Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File:                     1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier:          xUZIEKUKV6UXlf0p8sH7C7/hfZFJYbknaG07T76KrRc=
Subject key identifier:   E0:4C:C6:60:07:FA:64:25:C4:75:2D:67:3C:F5:1A:E4:55:DF:98:59
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer:       /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial:       018F3C9D5AB9E1BC85D450A9EEE1E1DCD3F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number:          0FF7
Signing time:             Fri 03 May 2024 04:01:36 +0000
Manifest this update:     Fri 03 May 2024 04:01:36 +0000
Manifest next update:     Sat 04 May 2024 04:01:36 +0000
Files and hashes:         1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: 1nZ+j++KKj7MqyM9iJVVpJnpdXBO76mt9O+ps/oynFo=)
                          2: Fmx-J-g7wmUTxiowx3_SlKT9cfQ.roa (hash: lUkOPMbvT6+UgLx+XCEW7mzvcb9c8GDzY+Z5WCvvSO0=)
                          3: ZVb4XNMxk7lVQgLw6bR0gSmc4Ak.roa (hash: L1IrvePBw0+BLNThDP5YI3pv+tgRsZVnB5HD7lP01T0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:9d:5a:b9:e1:bc:85:d4:50:a9:ee:e1:e1:dc:d3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
        Validity
            Not Before: May  3 04:01:36 2024 GMT
            Not After : May  4 04:01:36 2024 GMT
        Subject: CN=e04cc66007fa6425c4752d673cf51ae455df9859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:26:6a:dd:86:eb:13:25:3f:03:e2:b9:9b:
                    85:13:ed:f4:e0:82:34:aa:05:e7:7a:dc:93:0f:c2:
                    87:aa:0b:dc:80:64:23:e7:23:81:40:85:08:4a:68:
                    7c:a1:cc:4e:07:98:7a:0b:06:25:b0:fe:b5:3d:a8:
                    b6:77:41:15:26:40:3e:ff:24:36:de:cb:49:c2:ba:
                    87:cf:76:ce:d9:4e:64:64:46:bb:d7:42:3d:bd:2d:
                    86:64:80:89:4d:90:0e:18:6d:cc:fd:cd:a3:64:d8:
                    76:04:cf:bf:8c:02:c3:66:1a:85:5e:4c:08:d7:c1:
                    d6:12:ad:be:af:35:ff:83:37:0e:d4:8d:d1:b9:1e:
                    7b:96:04:6a:f8:52:82:77:f7:ab:91:60:78:36:19:
                    e3:82:4f:fe:46:7a:f5:bf:f0:11:d6:71:42:d7:5a:
                    7a:f6:e0:be:a1:f3:e3:95:ec:b7:8c:f1:e6:08:17:
                    4d:5a:02:b6:6d:ff:d9:f4:9a:ab:ba:17:1c:25:36:
                    fe:dc:e3:db:be:bd:77:da:c8:84:4b:db:6b:3b:2d:
                    9e:92:6d:a7:0a:0b:2b:8a:04:4c:07:53:66:24:b6:
                    96:11:9b:08:98:cc:3c:40:05:1a:d9:5e:90:88:a4:
                    76:f7:75:9e:f0:a3:d1:d3:cd:31:59:3b:a1:db:43:
                    84:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4C:C6:60:07:FA:64:25:C4:75:2D:67:3C:F5:1A:E4:55:DF:98:59
            X509v3 Authority Key Identifier:
                keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:41:1e:49:c2:4d:05:08:64:f7:68:1c:18:e5:ac:7d:14:df:
         f0:af:71:a3:d8:c2:8b:35:fb:be:0f:06:48:20:42:dc:ba:85:
         dc:2d:77:d0:1b:9d:41:f0:f8:8a:55:22:1f:23:b8:4f:69:fb:
         8f:3f:e4:9e:42:9f:a7:fe:12:51:42:7d:e7:f2:b7:5f:a0:0f:
         21:95:3e:95:cb:4d:71:18:4e:7e:f6:23:1d:3d:22:bb:02:14:
         b3:13:c6:d9:e7:df:fb:1e:42:cb:df:7d:02:7b:ae:72:a3:3d:
         16:5c:c6:ba:8f:96:0b:99:ac:22:03:64:b0:c3:a4:b8:9b:32:
         15:d5:a3:cd:55:fa:e5:59:c5:2b:d5:c9:07:50:51:73:0a:8b:
         92:66:95:10:fa:52:36:db:53:7e:01:3c:6a:8c:ad:7c:65:db:
         85:50:70:09:f8:57:69:91:63:35:15:50:07:58:cb:a2:4f:1e:
         8c:30:ac:37:65:1b:0d:88:b8:a5:d2:02:28:3e:87:1a:19:a3:
         04:0f:cc:2d:a5:65:e6:3f:7b:58:f7:dd:cf:8d:bc:3d:e9:04:
         3f:7e:f4:25:1c:99:61:21:e8:b7:63:4f:40:4f:a3:d5:af:b9:
         aa:47:9a:d0:09:2b:99:aa:ab:41:f3:7b:12:47:6a:1c:0f:50:
         44:f5:2e:5a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY88nVq54byF1FCp7uHh3NP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzgyYjc4ZjIwYTZlNGI3MDY0MzA1MmJkMWE0MGFmMTVh
NTYzMzgwHhcNMjQwNTAzMDQwMTM2WhcNMjQwNTA0MDQwMTM2WjAzMTEwLwYDVQQD
EyhlMDRjYzY2MDA3ZmE2NDI1YzQ3NTJkNjczY2Y1MWFlNDU1ZGY5ODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAomat2G6xMlPwPiuZuFE+304II0
qgXnetyTD8KHqgvcgGQj5yOBQIUISmh8ocxOB5h6CwYlsP61Pai2d0EVJkA+/yQ2
3stJwrqHz3bO2U5kZEa710I9vS2GZICJTZAOGG3M/c2jZNh2BM+/jALDZhqFXkwI
18HWEq2+rzX/gzcO1I3RuR57lgRq+FKCd/erkWB4Nhnjgk/+Rnr1v/AR1nFC11p6
9uC+ofPjley3jPHmCBdNWgK2bf/Z9JqruhccJTb+3OPbvr132siES9trOy2ekm2n
CgsrigRMB1NmJLaWEZsImMw8QAUa2V6QiKR293We8KPR080xWTuh20OEyQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOBMxmAH+mQlxHUtZzz1GuRV35hZMB8GA1UdIwQY
MBaAFPt4K3jyCm5LcGQwUr0aQK8VpWM4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zZ3JlUElLYmt0d1pEQlN2UnBBcnhXbFl6Zy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvOWRjOTMzLTVjMGQtNDQ2MS1hNDVk
LThmN2Q1NjkxYzFiZS8xLzEtM2dyZVBJS2JrdHdaREJTdlJwQXJ4V2xZemcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UzLzlkYzkzMy01YzBkLTQ0NjEtYTQ1ZC04ZjdkNTY5MWMx
YmUvMS8xLTNncmVQSUtia3R3WkRCU3ZScEFyeFdsWXpnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEEe
ScJNBQhk92gcGOWsfRTf8K9xo9jCizX7vg8GSCBC3LqF3C130BudQfD4ilUiHyO4
T2n7jz/knkKfp/4SUUJ95/K3X6APIZU+lctNcRhOfvYjHT0iuwIUsxPG2eff+x5C
y999AnuucqM9FlzGuo+WC5msIgNksMOkuJsyFdWjzVX65VnFK9XJB1BRcwqLkmaV
EPpSNttTfgE8aoytfGXbhVBwCfhXaZFjNRVQB1jLok8ejDCsN2UbDYi4pdICKD6H
GhmjBA/MLaVl5j97WPfdz428PekEP370JRyZYSHot2NPQE+j1a+5qkea0Akrmaqr
QfN7EkdqHA9QRPUuWg==
-----END CERTIFICATE-----
Generated at Fri May 3 10:42:46 2024 by rpki-client on console-fra.rpki-client.org