Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
File:                     edEPco1kmadJrlkC6PqIPxrdRRc.mft (raw, json)
Hash identifier:          jBCbFVCJ7YTGTFW0GHCFWVgfUGNUh+bCW0e7EIaeXB4=
Subject key identifier:   D0:DE:E2:F4:B6:1B:DC:E7:07:F7:EC:D8:7E:1A:D7:80:B7:74:C7:5F
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Certificate issuer:       /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial:       018F8FDE13676DBFAFC88B27682712F84BB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
Manifest number:          0C9D
Signing time:             Sun 19 May 2024 08:00:46 +0000
Manifest this update:     Sun 19 May 2024 08:00:46 +0000
Manifest next update:     Mon 20 May 2024 08:00:46 +0000
Files and hashes:         1: Z5B-madcRgyHs3mgthgVCbk4nnE.roa (hash: MdOK0ucuVMsmn3iWD/LCjKYh8VNlaFCRlQ9Sgt7Jg8g=)
                          2: edEPco1kmadJrlkC6PqIPxrdRRc.crl (hash: gEvcSAHUO4SbIaQtRcZbXBKrhE+ghYxkEU7fqlRPF6Y=)
                          3: nMV7FHTmQTH2xrNw2izoaEsP9-k.roa (hash: mR8sadg5gLmaLb+Z4272P6QgRhAJrd+Tc9THWDecH2U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:de:13:67:6d:bf:af:c8:8b:27:68:27:12:f8:4b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
        Validity
            Not Before: May 19 08:00:46 2024 GMT
            Not After : May 20 08:00:46 2024 GMT
        Subject: CN=d0dee2f4b61bdce707f7ecd87e1ad780b774c75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:e5:79:e0:b0:44:39:31:47:63:25:eb:31:
                    81:cd:92:ac:c3:7a:9b:a5:2f:86:6c:73:55:2f:08:
                    ad:e6:59:b4:5a:af:4c:5c:c5:e3:f0:d1:df:b6:7e:
                    34:89:f6:ff:15:9c:51:2f:d9:83:01:18:cf:18:3c:
                    d0:73:84:0a:2c:5a:48:bf:73:33:be:11:7f:52:c4:
                    8f:86:ae:79:88:d6:ec:60:b3:3a:cd:40:f8:13:2d:
                    aa:d8:0e:5d:92:77:bf:f9:8b:57:0e:f2:c3:3e:ec:
                    2f:34:a1:f7:7f:28:53:6e:52:2b:b5:b3:ea:ff:0f:
                    41:61:81:51:e0:b8:89:fd:7b:44:69:78:36:3e:cd:
                    d2:7b:58:3e:ac:fd:d1:a1:74:0d:57:63:c3:5d:fb:
                    bd:51:d3:b9:8c:86:b1:d0:05:0f:6a:c1:4d:9e:23:
                    cc:d9:e4:61:b0:b8:31:2a:d8:26:e5:f0:43:93:aa:
                    b5:2b:f7:36:a1:8e:fd:2b:09:e8:a0:d1:00:7a:f6:
                    22:9a:0d:70:cc:5e:09:58:a2:df:01:35:1d:7e:0e:
                    6d:6d:7a:f2:1c:07:3c:43:2b:18:75:b8:d0:f7:8a:
                    20:07:88:a9:3a:ee:a0:5a:1c:fe:b5:52:72:83:ec:
                    47:5b:e8:c3:ef:c6:b1:04:bb:d4:95:56:44:ae:48:
                    88:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DE:E2:F4:B6:1B:DC:E7:07:F7:EC:D8:7E:1A:D7:80:B7:74:C7:5F
