Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
File:                     zl1FYESPeKTc3LeRoH2tIWOgjN8.mft (raw, json)
Hash identifier:          lI8p7QVemsKK4jcxlFpyNmA5LoGykU22LADh9STm5FI=
Subject key identifier:   09:E2:EF:C7:9F:8A:90:DC:CA:87:84:FD:92:C3:1E:BA:AB:DF:4E:0D
Authority key identifier: CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF
Certificate issuer:       /CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
Certificate serial:       018EF905188F0BECE25FE1477FFF794CDD7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
Manifest number:          10C1
Signing time:             Sat 20 Apr 2024 01:00:44 +0000
Manifest this update:     Sat 20 Apr 2024 01:00:44 +0000
Manifest next update:     Sun 21 Apr 2024 01:00:44 +0000
Files and hashes:         1: NwDpJBiano0opNHdd8QhR9293KY.roa (hash: vniuADuE3EZrEK72TUAYwh6JQ4lV3zKYMIWY0nffXt0=)
                          2: zl1FYESPeKTc3LeRoH2tIWOgjN8.crl (hash: JVic/hVr7lbz0yrYuK+kbX5jdgUfnHsrJqC/6Ke3UBk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f9:05:18:8f:0b:ec:e2:5f:e1:47:7f:ff:79:4c:dd:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5d4560448f78a4dcdcb791a07dad2163a08cdf
        Validity
            Not Before: Apr 20 01:00:44 2024 GMT
            Not After : Apr 21 01:00:44 2024 GMT
        Subject: CN=09e2efc79f8a90dcca8784fd92c31ebaabdf4e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:41:f9:6e:b6:cd:1b:d8:2d:44:51:74:69:7c:
                    60:1b:a9:73:e6:31:e5:89:33:3e:0e:d9:00:61:6c:
                    17:12:80:7b:63:d9:61:7a:a1:1c:89:ba:a1:73:bc:
                    78:0b:e6:08:df:8e:c0:3c:e8:dc:8a:90:93:b8:7b:
                    59:af:df:c2:8f:28:a2:2a:84:2c:be:65:f6:b9:f4:
                    90:aa:3f:a6:c6:b3:da:0c:06:9b:cb:96:7c:d1:27:
                    b0:75:62:ca:b2:b4:3d:c8:99:bb:45:8b:2c:71:90:
                    f9:2a:b5:ea:63:21:3f:3e:22:09:9e:0d:d5:1a:a4:
                    c2:e8:e9:f9:3a:49:b1:5e:88:e9:89:0c:ae:f1:b0:
                    6d:dc:e2:bb:e6:c1:94:de:f1:03:f2:6f:9a:c0:eb:
                    fa:68:3a:86:f2:bf:2d:de:4f:b9:7c:05:94:31:d0:
                    08:5b:8d:9c:62:b9:23:f8:e4:01:67:d5:05:51:8f:
                    8d:87:1e:87:5a:c1:0f:3f:6a:3f:34:aa:47:5e:e3:
                    20:0e:53:1b:c7:04:27:fc:d0:7f:f8:51:01:c7:a5:
                    fb:bd:c4:ec:fc:a7:71:aa:f5:86:23:6c:7d:b5:b9:
                    e8:8e:1d:9c:69:f7:be:be:e7:7f:c7:54:a8:1e:51:
                    72:61:1a:42:80:63:62:a0:6c:b8:6b:7c:95:de:62:
                    cc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E2:EF:C7:9F:8A:90:DC:CA:87:84:FD:92:C3:1E:BA:AB:DF:4E:0D
            X509v3 Authority Key Identifier:
                keyid:CE:5D:45:60:44:8F:78:A4:DC:DC:B7:91:A0:7D:AD:21:63:A0:8C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zl1FYESPeKTc3LeRoH2tIWOgjN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/27cbd0-a7b9-45fb-9954-78d1144ad967/1/zl1FYESPeKTc3LeRoH2tIWOgjN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d7:9f:41:cb:89:0c:30:fd:b4:05:0d:58:43:e3:51:ac:c6:
         9d:a7:15:43:27:0d:8a:00:75:74:46:6a:d8:74:a7:c1:ae:69:
         62:b2:7a:83:7b:ea:39:91:04:aa:99:e1:99:cf:be:ed:fc:04:
         12:6a:24:bd:85:01:1a:89:de:18:90:ba:e4:5d:8b:a5:15:48:
         7d:c8:7b:22:95:53:56:6c:a5:4a:26:e0:9b:05:c5:64:02:54:
         e4:a6:2d:58:71:32:46:a9:70:ac:6f:90:4d:dd:4d:77:01:88:
         76:98:b2:87:8a:c6:38:50:e9:2f:4e:73:d0:75:91:b6:fd:01:
         99:a2:09:28:48:af:6f:b2:07:6c:e8:57:51:54:bd:97:a1:55:
         fe:f7:d7:a4:08:f1:72:cd:de:2f:1b:57:16:b1:f8:94:a3:43:
         b3:88:e4:6f:2a:5b:d3:66:b9:bd:09:0c:2f:0f:e5:6b:61:75:
         66:18:a4:5b:12:60:c5:b5:ae:e2:10:2c:99:2a:09:06:12:b8:
         78:d5:9f:93:5b:87:b4:27:99:fd:11:c3:ff:9c:f5:cb:b0:7b:
         21:e3:d2:5b:25:09:ab:97:dc:a4:d0:5e:01:98:aa:b3:da:9a:
         02:16:57:49:32:cd:49:e6:cc:35:cd:22:98:da:db:a2:2b:23:
         e6:89:82:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY75BRiPC+ziX+FHf/95TN1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNWQ0NTYwNDQ4Zjc4YTRkY2RjYjc5MWEwN2RhZDIxNjNh
MDhjZGYwHhcNMjQwNDIwMDEwMDQ0WhcNMjQwNDIxMDEwMDQ0WjAzMTEwLwYDVQQD
EygwOWUyZWZjNzlmOGE5MGRjY2E4Nzg0ZmQ5MmMzMWViYWFiZGY0ZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20H5brbNG9gtRFF0aXxgG6lz5jHl
iTM+DtkAYWwXEoB7Y9lheqEcibqhc7x4C+YI347APOjcipCTuHtZr9/CjyiiKoQs
vmX2ufSQqj+mxrPaDAaby5Z80SewdWLKsrQ9yJm7RYsscZD5KrXqYyE/PiIJng3V
GqTC6On5OkmxXojpiQyu8bBt3OK75sGU3vED8m+awOv6aDqG8r8t3k+5fAWUMdAI
W42cYrkj+OQBZ9UFUY+Nhx6HWsEPP2o/NKpHXuMgDlMbxwQn/NB/+FEBx6X7vcTs
/KdxqvWGI2x9tbnojh2cafe+vud/x1SoHlFyYRpCgGNioGy4a3yV3mLMRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAni78efipDcyoeE/ZLDHrqr304NMB8GA1UdIwQY
MBaAFM5dRWBEj3ik3Ny3kaB9rSFjoIzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yN2NiZDAtYTdiOS00NWZiLTk5NTQt
NzhkMTE0NGFkOTY3LzEvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yN2NiZDAtYTdiOS00NWZiLTk5NTQtNzhkMTE0NGFkOTY3
LzEvemwxRllFU1BlS1RjM0xlUm9IMnRJV09nak44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtefQcuJ
DDD9tAUNWEPjUazGnacVQycNigB1dEZq2HSnwa5pYrJ6g3vqOZEEqpnhmc++7fwE
EmokvYUBGoneGJC65F2LpRVIfch7IpVTVmylSibgmwXFZAJU5KYtWHEyRqlwrG+Q
Td1NdwGIdpiyh4rGOFDpL05z0HWRtv0BmaIJKEivb7IHbOhXUVS9l6FV/vfXpAjx
cs3eLxtXFrH4lKNDs4jkbypb02a5vQkMLw/la2F1ZhikWxJgxbWu4hAsmSoJBhK4
eNWfk1uHtCeZ/RHD/5z1y7B7IePSWyUJq5fcpNBeAZiqs9qaAhZXSTLNSebMNc0i
mNrboisj5omCTg==
-----END CERTIFICATE-----
Generated at Sat Apr 20 02:00:49 2024 by rpki-client on console-fra.rpki-client.org