Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File:                     j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier:          CoJdGdL+WgD3Qxn/pGYDQbAXTxmpQdtKicEt4M4GMOQ=
Subject key identifier:   04:F2:2C:E9:46:B0:45:63:35:9F:07:F8:CD:52:D0:E1:4B:68:BB:06
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer:       /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial:       018F8749DDBC9DC967BA75416B1059AF3B5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number:          0858
Signing time:             Fri 17 May 2024 16:01:56 +0000
Manifest this update:     Fri 17 May 2024 16:01:56 +0000
Manifest next update:     Sat 18 May 2024 16:01:56 +0000
Files and hashes:         1: j5h_qG-uztjKekRir38AXqsneag.crl (hash: HiI9lga2WLdHtVFpALjByELZBqQzVZxfK4XjNIrcTTk=)
                          2: sRVxFn1AlNpN8SYTIoBE6E7IO0s.roa (hash: mhlO8cQstkVF4Etyh/rEqXmVNjGcWA0sMww+l6NQugk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:dd:bc:9d:c9:67:ba:75:41:6b:10:59:af:3b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
        Validity
            Not Before: May 17 16:01:56 2024 GMT
            Not After : May 18 16:01:56 2024 GMT
        Subject: CN=04f22ce946b04563359f07f8cd52d0e14b68bb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:7c:99:74:4f:5e:97:ce:f3:ac:9d:7e:5f:
                    86:87:d5:f1:78:54:c7:af:46:58:0f:56:47:13:33:
                    ad:84:34:1d:fc:74:aa:98:bf:57:4e:02:af:75:66:
                    c7:f9:db:46:63:d6:9a:eb:f0:00:54:85:f6:c2:34:
                    b1:2c:e2:15:89:4b:68:c5:f8:0a:19:e6:94:7d:6f:
                    04:85:e5:0f:11:3c:00:44:7e:6f:81:c6:4b:2a:fb:
                    df:45:50:a4:c1:3d:09:97:28:08:a7:9c:67:b6:c6:
                    b8:63:62:35:f5:47:fe:76:ef:b6:71:9b:e8:ba:f8:
                    54:e4:a0:98:ff:c5:c9:8f:5c:ea:20:89:63:2f:c5:
                    ed:7a:a8:8b:3e:fb:fe:80:e5:0a:d5:88:2c:2e:c5:
                    0f:ff:c1:39:01:42:61:23:bd:96:49:de:a7:29:64:
                    96:f9:47:61:f6:7e:a6:ff:2c:78:4c:e6:53:fe:3a:
                    db:c1:a3:65:28:cb:51:8f:4d:75:d9:0c:f0:9a:08:
                    1e:63:ca:61:be:75:d8:a3:61:af:6b:ee:8d:4e:7f:
                    88:2a:fe:90:eb:c5:ea:6f:60:40:98:ad:41:41:c3:
                    5d:d5:2d:56:db:6c:d6:2c:be:8e:85:31:b3:75:39:
                    58:50:ca:62:72:39:9e:24:37:3a:e5:01:c5:b3:fc:
                    e2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F2:2C:E9:46:B0:45:63:35:9F:07:F8:CD:52:D0:E1:4B:68:BB:06
            X509v3 Authority Key Identifier:
                keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c7:49:c9:69:fc:b6:97:aa:66:88:88:06:3d:38:10:a4:6a:
         f5:f0:8c:69:c8:17:59:f5:75:dc:15:62:b5:c4:61:6c:a4:77:
         23:57:2c:7b:4f:eb:d4:e7:75:90:2e:1c:46:4d:08:b3:6c:18:
         5e:ba:88:26:37:1d:13:fe:88:32:f4:dc:4b:ba:cd:a6:a1:18:
         0b:f8:b3:f4:d9:4f:d4:16:f6:87:74:d4:b6:39:48:1f:ee:e7:
         af:74:79:7f:40:ac:ff:82:ed:d7:c4:cb:91:1a:88:e2:bc:68:
         1c:5f:b6:ff:1e:77:00:c2:57:f5:6b:ae:76:f0:75:00:63:96:
         88:e3:e1:59:44:3e:58:85:b9:f3:e7:93:27:b1:f4:33:cb:18:
         41:a8:c8:2d:48:20:c9:88:3c:23:fb:ee:c2:64:c5:f8:0d:d2:
         cb:67:da:20:3d:93:87:d4:08:6b:ee:50:be:b9:1a:0e:03:b5:
         99:50:11:00:9f:06:9b:12:8f:38:2e:e6:a9:ff:ce:c8:8a:b0:
         b6:e8:a6:9c:e6:21:c6:3f:80:c1:f9:62:ad:80:bc:97:fe:e0:
         dc:28:e7:88:a6:9f:ab:66:34:a2:27:a5:74:9c:87:65:51:6a:
         b8:3b:dd:bd:20:65:41:9f:37:c1:33:b4:ff:c4:65:44:d8:cc:
         87:38:38:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSd28nclnunVBaxBZrztfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOTg3ZmE4NmZhZWNlZDhjYTdhNDQ2MmFmN2YwMDVlYWIy
Nzc5YTgwHhcNMjQwNTE3MTYwMTU2WhcNMjQwNTE4MTYwMTU2WjAzMTEwLwYDVQQD
EygwNGYyMmNlOTQ2YjA0NTYzMzU5ZjA3ZjhjZDUyZDBlMTRiNjhiYjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYd8mXRPXpfO86ydfl+Gh9XxeFTH
r0ZYD1ZHEzOthDQd/HSqmL9XTgKvdWbH+dtGY9aa6/AAVIX2wjSxLOIViUtoxfgK
GeaUfW8EheUPETwARH5vgcZLKvvfRVCkwT0JlygIp5xntsa4Y2I19Uf+du+2cZvo
uvhU5KCY/8XJj1zqIIljL8XteqiLPvv+gOUK1YgsLsUP/8E5AUJhI72WSd6nKWSW
+Udh9n6m/yx4TOZT/jrbwaNlKMtRj0112QzwmggeY8phvnXYo2Gva+6NTn+IKv6Q
68Xqb2BAmK1BQcNd1S1W22zWLL6OhTGzdTlYUMpicjmeJDc65QHFs/ziDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATyLOlGsEVjNZ8H+M1S0OFLaLsGMB8GA1UdIwQY
MBaAFI+Yf6hvrs7YynpEYq9/AF6rJ3moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAt
NmY2YzZjODIxNzgxLzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAtNmY2YzZjODIxNzgx
LzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsdJyWn8
tpeqZoiIBj04EKRq9fCMacgXWfV13BVitcRhbKR3I1cse0/r1Od1kC4cRk0Is2wY
XrqIJjcdE/6IMvTcS7rNpqEYC/iz9NlP1Bb2h3TUtjlIH+7nr3R5f0Cs/4Lt18TL
kRqI4rxoHF+2/x53AMJX9WuudvB1AGOWiOPhWUQ+WIW58+eTJ7H0M8sYQajILUgg
yYg8I/vuwmTF+A3Sy2faID2Th9QIa+5QvrkaDgO1mVARAJ8GmxKPOC7mqf/OyIqw
tuimnOYhxj+AwflirYC8l/7g3CjniKafq2Y0oieldJyHZVFquDvdvSBlQZ83wTO0
/8RlRNjMhzg4Eg==
-----END CERTIFICATE-----
Generated at Fri May 17 18:55:26 2024 by rpki-client on console-ams.rpki-client.org