Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File:                     2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier:          rH7e/s8RKSWQb94R7JbL2BD6Y845AGnYvDJwYg5sPk4=
Subject key identifier:   24:73:0E:E1:B3:BE:FD:34:D6:19:D3:97:BA:1F:7D:6E:6D:41:7A:9C
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer:       /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial:       018F4BD9368D08C678A84583595DDDC104EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number:          115C
Signing time:             Mon 06 May 2024 03:01:17 +0000
Manifest this update:     Mon 06 May 2024 03:01:17 +0000
Manifest next update:     Tue 07 May 2024 03:01:17 +0000
Files and hashes:         1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: 1WZ+oIco5wN/tv0h5TvzmN/18iuM1Pgt+Mm+FfR1/Ak=)
                          2: JP50Y_Jpxj-310DOWIK4ZTwy5e4.roa (hash: Aevjz0MI+mVzR7vUTeC9NS4OAq9+kdZDTT9zQNrFiZ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:d9:36:8d:08:c6:78:a8:45:83:59:5d:dd:c1:04:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
        Validity
            Not Before: May  6 03:01:17 2024 GMT
            Not After : May  7 03:01:17 2024 GMT
        Subject: CN=24730ee1b3befd34d619d397ba1f7d6e6d417a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:f2:7a:75:c2:52:42:d8:67:d4:68:a6:f3:
                    56:b9:bd:b2:64:ce:d0:72:61:d7:80:fa:d9:e5:cd:
                    28:33:d9:4b:aa:03:2e:c3:70:aa:95:c7:46:14:fd:
                    17:c0:21:32:ed:0c:6a:d8:08:8b:07:df:e7:86:75:
                    46:19:87:6d:e1:66:5d:5b:39:68:50:c9:8e:40:d1:
                    09:30:18:0f:5d:0c:0a:27:93:5a:4c:af:61:f7:cf:
                    ab:0d:0b:70:e9:e0:c1:82:1f:1f:ab:fe:79:25:f8:
                    94:39:bb:ec:91:5d:2b:aa:f1:d6:9a:a3:84:72:3f:
                    34:0b:07:69:63:6c:b4:57:d1:0e:ce:bf:01:6f:9b:
                    df:44:00:8a:43:da:9c:43:0a:5d:b2:65:cd:58:78:
                    22:a3:4d:57:a8:9e:5b:9a:e8:9d:99:82:cc:ed:f8:
                    a6:60:e5:02:8f:5d:ba:02:81:39:28:8f:4c:94:76:
                    01:0e:07:41:48:29:ee:49:68:6b:5f:eb:9f:56:20:
                    01:b0:e6:28:c6:cb:80:fb:50:3e:2e:7a:09:f8:28:
                    9d:98:1c:bf:ec:e4:48:e3:7e:78:39:f7:ef:51:6d:
                    19:cc:7c:0b:03:ac:e6:ff:c9:19:18:77:89:ec:c0:
                    e0:67:c5:23:1b:2f:35:17:f1:04:e6:31:5d:a6:cb:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:73:0E:E1:B3:BE:FD:34:D6:19:D3:97:BA:1F:7D:6E:6D:41:7A:9C
            X509v3 Authority Key Identifier:
                keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:88:b0:9f:e9:6d:1e:a8:ff:ed:d8:58:e2:8b:45:8e:83:8f:
         dd:e9:69:31:3b:ef:d8:35:90:01:e4:aa:c1:35:5c:da:12:ba:
         7e:ed:96:c7:41:d2:70:57:5a:57:d4:db:a3:e3:00:b3:38:de:
         58:47:2b:60:21:7d:65:71:98:9f:97:d4:fb:d9:9b:30:e9:7a:
         8c:17:05:89:7a:71:16:6c:02:59:bc:b9:06:86:fe:e9:a9:6f:
         28:09:99:8a:a6:91:18:c5:c7:53:c3:27:73:50:62:dd:f3:f2:
         6d:27:55:73:0f:7b:88:aa:27:d8:56:21:97:6e:21:b2:d3:95:
         ca:c1:74:52:6b:0b:80:e4:52:ce:95:4e:94:dd:4f:a6:19:c3:
         4f:b0:9a:31:ba:10:b9:a8:e4:8f:99:60:81:b5:68:25:70:6e:
         1f:de:99:8b:c8:d2:1e:2b:f0:0d:95:af:a1:86:b0:0d:ec:5f:
         ed:8d:70:46:1b:34:35:67:43:ae:1d:49:eb:b1:bc:76:f2:5f:
         3f:41:fe:df:3c:3c:ce:9e:8b:4f:ec:d3:36:75:b2:38:3f:5a:
         49:0e:9e:8b:88:aa:f7:c5:0d:8f:2c:71:5a:94:24:dd:4f:e2:
         8d:29:f8:6a:03:fb:ae:8a:11:ae:6f:73:dc:da:ed:66:eb:f7:
         d5:ad:c8:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9L2TaNCMZ4qEWDWV3dwQTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NGYyMzhjNWM3NGViOWE3NWE0NmUyYmM2NzQxMWU4ZGMy
MmQ5ODIwHhcNMjQwNTA2MDMwMTE3WhcNMjQwNTA3MDMwMTE3WjAzMTEwLwYDVQQD
EygyNDczMGVlMWIzYmVmZDM0ZDYxOWQzOTdiYTFmN2Q2ZTZkNDE3YTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUnyenXCUkLYZ9RopvNWub2yZM7Q
cmHXgPrZ5c0oM9lLqgMuw3CqlcdGFP0XwCEy7Qxq2AiLB9/nhnVGGYdt4WZdWzlo
UMmOQNEJMBgPXQwKJ5NaTK9h98+rDQtw6eDBgh8fq/55JfiUObvskV0rqvHWmqOE
cj80CwdpY2y0V9EOzr8Bb5vfRACKQ9qcQwpdsmXNWHgio01XqJ5bmuidmYLM7fim
YOUCj126AoE5KI9MlHYBDgdBSCnuSWhrX+ufViABsOYoxsuA+1A+LnoJ+CidmBy/
7ORI4354OffvUW0ZzHwLA6zm/8kZGHeJ7MDgZ8UjGy81F/EE5jFdpstkXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRzDuGzvv001hnTl7offW5tQXqcMB8GA1UdIwQY
MBaAFNlPI4xcdOuadaRuK8Z0EejcItmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEt
NGJjODRjNzlmYzU4LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kOWQ5YjYtYzNiZS00YzVkLWFkZWEtNGJjODRjNzlmYzU4
LzEvMlU4ampGeDA2NXAxcEc0cnhuUVI2TndpMllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoiwn+lt
Hqj/7dhY4otFjoOP3elpMTvv2DWQAeSqwTVc2hK6fu2Wx0HScFdaV9Tbo+MAszje
WEcrYCF9ZXGYn5fU+9mbMOl6jBcFiXpxFmwCWby5Bob+6alvKAmZiqaRGMXHU8Mn
c1Bi3fPybSdVcw97iKon2FYhl24hstOVysF0UmsLgORSzpVOlN1PphnDT7CaMboQ
uajkj5lggbVoJXBuH96Zi8jSHivwDZWvoYawDexf7Y1wRhs0NWdDrh1J67G8dvJf
P0H+3zw8zp6LT+zTNnWyOD9aSQ6ei4iq98UNjyxxWpQk3U/ijSn4agP7rooRrm9z
3NrtZuv31a3IOQ==
-----END CERTIFICATE-----
Generated at Mon May 6 10:31:36 2024 by rpki-client on console-ams.rpki-client.org