Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File:                     250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier:          vAn97j7gXkMWgkCmBkqpKCcj6M2oqSjt3e8NUyfb3Jw=
Subject key identifier:   BF:44:27:31:03:10:8A:E3:AC:20:F6:70:DA:43:8E:88:4D:54:D9:24
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer:       /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial:       018F36D1FB1EC9CECCC22A864DCEF90A97B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number:          0D14
Signing time:             Thu 02 May 2024 01:01:21 +0000
Manifest this update:     Thu 02 May 2024 01:01:21 +0000
Manifest next update:     Fri 03 May 2024 01:01:21 +0000
Files and hashes:         1: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: o+FBXHaqAnnZBP0wCZ+h+52dR57f+/aZd9JtpkJYFW0=)
                          2: 3_CumXJFY0DBejQkFUVkzCF3-5E.roa (hash: 2DlbALZilAVymorjMNDzf6+Z1j20OppipK4ND4bSbiY=)
                          3: BcXx__eN4BOxMuEupABLCKXfBSE.roa (hash: j75x+Hv2zaT9qHXlJ/qfTrvv1E93mv5UgxrMhGTbYGw=)
                          4: EIT0NqcX8FRcBj3mr-UzgRxA0_s.roa (hash: HsJgV3FQKZukCQvKN0wqOVh2X206BcJb70qvFf/+Z6A=)
                          5: R8aF17WmY7eq3okCCuOK7_a9WZA.roa (hash: 0lR6KIF8mNFcvb24ietYcYUUE5ID+4HihrVA5KaYYI0=)
                          6: eaUF5HRVW0XzEJEWFLex9-gWNbM.roa (hash: LSx2rmy+BBHCxzcKZG1bSe2N3KCl9tx+y8nU7VG44zc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 01:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:d1:fb:1e:c9:ce:cc:c2:2a:86:4d:ce:f9:0a:97:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
        Validity
            Not Before: May  2 01:01:21 2024 GMT
            Not After : May  3 01:01:21 2024 GMT
        Subject: CN=bf44273103108ae3ac20f670da438e884d54d924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2a:59:09:7f:cb:62:99:1e:60:71:d6:f8:5b:
                    07:25:36:dd:5e:2d:da:23:da:91:7a:37:d2:3b:96:
                    39:02:a3:13:aa:21:f2:55:77:ec:b6:cc:56:56:b0:
                    06:fd:1c:e4:8c:bd:75:80:10:cf:2c:da:32:3c:18:
                    91:4e:14:23:62:41:2f:7c:1e:0b:5f:88:0f:b7:74:
                    88:e8:2a:b4:05:87:0f:6e:a4:d3:2c:00:24:1a:e7:
                    11:d3:94:41:66:2b:40:92:65:e2:3c:c5:62:96:63:
                    d7:70:10:0b:3c:c0:2c:03:af:b8:01:82:6e:0a:09:
                    1a:e5:86:f4:4e:06:c4:64:bf:29:c6:20:9c:16:81:
                    9c:86:80:91:c7:05:a9:68:a5:49:12:c5:11:08:ce:
                    f1:e8:1b:d7:9f:1d:17:af:15:d5:d5:b7:2f:21:a4:
                    6b:b0:03:81:50:27:1f:7b:3d:56:76:f7:ca:20:84:
                    77:81:f0:4e:a5:73:16:fa:6a:96:21:97:7d:37:6f:
                    49:a6:0e:a4:6a:38:67:03:c9:05:d6:ac:fd:c3:7c:
                    cf:2d:36:86:9d:e3:06:73:57:2b:46:9e:9e:89:25:
