Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
File:                     fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json)
Hash identifier:          0hLW2vWu9ihp2FVZAhCjMQQEkk2+XD7zJrB2klW81Bk=
Subject key identifier:   86:15:67:36:06:24:98:8A:E3:3B:23:CB:5F:F9:7B:66:1E:A4:12:45
Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
Certificate issuer:       /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Certificate serial:       018F8891F365AC034AB612A8B0EEE227CDFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
Manifest number:          0F4E
Signing time:             Fri 17 May 2024 22:00:17 +0000
Manifest this update:     Fri 17 May 2024 22:00:17 +0000
Manifest next update:     Sat 18 May 2024 22:00:17 +0000
Files and hashes:         1: GPVQKiv2kfwlhUy1TzF5EG4QNeE.roa (hash: TKvwLPVWyOOSs37hoySa0NtV0RTszkfh655OBWKFDSo=)
                          2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: FpF6WS2KsSXFSXyvpKouqn4ZL9nP6MgsqfJD2Lqcz2w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:f3:65:ac:03:4a:b6:12:a8:b0:ee:e2:27:cd:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
        Validity
            Not Before: May 17 22:00:17 2024 GMT
            Not After : May 18 22:00:17 2024 GMT
        Subject: CN=861567360624988ae33b23cb5ff97b661ea41245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b0:a1:b4:0a:0e:b9:d9:05:bb:50:9e:50:cc:
                    25:03:b7:a5:54:4b:43:9b:0f:75:04:71:5c:2b:a9:
                    65:0e:2f:b4:87:ba:0f:56:80:cf:64:91:99:ed:4e:
                    40:39:65:c4:f1:33:e0:2e:74:73:04:1e:90:c2:16:
                    2c:bb:c6:8d:d3:35:b0:7e:7e:e6:b6:c9:71:a0:b1:
                    7d:52:ab:c6:a1:dd:64:68:61:b9:93:ac:a3:18:6f:
                    e4:20:e1:8c:51:c0:cd:d0:b7:a6:9e:35:37:fb:98:
                    b0:c8:33:f2:e3:4f:44:d0:e6:50:a9:58:9a:f7:01:
                    7f:6e:00:4f:3d:63:bf:4d:dc:f4:18:4c:d2:98:86:
                    cd:8e:50:c9:43:7b:60:2c:e0:e7:71:12:2b:b2:f2:
                    64:2c:18:99:69:25:9a:7a:22:34:27:92:97:db:2d:
                    ed:9d:ad:48:29:e4:08:e3:82:0c:b8:86:2d:ca:92:
                    6f:f4:67:e3:fc:1a:5b:31:4b:91:94:ca:9b:c4:b1:
                    dc:f6:3d:d9:86:94:97:d1:a4:3f:fe:f9:ba:4d:89:
                    c8:6c:82:16:8d:dc:fd:b1:bc:c3:23:c8:59:85:f9:
                    b5:73:2b:cf:4c:90:fe:c9:28:98:40:49:b1:82:18:
                    22:00:85:49:7a:c6:f0:2e:99:70:db:dd:8e:01:bc:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:15:67:36:06:24:98:8A:E3:3B:23:CB:5F:F9:7B:66:1E:A4:12:45
