:e3:30:25:
                    d6:7f:16:6b:53:3f:2d:9c:47:7f:5e:f8:1e:1e:7b:
                    bc:0b:db:b4:f6:1b:a8:b9:96:03:27:3f:9d:6d:16:
                    d1:21:59:8a:07:d3:47:e8:bb:8e:16:9e:d8:5b:27:
                    ef:86:3b:00:dd:f6:74:ee:de:b3:95:a2:28:a3:c5:
                    f9:ad:60:df:ed:06:60:78:7d:ec:c0:67:a4:1f:05:
                    b9:2d:a0:d3:cf:06:2f:63:35:5b:e5:c2:d3:e6:5a:
                    56:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:77:B9:5B:2D:57:95:32:9F:4A:12:F3:E1:1E:0D:2E:A4:11:9E:9A
            X509v3 Authority Key Identifier:
                keyid:57:B0:2B:5F:68:2C:09:55:F4:CF:47:A3:5F:8B:B0:C2:B5:7F:3A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7ArX2gsCVX0z0ejX4uwwrV_OnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/58bac7-0f52-4e70-9d9f-6a0ad6bc8240/1/V7ArX2gsCVX0z0ejX4uwwrV_OnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/58bac7-0f52-4e70-9d9f-6a0ad6bc8240/1/V7ArX2gsCVX0z0ejX4uwwrV_OnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e1:c6:9d:62:09:32:0f:77:a0:f1:eb:79:91:f8:83:45:bd:
         22:ca:85:27:51:d3:3a:51:66:45:db:7a:d8:b3:28:b0:63:bb:
         c2:e0:06:39:23:0d:a3:17:ab:21:04:9e:c4:63:8b:d5:15:20:
         75:4a:34:15:c1:b7:67:6b:f8:da:14:59:6f:28:fe:e5:96:f6:
         43:5f:74:e7:fc:bb:46:d1:27:40:1f:58:77:80:f8:73:24:66:
         da:1f:4d:83:48:73:2f:75:9a:a1:26:1d:29:89:1d:0c:fa:9f:
         f5:cd:12:36:a2:0f:4c:9c:74:91:ea:a8:48:9c:fa:5e:50:39:
         94:83:59:bb:b4:33:b5:9f:eb:e8:8a:de:ac:07:80:1b:e8:70:
         ec:92:27:91:13:ab:66:cc:eb:05:66:04:97:0f:f8:46:90:52:
         5a:c6:67:a8:2a:ab:59:5a:b4:84:57:f4:46:86:d8:89:62:f7:
         bf:6f:1d:68:15:a7:55:ec:78:be:4a:96:f3:4d:27:2b:44:52:
         33:ee:62:1b:d9:47:99:06:2e:fe:03:cc:50:8c:2d:2b:10:59:
         1e:af:0a:fd:99:26:71:0d:ed:dc:48:33:30:c7:fc:16:d5:84:
         df:f1:f9:18:45:d8:5b:8a:35:54:99:a1:16:4f:98:bb:c9:0e:
         39:9f:fb:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJDgZcYjb4QnAAbf4B1ikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YjAyYjVmNjgyYzA5NTVmNGNmNDdhMzVmOGJiMGMyYjU3
ZjNhNzUwHhcNMjQwNTE3MjAwMDI2WhcNMjQwNTE4MjAwMDI2WjAzMTEwLwYDVQQD
EyhlZTc3Yjk1YjJkNTc5NTMyOWY0YTEyZjNlMTFlMGQyZWE0MTE5ZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTNRJwHR8XxT6n3xhd82rN1iOpU6
UtVC+kOPPiXjpnknb0oG2r9U2lqowY3lwAAz9ztJonv3L107gdwD1jG1WFMmiORq
6QdGQVdqgrBU2rKaNgPorqifjJP5JXbgtDL6OKBHE4tzzue72fzCxXChrC+SvGw4
lIbHltFSquJepbiY6hDR0EV3gtUlIG/QPcmVKxC+hueiTk2f8rH4RiOJI+jjMCXW
fxZrUz8tnEd/XvgeHnu8C9u09huouZYDJz+dbRbRIVmKB9NH6LuOFp7YWyfvhjsA
3fZ07t6zlaIoo8X5rWDf7QZgeH3swGekHwW5LaDTzwYvYzVb5cLT5lpW2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO53uVstV5Uyn0oS8+EeDS6kEZ6aMB8GA1UdIwQY
MBaAFFewK19oLAlV9M9Ho1+LsMK1fzp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjdBclgyZ3NDVlgwejBlalg0dXd3clZfT25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81OGJhYzctMGY1Mi00ZTcwLTlkOWYt
NmEwYWQ2YmM4MjQwLzEvVjdBclgyZ3NDVlgwejBlalg0dXd3clZfT25VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81OGJhYzctMGY1Mi00ZTcwLTlkOWYtNmEwYWQ2YmM4MjQw
LzEvVjdBclgyZ3NDVlgwejBlalg0dXd3clZfT25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuHGnWIJ
Mg93oPHreZH4g0W9IsqFJ1HTOlFmRdt62LMosGO7wuAGOSMNoxerIQSexGOL1RUg
dUo0FcG3Z2v42hRZbyj+5Zb2Q1905/y7RtEnQB9Yd4D4cyRm2h9Ng0hzL3WaoSYd
KYkdDPqf9c0SNqIPTJx0keqoSJz6XlA5lINZu7QztZ/r6IrerAeAG+hw7JInkROr
ZszrBWYElw/4RpBSWsZnqCqrWVq0hFf0RobYiWL3v28daBWnVex4vkqW800nK0RS
M+5iG9lHmQYu/gPMUIwtKxBZHq8K/ZkmcQ3t3EgzMMf8FtWE3/H5GEXYW4o1VJmh
Fk+Yu8kOOZ/7pw==
-----END CERTIFICATE-----
Generated at Sat May 18 03:01:11 2024 by rpki-client on console-ams.rpki-client.org