Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
File:                     P1KMlfYICrE8sEl4PpJE0z2cSzI.mft (raw, json)
Hash identifier:          2iTVkNgfip6JPCZangIWdrvL5EuSWpMLqVre8crHOCw=
Subject key identifier:   CA:C9:73:69:47:91:22:C2:05:65:A2:E2:43:C6:8B:7B:44:FA:1A:79
Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
Certificate issuer:       /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Certificate serial:       018F882419AD5186318383E5BD646B8DE44C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
Manifest number:          108A
Signing time:             Fri 17 May 2024 20:00:18 +0000
Manifest this update:     Fri 17 May 2024 20:00:18 +0000
Manifest next update:     Sat 18 May 2024 20:00:18 +0000
Files and hashes:         1: Gv0yz1ypAuPzcPi0aDKrWMmxU-s.roa (hash: dEX04OZRtG5sFqJEX6g9WsApWVCsd7iy7t7PiOL54l8=)
                          2: P1KMlfYICrE8sEl4PpJE0z2cSzI.crl (hash: P6DJ7d6DW6c3EyfDhSuw96VsBghP7hZxMtag/RY50gQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:19:ad:51:86:31:83:83:e5:bd:64:6b:8d:e4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
        Validity
            Not Before: May 17 20:00:18 2024 GMT
            Not After : May 18 20:00:18 2024 GMT
        Subject: CN=cac97369479122c20565a2e243c68b7b44fa1a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3c:55:65:4e:d1:c9:65:10:6f:a2:e0:ca:b5:
                    26:9c:17:c6:35:4d:f5:8c:79:a2:1d:d7:d0:3f:7c:
                    88:40:f9:ea:5a:de:b4:30:7d:6e:86:79:bd:42:14:
                    2b:22:9a:3f:52:ed:15:12:1d:82:e7:2f:e0:35:6c:
                    e2:f9:f4:52:48:5e:c9:ab:c9:0e:cf:2d:ed:41:67:
                    f7:eb:a3:5b:f3:b8:a0:17:8b:30:1e:f4:93:83:a9:
                    22:f2:9d:28:e9:c8:97:d3:c0:9c:2b:37:02:3f:de:
                    5e:17:e3:f7:c4:cf:63:8a:6a:52:60:ba:4c:24:a8:
                    95:c3:e3:92:bc:5c:5a:31:52:96:e4:e4:b7:9d:76:
                    38:aa:5b:46:98:b1:04:5c:57:ab:26:8e:fb:56:09:
                    a8:0e:03:5b:54:7c:26:e8:49:8e:36:45:34:76:5c:
                    aa:f7:94:e3:be:ec:a2:51:47:27:49:cc:3e:21:0c:
                    5a:20:55:e8:f2:37:54:23:70:9f:4a:20:d4:b5:f0:
                    f9:b6:af:94:85:b4:52:a2:30:62:a6:f1:28:28:a2:
                    13:60:1d:c1:81:87:e2:df:31:9e:f1:ab:ec:74:17:
                    03:df:95:17:cc:bf:b8:34:1d:6d:0e:8c:5e:15:87:
                    31:16:f8:22:39:19:a2:5b:a1:6b:3e:8f:86:c8:66:
                    29:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C9:73:69:47:91:22:C2:05:65:A2:E2:43:C6:8B:7B:44:FA:1A:79
