Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File:                     0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier:          +7f7ze5H/A71C9iPflZDktTi5r1B9C5ygsOg3lCwxjA=
Subject key identifier:   F6:99:66:C1:7E:FE:F6:FC:87:94:FA:F9:08:DC:7E:D5:9C:EE:D0:7B
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer:       /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial:       018F3DE7AC3F7549F85101EF7B4100C57B37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number:          10E2
Signing time:             Fri 03 May 2024 10:02:24 +0000
Manifest this update:     Fri 03 May 2024 10:02:24 +0000
Manifest next update:     Sat 04 May 2024 10:02:24 +0000
Files and hashes:         1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: OYKFSxF9HqFY5VHyFrHpiiFvl7RQ9ztfhGCjexDGxyc=)
                          2: ykpGFrLdMPBXqUwN0zjtryapTM0.roa (hash: mydnx0hnSW4RKmYfycMaAUkBf9VJQ1rcHnv5zd9iS+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e7:ac:3f:75:49:f8:51:01:ef:7b:41:00:c5:7b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
        Validity
            Not Before: May  3 10:02:24 2024 GMT
            Not After : May  4 10:02:24 2024 GMT
        Subject: CN=f69966c17efef6fc8794faf908dc7ed59ceed07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:ee:f7:fa:a8:51:9a:40:51:f2:5c:b8:c5:
                    9a:64:9a:43:be:5e:fc:8e:35:33:70:91:a3:df:e9:
                    d0:67:81:16:45:be:b1:a1:89:49:b1:72:ff:8f:30:
                    b9:c4:3d:76:01:2a:0b:a3:bc:b9:a6:cc:e4:e4:8f:
                    0f:72:f1:77:2c:1a:76:81:c3:62:ad:e8:aa:47:e2:
                    98:f9:16:ca:dd:64:6f:19:75:a0:a0:72:64:23:9c:
                    39:b7:f9:e3:cc:b8:9a:01:ce:b8:c1:cf:80:96:d9:
                    19:fb:e7:b0:c7:51:8b:2b:a3:f9:96:b8:9c:a4:08:
                    b8:33:73:e0:b9:14:f4:f3:c3:53:66:e1:c0:48:e9:
                    15:2e:63:2d:b7:ed:ec:d9:3a:4d:30:0e:90:c9:44:
                    34:3e:f8:82:7e:e2:f8:4a:b4:35:57:a0:83:12:96:
                    4e:d7:bd:d9:97:bb:27:10:d7:9a:64:75:a0:1b:34:
                    8d:12:72:cc:32:11:f4:4a:04:ad:60:0c:dc:bd:a9:
                    7c:e0:e1:3f:05:f2:eb:ed:11:97:f2:4e:19:1e:a1:
                    7c:f1:e0:47:4c:78:ef:6b:79:97:76:9b:12:44:99:
                    40:28:dd:2c:7d:cc:50:4f:69:d5:04:54:e4:75:03:
                    55:55:9a:16:7e:4a:15:b0:19:4c:c6:82:f0:db:12:
                    c4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:99:66:C1:7E:FE:F6:FC:87:94:FA:F9:08:DC:7E:D5:9C:EE:D0:7B
            X509v3 Authority Key Identifier:
                keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1d:1d:db:36:e7:b8:d4:48:3f:a0:3e:6e:09:59:a7:ed:22:
         56:d9:f3:b6:eb:e2:43:d9:5c:44:a0:10:33:d6:af:d6:02:60:
         cd:05:1c:57:39:69:fb:d4:2a:47:e6:b7:ac:9d:19:66:62:f5:
         6c:7e:90:8b:82:0f:ce:dd:83:e1:40:2c:9f:2f:54:3c:cb:75:
         a8:c8:e5:1b:6f:09:76:ce:91:fe:ce:8e:86:3b:58:7a:8f:e2:
         ff:06:fa:aa:7c:84:c2:5a:ac:d9:9e:77:96:07:9c:62:53:78:
         36:db:12:be:f9:00:c2:8f:7f:4f:3d:60:b8:0f:3d:e7:9c:89:
         c5:49:e9:0d:68:4d:28:b3:8a:9a:c4:d3:d1:2b:27:1d:16:65:
         cf:0f:e2:a3:36:73:72:88:4a:ce:7c:69:8d:ac:68:65:f2:f9:
         4c:28:26:fd:6c:46:fe:1a:9b:45:4b:c8:24:c4:43:66:69:7c:
         5a:0e:29:cb:49:a5:e9:67:aa:ba:09:2a:27:ea:f3:05:5e:d6:
         3f:b4:a8:4c:69:af:88:60:c0:69:41:6d:4d:6a:86:15:57:83:
         ee:7e:2f:21:a6:e2:d0:6e:d8:1a:e8:3c:fa:24:1d:d7:60:64:
         24:b0:bf:21:af:45:59:ce:1c:fb:e0:92:94:b5:a0:5d:d5:33:
         e2:4e:9d:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8956w/dUn4UQHve0EAxXs3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMzU4YzNlYzcxZmMxOWE2YWM5ODQ2YmFmNGRlNTk4MzYz
NTcyOTMwHhcNMjQwNTAzMTAwMjI0WhcNMjQwNTA0MTAwMjI0WjAzMTEwLwYDVQQD
EyhmNjk5NjZjMTdlZmVmNmZjODc5NGZhZjkwOGRjN2VkNTljZWVkMDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd7u9/qoUZpAUfJcuMWaZJpDvl78
jjUzcJGj3+nQZ4EWRb6xoYlJsXL/jzC5xD12ASoLo7y5pszk5I8PcvF3LBp2gcNi
reiqR+KY+RbK3WRvGXWgoHJkI5w5t/njzLiaAc64wc+AltkZ++ewx1GLK6P5lric
pAi4M3PguRT088NTZuHASOkVLmMtt+3s2TpNMA6QyUQ0PviCfuL4SrQ1V6CDEpZO
173Zl7snENeaZHWgGzSNEnLMMhH0SgStYAzcval84OE/BfLr7RGX8k4ZHqF88eBH
THjva3mXdpsSRJlAKN0sfcxQT2nVBFTkdQNVVZoWfkoVsBlMxoLw2xLEfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaZZsF+/vb8h5T6+QjcftWc7tB7MB8GA1UdIwQY
MBaAFNM1jD7HH8GaasmEa69N5Zg2NXKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMDFkNTgtNTQxOC00MjE3LTg5YWUt
MjNhODRlZWRkOTU2LzEvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kMDFkNTgtNTQxOC00MjE3LTg5YWUtMjNhODRlZWRkOTU2
LzEvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbB0d2zbn
uNRIP6A+bglZp+0iVtnztuviQ9lcRKAQM9av1gJgzQUcVzlp+9QqR+a3rJ0ZZmL1
bH6Qi4IPzt2D4UAsny9UPMt1qMjlG28Jds6R/s6OhjtYeo/i/wb6qnyEwlqs2Z53
lgecYlN4NtsSvvkAwo9/Tz1guA8955yJxUnpDWhNKLOKmsTT0SsnHRZlzw/iozZz
cohKznxpjaxoZfL5TCgm/WxG/hqbRUvIJMRDZml8Wg4py0ml6WequgkqJ+rzBV7W
P7SoTGmviGDAaUFtTWqGFVeD7n4vIabi0G7YGug8+iQd12BkJLC/Ia9FWc4c++CS
lLWgXdUz4k6dmA==
-----END CERTIFICATE-----
Generated at Fri May 3 16:44:57 2024 by rpki-client on console-ams.rpki-client.org