Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
File:                     5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json)
Hash identifier:          TFcRj6fkX67LZjp4KyzMNA8IPE1vsJ+3kwKoe85bKfg=
Subject key identifier:   35:6D:B2:5A:6A:C9:3C:42:52:4F:0E:52:E3:97:27:D3:1A:2C:14:56
Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
Certificate issuer:       /CN=e58069748748e9aebd7be40587d8140efde55b6b
Certificate serial:       018F40E7CF720C386C75AA9DD7DF349109F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
Manifest number:          10E5
Signing time:             Sat 04 May 2024 00:01:24 +0000
Manifest this update:     Sat 04 May 2024 00:01:24 +0000
Manifest next update:     Sun 05 May 2024 00:01:24 +0000
Files and hashes:         1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: eMlbHh1WEETGPeCGz8djoZY3OYytpasjnlcWCRjfuB0=)
                          2: UWPX1C1pYJapHWY_bOOSsesilZo.roa (hash: 9QdQtG1yBNBMUc5+s34FHpgXaUYZ7BxL5SshozmA09w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:e7:cf:72:0c:38:6c:75:aa:9d:d7:df:34:91:09:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b
        Validity
            Not Before: May  4 00:01:24 2024 GMT
            Not After : May  5 00:01:24 2024 GMT
        Subject: CN=356db25a6ac93c42524f0e52e39727d31a2c1456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2d:48:88:81:22:cc:65:a7:06:47:88:3c:2b:
                    49:d6:7c:5e:55:30:47:66:d0:34:fd:6e:3d:9f:88:
                    d5:68:5e:c5:44:2c:65:de:d7:d9:a8:4d:4f:d5:44:
                    16:0e:04:d5:a7:aa:56:15:4e:d2:c3:6d:0f:40:4d:
                    d3:66:53:a7:3e:22:63:32:76:fa:3f:95:31:c3:1d:
                    e4:f9:bc:03:24:c7:1e:3d:db:b4:53:e4:ef:ff:c8:
                    db:41:32:98:66:d2:7f:81:e7:34:78:12:1e:30:50:
                    49:c6:c6:31:9c:22:e4:e8:b5:1b:a9:9c:a2:60:67:
                    b0:9a:0b:75:de:8f:8c:4a:d3:28:55:3d:8a:e8:16:
                    0d:ce:d3:d2:17:22:f6:af:20:f9:4d:1b:6f:54:3f:
                    65:c5:52:58:7d:d5:36:70:b1:5e:41:d5:f3:b4:81:
                    2b:4e:2a:fb:9a:bd:cb:98:0f:bf:a4:a0:50:af:19:
                    38:47:d4:63:d3:d4:85:b9:6e:9a:38:d1:88:fe:f4:
                    61:49:1b:30:b0:d9:29:f9:89:4a:72:fd:7a:65:91:
                    a9:e0:5a:dd:3d:0a:69:95:0f:d9:af:ea:fb:c4:2d:
                    62:8a:6f:61:30:2f:b3:68:f9:e3:ea:ed:4b:11:ab:
                    5f:42:12:d3:86:1f:7e:5d:62:ad:76:23:0d:a1:e3:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6D:B2:5A:6A:C9:3C:42:52:4F:0E:52:E3:97:27:D3:1A:2C:14:56
