Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File:                     0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier:          wgrIpyJSiIzQXpE0VjdtF3J0apFTvhowpUvkpQCZEvY=
Subject key identifier:   DD:64:09:D8:E5:45:74:2A:78:58:20:30:C4:DD:42:A8:3D:81:2E:62
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer:       /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial:       018F8334867D5230BF3F48A11D5F53B5C06E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number:          0A5C
Signing time:             Thu 16 May 2024 21:00:08 +0000
Manifest this update:     Thu 16 May 2024 21:00:08 +0000
Manifest next update:     Fri 17 May 2024 21:00:08 +0000
Files and hashes:         1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: ImKFuowaed0uwr/dlZUJP0ObP2F7HfK8tozYmnn+koE=)
                          2: F5E0_JeT5mFa4ip6RXLxbkO73KE.roa (hash: Uhn6RdxWpAQsFOOesm23TbAexpsuOC4GC1WOw/xfjwE=)
                          3: wkxXq3P8dQqFNbN4qKHoqzui_YA.roa (hash: eauT8dVnb45Uy5OdYP6OMOy/tYoWYlq2lFkLIPa05W4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 21:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:34:86:7d:52:30:bf:3f:48:a1:1d:5f:53:b5:c0:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
        Validity
            Not Before: May 16 21:00:08 2024 GMT
            Not After : May 17 21:00:08 2024 GMT
        Subject: CN=dd6409d8e545742a78582030c4dd42a83d812e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:bb:d9:a3:1c:90:bf:32:75:ed:d8:e2:5d:89:
                    dc:2e:49:75:43:85:39:da:bd:b4:e1:f4:3e:3f:e9:
                    00:90:1f:a8:04:8d:f0:c7:68:1c:4a:3c:fe:32:e1:
                    59:52:1d:ee:8b:98:c6:3c:e3:36:69:bd:df:b0:5f:
                    64:86:52:ae:3e:9a:80:a3:56:ca:dd:08:a3:47:f2:
                    fa:52:0f:96:1e:89:d6:7b:d3:2b:cc:15:95:b0:1c:
                    2b:31:9e:80:04:1b:40:37:d7:2a:0f:8b:c4:c8:bf:
                    0e:16:64:2a:53:ac:d8:11:ee:cc:10:ba:b1:15:e1:
                    9b:85:6e:f8:ff:e3:62:e1:0e:c4:59:62:90:0c:cd:
                    d5:63:e4:cc:14:5e:30:c3:16:64:34:aa:5d:a2:02:
                    33:6a:1f:82:d5:77:e0:ec:83:f3:b8:0b:fe:1a:91:
                    36:3b:dd:8f:02:4a:93:29:4a:2d:59:09:b8:f5:e7:
                    ad:48:7a:89:87:b9:d9:9f:da:82:77:4a:ac:cc:1d:
                    26:e0:86:79:b1:53:f2:2f:c0:e5:53:e6:ba:cb:3a:
                    63:34:d3:dd:56:b9:92:35:85:88:43:8e:72:1c:d0:
                    f5:4a:29:6d:59:84:7e:8b:28:6d:66:24:eb:39:34:
                    48:fe:ce:6c:80:2c:09:75:38:0e:b8:5f:93:80:a3:
