Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
File:                     i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json)
Hash identifier:          recr/0RQumQ0o5pm/q8qZSf6cYaBTB0JTG8rBq9HP6k=
Subject key identifier:   22:D3:5A:CE:D7:F6:1B:34:AA:79:13:D6:93:66:3D:4A:07:6F:E0:47
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Certificate issuer:       /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial:       018F882461543D59DBAC1FB9AE4540B16925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
Manifest number:          039D
Signing time:             Fri 17 May 2024 20:00:36 +0000
Manifest this update:     Fri 17 May 2024 20:00:36 +0000
Manifest next update:     Sat 18 May 2024 20:00:36 +0000
Files and hashes:         1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: gf9v8Xv+rmSNa2oUsiC2bBHfYtiJmT2ArciVWuHMx4A=)
                          2: zk6INom0RQjSZQGTT9pC2lZUvy8.roa (hash: itr3rKEs7G/PSRehNajI89jIMsA/cVWjcGJr3dUsUoQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:61:54:3d:59:db:ac:1f:b9:ae:45:40:b1:69:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
        Validity
            Not Before: May 17 20:00:36 2024 GMT
            Not After : May 18 20:00:36 2024 GMT
        Subject: CN=22d35aced7f61b34aa7913d693663d4a076fe047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:67:7a:9d:61:9c:31:7c:5e:0f:b0:0c:9b:
                    bb:cb:f9:79:b9:73:0a:c0:21:06:c2:26:41:37:df:
                    80:9e:0e:b7:3e:79:fa:ca:ee:f1:b1:84:6f:14:e5:
                    c2:ee:85:21:7c:6d:9a:7a:8d:f8:7c:d1:e6:4a:40:
                    9f:8c:a4:c1:87:b7:be:22:7c:ef:b9:cb:70:18:db:
                    1c:e2:5e:e0:84:e1:6f:e0:6d:09:f9:7b:5b:71:88:
                    e1:7a:ff:d3:43:a4:5d:dd:21:5a:ab:54:28:0a:58:
                    45:1b:5d:e5:a0:c9:8d:90:3d:e2:e0:c0:d0:63:9c:
                    1b:d9:5c:0f:9d:d9:cc:72:f5:5b:81:58:9f:78:84:
                    b7:4a:97:44:85:8f:b8:3b:2e:35:c1:a9:80:18:1a:
                    c3:77:d1:5a:b3:99:56:37:1d:f1:52:78:b5:35:63:
                    19:76:c1:3c:25:3a:72:5b:97:49:01:b3:53:f9:4a:
                    37:7e:41:df:54:71:f4:ef:a9:49:18:dd:ce:bf:63:
                    d5:f4:32:f2:14:13:94:ff:a1:24:a4:7c:47:53:1f:
                    88:14:7a:7d:e4:e3:46:d2:a4:b9:85:e3:4a:56:e0:
                    ce:d6:b7:7c:11:b2:22:c9:c0:d0:ef:8f:06:67:03:
                    e0:b1:90:6c:a1:93:99:d3:ca:9d:01:83:cc:d4:72:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D3:5A:CE:D7:F6:1B:34:AA:79:13:D6:93:66:3D:4A:07:6F:E0:47
