Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
File:                     0YiojVldwu2ML5I5ZFxOjF5zfTE.mft (raw, json)
Hash identifier:          nyLq52HuJWpebhJ9kuyy+V3bo6odtd1lnfeRLbYz7i8=
Subject key identifier:   8B:14:46:B1:35:92:D1:C2:C2:2D:F7:A8:67:3E:8C:D3:78:66:A0:14
Authority key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Certificate issuer:       /CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Certificate serial:       018F4E3581A35C185D6E7B6D304A9A6920D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
Manifest number:          0DA1
Signing time:             Mon 06 May 2024 14:01:20 +0000
Manifest this update:     Mon 06 May 2024 14:01:20 +0000
Manifest next update:     Tue 07 May 2024 14:01:20 +0000
Files and hashes:         1: 0YiojVldwu2ML5I5ZFxOjF5zfTE.crl (hash: UAkhBen11KHtVgMPKfG07xZ159bbHPxxGBMqsSEBSdE=)
                          2: KSbfT1ONWW_HMUDTAX-obz0PFXI.roa (hash: VzleBWGAw+yd4HzAbG7MAE5SuTRuSnGo7F8GgskNvPI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 14:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:35:81:a3:5c:18:5d:6e:7b:6d:30:4a:9a:69:20:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
        Validity
            Not Before: May  6 14:01:20 2024 GMT
            Not After : May  7 14:01:20 2024 GMT
        Subject: CN=8b1446b13592d1c2c22df7a8673e8cd37866a014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:d2:3b:8c:39:2c:5a:3c:0f:35:6c:54:8f:
                    af:b1:c3:17:53:cb:71:96:d7:d5:de:fb:25:22:ea:
                    09:3e:f5:f1:da:73:1b:ad:00:36:76:e0:87:75:9c:
                    68:fe:02:81:1f:56:d8:31:29:ed:1a:06:94:0b:20:
                    e3:0b:dc:24:cc:0c:27:70:85:27:4a:bd:a1:b5:ba:
                    c6:f4:2c:ad:77:75:10:a6:a6:c0:1e:3c:e0:1a:dc:
                    5d:7f:97:7c:19:fe:30:24:24:cf:e8:06:4c:79:68:
                    e6:80:7f:46:d3:e0:95:4d:9c:dd:d1:31:b6:2b:3a:
                    70:67:98:a5:bc:7a:77:11:3e:76:bf:66:68:76:e8:
                    3d:7c:cb:60:93:88:e7:3d:37:43:1f:07:9a:48:3a:
                    00:34:34:3e:e3:49:db:60:74:7b:77:dd:1e:7e:da:
                    7e:27:ae:d8:3b:fa:fa:a0:f1:34:fc:72:97:75:ee:
                    94:da:5a:6a:63:9b:5a:91:85:d9:79:3f:e9:ac:8e:
                    40:63:34:ee:97:7d:f8:6c:40:b0:3b:10:0c:f7:f8:
                    ea:7c:3c:35:85:c1:90:97:a0:ad:5b:e6:eb:a2:09:
                    e7:94:7e:04:9e:16:80:26:10:6c:4a:46:bb:6e:e9:
                    97:02:6a:2d:f2:35:3a:13:d0:0d:0f:c3:20:7b:bd:
                    f8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:14:46:B1:35:92:D1:C2:C2:2D:F7:A8:67:3E:8C:D3:78:66:A0:14
            X509v3 Authority Key Identifier:
