Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
File:                     93n18CiJhaveCYJ-A9eHpSFJ5-w.mft (raw, json)
Hash identifier:          pJc53SNMkq49i+YQs0pKj7ZLfbfyDyPKr4bC/M1hvcg=
Subject key identifier:   B2:71:E2:CE:B9:22:C5:4B:03:70:10:01:D3:F7:4A:26:44:DA:05:89
Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
Certificate issuer:       /CN=f779f5f0288985abde09827e03d787a52149e7ec
Certificate serial:       018F40B0BE4695EA76C97A4D54E938C71664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
Manifest number:          115A
Signing time:             Fri 03 May 2024 23:01:15 +0000
Manifest this update:     Fri 03 May 2024 23:01:15 +0000
Manifest next update:     Sat 04 May 2024 23:01:15 +0000
Files and hashes:         1: 93n18CiJhaveCYJ-A9eHpSFJ5-w.crl (hash: Ly/PneRnLw6xrHrHcXGHINy0z9rdwSWmPKAkM3E9FwQ=)
                          2: ryEUpr2AUL7cC0-iIpMVqB_lhvA.roa (hash: Ltj8zvUwWbKMNITY64Emz7biuEYA8qkJPXM2Q6TacMQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:b0:be:46:95:ea:76:c9:7a:4d:54:e9:38:c7:16:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec
        Validity
            Not Before: May  3 23:01:15 2024 GMT
            Not After : May  4 23:01:15 2024 GMT
        Subject: CN=b271e2ceb922c54b03701001d3f74a2644da0589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b1:82:39:3d:c3:bb:4d:14:dd:d5:49:16:5b:
                    07:41:54:03:23:49:72:57:78:90:19:6d:c3:77:94:
                    78:e0:df:6f:06:ac:e5:d3:8b:47:05:5f:d9:12:86:
                    13:07:c6:15:af:85:fb:86:53:99:40:02:a1:3b:d5:
                    90:e0:e5:34:ff:2d:de:59:66:02:31:61:8a:0c:da:
                    5d:49:a6:45:1e:af:e7:a8:95:17:9c:39:29:8f:a8:
                    c9:0e:4c:3b:00:36:9a:62:2e:2b:cb:4d:e9:e2:4d:
                    3b:a8:4d:76:b0:e3:7c:d8:37:60:b5:3e:09:70:a5:
                    19:77:c4:73:a4:e5:dd:58:61:40:20:39:93:73:e0:
                    73:52:56:74:4f:bb:78:fb:b8:cf:55:cd:d6:b9:1b:
                    98:cb:28:3e:53:52:bd:9a:ad:3e:38:65:61:ed:f0:
                    53:00:2e:52:83:bf:86:13:93:74:69:c8:d7:33:4c:
                    34:73:ff:ec:5a:1f:60:c7:74:42:15:d6:a6:0b:d8:
                    a9:61:b4:9b:73:b5:74:5c:98:25:6b:13:a8:3b:11:
                    ed:d8:5c:26:61:d1:ce:51:83:43:f2:16:06:00:54:
                    a3:cb:07:53:db:bb:ce:67:05:d6:03:6a:da:c3:c4:
                    e6:90:46:06:e3:35:cf:bb:98:9c:1b:97:f2:09:95:
                    c7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:71:E2:CE:B9:22:C5:4B:03:70:10:01:D3:F7:4A:26:44:DA:05:89
            X509v3 Authority Key Identifier:
                keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:53:87:0f:0c:ed:c2:ea:14:65:63:d6:c7:ca:0a:f4:a4:80:
         76:05:b9:20:f6:fe:dd:ff:d9:40:df:80:ac:5b:dd:0e:3a:f8:
         3e:7e:57:66:71:97:b6:10:c3:24:1d:c9:15:fa:34:58:b4:49:
         77:88:a4:40:eb:58:c6:91:af:33:ac:99:0e:cc:9f:1b:92:91:
         40:64:ad:5a:80:e0:c0:10:e8:cf:2b:a5:fe:8c:eb:ea:15:57:
         21:14:54:e3:2e:89:e8:38:6c:31:2b:42:02:0e:a4:87:e2:1a:
         86:0c:ed:a6:05:c4:56:03:b3:33:5a:35:3f:2d:11:e1:c5:59:
         40:b5:a5:91:92:6d:7d:d6:bb:0d:6c:d9:71:a4:bd:a7:6b:64:
         1e:60:cf:65:7d:80:a7:26:67:ec:4f:f6:fa:66:06:a9:94:8b:
         21:4a:c6:11:71:3e:01:69:82:f3:61:b8:93:5e:c1:1d:db:af:
         ee:db:3a:5f:c6:23:5d:89:89:c2:e2:e2:89:d9:65:8a:80:e3:
         c8:1c:78:a3:fc:a9:63:12:25:17:2e:94:0d:a4:d8:b4:5d:0f:
         d1:7f:6b:59:ae:6c:44:99:e6:80:90:e4:08:df:e7:3e:04:2b:
         99:71:1a:50:57:9c:97:7c:c9:9d:ec:d9:d8:3b:5d:ba:40:da:
         ec:7d:0f:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9AsL5Glep2yXpNVOk4xxZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzlmNWYwMjg4OTg1YWJkZTA5ODI3ZTAzZDc4N2E1MjE0
OWU3ZWMwHhcNMjQwNTAzMjMwMTE1WhcNMjQwNTA0MjMwMTE1WjAzMTEwLwYDVQQD
EyhiMjcxZTJjZWI5MjJjNTRiMDM3MDEwMDFkM2Y3NGEyNjQ0ZGEwNTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrGCOT3Du00U3dVJFlsHQVQDI0ly
V3iQGW3Dd5R44N9vBqzl04tHBV/ZEoYTB8YVr4X7hlOZQAKhO9WQ4OU0/y3eWWYC
MWGKDNpdSaZFHq/nqJUXnDkpj6jJDkw7ADaaYi4ry03p4k07qE12sON82DdgtT4J
cKUZd8RzpOXdWGFAIDmTc+BzUlZ0T7t4+7jPVc3WuRuYyyg+U1K9mq0+OGVh7fBT
AC5Sg7+GE5N0acjXM0w0c//sWh9gx3RCFdamC9ipYbSbc7V0XJglaxOoOxHt2Fwm
YdHOUYND8hYGAFSjywdT27vOZwXWA2raw8TmkEYG4zXPu5icG5fyCZXHnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJx4s65IsVLA3AQAdP3SiZE2gWJMB8GA1UdIwQY
MBaAFPd59fAoiYWr3gmCfgPXh6UhSefsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNuMThDaUpoYXZlQ1lKLUE5ZUhwU0ZKNS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hZWQzODEtNDVjYy00NGJjLWE1YzMt
ZmU3OTYzYmVjN2QzLzEvOTNuMThDaUpoYXZlQ1lKLUE5ZUhwU0ZKNS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9hZWQzODEtNDVjYy00NGJjLWE1YzMtZmU3OTYzYmVjN2Qz
LzEvOTNuMThDaUpoYXZlQ1lKLUE5ZUhwU0ZKNS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1OHDwzt
wuoUZWPWx8oK9KSAdgW5IPb+3f/ZQN+ArFvdDjr4Pn5XZnGXthDDJB3JFfo0WLRJ
d4ikQOtYxpGvM6yZDsyfG5KRQGStWoDgwBDozyul/ozr6hVXIRRU4y6J6DhsMStC
Ag6kh+IahgztpgXEVgOzM1o1Py0R4cVZQLWlkZJtfda7DWzZcaS9p2tkHmDPZX2A
pyZn7E/2+mYGqZSLIUrGEXE+AWmC82G4k17BHduv7ts6X8YjXYmJwuLiidllioDj
yBx4o/ypYxIlFy6UDaTYtF0P0X9rWa5sRJnmgJDkCN/nPgQrmXEaUFecl3zJnezZ
2DtdukDa7H0PlQ==
-----END CERTIFICATE-----
Generated at Fri May 3 23:59:07 2024 by rpki-client on console-fra.rpki-client.org