                    12:7e:57:51:e3:ce:cf:05:d5:f6:d0:b7:a1:82:88:
                    1e:57:f8:81:9e:10:d3:4b:7e:54:db:f1:97:0d:52:
                    2d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:44:27:31:03:10:8A:E3:AC:20:F6:70:DA:43:8E:88:4D:54:D9:24
            X509v3 Authority Key Identifier:
                keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:87:d0:5b:07:54:07:d7:20:12:84:a7:af:da:d2:5b:44:d4:
         77:c5:e3:cf:de:44:50:cc:98:45:b1:a5:a7:4a:65:fa:a4:bf:
         c3:7b:b4:0d:8f:97:9e:3a:d6:6c:aa:bf:26:6e:e9:cb:93:6e:
         14:46:c8:7e:f7:6e:64:1f:40:f6:16:e5:59:5d:33:2b:db:39:
         2d:ab:e1:98:63:7d:8f:fb:7a:7c:ff:63:a9:0d:b4:41:90:ce:
         c7:a0:06:b9:38:58:2c:b8:be:cd:73:f4:93:8c:57:9d:89:f0:
         b4:e1:4f:eb:f4:26:1d:ff:51:67:ca:9c:b2:43:0c:f0:f6:17:
         01:f9:27:6e:ff:78:7b:41:06:d1:bb:a5:d7:be:58:f8:78:c4:
         9c:c9:96:b2:ec:e2:a1:5a:76:4a:5f:11:d3:db:e9:e9:f6:b6:
         f7:fd:6a:bc:e0:19:8b:89:7b:df:b5:48:48:e2:0e:dd:59:13:
         1b:fe:33:16:99:90:ff:d8:4a:6f:0d:99:89:17:48:72:8d:97:
         50:c2:6a:f1:77:7b:6c:86:3d:47:e9:5e:47:8a:1b:ac:2b:9b:
         77:07:e8:3f:95:6b:7c:3c:4d:69:3d:c1:48:98:be:7e:1d:38:
         bb:33:15:82:83:1e:f1:e0:c5:9d:05:70:ce:97:c3:eb:1d:f5:
         d9:01:c2:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY820fseyc7MwiqGTc75Cpe2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWQxOTdmYmJlZTJhMWRjY2I0ZjU1NzIyYTgyMTBkMzEw
NWIwNDIwHhcNMjQwNTAyMDEwMTIxWhcNMjQwNTAzMDEwMTIxWjAzMTEwLwYDVQQD
EyhiZjQ0MjczMTAzMTA4YWUzYWMyMGY2NzBkYTQzOGU4ODRkNTRkOTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CpZCX/LYpkeYHHW+FsHJTbdXi3a
I9qRejfSO5Y5AqMTqiHyVXfstsxWVrAG/RzkjL11gBDPLNoyPBiRThQjYkEvfB4L
X4gPt3SI6Cq0BYcPbqTTLAAkGucR05RBZitAkmXiPMVilmPXcBALPMAsA6+4AYJu
Cgka5Yb0TgbEZL8pxiCcFoGchoCRxwWpaKVJEsURCM7x6BvXnx0XrxXV1bcvIaRr
sAOBUCcfez1WdvfKIIR3gfBOpXMW+mqWIZd9N29Jpg6kajhnA8kF1qz9w3zPLTaG
neMGc1crRp6eiSUSfldR487PBdX20LehgogeV/iBnhDTS35U2/GXDVItywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9EJzEDEIrjrCD2cNpDjohNVNkkMB8GA1UdIwQY
MBaAFNudGX+77iodzLT1VyKoIQ0xBbBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMt
NGIyMzk1NmZiZDg2LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMtNGIyMzk1NmZiZDg2
LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIfQWwdU
B9cgEoSnr9rSW0TUd8Xjz95EUMyYRbGlp0pl+qS/w3u0DY+XnjrWbKq/Jm7py5Nu
FEbIfvduZB9A9hblWV0zK9s5LavhmGN9j/t6fP9jqQ20QZDOx6AGuThYLLi+zXP0
k4xXnYnwtOFP6/QmHf9RZ8qcskMM8PYXAfknbv94e0EG0bul175Y+HjEnMmWsuzi
oVp2Sl8R09vp6fa29/1qvOAZi4l737VISOIO3VkTG/4zFpmQ/9hKbw2ZiRdIco2X
UMJq8Xd7bIY9R+leR4obrCubdwfoP5VrfDxNaT3BSJi+fh04uzMVgoMe8eDFnQVw
zpfD6x312QHCPQ==
-----END CERTIFICATE-----
Generated at Thu May 2 10:28:44 2024 by rpki-client on console-fra.rpki-client.org