                keyid:D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:b0:59:56:33:7e:96:0c:d0:47:44:ab:f5:33:8e:4f:76:99:
         7a:ba:50:9f:d2:ed:f8:28:2c:76:c4:cf:2b:57:4c:8c:dc:3f:
         78:bc:c6:fb:07:02:d8:f9:c8:55:96:88:74:d1:77:77:95:ba:
         36:43:a2:f6:4b:dc:d1:26:de:21:90:cc:c5:90:01:c6:8b:eb:
         da:57:3c:cf:12:bf:9b:f3:82:49:b8:51:bc:57:8e:0a:3a:1b:
         6c:0e:7f:63:31:e8:6c:60:4f:11:e0:9d:eb:30:1d:0f:35:c1:
         a7:86:45:5e:0a:62:89:22:46:86:ee:18:30:e8:e9:78:0e:bb:
         47:4a:2e:08:63:19:f2:f5:30:84:42:6f:ce:b8:fe:19:f7:11:
         8b:72:ab:e9:04:52:0f:3f:40:c5:35:6f:48:be:75:30:9a:40:
         53:93:12:b5:9b:75:5c:a3:77:b3:10:cd:a4:c3:1c:26:7a:61:
         61:15:a1:3f:d0:66:90:a8:9a:9a:15:5f:1c:ac:64:da:3f:80:
         c0:b7:7e:cc:5d:11:2f:34:54:fe:dc:5d:26:44:4d:67:7a:15:
         77:18:5e:d5:05:f8:1e:33:21:43:be:24:42:2c:00:8d:38:9c:
         26:8b:c5:82:56:97:51:68:ce:23:d0:67:33:0c:be:95:5f:75:
         ad:df:68:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ONYGjXBhdbnttMEqaaSDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODhhODhkNTk1ZGMyZWQ4YzJmOTIzOTY0NWM0ZThjNWU3
MzdkMzEwHhcNMjQwNTA2MTQwMTIwWhcNMjQwNTA3MTQwMTIwWjAzMTEwLwYDVQQD
Eyg4YjE0NDZiMTM1OTJkMWMyYzIyZGY3YTg2NzNlOGNkMzc4NjZhMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNDSO4w5LFo8DzVsVI+vscMXU8tx
ltfV3vslIuoJPvXx2nMbrQA2duCHdZxo/gKBH1bYMSntGgaUCyDjC9wkzAwncIUn
Sr2htbrG9Cytd3UQpqbAHjzgGtxdf5d8Gf4wJCTP6AZMeWjmgH9G0+CVTZzd0TG2
KzpwZ5ilvHp3ET52v2Zodug9fMtgk4jnPTdDHweaSDoANDQ+40nbYHR7d90eftp+
J67YO/r6oPE0/HKXde6U2lpqY5takYXZeT/prI5AYzTul334bECwOxAM9/jqfDw1
hcGQl6CtW+brognnlH4EnhaAJhBsSka7bumXAmot8jU6E9AND8Mge734NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsURrE1ktHCwi33qGc+jNN4ZqAUMB8GA1UdIwQY
MBaAFNGIqI1ZXcLtjC+SOWRcToxec30xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlpb2pWbGR3dTJNTDVJNVpGeE9qRjV6ZlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wY2VlMTktYWYwZi00ZTkzLTgwMTAt
ZDk1M2Y0ODU0NzU3LzEvMFlpb2pWbGR3dTJNTDVJNVpGeE9qRjV6ZlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wY2VlMTktYWYwZi00ZTkzLTgwMTAtZDk1M2Y0ODU0NzU3
LzEvMFlpb2pWbGR3dTJNTDVJNVpGeE9qRjV6ZlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvrBZVjN+
lgzQR0Sr9TOOT3aZerpQn9Lt+CgsdsTPK1dMjNw/eLzG+wcC2PnIVZaIdNF3d5W6
NkOi9kvc0SbeIZDMxZABxovr2lc8zxK/m/OCSbhRvFeOCjobbA5/YzHobGBPEeCd
6zAdDzXBp4ZFXgpiiSJGhu4YMOjpeA67R0ouCGMZ8vUwhEJvzrj+GfcRi3Kr6QRS
Dz9AxTVvSL51MJpAU5MStZt1XKN3sxDNpMMcJnphYRWhP9BmkKiamhVfHKxk2j+A
wLd+zF0RLzRU/txdJkRNZ3oVdxhe1QX4HjMhQ74kQiwAjTicJovFglaXUWjOI9Bn
Mwy+lV91rd9oDw==
-----END CERTIFICATE-----
Generated at Mon May 6 23:06:58 2024 by rpki-client on console-ams.rpki-client.org