            X509v3 Authority Key Identifier:
                keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9e:7d:33:01:08:3a:94:6b:90:49:d3:a9:a6:bb:5d:5a:5f:
         92:8f:69:11:c9:dd:ab:16:47:32:16:d2:ce:ad:21:8f:42:7c:
         23:0a:08:72:42:8e:ad:68:a6:21:b4:fb:50:04:d0:e4:7a:77:
         df:c8:9e:a6:35:2d:bc:ed:57:d4:6e:c7:9e:d7:4c:6a:53:f0:
         0e:f6:c0:da:b4:22:df:1f:bc:55:e9:e1:ab:29:11:9b:2b:ac:
         51:03:24:ab:d9:7a:1c:56:fa:1e:80:6e:17:61:de:63:db:44:
         68:9b:9c:0e:9d:88:e7:26:7a:27:f8:59:33:94:d9:40:41:61:
         61:2f:46:fe:36:5e:54:bf:a7:46:b0:f9:ee:58:de:a1:90:6f:
         0c:84:20:d6:54:56:93:f1:06:a8:4a:5c:44:f1:2b:04:4f:56:
         e9:11:c0:3c:45:c5:6a:f2:7f:ee:d2:78:ea:3b:e2:97:07:87:
         cd:fb:e3:2a:3e:59:e8:c7:d4:80:ca:79:ba:06:62:45:36:e4:
         df:39:60:15:0f:95:1a:af:1b:0e:cd:74:62:69:62:d0:a7:a1:
         2d:12:91:f0:b4:5c:b9:35:11:d5:bd:4d:9b:61:b8:55:68:97:
         f6:d9:bf:5f:7c:a0:67:57:46:b9:ca:3a:b4:40:56:68:9f:e8:
         4a:2c:95:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9A589yDDhsdaqd1980kQnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODA2OTc0ODc0OGU5YWViZDdiZTQwNTg3ZDgxNDBlZmRl
NTViNmIwHhcNMjQwNTA0MDAwMTI0WhcNMjQwNTA1MDAwMTI0WjAzMTEwLwYDVQQD
EygzNTZkYjI1YTZhYzkzYzQyNTI0ZjBlNTJlMzk3MjdkMzFhMmMxNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS1IiIEizGWnBkeIPCtJ1nxeVTBH
ZtA0/W49n4jVaF7FRCxl3tfZqE1P1UQWDgTVp6pWFU7Sw20PQE3TZlOnPiJjMnb6
P5Uxwx3k+bwDJMcePdu0U+Tv/8jbQTKYZtJ/gec0eBIeMFBJxsYxnCLk6LUbqZyi
YGewmgt13o+MStMoVT2K6BYNztPSFyL2ryD5TRtvVD9lxVJYfdU2cLFeQdXztIEr
Tir7mr3LmA+/pKBQrxk4R9Rj09SFuW6aONGI/vRhSRswsNkp+YlKcv16ZZGp4Frd
PQpplQ/Zr+r7xC1iim9hMC+zaPnj6u1LEatfQhLThh9+XWKtdiMNoeMKOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVtslpqyTxCUk8OUuOXJ9MaLBRWMB8GA1UdIwQY
MBaAFOWAaXSHSOmuvXvkBYfYFA795VtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZWZkODAtN2RiMy00ZTUyLWFkNzYt
MGY4OTZlYmNhNGY4LzEvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84ZWZkODAtN2RiMy00ZTUyLWFkNzYtMGY4OTZlYmNhNGY4
LzEvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJ59MwEI
OpRrkEnTqaa7XVpfko9pEcndqxZHMhbSzq0hj0J8IwoIckKOrWimIbT7UATQ5Hp3
38iepjUtvO1X1G7HntdMalPwDvbA2rQi3x+8VenhqykRmyusUQMkq9l6HFb6HoBu
F2HeY9tEaJucDp2I5yZ6J/hZM5TZQEFhYS9G/jZeVL+nRrD57ljeoZBvDIQg1lRW
k/EGqEpcRPErBE9W6RHAPEXFavJ/7tJ46jvilweHzfvjKj5Z6MfUgMp5ugZiRTbk
3zlgFQ+VGq8bDs10Ymli0KehLRKR8LRcuTUR1b1Nm2G4VWiX9tm/X3ygZ1dGuco6
tEBWaJ/oSiyVWQ==
-----END CERTIFICATE-----
Generated at Sat May 4 02:18:50 2024 by rpki-client on console-ams.rpki-client.org