            X509v3 Authority Key Identifier:
                keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:de:f5:e7:5c:d1:55:01:47:39:6f:d5:b0:9d:a0:47:d8:27:
         b5:a3:5e:48:6c:7f:6e:e5:68:bb:6b:8d:73:cd:ba:3b:9a:40:
         fa:85:80:9e:37:0c:0d:5e:4e:b8:e7:62:f2:dc:d3:d2:b9:fb:
         1e:8c:a5:59:e2:9e:50:16:50:15:35:12:db:37:11:b5:c2:77:
         8f:fc:aa:c2:6a:6c:b0:35:f2:cc:e0:af:af:cd:aa:ca:34:db:
         8d:75:09:e5:d6:fe:78:8b:2b:d5:e2:2a:7f:1a:02:7f:9a:a1:
         35:fd:13:2f:ce:a8:2d:80:61:69:e6:43:32:05:a5:0d:69:0e:
         73:e6:a1:cf:73:ae:cc:67:ac:ad:bd:0a:44:66:34:9a:d9:1b:
         54:2e:89:cb:9c:3c:e7:c1:26:34:b2:22:74:b7:ec:d6:b2:fe:
         d1:37:1e:c7:02:a5:dc:84:e2:a3:bd:05:c7:e4:da:4b:f5:13:
         10:f0:fe:80:4a:4b:56:33:66:d5:cc:62:71:aa:4b:dd:54:00:
         78:de:c1:f9:ef:e9:c9:7d:19:c5:d5:b6:7e:80:4d:31:3c:d6:
         04:27:3a:f1:0c:0d:c6:52:7a:67:b6:7d:f1:74:57:a8:51:69:
         b6:cf:80:5d:cc:18:77:32:43:c9:98:34:46:73:80:64:4e:7a:
         5d:a1:cd:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJBmtUYYxg4PlvWRrjeRMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNTI4Yzk1ZjYwODBhYjEzY2IwNDk3ODNlOTI0NGQzM2Q5
YzRiMzIwHhcNMjQwNTE3MjAwMDE4WhcNMjQwNTE4MjAwMDE4WjAzMTEwLwYDVQQD
EyhjYWM5NzM2OTQ3OTEyMmMyMDU2NWEyZTI0M2M2OGI3YjQ0ZmExYTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzxVZU7RyWUQb6LgyrUmnBfGNU31
jHmiHdfQP3yIQPnqWt60MH1uhnm9QhQrIpo/Uu0VEh2C5y/gNWzi+fRSSF7Jq8kO
zy3tQWf366Nb87igF4swHvSTg6ki8p0o6ciX08CcKzcCP95eF+P3xM9jimpSYLpM
JKiVw+OSvFxaMVKW5OS3nXY4qltGmLEEXFerJo77VgmoDgNbVHwm6EmONkU0dlyq
95TjvuyiUUcnScw+IQxaIFXo8jdUI3CfSiDUtfD5tq+UhbRSojBipvEoKKITYB3B
gYfi3zGe8avsdBcD35UXzL+4NB1tDoxeFYcxFvgiORmiW6FrPo+GyGYpUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrJc2lHkSLCBWWi4kPGi3tE+hp5MB8GA1UdIwQY
MBaAFD9SjJX2CAqxPLBJeD6SRNM9nEsyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jMmZkZjItMmEwYS00NDNmLWI3ZTAt
YTViZGJiMTQ1YTc4LzEvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9jMmZkZjItMmEwYS00NDNmLWI3ZTAtYTViZGJiMTQ1YTc4
LzEvUDFLTWxmWUlDckU4c0VsNFBwSkUwejJjU3pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACN7151zR
VQFHOW/VsJ2gR9gntaNeSGx/buVou2uNc826O5pA+oWAnjcMDV5OuOdi8tzT0rn7
HoylWeKeUBZQFTUS2zcRtcJ3j/yqwmpssDXyzOCvr82qyjTbjXUJ5db+eIsr1eIq
fxoCf5qhNf0TL86oLYBhaeZDMgWlDWkOc+ahz3OuzGesrb0KRGY0mtkbVC6Jy5w8
58EmNLIidLfs1rL+0TcexwKl3ITio70Fx+TaS/UTEPD+gEpLVjNm1cxicapL3VQA
eN7B+e/pyX0ZxdW2foBNMTzWBCc68QwNxlJ6Z7Z98XRXqFFpts+AXcwYdzJDyZg0
RnOAZE56XaHNuQ==
-----END CERTIFICATE-----
Generated at Fri May 17 23:34:20 2024 by rpki-client on console-fra.rpki-client.org