            X509v3 Authority Key Identifier:
                keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c4:69:ff:bc:5d:5c:f4:6b:2d:89:98:12:46:ef:52:da:c7:
         35:f8:54:9a:cf:ff:9b:96:fb:c4:c8:da:f4:65:4f:29:80:9e:
         9e:b4:9d:df:ab:3b:8b:5a:dd:a5:30:b3:18:4d:3b:f9:d7:55:
         91:99:05:c0:d8:bf:44:51:cf:35:19:15:39:4a:4e:d6:63:74:
         cd:f3:2b:f0:32:e2:bf:aa:f5:4a:49:d7:04:d1:9b:a4:ce:38:
         b8:a0:c5:34:62:1f:00:59:46:7f:3b:07:bd:b1:42:67:ec:6d:
         f5:56:ea:f3:62:96:fa:d7:fc:7e:a9:64:b9:9b:96:d1:ca:21:
         60:0d:03:20:f2:0d:3f:79:99:13:52:67:51:8b:6e:01:80:8b:
         46:65:e6:e4:b7:ae:9d:a5:d1:bf:47:46:f9:51:c8:73:55:bd:
         a4:2f:6d:18:10:04:92:9b:10:dd:85:59:c4:46:7d:7d:1d:1f:
         80:9d:fc:d6:f2:72:55:79:f9:01:c3:58:22:2a:c9:0c:41:d2:
         d4:34:95:5f:f3:e4:3b:9f:1d:7a:24:54:4c:99:0d:2e:4d:b1:
         10:02:1d:07:ff:16:82:06:60:ad:39:96:74:01:87:dd:a7:98:
         59:0d:a7:20:e8:4e:fa:a8:bc:23:c4:0b:ba:1c:63:89:95:4f:
         53:37:7a:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJGFUPVnbrB+5rkVAsWklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjBiMTdkZDg5YjM4NjQyNDk3MjhiOWZjMmVlYWU1MTBm
ZGU0ZmIwHhcNMjQwNTE3MjAwMDM2WhcNMjQwNTE4MjAwMDM2WjAzMTEwLwYDVQQD
EygyMmQzNWFjZWQ3ZjYxYjM0YWE3OTEzZDY5MzY2M2Q0YTA3NmZlMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+pnep1hnDF8Xg+wDJu7y/l5uXMK
wCEGwiZBN9+Ang63Pnn6yu7xsYRvFOXC7oUhfG2aeo34fNHmSkCfjKTBh7e+Inzv
uctwGNsc4l7ghOFv4G0J+XtbcYjhev/TQ6Rd3SFaq1QoClhFG13loMmNkD3i4MDQ
Y5wb2VwPndnMcvVbgVifeIS3SpdEhY+4Oy41wamAGBrDd9Fas5lWNx3xUni1NWMZ
dsE8JTpyW5dJAbNT+Uo3fkHfVHH076lJGN3Ov2PV9DLyFBOU/6EkpHxHUx+IFHp9
5ONG0qS5heNKVuDO1rd8EbIiycDQ748GZwPgsZBsoZOZ08qdAYPM1HJEqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLTWs7X9hs0qnkT1pNmPUoHb+BHMB8GA1UdIwQY
MBaAFIuwsX3YmzhkJJcoufwu6uUQ/eT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iYTk1ZmUtNDU5OS00ZDgzLWI2YmQt
ZTAxOTE5ZmNmZWRmLzEvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iYTk1ZmUtNDU5OS00ZDgzLWI2YmQtZTAxOTE5ZmNmZWRm
LzEvaTdDeGZkaWJPR1FrbHlpNV9DN3E1UkQ5NVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsRp/7xd
XPRrLYmYEkbvUtrHNfhUms//m5b7xMja9GVPKYCenrSd36s7i1rdpTCzGE07+ddV
kZkFwNi/RFHPNRkVOUpO1mN0zfMr8DLiv6r1SknXBNGbpM44uKDFNGIfAFlGfzsH
vbFCZ+xt9Vbq82KW+tf8fqlkuZuW0cohYA0DIPINP3mZE1JnUYtuAYCLRmXm5Leu
naXRv0dG+VHIc1W9pC9tGBAEkpsQ3YVZxEZ9fR0fgJ381vJyVXn5AcNYIirJDEHS
1DSVX/PkO58deiRUTJkNLk2xEAIdB/8WggZgrTmWdAGH3aeYWQ2nIOhO+qi8I8QL
uhxjiZVPUzd6Mw==
-----END CERTIFICATE-----
Generated at Fri May 17 21:03:20 2024 by rpki-client on console-fra.rpki-client.org