Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
File:                     1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft (raw, json)
Hash identifier:          ZmkO3dYolzM2Agl6HDirNLdY9fi5vZUS63TCpw3kd+4=
Subject key identifier:   BA:9C:6A:4F:BF:F8:FB:C0:BE:5A:5B:B8:21:EA:77:27:02:B7:5E:DB
Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
Certificate issuer:       /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Certificate serial:       018F43B46196EF3F0BE179C616E1F9CB21CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
Manifest number:          1153
Signing time:             Sat 04 May 2024 13:04:05 +0000
Manifest this update:     Sat 04 May 2024 13:04:05 +0000
Manifest next update:     Sun 05 May 2024 13:04:05 +0000
Files and hashes:         1: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl (hash: DtnFEwrBfQSsrYHb+SBwynamaxHhaufWq1TzOJCMqVM=)
                          2: Vriz_sDoxzm2GTzTd9rOzVQ8O80.roa (hash: F31lTWld/XwMTfUNR4tEcugJ7CVr38EkkzBvLUHGa5w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b4:61:96:ef:3f:0b:e1:79:c6:16:e1:f9:cb:21:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
        Validity
            Not Before: May  4 13:04:05 2024 GMT
            Not After : May  5 13:04:05 2024 GMT
        Subject: CN=ba9c6a4fbff8fbc0be5a5bb821ea772702b75edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:7f:06:30:06:7e:68:39:be:1a:b6:17:ad:
                    20:98:64:16:b6:b4:51:a5:b0:c0:1d:75:39:79:07:
                    0e:ad:58:ea:36:d4:8a:65:4f:9a:58:d5:67:97:ea:
                    a7:91:2e:f2:81:b7:ca:38:ea:da:a4:a4:f0:49:35:
                    28:c9:3d:a2:97:0f:ad:b5:4e:52:e7:66:9d:eb:8e:
                    80:d0:e2:b9:f8:58:cf:f0:b1:1d:d5:93:9a:3d:1d:
                    a2:d7:88:0d:5b:18:2f:87:9a:16:e1:c2:ed:43:10:
                    4a:20:9a:b5:c4:bc:1b:27:0d:09:68:9e:b4:8a:ea:
                    93:f7:0a:5d:e1:a5:39:92:02:36:31:e1:7c:93:74:
                    6f:dd:19:e4:b6:87:22:7f:39:39:3d:38:a0:34:e4:
                    e7:dd:61:e8:41:38:98:74:e5:76:52:72:d1:5c:e8:
                    fd:be:34:d6:32:bb:62:af:71:c9:5f:ce:d5:ed:b3:
                    be:4d:fe:e1:82:76:ae:c1:39:ed:00:fc:91:ed:84:
                    08:80:c7:25:ce:b9:e8:a3:4d:dc:8a:e7:5e:14:1f:
                    fb:db:b7:dd:80:bb:2e:6f:ba:95:e1:9b:33:18:71:
                    0d:ea:ae:4d:8f:ff:a1:b9:6f:53:64:4d:fe:93:f2:
                    ea:14:54:9f:7e:2e:d2:50:a0:5a:e7:19:03:ef:b6:
                    7f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9C:6A:4F:BF:F8:FB:C0:BE:5A:5B:B8:21:EA:77:27:02:B7:5E:DB
            X509v3 Authority Key Identifier:
                keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:12:1e:11:15:ff:ea:06:15:3b:67:a7:1b:2e:f3:62:7b:2a:
         05:7d:80:fd:e8:c2:ed:58:e2:6a:c2:14:86:90:8f:4f:41:49:
         e0:25:05:d9:e6:e0:63:6c:63:b2:f1:c4:60:a3:d7:a5:b5:db:
         2d:5d:36:b1:17:a6:18:4d:72:d7:78:30:28:6a:65:93:93:28:
         40:af:60:43:b7:37:0b:62:83:7b:84:4d:c3:82:d1:f8:e8:04:
         02:05:61:fb:b6:72:1b:2a:70:22:a0:49:b7:c0:8b:af:9a:8f:
         8d:fd:cf:bf:a2:59:29:30:56:23:81:05:6d:8b:a3:dd:cc:42:
         d3:04:94:3f:a7:da:52:bb:a2:f7:09:35:ff:a5:a9:ef:5e:68:
         fd:47:d9:82:d6:c0:93:75:7e:1a:8c:45:c2:5b:6d:29:21:36:
         f8:0b:09:00:11:0c:5e:06:c9:aa:84:27:3d:13:9b:c1:9d:72:
         42:20:c1:cb:7d:f7:cc:73:98:fe:de:65:e7:c5:7e:44:3c:9b:
         f0:31:80:79:0e:98:50:70:cc:49:a2:fe:f3:64:08:cc:99:4b:
         1a:db:f2:07:b9:85:f7:36:36:71:38:b8:7a:f4:59:22:75:c6:
         54:38:69:4b:42:ad:60:fc:7a:b1:78:0a:1e:21:46:d8:59:93:
         7f:e5:67:57
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY9DtGGW7z8L4XnGFuH5yyHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYjI2OTUyYjEyMTNmOWNiZDFkOGM5NjcxZmIyMjM1N2Fk
OGQzMjIwHhcNMjQwNTA0MTMwNDA1WhcNMjQwNTA1MTMwNDA1WjAzMTEwLwYDVQQD
EyhiYTljNmE0ZmJmZjhmYmMwYmU1YTViYjgyMWVhNzcyNzAyYjc1ZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNh/BjAGfmg5vhq2F60gmGQWtrRR
pbDAHXU5eQcOrVjqNtSKZU+aWNVnl+qnkS7ygbfKOOrapKTwSTUoyT2ilw+ttU5S
52ad646A0OK5+FjP8LEd1ZOaPR2i14gNWxgvh5oW4cLtQxBKIJq1xLwbJw0JaJ60
iuqT9wpd4aU5kgI2MeF8k3Rv3Rnktocifzk5PTigNOTn3WHoQTiYdOV2UnLRXOj9
vjTWMrtir3HJX87V7bO+Tf7hgnauwTntAPyR7YQIgMclzrnoo03ciudeFB/727fd
gLsub7qV4ZszGHEN6q5Nj/+huW9TZE3+k/LqFFSffi7SUKBa5xkD77Z/LQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLqcak+/+PvAvlpbuCHqdycCt17bMB8GA1UdIwQY
MBaAFPuyaVKxIT+cvR2MlnH7IjV62NMiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS03SnBVckVoUDV5OUhZeVdjZnNpTlhyWTB5SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMjU5OThkLTRiN2EtNDJiMi1iNDZk
LWRkMjMyOTFmN2ExOS8xLzEtN0pwVXJFaFA1eTlIWXlXY2ZzaU5YclkweUkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U1LzI1OTk4ZC00YjdhLTQyYjItYjQ2ZC1kZDIzMjkxZjdh
MTkvMS8xLTdKcFVyRWhQNXk5SFl5V2Nmc2lOWHJZMHlJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBIe
ERX/6gYVO2enGy7zYnsqBX2A/ejC7VjiasIUhpCPT0FJ4CUF2ebgY2xjsvHEYKPX
pbXbLV02sRemGE1y13gwKGplk5MoQK9gQ7c3C2KDe4RNw4LR+OgEAgVh+7ZyGypw
IqBJt8CLr5qPjf3Pv6JZKTBWI4EFbYuj3cxC0wSUP6faUrui9wk1/6Wp715o/UfZ
gtbAk3V+GoxFwlttKSE2+AsJABEMXgbJqoQnPRObwZ1yQiDBy333zHOY/t5l58V+
RDyb8DGAeQ6YUHDMSaL+82QIzJlLGtvyB7mF9zY2cTi4evRZInXGVDhpS0KtYPx6
sXgKHiFG2FmTf+VnVw==
-----END CERTIFICATE-----
Generated at Sat May 4 19:31:38 2024 by rpki-client on console-fra.rpki-client.org