            X509v3 Authority Key Identifier:
                keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:41:f5:06:9b:9b:26:32:2f:a8:b2:8c:e5:d8:1f:07:8f:3e:
         ad:17:7f:58:39:46:b1:1d:cf:31:c4:95:28:47:8a:52:80:7e:
         95:f9:79:d8:a7:b0:a9:ef:f9:bf:e9:9e:1b:f7:98:c5:fa:b8:
         d0:48:47:76:00:ba:25:43:3c:5f:ab:f6:8d:50:d1:f7:82:b2:
         55:f0:10:c2:f8:4a:a0:6a:3b:d7:2c:43:63:87:aa:40:4a:e9:
         bb:a9:91:3f:0d:0d:fc:a5:35:e6:39:b0:ff:20:b5:f8:a0:a6:
         9d:03:26:24:7f:c8:9f:ea:85:e2:47:49:e5:ec:f1:af:4e:f2:
         70:13:73:92:6c:89:e3:2d:9d:39:db:92:aa:fc:99:af:00:9b:
         d1:32:e4:fb:78:cd:a5:af:1c:6e:d3:56:e1:da:c0:c1:05:cc:
         9e:4e:03:9c:5e:15:0e:22:28:af:1c:87:b0:b6:f7:a5:95:b2:
         e0:64:f1:b1:80:3b:67:28:49:d7:f4:71:c2:8e:6b:2f:57:9d:
         d2:b1:8d:c8:9c:54:36:a5:20:f5:3a:27:26:40:39:0f:61:b5:
         d9:a0:81:ba:f5:93:8e:e7:c4:cc:7c:ff:b9:4d:7f:69:19:b9:
         f3:ae:ef:c8:17:38:49:64:b5:bb:2e:11:e5:51:8d:e6:c3:a8:
         ee:66:47:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkfNlrANKthKosO7iJ83/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMWQwZTMyOThiZWQzYTdmMzlmYjNiMjQ0ZWQ5MThiZjZj
NGQ3YmYwHhcNMjQwNTE3MjIwMDE3WhcNMjQwNTE4MjIwMDE3WjAzMTEwLwYDVQQD
Eyg4NjE1NjczNjA2MjQ5ODhhZTMzYjIzY2I1ZmY5N2I2NjFlYTQxMjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrChtAoOudkFu1CeUMwlA7elVEtD
mw91BHFcK6llDi+0h7oPVoDPZJGZ7U5AOWXE8TPgLnRzBB6QwhYsu8aN0zWwfn7m
tslxoLF9UqvGod1kaGG5k6yjGG/kIOGMUcDN0LemnjU3+5iwyDPy409E0OZQqVia
9wF/bgBPPWO/Tdz0GEzSmIbNjlDJQ3tgLODncRIrsvJkLBiZaSWaeiI0J5KX2y3t
na1IKeQI44IMuIYtypJv9Gfj/BpbMUuRlMqbxLHc9j3ZhpSX0aQ//vm6TYnIbIIW
jdz9sbzDI8hZhfm1cyvPTJD+ySiYQEmxghgiAIVJesbwLplw292OAbyvvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYVZzYGJJiK4zsjy1/5e2YepBJFMB8GA1UdIwQY
MBaAFH8dDjKYvtOn85+zskTtkYv2xNe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lNjUwNmUtNzY4NS00OGU3LWE1ODMt
MjFhZjNkZWU4ZWU5LzEvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9lNjUwNmUtNzY4NS00OGU3LWE1ODMtMjFhZjNkZWU4ZWU5
LzEvZngwT01waS0wNmZ6bjdPeVJPMlJpX2JFMTc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkH1Bpub
JjIvqLKM5dgfB48+rRd/WDlGsR3PMcSVKEeKUoB+lfl52Kewqe/5v+meG/eYxfq4
0EhHdgC6JUM8X6v2jVDR94KyVfAQwvhKoGo71yxDY4eqQErpu6mRPw0N/KU15jmw
/yC1+KCmnQMmJH/In+qF4kdJ5ezxr07ycBNzkmyJ4y2dOduSqvyZrwCb0TLk+3jN
pa8cbtNW4drAwQXMnk4DnF4VDiIorxyHsLb3pZWy4GTxsYA7ZyhJ1/Rxwo5rL1ed
0rGNyJxUNqUg9TonJkA5D2G12aCBuvWTjufEzHz/uU1/aRm5867vyBc4SWS1uy4R
5VGN5sOo7mZHbA==
-----END CERTIFICATE-----
Generated at Sat May 18 00:37:43 2024 by rpki-client on console-fra.rpki-client.org