Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
File:                     AwkPrDzELxmXRVoS5kMGRjfGncM.mft (raw, json)
Hash identifier:          UeBZRCrN4149Efz3SCvgB/jEVtql04fJUz9E8GOvSdE=
Subject key identifier:   63:9C:B6:2E:39:EB:00:2B:CE:67:50:9B:01:2D:11:F5:B7:00:EB:20
Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
Certificate issuer:       /CN=03090fac3cc42f1997455a12e643064637c69dc3
Certificate serial:       018F37089683958E5955D5BA92FB08F9AD6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
Manifest number:          0689
Signing time:             Thu 02 May 2024 02:01:00 +0000
Manifest this update:     Thu 02 May 2024 02:01:00 +0000
Manifest next update:     Fri 03 May 2024 02:01:00 +0000
Files and hashes:         1: AwkPrDzELxmXRVoS5kMGRjfGncM.crl (hash: BA8YOwbpCPV4N6n/OVP0ysCIPL7Le5SGQ0VlanfeIyc=)
                          2: tZ04Wg3HE7P-MrOWA0np4QZlfcw.roa (hash: +2Y6wXqZ1BrhckfoUVfJAN6ChFzHqkIJXVvZcYqLBGk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:08:96:83:95:8e:59:55:d5:ba:92:fb:08:f9:ad:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3
        Validity
            Not Before: May  2 02:01:00 2024 GMT
            Not After : May  3 02:01:00 2024 GMT
        Subject: CN=639cb62e39eb002bce67509b012d11f5b700eb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:af:49:70:7b:29:6f:06:2a:e7:79:4f:b5:
                    04:e1:d3:f4:b1:ca:a0:85:fa:52:c7:42:7a:1d:ce:
                    b0:04:e7:f6:7c:f4:49:59:e1:8c:64:6b:1b:c1:1e:
                    37:48:84:be:e0:24:a2:ae:1c:69:99:8c:5a:0e:06:
                    34:62:4a:c7:b6:7d:46:ba:b1:14:06:00:02:50:a4:
                    c2:73:28:93:bb:99:fa:1e:19:94:12:4a:c4:fb:30:
                    da:be:22:e9:eb:3d:1c:13:b3:49:21:f6:b9:9f:c0:
                    4a:ff:88:bb:fe:f1:da:85:2d:b0:a0:6d:b5:ad:08:
                    e1:c1:84:bb:1e:75:5a:c4:d5:11:75:2d:c3:7a:b3:
                    d1:85:ed:2b:65:e1:a7:25:41:37:e1:6a:e4:1e:ca:
                    5a:5c:af:20:cc:0f:9f:dc:c4:f6:9e:26:1e:b2:c0:
                    2a:0e:2d:53:b3:29:98:eb:9a:02:77:4f:ea:bf:4b:
                    ab:37:77:b4:a2:c3:61:f0:43:8f:b8:b8:91:c3:8e:
                    17:9f:d8:0e:7d:a6:aa:4f:8d:39:e2:2b:93:46:33:
                    75:57:d4:7b:8a:22:10:33:6b:4a:a1:cc:11:b3:b3:
                    9a:cc:4a:91:b8:23:19:0b:5b:b1:8b:f9:4b:20:d0:
                    5d:05:df:4a:f2:bd:b9:40:48:c7:aa:6b:02:d2:9d:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9C:B6:2E:39:EB:00:2B:CE:67:50:9B:01:2D:11:F5:B7:00:EB:20
            X509v3 Authority Key Identifier:
                keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:4c:00:57:38:a6:66:8e:11:7f:e7:41:91:ec:20:8d:1e:58:
         77:c0:17:fe:a4:c5:1a:cb:9e:14:9e:5b:1f:c0:23:41:d4:0b:
         e6:07:e4:8e:a3:27:f3:a2:f9:67:07:81:c2:ca:f6:a6:c3:94:
         d5:d8:1a:6d:ab:2b:cb:10:ef:3e:1a:7f:64:31:f8:c3:00:ba:
         3a:12:6a:7d:56:d4:86:3f:8c:f2:cf:96:85:5e:5e:ce:2f:5b:
         83:5b:a1:e2:97:9d:81:f7:ae:05:9a:97:15:f8:43:d7:c2:a9:
         8a:8b:ea:fb:2e:cc:f3:c2:c6:01:b0:58:86:af:00:9c:f0:47:
         8f:09:81:86:75:59:71:3e:72:96:28:30:ff:ea:2b:94:0d:0a:
         bd:56:d2:47:27:58:48:b6:be:1f:71:a4:39:9b:97:c4:fd:f0:
         a0:b8:5b:90:03:ae:f6:fb:a2:ab:ec:51:4e:7e:13:ac:8c:4c:
         31:c1:5b:a8:29:ed:a4:0f:10:9d:2b:77:aa:dd:be:fb:4f:49:
         15:de:e7:f5:04:53:69:a8:9d:4f:02:a3:ca:dd:ca:55:3d:0d:
         1d:d9:e7:f5:3d:ec:77:81:8a:61:ae:23:b7:32:d1:bf:ae:90:
         9b:94:17:d6:aa:73:0c:b2:eb:05:08:2c:0b:0c:60:c0:39:0e:
         bf:af:8d:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY83CJaDlY5ZVdW6kvsI+a1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMDkwZmFjM2NjNDJmMTk5NzQ1NWExMmU2NDMwNjQ2Mzdj
NjlkYzMwHhcNMjQwNTAyMDIwMTAwWhcNMjQwNTAzMDIwMTAwWjAzMTEwLwYDVQQD
Eyg2MzljYjYyZTM5ZWIwMDJiY2U2NzUwOWIwMTJkMTFmNWI3MDBlYjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu2vSXB7KW8GKud5T7UE4dP0scqg
hfpSx0J6Hc6wBOf2fPRJWeGMZGsbwR43SIS+4CSirhxpmYxaDgY0YkrHtn1GurEU
BgACUKTCcyiTu5n6HhmUEkrE+zDaviLp6z0cE7NJIfa5n8BK/4i7/vHahS2woG21
rQjhwYS7HnVaxNURdS3DerPRhe0rZeGnJUE34WrkHspaXK8gzA+f3MT2niYessAq
Di1TsymY65oCd0/qv0urN3e0osNh8EOPuLiRw44Xn9gOfaaqT4054iuTRjN1V9R7
iiIQM2tKocwRs7OazEqRuCMZC1uxi/lLINBdBd9K8r25QEjHqmsC0p0x7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOcti456wArzmdQmwEtEfW3AOsgMB8GA1UdIwQY
MBaAFAMJD6w8xC8Zl0VaEuZDBkY3xp3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXdrUHJEekVMeG1YUlZvUzVrTUdSamZHbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81YzI4NjgtM2EyNy00ZGY0LThmMDAt
ZmRkMjNiNDNjNTJlLzEvQXdrUHJEekVMeG1YUlZvUzVrTUdSamZHbmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC81YzI4NjgtM2EyNy00ZGY0LThmMDAtZmRkMjNiNDNjNTJl
LzEvQXdrUHJEekVMeG1YUlZvUzVrTUdSamZHbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0wAVzim
Zo4Rf+dBkewgjR5Yd8AX/qTFGsueFJ5bH8AjQdQL5gfkjqMn86L5ZweBwsr2psOU
1dgabasryxDvPhp/ZDH4wwC6OhJqfVbUhj+M8s+WhV5ezi9bg1uh4pedgfeuBZqX
FfhD18Kpiovq+y7M88LGAbBYhq8AnPBHjwmBhnVZcT5yligw/+orlA0KvVbSRydY
SLa+H3GkOZuXxP3woLhbkAOu9vuiq+xRTn4TrIxMMcFbqCntpA8QnSt3qt2++09J
Fd7n9QRTaaidTwKjyt3KVT0NHdnn9T3sd4GKYa4jtzLRv66Qm5QX1qpzDLLrBQgs
CwxgwDkOv6+N8A==
-----END CERTIFICATE-----
Generated at Thu May 2 06:14:57 2024 by rpki-client on console-fra.rpki-client.org