Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f72893-07f7-4950-b829-e05ddc661e66/1/0RY47gjO487SSRm9VBLnRSiUA44.mft
File:                     0RY47gjO487SSRm9VBLnRSiUA44.mft (raw, json)
Hash identifier:          Azl/H/PGmfCpfFnh3TxM8T3Ip0Gw/6ahw0bSSOMWLMs=
Subject key identifier:   36:31:69:E8:CF:80:0A:6F:22:81:1F:1E:BF:D6:8A:0E:CE:D1:8B:79
Authority key identifier: D1:16:38:EE:08:CE:E3:CE:D2:49:19:BD:54:12:E7:45:28:94:03:8E
Certificate issuer:       /CN=d11638ee08cee3ced24919bd5412e7452894038e
Certificate serial:       018EFE996155DDF681509799F6346163AC8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0RY47gjO487SSRm9VBLnRSiUA44.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/f72893-07f7-4950-b829-e05ddc661e66/1/0RY47gjO487SSRm9VBLnRSiUA44.mft
Manifest number:          092E
Signing time:             Sun 21 Apr 2024 03:00:48 +0000
Manifest this update:     Sun 21 Apr 2024 03:00:48 +0000
Manifest next update:     Mon 22 Apr 2024 03:00:48 +0000
Files and hashes:         1: 0RY47gjO487SSRm9VBLnRSiUA44.crl (hash: S0IK+rXyXbMUaNo2Bct3ipjmUOhDWH4B3aa37z6FWxY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/f72893-07f7-4950-b829-e05ddc661e66/1/0RY47gjO487SSRm9VBLnRSiUA44.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/f72893-07f7-4950-b829-e05ddc661e66/1/0RY47gjO487SSRm9VBLnRSiUA44.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0RY47gjO487SSRm9VBLnRSiUA44.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 20:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:fe:99:61:55:dd:f6:81:50:97:99:f6:34:61:63:ac:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d11638ee08cee3ced24919bd5412e7452894038e
        Validity
            Not Before: Apr 21 03:00:48 2024 GMT
            Not After : Apr 22 03:00:48 2024 GMT
        Subject: CN=363169e8cf800a6f22811f1ebfd68a0eced18b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:26:4c:f9:aa:4a:14:50:5c:8a:31:42:44:89:
                    6d:45:5d:1a:3e:78:02:c6:72:fc:9a:95:ff:fc:3c:
                    c6:c2:f2:61:69:46:15:ea:6b:66:70:5c:4a:99:a7:
                    9c:23:ed:b2:68:79:86:b8:ed:d6:77:b3:6f:f4:70:
                    9a:cb:40:c7:03:64:af:74:a7:00:ee:cd:29:c6:bc:
                    1c:a5:29:b8:45:28:96:8a:2a:d5:e3:27:bd:5e:18:
                    44:40:ef:6f:ef:cf:08:38:75:6c:1f:08:15:1e:93:
                    3b:34:54:f6:5a:ce:62:53:c5:58:0a:a4:8c:e1:b6:
                    bf:7a:2c:aa:a0:69:64:e2:84:79:5a:77:25:10:80:
                    5e:8c:f0:9f:6c:c8:35:12:8c:f4:49:0b:fc:04:a2:
                    80:30:38:f7:f0:3e:71:5c:99:13:3a:2e:0a:ae:28:
                    1c:8e:c8:dc:28:19:9b:a6:62:e9:53:fb:92:dd:ad:
                    18:f6:22:fd:80:e2:3f:19:cf:57:ef:c3:fe:57:91:
                    4d:df:38:50:6d:54:b0:23:4b:af:71:dc:b3:d5:fe:
                    eb:b7:74:7e:c4:f6:5a:96:21:61:92:21:75:4e:b5:
                    cb:3c:13:40:ee:1a:3d:a1:87:a7:d2:bf:82:18:96:
                    e9:dc:9a:9d:67:e3:9b:8e:b9:70:2c:73:0a:2d:7e:
                    91:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:31:69:E8:CF:80:0A:6F:22:81:1F:1E:BF:D6:8A:0E:CE:D1:8B:79
