Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
File:                     EEXazIN3mMPmzzH00nlGozsN5mE.mft (raw, json)
Hash identifier:          eqvrVpTfighb3Yesnf9IOiU/EIFePkJk8L6sy938SWY=
Subject key identifier:   12:C0:64:F7:1E:E5:47:74:AB:29:DA:B8:67:0A:D4:A3:D0:60:1C:EA
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       018F543760D8DC74E68FC5A098918A6CF845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
Manifest number:          117A
Signing time:             Tue 07 May 2024 18:01:06 +0000
Manifest this update:     Tue 07 May 2024 18:01:06 +0000
Manifest next update:     Wed 08 May 2024 18:01:06 +0000
Files and hashes:         1: CA02NgGe58Fexwh3aXKQmfruw-k.roa (hash: TWusG1KXb1aMiQHxxtkPoIKAcF6Y2yNK+n9B6pl++n4=)
                          2: EEXazIN3mMPmzzH00nlGozsN5mE.crl (hash: 0JUnIKb6TIUC8pnjte0oEDKU6Vr9DjqHUZ8YG88s5FY=)
                          3: WDV0aDV0yHz7GT0tYmrPP4xdiS8.roa (hash: LMRXU93EeDgZxFEGNfrR2ef3CkmKLSntZz3lKflK0bI=)
                          4: c3wyjfEkokEBm3KzKtgY1iPm1s8.roa (hash: jL54HVCO26iAEcUmoA5fwftOHWmMpu7cqkk6jAEq7XU=)
                          5: iWF3oW-0qa-6pTRJrKXDbcWm5aM.roa (hash: +4gZpmXvQ/2OpYo0fPwjEci7ki2oH1dnoNLCruJ5UQ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:37:60:d8:dc:74:e6:8f:c5:a0:98:91:8a:6c:f8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: May  7 18:01:06 2024 GMT
            Not After : May  8 18:01:06 2024 GMT
        Subject: CN=12c064f71ee54774ab29dab8670ad4a3d0601cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:31:f3:9e:e7:1b:cc:2b:d7:6d:2a:f7:d5:ba:
                    7c:3e:6e:f5:08:3e:bb:e8:50:9c:bc:dc:e0:01:62:
                    53:d4:0b:a0:24:90:bc:ea:4c:b9:e1:48:35:1c:ef:
                    cb:f6:10:b6:a2:93:60:b2:4c:3a:b7:c1:97:b7:02:
                    b5:d3:12:6d:7a:97:27:03:8d:12:61:76:e9:cb:9c:
                    53:00:8b:f5:a9:c4:ab:4c:99:23:f9:d1:31:9a:bd:
                    97:48:0f:ea:98:1c:11:da:b8:a7:fb:9e:18:29:2b:
                    44:d5:0b:8a:76:3d:1e:5a:0e:0d:05:7b:cc:76:02:
                    41:08:4d:ad:da:7d:56:2c:55:c7:c4:aa:c0:3d:5a:
                    f8:19:05:96:7d:75:06:77:30:34:7e:29:b1:f4:09:
                    11:83:92:13:f5:c2:5b:8c:1b:9a:4f:85:a8:a4:f1:
                    25:1f:95:ea:2e:63:68:52:14:59:9c:29:5b:87:86:
                    9d:85:3c:63:93:4b:a3:60:7b:06:64:90:c8:84:b4:
                    c0:b1:41:1b:07:52:bb:e1:2d:16:dd:9e:71:a4:89:
                    32:a2:41:87:2e:3d:a5:a2:14:17:f4:dc:2b:5c:c0:
                    bb:6c:db:a2:90:6f:6d:e5:39:a2:6f:29:64:f6:05:
