Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
File:                     61E1nJmJuWPpWUwZKcggNn3jIt0.mft (raw, json)
Hash identifier:          YIq68qUTkfCAvTBPeIQ+TPj6cNbjDV1Y7WwhZej2wCY=
Subject key identifier:   CA:57:BF:34:DD:D3:E8:F1:81:75:A8:66:0F:3E:1F:EB:01:1C:A2:3B
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       018F4A8F70044F65F287DAB68211BC40D61A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
Manifest number:          0ADA
Signing time:             Sun 05 May 2024 21:01:05 +0000
Manifest this update:     Sun 05 May 2024 21:01:05 +0000
Manifest next update:     Mon 06 May 2024 21:01:05 +0000
Files and hashes:         1: 61E1nJmJuWPpWUwZKcggNn3jIt0.crl (hash: LUExTZCUe+owqXtuE741sM6g/ndGudg8jNyMm+L6ycw=)
                          2: aBz0viA-Vaw4ADc1P8oiYH-xpPY.roa (hash: W1eZXQiVascglNrvXdANSxP7jBkBXYXKQNoeYKfyTBM=)
                          3: m2zFhaaZOjme0sH-TPAuBsNRa_E.roa (hash: +uT7qVFvJ5QydpoTHYWd7MCcbSfLPeyWrwrmYOyXXxc=)
                          4: oNfvX77TlzBgLwKs2HidnG2vpl0.roa (hash: lOyZ5PCShyp96P23Z0w2qn9mt0wzOgRsoj1HBzeCATI=)
                          5: sb8oNDdOrSPp5l-KXN9BY9PuzQc.roa (hash: HkT9936IxjFDo2iyHWxmAi6SPCWf96cfPZJU8j5J7hE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 21:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:8f:70:04:4f:65:f2:87:da:b6:82:11:bc:40:d6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: May  5 21:01:05 2024 GMT
            Not After : May  6 21:01:05 2024 GMT
        Subject: CN=ca57bf34ddd3e8f18175a8660f3e1feb011ca23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0f:bf:43:8e:ef:84:1c:3e:29:6d:d9:79:27:
                    94:95:d8:b2:c4:81:bb:14:8c:30:39:57:c2:4c:cc:
                    6e:56:e7:fa:0d:bf:0f:bf:02:fd:48:c1:30:15:b3:
                    bf:28:49:ad:2d:29:86:49:c7:af:37:03:d1:9d:78:
                    7d:0c:64:f9:95:ee:4d:29:2b:b1:3c:c0:f1:2b:1a:
                    4a:8e:b9:21:79:b9:3f:e0:2a:47:ab:07:46:37:ac:
                    18:57:0b:4d:ea:b2:2f:55:78:a4:d4:c1:2c:85:5b:
                    a3:1b:91:4e:74:af:86:47:b3:04:7c:2b:45:0f:c5:
                    65:f4:84:35:b3:22:8f:7d:c3:84:b7:da:59:7d:a7:
                    55:26:2d:84:06:a7:75:25:52:f4:af:12:cc:70:ca:
                    64:86:c3:7b:48:be:b8:37:bd:24:e8:78:c4:9b:d1:
                    26:20:1b:39:21:8a:2d:fe:2e:c1:61:5d:8f:dd:06:
                    59:9d:d8:10:1b:b3:0e:51:06:70:71:ab:82:83:dc:
                    ba:ea:d5:55:f5:b3:e8:f7:9b:48:a7:a4:79:29:61:
                    0c:75:02:a2:f4:71:7e:47:e3:8b:7d:d1:1c:bb:55:
                    ea:38:25:08:55:fb:d4:de:ea:ef:b2:5e:07:54:ff:
                    ad:5b:f2:da:5c:0f:3f:71:4b:22:79:22:07:6b:d3:
                    4e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:57:BF:34:DD:D3:E8:F1:81:75:A8:66:0F:3E:1F:EB:01:1C:A2:3B
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:05:85:c5:1b:02:c4:c1:14:fa:d8:4c:33:f2:1c:28:84:1b:
         e5:29:76:09:83:b4:05:cc:37:b3:46:b7:e7:15:f7:01:80:ee:
         92:84:0f:81:15:7c:e8:ef:4e:ef:d7:a4:0c:24:10:f9:9f:80:
         b5:1f:56:29:71:2a:04:9f:a2:25:c1:f4:ae:1e:30:cb:7f:eb:
         dc:9a:bd:3e:88:ce:28:2d:e9:11:fc:26:63:88:33:6b:e4:7f:
         14:9b:a4:a1:a9:17:45:d2:3d:d1:81:39:ae:96:15:91:89:ae:
         77:c8:75:65:7f:a6:ec:18:8f:39:97:a1:05:3e:c9:22:a0:16:
         5f:5e:2f:70:34:45:30:35:76:3b:90:10:64:c0:7d:36:ee:54:
         27:2d:b3:55:4c:22:6c:5f:88:18:45:7f:5a:cd:fe:f5:6b:46:
         9c:fb:72:f2:f0:9d:58:ab:88:6e:3b:79:a9:96:57:be:74:4f:
         6b:97:03:c9:32:e1:a6:45:b7:86:c2:56:3c:3d:a6:84:b7:a3:
         41:ee:ee:4f:ec:a3:7a:78:f5:bb:ee:28:dc:f2:bd:99:1a:7d:
         c5:2a:cd:1a:86:50:13:00:d4:30:df:5f:e5:06:a4:e0:ac:a5:
         a4:c6:7d:93:ff:29:0b:e4:de:46:b7:73:79:8d:97:ad:2c:71:
         fb:30:7b:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Kj3AET2Xyh9q2ghG8QNYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTEzNTljOTk4OWI5NjNlOTU5NGMxOTI5YzgyMDM2N2Rl
MzIyZGQwHhcNMjQwNTA1MjEwMTA1WhcNMjQwNTA2MjEwMTA1WjAzMTEwLwYDVQQD
EyhjYTU3YmYzNGRkZDNlOGYxODE3NWE4NjYwZjNlMWZlYjAxMWNhMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA+/Q47vhBw+KW3ZeSeUldiyxIG7
FIwwOVfCTMxuVuf6Db8PvwL9SMEwFbO/KEmtLSmGScevNwPRnXh9DGT5le5NKSux
PMDxKxpKjrkhebk/4CpHqwdGN6wYVwtN6rIvVXik1MEshVujG5FOdK+GR7MEfCtF
D8Vl9IQ1syKPfcOEt9pZfadVJi2EBqd1JVL0rxLMcMpkhsN7SL64N70k6HjEm9Em
IBs5IYot/i7BYV2P3QZZndgQG7MOUQZwcauCg9y66tVV9bPo95tIp6R5KWEMdQKi
9HF+R+OLfdEcu1XqOCUIVfvU3urvsl4HVP+tW/LaXA8/cUsieSIHa9NOgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpXvzTd0+jxgXWoZg8+H+sBHKI7MB8GA1UdIwQY
MBaAFOtRNZyZiblj6VlMGSnIIDZ94yLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAt
NTlmYzczZDYwMzIyLzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAtNTlmYzczZDYwMzIy
LzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgWFxRsC
xMEU+thMM/IcKIQb5Sl2CYO0Bcw3s0a35xX3AYDukoQPgRV86O9O79ekDCQQ+Z+A
tR9WKXEqBJ+iJcH0rh4wy3/r3Jq9PojOKC3pEfwmY4gza+R/FJukoakXRdI90YE5
rpYVkYmud8h1ZX+m7BiPOZehBT7JIqAWX14vcDRFMDV2O5AQZMB9Nu5UJy2zVUwi
bF+IGEV/Ws3+9WtGnPty8vCdWKuIbjt5qZZXvnRPa5cDyTLhpkW3hsJWPD2mhLej
Qe7uT+yjenj1u+4o3PK9mRp9xSrNGoZQEwDUMN9f5Qak4KylpMZ9k/8pC+TeRrdz
eY2XrSxx+zB7KA==
-----END CERTIFICATE-----
Generated at Mon May 6 05:25:14 2024 by rpki-client on console-fra.rpki-client.org