            X509v3 Authority Key Identifier:
                keyid:D1:16:38:EE:08:CE:E3:CE:D2:49:19:BD:54:12:E7:45:28:94:03:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RY47gjO487SSRm9VBLnRSiUA44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f72893-07f7-4950-b829-e05ddc661e66/1/0RY47gjO487SSRm9VBLnRSiUA44.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f72893-07f7-4950-b829-e05ddc661e66/1/0RY47gjO487SSRm9VBLnRSiUA44.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:aa:32:2b:9c:2a:5b:41:20:0b:59:71:f6:2f:8c:2f:7e:
         34:96:31:fe:40:e2:eb:ef:fb:ff:c4:d0:0c:96:e9:7f:b5:a3:
         06:b8:ed:5d:6b:81:19:f9:10:90:72:c4:03:79:2c:f2:8a:21:
         67:5f:99:fc:ef:0b:7b:07:90:c8:14:e8:8a:ac:a5:b1:d5:ba:
         8b:f3:f2:10:01:ac:1e:6b:06:59:be:36:58:14:40:5a:6c:fa:
         23:31:67:67:1b:ba:0f:2d:31:c3:82:da:71:73:59:73:3b:c1:
         fe:16:02:17:a4:d6:7e:ed:c3:f4:14:b5:e6:5e:d5:75:69:ea:
         4a:70:8c:a3:b2:46:ba:2a:4a:40:48:f8:7d:42:42:b0:6e:2e:
         98:dd:cd:40:fb:64:96:6d:12:83:0e:1d:35:0f:6a:9f:0f:ce:
         61:56:b1:91:56:64:43:5e:92:35:af:06:dd:9d:be:00:2a:df:
         93:65:b6:04:3c:ff:88:49:f3:a0:1e:e3:ef:bb:9a:d1:85:d6:
         98:c0:33:fc:2a:ca:aa:f2:65:f3:e0:9f:d8:58:9f:46:e3:06:
         29:fd:55:01:14:f6:c6:75:53:c7:13:dc:d0:a5:87:54:f7:c3:
         c5:4c:34:05:12:85:33:d7:66:73:ce:5d:67:91:42:18:1c:7e:
         d3:0e:82:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY7+mWFV3faBUJeZ9jRhY6yNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMTYzOGVlMDhjZWUzY2VkMjQ5MTliZDU0MTJlNzQ1Mjg5
NDAzOGUwHhcNMjQwNDIxMDMwMDQ4WhcNMjQwNDIyMDMwMDQ4WjAzMTEwLwYDVQQD
EygzNjMxNjllOGNmODAwYTZmMjI4MTFmMWViZmQ2OGEwZWNlZDE4Yjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCZM+apKFFBcijFCRIltRV0aPngC
xnL8mpX//DzGwvJhaUYV6mtmcFxKmaecI+2yaHmGuO3Wd7Nv9HCay0DHA2SvdKcA
7s0pxrwcpSm4RSiWiirV4ye9XhhEQO9v788IOHVsHwgVHpM7NFT2Ws5iU8VYCqSM
4ba/eiyqoGlk4oR5WnclEIBejPCfbMg1Eoz0SQv8BKKAMDj38D5xXJkTOi4Krigc
jsjcKBmbpmLpU/uS3a0Y9iL9gOI/Gc9X78P+V5FN3zhQbVSwI0uvcdyz1f7rt3R+
xPZaliFhkiF1TrXLPBNA7ho9oYen0r+CGJbp3JqdZ+ObjrlwLHMKLX6RmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYxaejPgApvIoEfHr/Wig7O0Yt5MB8GA1UdIwQY
MBaAFNEWOO4IzuPO0kkZvVQS50UolAOOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFJZNDdnak80ODdTU1JtOVZCTG5SU2lVQTQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNzI4OTMtMDdmNy00OTUwLWI4Mjkt
ZTA1ZGRjNjYxZTY2LzEvMFJZNDdnak80ODdTU1JtOVZCTG5SU2lVQTQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9mNzI4OTMtMDdmNy00OTUwLWI4MjktZTA1ZGRjNjYxZTY2
LzEvMFJZNDdnak80ODdTU1JtOVZCTG5SU2lVQTQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPaqMiuc
KltBIAtZcfYvjC9+NJYx/kDi6+/7/8TQDJbpf7WjBrjtXWuBGfkQkHLEA3ks8ooh
Z1+Z/O8LeweQyBToiqylsdW6i/PyEAGsHmsGWb42WBRAWmz6IzFnZxu6Dy0xw4La
cXNZczvB/hYCF6TWfu3D9BS15l7VdWnqSnCMo7JGuipKQEj4fUJCsG4umN3NQPtk
lm0Sgw4dNQ9qnw/OYVaxkVZkQ16SNa8G3Z2+ACrfk2W2BDz/iEnzoB7j77ua0YXW
mMAz/CrKqvJl8+Cf2FifRuMGKf1VART2xnVTxxPc0KWHVPfDxUw0BRKFM9dmc85d
Z5FCGBx+0w6C7w==
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:47:21 2024 by rpki-client on console-fra.rpki-client.org