Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File:                     1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier:          KHVJblsA3bcQt5t2fAcx5Q6XEbG2cDUcjM3fV+YlkgM=
Subject key identifier:   32:46:A6:9A:EC:33:72:C2:A6:51:53:C5:E8:6E:45:64:01:90:FC:A4
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer:       /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial:       018F8E5D19E62A70955AF5B07129B6CD82DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number:          0E1D
Signing time:             Sun 19 May 2024 01:00:17 +0000
Manifest this update:     Sun 19 May 2024 01:00:17 +0000
Manifest next update:     Mon 20 May 2024 01:00:17 +0000
Files and hashes:         1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: o63q+rd9dBWroIJpSxX3ZnxQchIkcHfIcz3Ka+/KSjo=)
                          2: bchsf5nrj1Udv_J5JOU4AokJjK4.roa (hash: 3jvr/yWfPRGWeT1eeF7boHSnP6Iu6hDM4ssqAdaQR64=)
                          3: jLl8nETSHsMZza9ZXEpHXGkmhOk.roa (hash: kSxujOVvA85JDX7QwUsLQZjCoBuxoZ93JUw4XKh0T6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:5d:19:e6:2a:70:95:5a:f5:b0:71:29:b6:cd:82:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
        Validity
            Not Before: May 19 01:00:17 2024 GMT
            Not After : May 20 01:00:17 2024 GMT
        Subject: CN=3246a69aec3372c2a65153c5e86e45640190fca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:83:4c:cb:ac:e8:b7:77:5b:7d:45:ae:01:94:
                    5e:de:3c:85:d3:96:af:8e:c9:be:76:87:31:38:6c:
                    df:b1:12:9f:1d:e5:a3:2a:b4:eb:2d:77:09:03:b1:
                    20:50:a9:43:d4:12:37:b5:5c:9b:8d:07:aa:fb:f4:
                    e3:a1:a1:06:1d:3d:87:07:63:c6:ca:45:66:08:9c:
                    ad:a0:b6:32:ac:08:ef:67:df:cf:10:b5:75:31:0c:
                    54:2e:0e:b6:2e:3a:2c:03:6e:d5:61:db:00:32:6b:
                    b9:e8:42:59:5f:dc:be:82:2d:eb:c5:da:c3:22:01:
                    ac:6b:e2:c7:37:b0:20:3c:1a:73:8e:c4:f5:f2:fd:
                    a3:47:e3:e7:6e:74:59:04:64:b5:aa:41:4d:48:0b:
                    87:2e:f1:e7:3b:e2:12:7d:90:ca:50:25:c7:1e:5d:
                    6c:09:8a:35:7a:81:f8:06:d5:90:20:fe:86:35:06:
                    f8:5a:6b:13:2a:f0:f7:e6:62:72:96:3a:f7:34:b1:
                    7f:04:f4:90:72:bb:f4:f1:eb:4f:75:70:4a:e9:3a:
                    d1:dc:27:4f:10:98:69:f9:83:cf:5d:b7:40:ed:99:
                    5b:40:2c:73:87:7a:fc:a6:1e:92:e6:e3:d6:da:81:
                    89:19:32:31:63:da:03:93:7c:eb:46:34:d3:41:29:
                    97:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:46:A6:9A:EC:33:72:C2:A6:51:53:C5:E8:6E:45:64:01:90:FC:A4
            X509v3 Authority Key Identifier:
                keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:30:94:41:48:57:d8:6c:84:0f:46:99:1e:ea:11:13:8d:e9:
         fa:87:e1:6e:ca:81:1e:ed:20:66:a9:26:f5:ed:e0:08:fe:04:
         b5:6a:28:78:1d:41:e8:55:ef:8b:e6:28:47:6f:ba:b0:b3:55:
         c8:51:20:9f:6c:f9:c5:1b:d2:4b:80:96:6d:21:da:35:63:1c:
         e0:66:e6:ed:91:b7:99:42:25:d7:6b:62:e2:09:23:9a:78:84:
         bd:cb:ce:7c:a1:ad:61:3e:5f:fa:79:07:de:db:ab:d0:0a:2f:
         de:b1:19:18:6f:7b:5a:17:d0:17:a6:8e:b1:91:0e:2b:f4:4f:
         f0:be:16:54:c6:2e:c1:a6:16:6f:9c:74:29:64:c8:ea:f4:6e:
         b3:1a:af:04:20:fb:8b:ce:24:41:bd:1d:f8:2d:16:ed:56:5d:
         dd:ad:52:5b:e3:d6:64:af:fc:26:3a:b7:4c:70:b1:03:85:1d:
         b7:ed:15:ca:ab:a3:f3:d2:f0:9a:73:87:e7:59:e2:7a:6c:df:
         e4:48:97:fa:b9:19:80:58:9d:f4:b4:98:52:7a:04:6a:c8:ab:
         f6:ce:54:f1:e8:78:d4:12:18:d8:a5:c1:f3:9a:7a:c1:cd:e7:
         06:88:08:06:dd:90:d6:d1:91:3b:0e:a1:a0:04:fb:88:e1:58:
         ed:83:52:e9
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY+OXRnmKnCVWvWwcSm2zYLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjRhMWY3Y2E0MGI1ODExNmU2YmM4MzhlMDYyZjljNzEy
MjI4YTQwHhcNMjQwNTE5MDEwMDE3WhcNMjQwNTIwMDEwMDE3WjAzMTEwLwYDVQQD
EygzMjQ2YTY5YWVjMzM3MmMyYTY1MTUzYzVlODZlNDU2NDAxOTBmY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYNMy6zot3dbfUWuAZRe3jyF05av
jsm+docxOGzfsRKfHeWjKrTrLXcJA7EgUKlD1BI3tVybjQeq+/TjoaEGHT2HB2PG
ykVmCJytoLYyrAjvZ9/PELV1MQxULg62LjosA27VYdsAMmu56EJZX9y+gi3rxdrD
IgGsa+LHN7AgPBpzjsT18v2jR+PnbnRZBGS1qkFNSAuHLvHnO+ISfZDKUCXHHl1s
CYo1eoH4BtWQIP6GNQb4WmsTKvD35mJyljr3NLF/BPSQcrv08etPdXBK6TrR3CdP
EJhp+YPPXbdA7ZlbQCxzh3r8ph6S5uPW2oGJGTIxY9oDk3zrRjTTQSmXcQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDJGpprsM3LCplFTxehuRWQBkPykMB8GA1UdIwQY
MBaAFPpkoffKQLWBFua8g44GL5xxIiikMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tU2g5OHBBdFlFVzVyeURqZ1l2bkhFaUtLUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvYmEyN2ZiLTI1NTAtNDlhZC1iMGVm
LTViODNkMGU5NjAxMi8xLzEtbVNoOThwQXRZRVc1cnlEamdZdm5IRWlLS1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNmL2JhMjdmYi0yNTUwLTQ5YWQtYjBlZi01YjgzZDBlOTYw
MTIvMS8xLW1TaDk4cEF0WUVXNXJ5RGpnWXZuSEVpS0tRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjCU
QUhX2GyED0aZHuoRE43p+ofhbsqBHu0gZqkm9e3gCP4EtWooeB1B6FXvi+YoR2+6
sLNVyFEgn2z5xRvSS4CWbSHaNWMc4Gbm7ZG3mUIl12ti4gkjmniEvcvOfKGtYT5f
+nkH3tur0Aov3rEZGG97WhfQF6aOsZEOK/RP8L4WVMYuwaYWb5x0KWTI6vRusxqv
BCD7i84kQb0d+C0W7VZd3a1SW+PWZK/8Jjq3THCxA4Udt+0Vyquj89LwmnOH51ni
emzf5EiX+rkZgFid9LSYUnoEasir9s5U8eh41BIY2KXB85p6wc3nBogIBt2Q1tGR
Ow6hoAT7iOFY7YNS6Q==
-----END CERTIFICATE-----
Generated at Sun May 19 02:04:27 2024 by rpki-client on console-ams.rpki-client.org