Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
File:                     aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json)
Hash identifier:          GRFIkONoG27MASWBEIrnHBFm6nyrT5VdYw4N6tM12gU=
Subject key identifier:   E2:89:F3:55:FC:30:54:AB:5D:7A:AB:9D:BC:51:6F:7E:F8:85:D1:2E
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Certificate issuer:       /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial:       018F86A39785B03586F27012F258D917BB71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 13:00:18 +0000
Manifest this update:     Fri 17 May 2024 13:00:18 +0000
Manifest next update:     Sat 18 May 2024 13:00:18 +0000
Files and hashes:         1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: rn34gEbqDVThah2xkzCzhO6i4sk6WKsPfiojVBtUjb4=)
                          2: tB0nRKymneZrnDRJ5spzKKTIvcw.roa (hash: wXwiSUKrZmGfFYH1RQk54hN+133CbHJDHC1Um3LxZuI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:97:85:b0:35:86:f2:70:12:f2:58:d9:17:bb:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
        Validity
            Not Before: May 17 13:00:18 2024 GMT
            Not After : May 18 13:00:18 2024 GMT
        Subject: CN=e289f355fc3054ab5d7aab9dbc516f7ef885d12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:9f:e6:b1:6e:7a:43:6f:74:5a:39:4f:c5:
                    d2:98:e6:17:f2:7a:75:43:9e:a0:a1:3a:37:be:34:
                    c3:47:67:5d:29:6f:12:38:72:e6:39:5d:fa:6e:b9:
                    a1:50:79:53:ba:15:8c:7a:e5:77:90:97:34:95:7c:
                    f6:b1:5b:03:f7:a2:24:28:15:4d:e5:f1:e7:9d:e6:
                    ce:08:ad:f1:d6:3b:1b:a5:8b:61:8d:58:16:e3:57:
                    14:38:55:8f:d3:92:0b:8b:b6:e5:14:1a:71:de:3a:
                    17:45:45:3b:9e:f9:cd:e0:bf:bb:10:6b:d9:e6:7c:
                    1d:14:10:61:45:45:78:26:61:a2:50:1c:e6:6f:87:
                    ab:0f:59:29:7f:12:9a:24:1b:28:fb:94:ee:3d:74:
                    f9:dc:77:57:ff:bc:7b:e4:b1:98:1f:55:c5:80:84:
                    69:22:16:7e:a4:56:2e:80:be:c1:d9:9a:16:e5:a3:
                    2c:a3:02:6f:ea:e4:37:19:24:36:4a:3f:79:1b:90:
                    6c:17:d0:8d:ad:65:85:9c:f4:fb:41:2a:45:70:93:
                    b2:3c:bc:9b:fe:4b:dd:17:bf:fe:35:18:96:0b:53:
                    79:cd:8e:9b:73:0f:df:04:3d:14:e1:5d:9f:3a:fb:
                    85:fe:51:f1:12:59:66:8f:8c:a1:7d:b6:e7:9b:f4:
                    8f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:89:F3:55:FC:30:54:AB:5D:7A:AB:9D:BC:51:6F:7E:F8:85:D1:2E
            X509v3 Authority Key Identifier:
                keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1d:4a:3d:0f:9f:37:6c:db:b7:ca:3d:3a:2a:56:45:a5:57:
         fc:d4:3a:91:86:a2:db:31:55:70:8e:d2:67:dc:33:3b:96:d6:
         3b:04:24:d9:21:0b:80:56:8f:39:e6:39:20:be:93:64:05:a8:
         f6:8c:16:2f:67:82:26:f3:f3:ef:4a:d0:0d:19:07:c1:f8:87:
         48:42:e3:57:39:bb:3f:84:a0:1b:f3:90:6e:96:08:0d:39:85:
         e2:09:4a:61:9c:41:f3:a7:e4:98:49:6d:76:e7:0a:3e:08:ad:
         04:f7:eb:e0:ed:08:cf:0c:5d:0d:dd:5f:72:76:54:af:22:c0:
         49:d1:1e:13:17:7c:c6:aa:9d:73:30:e7:72:02:c0:8f:81:75:
         9e:8e:2c:18:31:fc:a8:36:ca:0b:07:c3:e9:e1:ca:4c:d4:2b:
         72:2a:eb:4b:44:0f:28:06:86:2f:aa:8e:05:23:b3:f8:d1:3c:
         72:35:2c:58:bc:69:f6:26:67:fc:a2:87:2e:1f:3d:b9:82:4b:
         d4:71:2d:ea:65:2e:8f:40:7d:a3:d5:78:89:d0:30:5a:6e:13:
         ac:65:da:fd:72:74:87:d7:6c:b0:5c:73:c9:9f:9a:ce:ee:20:
         da:27:3a:60:35:ad:e4:08:ba:57:9d:16:6c:d5:68:d8:99:1b:
         52:2e:1e:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Go5eFsDWG8nAS8ljZF7txMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OGU3MTNiMDdjNzlmOTdiNDdlOWYwMzIxNzY4YjA5NDg4
YjdhMDMwHhcNMjQwNTE3MTMwMDE4WhcNMjQwNTE4MTMwMDE4WjAzMTEwLwYDVQQD
EyhlMjg5ZjM1NWZjMzA1NGFiNWQ3YWFiOWRiYzUxNmY3ZWY4ODVkMTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNWf5rFuekNvdFo5T8XSmOYX8np1
Q56goTo3vjTDR2ddKW8SOHLmOV36brmhUHlTuhWMeuV3kJc0lXz2sVsD96IkKBVN
5fHnnebOCK3x1jsbpYthjVgW41cUOFWP05ILi7blFBpx3joXRUU7nvnN4L+7EGvZ
5nwdFBBhRUV4JmGiUBzmb4erD1kpfxKaJBso+5TuPXT53HdX/7x75LGYH1XFgIRp
IhZ+pFYugL7B2ZoW5aMsowJv6uQ3GSQ2Sj95G5BsF9CNrWWFnPT7QSpFcJOyPLyb
/kvdF7/+NRiWC1N5zY6bcw/fBD0U4V2fOvuF/lHxEllmj4yhfbbnm/SPnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKJ81X8MFSrXXqrnbxRb374hdEuMB8GA1UdIwQY
MBaAFGiOcTsHx5+XtH6fAyF2iwlIi3oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wZWJlYjktMzFhOC00NTUwLTgzOTYt
Njk1ZjRhOTI3NjEwLzEvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wZWJlYjktMzFhOC00NTUwLTgzOTYtNjk1ZjRhOTI3NjEw
LzEvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAph1KPQ+f
N2zbt8o9OipWRaVX/NQ6kYai2zFVcI7SZ9wzO5bWOwQk2SELgFaPOeY5IL6TZAWo
9owWL2eCJvPz70rQDRkHwfiHSELjVzm7P4SgG/OQbpYIDTmF4glKYZxB86fkmElt
ducKPgitBPfr4O0IzwxdDd1fcnZUryLASdEeExd8xqqdczDncgLAj4F1no4sGDH8
qDbKCwfD6eHKTNQrcirrS0QPKAaGL6qOBSOz+NE8cjUsWLxp9iZn/KKHLh89uYJL
1HEt6mUuj0B9o9V4idAwWm4TrGXa/XJ0h9dssFxzyZ+azu4g2ic6YDWt5Ai6V50W
bNVo2JkbUi4eIg==
-----END CERTIFICATE-----
Generated at Fri May 17 19:19:27 2024 by rpki-client on console-fra.rpki-client.org