                    78:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:64:09:D8:E5:45:74:2A:78:58:20:30:C4:DD:42:A8:3D:81:2E:62
            X509v3 Authority Key Identifier:
                keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:32:f6:e1:d5:85:a6:93:2a:31:04:9e:9c:9a:bb:3e:2b:e3:
         d0:cd:48:02:a5:93:5f:71:59:59:39:c0:7e:e7:7d:77:1e:55:
         e2:2f:2c:cb:3b:51:34:92:1b:da:44:92:ce:f0:02:51:b2:65:
         e1:dd:38:49:1a:07:2d:e0:07:f6:21:f6:1d:cf:40:84:a4:5e:
         5a:8b:eb:c7:c3:dc:a2:a5:24:68:b5:f7:7f:cf:bb:1f:96:b4:
         f2:8b:bd:85:c9:9b:5d:62:d2:e4:59:56:0c:d2:b8:97:59:8c:
         ea:02:ee:2d:8a:56:19:20:ad:53:ef:71:51:87:e1:5d:87:98:
         74:5c:0a:d9:63:fc:05:0d:b8:91:3b:59:ba:88:be:88:76:e9:
         49:92:1f:dd:8d:dd:e9:27:93:82:12:ce:49:3c:b7:65:7a:09:
         a0:12:3c:5b:3d:72:bb:e9:17:bb:7c:29:36:51:43:d4:96:74:
         8c:b8:19:ff:a1:73:d8:30:40:9b:01:e2:06:82:1c:ba:39:19:
         e1:b3:f9:38:c6:2e:9a:15:fd:9a:ac:00:26:d9:b4:50:84:67:
         64:37:ab:d4:9a:5f:37:3c:dd:3e:9c:71:aa:eb:a8:93:ca:9f:
         61:5d:c1:f6:6d:2f:88:fa:7c:da:c6:2d:c0:d3:58:c4:84:cc:
         17:14:34:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+DNIZ9UjC/P0ihHV9TtcBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMzY3ZGJhM2EyMjAwNjBlNjdkNGVjNjgwYjBmOTlmMjQ3
YTg3MmMwHhcNMjQwNTE2MjEwMDA4WhcNMjQwNTE3MjEwMDA4WjAzMTEwLwYDVQQD
EyhkZDY0MDlkOGU1NDU3NDJhNzg1ODIwMzBjNGRkNDJhODNkODEyZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LvZoxyQvzJ17djiXYncLkl1Q4U5
2r204fQ+P+kAkB+oBI3wx2gcSjz+MuFZUh3ui5jGPOM2ab3fsF9khlKuPpqAo1bK
3QijR/L6Ug+WHonWe9MrzBWVsBwrMZ6ABBtAN9cqD4vEyL8OFmQqU6zYEe7MELqx
FeGbhW74/+Ni4Q7EWWKQDM3VY+TMFF4wwxZkNKpdogIzah+C1Xfg7IPzuAv+GpE2
O92PAkqTKUotWQm49eetSHqJh7nZn9qCd0qszB0m4IZ5sVPyL8DlU+a6yzpjNNPd
VrmSNYWIQ45yHND1SiltWYR+iyhtZiTrOTRI/s5sgCwJdTgOuF+TgKN4ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1kCdjlRXQqeFggMMTdQqg9gS5iMB8GA1UdIwQY
MBaAFNM2fbo6IgBg5n1OxoCw+Z8keocsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2It
NWNhNWJmNjdlNjlkLzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2ItNWNhNWJmNjdlNjlk
LzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDL24dWF
ppMqMQSenJq7Pivj0M1IAqWTX3FZWTnAfud9dx5V4i8syztRNJIb2kSSzvACUbJl
4d04SRoHLeAH9iH2Hc9AhKReWovrx8PcoqUkaLX3f8+7H5a08ou9hcmbXWLS5FlW
DNK4l1mM6gLuLYpWGSCtU+9xUYfhXYeYdFwK2WP8BQ24kTtZuoi+iHbpSZIf3Y3d
6SeTghLOSTy3ZXoJoBI8Wz1yu+kXu3wpNlFD1JZ0jLgZ/6Fz2DBAmwHiBoIcujkZ
4bP5OMYumhX9mqwAJtm0UIRnZDer1JpfNzzdPpxxquuok8qfYV3B9m0viPp82sYt
wNNYxITMFxQ0eg==
-----END CERTIFICATE-----
Generated at Fri May 17 05:29:56 2024 by rpki-client on console-fra.rpki-client.org