                    55:0d:bd:7c:5c:da:af:3c:88:b0:2f:ce:53:0a:3d:
                    2e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C0:64:F7:1E:E5:47:74:AB:29:DA:B8:67:0A:D4:A3:D0:60:1C:EA
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:e5:dc:38:20:7e:13:f5:85:a1:2c:15:78:6b:d8:fc:11:71:
         d4:e5:76:f9:7c:1a:ef:85:02:36:6e:f1:b4:97:10:16:3d:bf:
         f3:de:66:ec:39:58:77:ef:4f:38:43:6e:f2:84:fa:0c:e0:56:
         0e:f8:da:1e:3a:59:63:de:5b:eb:33:92:43:bd:ed:7c:35:59:
         32:9a:f5:9e:11:51:05:78:a9:7b:12:2a:12:6f:c2:1b:fc:08:
         b3:70:a8:eb:35:23:0a:dd:17:67:cf:56:9c:7c:52:cf:6c:bb:
         b1:26:64:0d:6d:8a:fc:ad:e8:b5:86:23:80:c4:d0:22:53:29:
         9e:59:d4:4a:ee:50:9a:30:fe:e2:e5:38:a5:29:9b:52:ff:e7:
         87:c4:59:b8:45:f8:35:7d:e4:ec:17:51:d0:3c:a5:51:68:c2:
         5f:0d:b2:d0:c1:9a:48:c3:0b:6a:c9:f3:84:5d:d9:03:42:2a:
         1d:2d:72:f1:7e:5d:8c:f5:90:90:bf:d3:a5:ff:e3:ec:97:a0:
         84:55:59:aa:d5:68:74:48:01:ee:20:37:f6:be:3d:f1:94:22:
         20:06:67:9f:33:ec:85:17:e4:77:ef:2e:12:59:64:a5:28:58:
         51:46:23:d7:20:d3:1a:78:58:5f:67:ff:5e:d1:a7:61:8e:d8:
         25:c5:48:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9UN2DY3HTmj8WgmJGKbPhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNDVkYWNjODM3Nzk4YzNlNmNmMzFmNGQyNzk0NmEzM2Iw
ZGU2NjEwHhcNMjQwNTA3MTgwMTA2WhcNMjQwNTA4MTgwMTA2WjAzMTEwLwYDVQQD
EygxMmMwNjRmNzFlZTU0Nzc0YWIyOWRhYjg2NzBhZDRhM2QwNjAxY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4THznucbzCvXbSr31bp8Pm71CD67
6FCcvNzgAWJT1AugJJC86ky54Ug1HO/L9hC2opNgskw6t8GXtwK10xJtepcnA40S
YXbpy5xTAIv1qcSrTJkj+dExmr2XSA/qmBwR2rin+54YKStE1QuKdj0eWg4NBXvM
dgJBCE2t2n1WLFXHxKrAPVr4GQWWfXUGdzA0fimx9AkRg5IT9cJbjBuaT4WopPEl
H5XqLmNoUhRZnClbh4adhTxjk0ujYHsGZJDIhLTAsUEbB1K74S0W3Z5xpIkyokGH
Lj2lohQX9NwrXMC7bNuikG9t5Tmibylk9gVVDb18XNqvPIiwL85TCj0uBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLAZPce5Ud0qynauGcK1KPQYBzqMB8GA1UdIwQY
MBaAFBBF2syDd5jD5s8x9NJ5RqM7DeZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEt
OWMxNzRlNTNlNGZlLzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEtOWMxNzRlNTNlNGZl
LzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0uXcOCB+
E/WFoSwVeGvY/BFx1OV2+Xwa74UCNm7xtJcQFj2/895m7DlYd+9POENu8oT6DOBW
DvjaHjpZY95b6zOSQ73tfDVZMpr1nhFRBXipexIqEm/CG/wIs3Co6zUjCt0XZ89W
nHxSz2y7sSZkDW2K/K3otYYjgMTQIlMpnlnUSu5QmjD+4uU4pSmbUv/nh8RZuEX4
NX3k7BdR0DylUWjCXw2y0MGaSMMLasnzhF3ZA0IqHS1y8X5djPWQkL/Tpf/j7Jeg
hFVZqtVodEgB7iA39r498ZQiIAZnnzPshRfkd+8uEllkpShYUUYj1yDTGnhYX2f/
XtGnYY7YJcVIXg==
-----END CERTIFICATE-----
Generated at Tue May 7 21:03:29 2024 by rpki-client on console-fra.rpki-client.org