Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File:                     BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier:          MKzA44pleLEBiOnVgtxRyVj+sf+74T4FpIurzzuz4Fo=
Subject key identifier:   4E:E4:C4:CF:FF:EF:DD:21:EE:ED:9B:97:6F:26:E2:8B:DF:9A:E6:48
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer:       /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial:       018F3A0AC1C2E65F74A354589AEC5469DB49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number:          1074
Signing time:             Thu 02 May 2024 16:02:14 +0000
Manifest this update:     Thu 02 May 2024 16:02:14 +0000
Manifest next update:     Fri 03 May 2024 16:02:14 +0000
Files and hashes:         1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: i7UHlsQX+G1/RZ5MQQfVcHM2D7MKWPs8IGczA6mjPj8=)
                          2: o9LAGdnvkUiS-XyaW7g-a08TSt4.roa (hash: /j1fiOWQh3tZcIVXTVdMbSON7jLj63TMRSzEaVT42u4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0a:c1:c2:e6:5f:74:a3:54:58:9a:ec:54:69:db:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
        Validity
            Not Before: May  2 16:02:14 2024 GMT
            Not After : May  3 16:02:14 2024 GMT
        Subject: CN=4ee4c4cfffefdd21eeed9b976f26e28bdf9ae648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:2f:6b:49:b0:04:40:bf:04:53:cf:8a:eb:
                    51:d3:77:71:47:1b:18:53:09:dd:b4:e2:2d:9c:69:
                    1a:6c:50:e7:85:82:5d:ac:48:cf:2e:e3:26:c8:02:
                    20:2d:52:d3:d6:e2:e7:38:22:51:ae:1a:a1:28:21:
                    0a:f3:af:02:42:da:e4:ed:17:88:d3:2c:1c:ee:9f:
                    46:0a:18:19:9d:74:0b:d6:f5:09:e8:e9:4b:87:c4:
                    f6:1a:a9:c3:e7:8f:9e:b1:ae:4e:59:e6:7b:46:f4:
                    95:81:d4:2d:ff:18:fe:51:bf:f4:ae:11:3c:23:25:
                    59:a2:f9:1f:fa:5c:6c:90:05:f2:96:ce:1d:92:2b:
                    89:f1:9c:5c:9d:01:ba:2e:5a:2e:a5:db:e1:6d:a6:
                    63:ab:c5:97:41:20:5c:55:08:fd:cd:ed:f3:6b:a7:
                    6e:e2:d1:8f:f0:9f:64:36:35:44:b6:9f:d3:05:5f:
                    16:16:fe:76:fa:9a:c4:b5:c8:53:de:16:8e:80:ec:
                    0b:91:64:2c:be:af:fd:5a:81:a7:2b:ed:d6:75:81:
                    af:8b:8d:72:0f:c7:a3:32:25:68:fd:aa:a7:e5:8b:
                    cb:d2:44:a2:49:c9:9b:59:01:ef:30:39:a1:34:81:
                    b9:73:40:e6:a1:d1:4d:6c:c0:d5:32:42:ff:22:68:
                    f4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E4:C4:CF:FF:EF:DD:21:EE:ED:9B:97:6F:26:E2:8B:DF:9A:E6:48
            X509v3 Authority Key Identifier:
                keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e7:b9:ca:ba:0b:27:e5:64:9a:fb:7e:55:40:fc:85:9c:0e:
         fe:c2:37:dc:a2:74:c4:f7:84:01:aa:fd:c0:2a:a8:db:89:d6:
         3d:3e:f0:bc:44:13:d1:fb:ae:f8:03:5e:58:20:e8:92:09:eb:
         2b:8d:5d:1a:ef:2b:99:2c:2a:5e:5f:e6:ee:00:c1:84:4a:69:
         0d:a3:df:e8:92:fe:d3:16:3f:2e:8e:0c:18:10:aa:c1:55:81:
         ed:26:73:6a:22:3d:1d:e6:1c:ba:9a:99:44:18:c1:af:97:08:
         f7:ac:0c:29:fb:6f:4e:fe:43:63:61:58:82:40:fd:59:1d:98:
         e7:5d:ae:7a:66:c2:3d:9b:8f:7f:30:ac:58:91:9c:d4:7f:5c:
         f7:a0:4e:f4:e0:e9:5b:73:84:c6:a2:a0:4c:5b:24:67:52:d1:
         92:11:11:d8:3c:62:07:db:74:c9:70:1f:52:50:fd:1c:b9:e7:
         86:fd:e3:82:57:7c:a0:36:27:79:12:ab:2c:93:ec:cf:23:d4:
         35:08:2f:f1:e4:11:e6:be:f3:5a:a7:8c:a9:06:3b:d3:8c:5d:
         82:2f:65:51:32:c3:32:58:4e:fc:5e:2a:8b:ff:64:24:a3:f9:
         4a:6e:c6:04:f9:34:f9:09:4b:74:19:e6:92:6c:c3:36:05:1f:
         c3:fb:af:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY86CsHC5l90o1RYmuxUadtJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NjM2OWUyNzA1Y2I0MzNkYjA2NThhYjY2NmQwOGI2N2Ix
NTUxZGMwHhcNMjQwNTAyMTYwMjE0WhcNMjQwNTAzMTYwMjE0WjAzMTEwLwYDVQQD
Eyg0ZWU0YzRjZmZmZWZkZDIxZWVlZDliOTc2ZjI2ZTI4YmRmOWFlNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dkva0mwBEC/BFPPiutR03dxRxsY
UwndtOItnGkabFDnhYJdrEjPLuMmyAIgLVLT1uLnOCJRrhqhKCEK868CQtrk7ReI
0ywc7p9GChgZnXQL1vUJ6OlLh8T2GqnD54+esa5OWeZ7RvSVgdQt/xj+Ub/0rhE8
IyVZovkf+lxskAXyls4dkiuJ8ZxcnQG6LloupdvhbaZjq8WXQSBcVQj9ze3za6du
4tGP8J9kNjVEtp/TBV8WFv52+prEtchT3haOgOwLkWQsvq/9WoGnK+3WdYGvi41y
D8ejMiVo/aqn5YvL0kSiScmbWQHvMDmhNIG5c0DmodFNbMDVMkL/Imj0OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7kxM//790h7u2bl28m4ovfmuZIMB8GA1UdIwQY
MBaAFAZjaeJwXLQz2wZYq2ZtCLZ7FVHcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC82NGU0OWEtNWZlMS00NWMyLTgzMTAt
MzRhOWU5OGE1Zjg2LzEvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC82NGU0OWEtNWZlMS00NWMyLTgzMTAtMzRhOWU5OGE1Zjg2
LzEvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+e5yroL
J+Vkmvt+VUD8hZwO/sI33KJ0xPeEAar9wCqo24nWPT7wvEQT0fuu+ANeWCDokgnr
K41dGu8rmSwqXl/m7gDBhEppDaPf6JL+0xY/Lo4MGBCqwVWB7SZzaiI9HeYcupqZ
RBjBr5cI96wMKftvTv5DY2FYgkD9WR2Y512uembCPZuPfzCsWJGc1H9c96BO9ODp
W3OExqKgTFskZ1LRkhER2DxiB9t0yXAfUlD9HLnnhv3jgld8oDYneRKrLJPszyPU
NQgv8eQR5r7zWqeMqQY704xdgi9lUTLDMlhO/F4qi/9kJKP5Sm7GBPk0+QlLdBnm
kmzDNgUfw/uvng==
-----END CERTIFICATE-----
Generated at Thu May 2 18:05:25 2024 by rpki-client on console-fra.rpki-client.org