Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File:                     9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier:          e5W8Vax6Mi3l38ooJoxmqdBzxKbRWEsotf4aiz1NAwU=
Subject key identifier:   6F:A4:50:E8:6D:A9:25:6A:86:3F:1D:12:90:CF:55:2B:81:54:D6:ED
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer:       /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial:       018F3A0B05A3AD8A0D57B57E986F8B6461DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number:          052E
Signing time:             Thu 02 May 2024 16:02:31 +0000
Manifest this update:     Thu 02 May 2024 16:02:31 +0000
Manifest next update:     Fri 03 May 2024 16:02:31 +0000
Files and hashes:         1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: 10xYg98247J5FHoielXKNin18iB283Q9TVSXQEE5iQo=)
                          2: AVahNdgwiQLmdKWemaaACz9yjxA.roa (hash: AzpeWoHChE4/StWOGUGs5GxX++TL4TlzQAM8MWbU8hI=)
                          3: iWDAL5joMMK2gao5D0FsWD4m87o.roa (hash: 5mFIDKXSsXzr48s1bfmUfykRWEmSHE3napDx07/fhe0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0b:05:a3:ad:8a:0d:57:b5:7e:98:6f:8b:64:61:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
        Validity
            Not Before: May  2 16:02:31 2024 GMT
            Not After : May  3 16:02:31 2024 GMT
        Subject: CN=6fa450e86da9256a863f1d1290cf552b8154d6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b7:fd:1a:18:2a:ca:ad:25:94:59:8c:03:ee:
                    8e:91:45:03:61:09:3c:f8:9a:56:ba:2e:2d:e0:92:
                    a4:4f:01:12:78:6c:84:58:ea:be:7a:08:2d:69:7e:
                    46:37:15:f1:ec:82:8d:c1:a0:72:6b:ae:ac:9f:96:
                    69:bf:fe:04:0b:93:fb:3d:49:8c:99:21:1c:72:21:
                    9c:74:fb:97:b0:47:06:1d:0e:c4:22:bc:0f:e5:fd:
                    9f:92:0e:74:fe:a7:c6:96:74:c0:ea:fc:f5:62:98:
                    4a:e2:cf:c9:b0:4b:87:ae:bd:e8:ac:27:cd:ec:6c:
                    a8:db:99:23:51:ab:0a:7b:5a:97:ac:29:db:c3:0c:
                    a6:8a:f8:c7:31:b7:73:37:81:03:61:26:4d:07:1e:
                    4f:7c:05:60:a8:ff:e3:d0:3a:ea:f0:8d:7b:ce:cc:
                    e6:cc:67:c9:91:dd:bf:0e:93:d5:8e:8e:00:af:72:
                    91:53:08:c0:01:a6:14:1e:d4:fe:9d:02:d3:77:79:
                    ea:fa:d2:d7:39:8c:6b:28:88:bc:77:dc:15:24:44:
                    d1:70:a0:02:22:40:e4:24:d9:c9:6b:14:66:87:17:
                    e0:33:1e:03:25:cc:70:f0:38:41:a0:c9:c4:4d:f4:
                    04:02:ae:fe:24:58:54:92:f1:7d:c6:e8:fd:16:11:
                    26:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A4:50:E8:6D:A9:25:6A:86:3F:1D:12:90:CF:55:2B:81:54:D6:ED
            X509v3 Authority Key Identifier:
                keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ac:48:f0:20:fe:1b:18:e1:f8:78:95:ba:f6:bf:18:06:82:
         d4:49:f0:7c:00:ec:01:cc:b9:b2:f2:dc:e3:61:47:fe:a3:f5:
         ac:4b:28:3b:4e:0c:1d:63:23:33:85:25:a8:6a:8d:1f:3f:c3:
         bc:ac:0e:1a:9c:23:64:ab:c1:03:91:7c:c7:55:0d:5c:e7:46:
         a1:2e:19:4a:26:29:8e:77:38:44:f2:e4:bf:06:39:71:d2:1e:
         fc:32:d3:85:cd:6b:16:1b:cd:52:61:2e:33:f6:d7:60:61:88:
         95:ec:72:b2:25:40:2d:3e:ab:b8:e1:6c:bf:69:44:4c:3b:ee:
         42:e2:6a:42:24:cb:b8:c4:f4:e8:53:18:e3:5a:eb:aa:8c:40:
         30:df:ad:28:8d:5c:e5:0c:66:8e:19:3d:d5:d9:6f:d0:63:c5:
         4a:92:6e:0d:d4:02:a8:a4:a1:a7:06:30:4a:f4:e8:89:9b:3f:
         8a:23:6a:c3:35:eb:4b:c2:b9:d7:a9:17:14:ff:02:31:48:54:
         6f:72:5b:8e:08:ed:07:0c:d1:18:f6:e9:2d:16:6c:46:7f:ad:
         58:ad:9f:3c:ea:f5:3e:a0:cf:81:c2:ba:de:d5:13:1c:6e:42:
         e6:39:e0:06:54:d2:21:3c:78:90:b8:2e:ad:3a:b4:50:44:78:
         24:26:1d:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY86CwWjrYoNV7V+mG+LZGHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NTdjMDIwY2RjMjJiNjhkYTI2YTQ2OWY2ZmZhNmI0NDgz
NzBkMWQwHhcNMjQwNTAyMTYwMjMxWhcNMjQwNTAzMTYwMjMxWjAzMTEwLwYDVQQD
Eyg2ZmE0NTBlODZkYTkyNTZhODYzZjFkMTI5MGNmNTUyYjgxNTRkNmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLf9Ghgqyq0llFmMA+6OkUUDYQk8
+JpWui4t4JKkTwESeGyEWOq+eggtaX5GNxXx7IKNwaBya66sn5Zpv/4EC5P7PUmM
mSEcciGcdPuXsEcGHQ7EIrwP5f2fkg50/qfGlnTA6vz1YphK4s/JsEuHrr3orCfN
7Gyo25kjUasKe1qXrCnbwwymivjHMbdzN4EDYSZNBx5PfAVgqP/j0Drq8I17zszm
zGfJkd2/DpPVjo4Ar3KRUwjAAaYUHtT+nQLTd3nq+tLXOYxrKIi8d9wVJETRcKAC
IkDkJNnJaxRmhxfgMx4DJcxw8DhBoMnETfQEAq7+JFhUkvF9xuj9FhEmgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+kUOhtqSVqhj8dEpDPVSuBVNbtMB8GA1UdIwQY
MBaAFPRXwCDNwito2iakafb/prRINw0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAt
N2JhZmQ0M2U3ODYyLzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAtN2JhZmQ0M2U3ODYy
LzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqxI8CD+
Gxjh+HiVuva/GAaC1EnwfADsAcy5svLc42FH/qP1rEsoO04MHWMjM4UlqGqNHz/D
vKwOGpwjZKvBA5F8x1UNXOdGoS4ZSiYpjnc4RPLkvwY5cdIe/DLThc1rFhvNUmEu
M/bXYGGIlexysiVALT6ruOFsv2lETDvuQuJqQiTLuMT06FMY41rrqoxAMN+tKI1c
5Qxmjhk91dlv0GPFSpJuDdQCqKShpwYwSvToiZs/iiNqwzXrS8K516kXFP8CMUhU
b3JbjgjtBwzRGPbpLRZsRn+tWK2fPOr1PqDPgcK63tUTHG5C5jngBlTSITx4kLgu
rTq0UER4JCYdEw==
-----END CERTIFICATE-----
Generated at Thu May 2 19:47:11 2024 by rpki-client on console-fra.rpki-client.org