            X509v3 Authority Key Identifier:
                keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b2:ee:63:6e:b3:57:ba:0d:a2:46:5f:0e:69:41:c1:85:45:
         c8:84:38:2f:76:45:74:68:a7:20:f4:85:99:2e:24:17:a3:59:
         57:11:90:99:8f:c1:99:fc:8c:b6:7b:8c:d3:f7:77:96:84:f3:
         2b:18:33:e9:d3:05:4f:19:d3:8e:82:b3:3d:66:2a:ae:1f:46:
         bd:04:40:8d:d5:a2:3d:51:99:86:9b:84:1a:c5:33:5c:30:3b:
         8a:d8:9a:59:99:58:96:95:3e:55:98:4a:15:84:fb:87:c4:16:
         4e:2e:b9:50:7d:e3:74:3d:19:60:bb:30:c5:d7:c3:b4:5e:bf:
         f5:88:af:af:da:0f:f5:cd:45:0e:5b:38:bc:bd:39:87:47:fe:
         b4:68:fe:9e:39:a7:91:10:14:fd:fe:0d:36:9b:c5:66:c6:29:
         bd:70:57:36:89:a9:5c:e4:a7:c3:83:62:3a:10:03:b2:cc:a0:
         b9:a5:bf:38:9f:7c:bb:11:0f:90:e2:c5:2a:9f:e9:55:cf:a6:
         25:08:cd:ca:10:aa:99:93:a9:ae:94:3c:28:07:b6:bc:41:5e:
         30:fd:13:b9:31:83:f4:b4:8b:47:6d:e4:05:6b:29:8a:15:0c:
         e3:14:6d:32:c7:4f:58:42:e5:f9:6f:19:03:7c:98:af:66:ad:
         c0:55:47:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+P3hNnbb+vyIsnaCcS+EuxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDEwZjcyOGQ2NDk5YTc0OWFlNTkwMmU4ZmE4ODNmMWFk
ZDQ1MTcwHhcNMjQwNTE5MDgwMDQ2WhcNMjQwNTIwMDgwMDQ2WjAzMTEwLwYDVQQD
EyhkMGRlZTJmNGI2MWJkY2U3MDdmN2VjZDg3ZTFhZDc4MGI3NzRjNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrnleeCwRDkxR2Ml6zGBzZKsw3qb
pS+GbHNVLwit5lm0Wq9MXMXj8NHftn40ifb/FZxRL9mDARjPGDzQc4QKLFpIv3Mz
vhF/UsSPhq55iNbsYLM6zUD4Ey2q2A5dkne/+YtXDvLDPuwvNKH3fyhTblIrtbPq
/w9BYYFR4LiJ/XtEaXg2Ps3Se1g+rP3RoXQNV2PDXfu9UdO5jIax0AUPasFNniPM
2eRhsLgxKtgm5fBDk6q1K/c2oY79KwnooNEAevYimg1wzF4JWKLfATUdfg5tbXry
HAc8QysYdbjQ94ogB4ipOu6gWhz+tVJyg+xHW+jD78axBLvUlVZErkiIlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDe4vS2G9znB/fs2H4a14C3dMdfMB8GA1UdIwQY
MBaAFHnRD3KNZJmnSa5ZAuj6iD8a3UUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wYjI2NDEtYmZiNS00ZTc1LWEzZTgt
YjlmMDVlMzE1MjNhLzEvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wYjI2NDEtYmZiNS00ZTc1LWEzZTgtYjlmMDVlMzE1MjNh
LzEvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbLuY26z
V7oNokZfDmlBwYVFyIQ4L3ZFdGinIPSFmS4kF6NZVxGQmY/BmfyMtnuM0/d3loTz
Kxgz6dMFTxnTjoKzPWYqrh9GvQRAjdWiPVGZhpuEGsUzXDA7itiaWZlYlpU+VZhK
FYT7h8QWTi65UH3jdD0ZYLswxdfDtF6/9Yivr9oP9c1FDls4vL05h0f+tGj+njmn
kRAU/f4NNpvFZsYpvXBXNompXOSnw4NiOhADssyguaW/OJ98uxEPkOLFKp/pVc+m
JQjNyhCqmZOprpQ8KAe2vEFeMP0TuTGD9LSLR23kBWspihUM4xRtMsdPWELl+W8Z
A3yYr2atwFVHlA==
-----END CERTIFICATE-----
Generated at Sun May 19 14:57:34 2024 by rpki-client on console-fra.rpki-client.org