Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
File:                     74wzqKYgHUCmAiC9Y5tdNSISZz4.mft (raw, json)
Hash identifier:          VFSt89qaMv/HnALPgpCU3F0zT1lswzyu4FzParMBFZ0=
Subject key identifier:   F6:60:52:43:D5:E0:49:5B:CB:2C:E1:2E:70:18:2E:C2:1D:14:62:17
Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
Certificate issuer:       /CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Certificate serial:       018F3BFAE24255DDD95173F2F803A28BF942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
Manifest number:          0F63
Signing time:             Fri 03 May 2024 01:04:08 +0000
Manifest this update:     Fri 03 May 2024 01:04:08 +0000
Manifest next update:     Sat 04 May 2024 01:04:08 +0000
Files and hashes:         1: 74wzqKYgHUCmAiC9Y5tdNSISZz4.crl (hash: VYZPDTMwceznIzbZCy/yOzTRP5ITHhKEiVWDw+mdyps=)
                          2: CGgk-ndKHVB72XM0fhQ2X4dwQ58.roa (hash: E19AVaPK5sTegoRyhLs+xHczcNKkhrilGJo8qkL7K5c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:04:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:e2:42:55:dd:d9:51:73:f2:f8:03:a2:8b:f9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e
        Validity
            Not Before: May  3 01:04:08 2024 GMT
            Not After : May  4 01:04:08 2024 GMT
        Subject: CN=f6605243d5e0495bcb2ce12e70182ec21d146217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:94:a3:08:e9:a5:e0:9b:82:5a:19:b5:cf:b0:
                    f8:c4:84:a3:28:b3:7f:cf:f9:20:bb:7b:07:ad:a6:
                    9e:f6:21:bc:07:04:8b:20:13:ee:2b:44:45:75:41:
                    17:ef:db:84:4c:a0:be:09:f4:c7:4b:da:c1:9d:6f:
                    79:f6:04:c0:a4:87:31:2c:47:2f:ac:9b:81:a3:1a:
                    a3:c9:cd:c4:37:9a:20:55:f1:d0:cb:a3:de:3c:8e:
                    5b:8b:67:c2:38:24:94:90:9f:a4:ab:09:5a:7e:d0:
                    ba:2c:46:4e:13:7e:46:4c:7e:da:a3:48:0b:19:af:
                    75:fe:89:fd:87:86:9d:00:49:87:79:bb:b4:11:8c:
                    25:33:87:2c:e2:7d:63:33:66:e9:f0:2e:c2:3d:a3:
                    49:43:15:de:89:ba:32:f8:b5:e2:99:7a:07:94:b9:
                    91:4d:43:a2:b3:86:0d:f2:19:dc:23:be:5e:5d:06:
                    37:80:3d:3e:fe:d6:41:6f:2d:65:82:29:72:03:a6:
                    49:52:11:81:d9:d0:09:e4:f5:a4:a8:59:78:63:08:
                    f1:6e:3f:f8:6e:4f:57:24:b7:5f:ac:43:9c:c4:da:
                    24:72:9b:26:fb:59:de:d3:2c:d5:be:77:7e:c9:bd:
                    2e:63:9f:cc:1c:04:7f:40:d2:bc:c2:36:fd:d3:c2:
                    a2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:60:52:43:D5:E0:49:5B:CB:2C:E1:2E:70:18:2E:C2:1D:14:62:17
            X509v3 Authority Key Identifier:
                keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d5:29:3f:9e:3b:2f:2b:c2:0e:40:6a:90:0e:a9:b5:06:29:
         64:7d:6f:bf:41:21:b0:71:1a:76:88:f2:d7:6b:ee:17:3c:23:
         4f:10:5b:70:36:b4:39:b4:ec:a3:e7:0b:5f:42:16:8e:db:6c:
         d4:d1:55:d9:30:6e:1e:84:ab:f0:37:5f:a4:93:a4:10:0c:24:
         8f:75:b7:f3:c0:a4:9e:68:6d:f5:f7:fe:e8:28:af:88:36:f4:
         5f:50:a4:1e:0c:7d:53:83:f5:39:2f:de:b3:eb:59:ea:18:5d:
         eb:2d:a6:77:8a:f2:36:5a:c2:2d:13:bc:84:13:81:e2:e8:ea:
         8d:9a:ab:2a:df:28:e7:75:42:eb:c7:7d:34:90:86:31:76:ee:
         e6:b0:8f:94:06:7a:31:5a:6f:1c:43:6a:f0:32:75:bd:e1:15:
         98:ad:7f:35:50:60:18:e2:ad:55:cc:31:2d:cd:8e:5b:ad:71:
         33:b9:d4:15:8e:f8:38:fb:ad:bf:bb:0b:47:75:61:8e:91:f2:
         2a:aa:a2:cf:eb:4a:62:18:c1:f1:2c:d9:8e:0e:05:36:66:ef:
         9f:ac:b7:d2:df:6d:d4:09:9f:e0:22:ee:84:44:c5:f3:81:b2:
         74:71:92:e6:a7:c7:33:40:6f:f8:28:c1:c6:0d:71:8e:8b:06:
         01:e4:2a:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY87+uJCVd3ZUXPy+AOii/lCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmOGMzM2E4YTYyMDFkNDBhNjAyMjBiZDYzOWI1ZDM1MjIx
MjY3M2UwHhcNMjQwNTAzMDEwNDA4WhcNMjQwNTA0MDEwNDA4WjAzMTEwLwYDVQQD
EyhmNjYwNTI0M2Q1ZTA0OTViY2IyY2UxMmU3MDE4MmVjMjFkMTQ2MjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZSjCOml4JuCWhm1z7D4xISjKLN/
z/kgu3sHraae9iG8BwSLIBPuK0RFdUEX79uETKC+CfTHS9rBnW959gTApIcxLEcv
rJuBoxqjyc3EN5ogVfHQy6PePI5bi2fCOCSUkJ+kqwlaftC6LEZOE35GTH7ao0gL
Ga91/on9h4adAEmHebu0EYwlM4cs4n1jM2bp8C7CPaNJQxXeiboy+LXimXoHlLmR
TUOis4YN8hncI75eXQY3gD0+/tZBby1lgilyA6ZJUhGB2dAJ5PWkqFl4Ywjxbj/4
bk9XJLdfrEOcxNokcpsm+1ne0yzVvnd+yb0uY5/MHAR/QNK8wjb908KidQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZgUkPV4ElbyyzhLnAYLsIdFGIXMB8GA1UdIwQY
MBaAFO+MM6imIB1ApgIgvWObXTUiEmc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iZmJlNWYtOTdjOC00MzQ3LThhOGMt
ZTAxYmI0ODg2M2E5LzEvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iZmJlNWYtOTdjOC00MzQ3LThhOGMtZTAxYmI0ODg2M2E5
LzEvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNUpP547
LyvCDkBqkA6ptQYpZH1vv0EhsHEadojy12vuFzwjTxBbcDa0ObTso+cLX0IWjtts
1NFV2TBuHoSr8DdfpJOkEAwkj3W388Cknmht9ff+6CiviDb0X1CkHgx9U4P1OS/e
s+tZ6hhd6y2md4ryNlrCLRO8hBOB4ujqjZqrKt8o53VC68d9NJCGMXbu5rCPlAZ6
MVpvHENq8DJ1veEVmK1/NVBgGOKtVcwxLc2OW61xM7nUFY74OPutv7sLR3VhjpHy
Kqqiz+tKYhjB8SzZjg4FNmbvn6y30t9t1Amf4CLuhETF84GydHGS5qfHM0Bv+CjB
xg1xjosGAeQqTQ==
-----END CERTIFICATE-----
Generated at Fri May 3 10:44:04 2024 by rpki-client on console-fra.rpki-client.org