Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File:                     ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier:          DqSGjJRow7nztVegFwIlzX6Thbje2I0+aImoZd6WjxA=
Subject key identifier:   2E:BB:3C:DA:88:E0:5E:AB:20:C6:95:C7:D1:7F:F0:0B:5A:9D:28:39
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer:       /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial:       018F4E35D9C230E4F89F7156E075FC67438F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number:          068B
Signing time:             Mon 06 May 2024 14:01:42 +0000
Manifest this update:     Mon 06 May 2024 14:01:42 +0000
Manifest next update:     Tue 07 May 2024 14:01:42 +0000
Files and hashes:         1: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: N+qoImtod+M4ZxCl0WyTWpYRIRp7StBH5+bqfvQI4x4=)
                          2: _CIsLuM335VtyFwnhQGDjp0lOtM.roa (hash: 8s0ZVLonacG5R3Xvb/EVeAA8XEFR/5aLdwdTln9rciw=)
                          3: ndYvy3DpPQEg7agX9yeUPh7aIzM.roa (hash: LLTNwtF/+ug834lVnF3Dld69SMVRk9P76HlsXKqCmGc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 14:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:35:d9:c2:30:e4:f8:9f:71:56:e0:75:fc:67:43:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
        Validity
            Not Before: May  6 14:01:42 2024 GMT
            Not After : May  7 14:01:42 2024 GMT
        Subject: CN=2ebb3cda88e05eab20c695c7d17ff00b5a9d2839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bf:18:3e:57:c7:7a:85:d0:a6:ba:da:02:6e:
                    0c:14:61:6d:49:ab:3f:7b:44:70:f3:bf:26:ca:42:
                    b8:cf:50:ed:31:58:ea:a9:46:6f:46:e8:4d:03:bf:
                    11:fa:45:3c:dc:54:96:64:62:53:54:d7:c1:37:81:
                    81:2e:bb:48:da:77:b0:6e:80:60:58:70:9b:71:00:
                    06:c3:57:32:df:de:b9:96:c4:18:6c:ed:8d:b8:fc:
                    75:bc:10:29:8e:84:1f:e0:70:89:4d:06:95:f3:7f:
                    8a:30:bd:f1:ce:62:9b:9d:1c:e9:24:b2:5c:63:5b:
                    15:1d:34:02:dc:8d:59:c0:89:e1:5b:75:a8:b4:2c:
                    5e:e8:98:e7:40:ff:1a:0b:02:15:5d:03:32:0d:c1:
                    52:3a:17:f1:48:2c:8f:12:35:02:c6:0b:17:5b:cd:
                    bb:e0:af:e1:38:42:0d:d3:88:47:99:93:a2:a6:92:
                    5f:9d:c3:aa:e2:de:ee:8c:0a:72:65:9a:7c:3d:6c:
                    6f:48:23:ff:0b:2e:34:3c:8a:e0:2f:dd:4e:8b:04:
                    47:34:65:67:2a:ca:51:d0:c5:5e:55:3a:ed:0c:02:
                    4f:f2:19:47:2d:ed:b9:27:2f:0a:8e:1a:94:98:6c:
                    5c:a8:3a:ff:38:e1:1a:28:93:f1:1a:00:c4:da:57:
                    7f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BB:3C:DA:88:E0:5E:AB:20:C6:95:C7:D1:7F:F0:0B:5A:9D:28:39
            X509v3 Authority Key Identifier:
                keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:dc:6d:e5:30:84:44:ed:bc:65:ef:35:9d:69:1d:d9:cd:55:
         f7:10:32:c4:58:13:76:aa:98:c5:1a:fe:47:9d:c2:42:89:80:
         ec:8a:66:7c:31:aa:5b:c7:4b:2f:ba:3e:e5:48:88:7b:91:31:
         5c:54:d5:ef:99:4d:9d:82:41:ab:94:88:b4:b6:fe:92:3d:56:
         3f:a6:b3:bb:cd:90:28:4c:95:0d:20:cc:84:cb:f5:09:5b:0b:
         3a:ab:e7:34:6a:ff:c7:0f:13:19:6a:7d:93:da:cf:df:53:d0:
         94:a6:ec:99:bb:25:d0:df:27:88:58:c2:0d:31:14:3c:8e:28:
         39:37:38:95:dd:c9:2b:38:9c:56:dd:c6:02:9f:c3:32:d0:1c:
         ea:7d:07:67:2e:6a:62:f9:7c:78:72:1c:9d:d4:c9:9d:db:3a:
         8a:e9:d5:46:a1:c6:6a:11:27:76:6e:8b:d1:11:70:87:21:81:
         b8:1f:ce:ff:2b:c3:e0:1c:21:a3:81:07:fa:01:5a:aa:91:b7:
         ac:64:68:e1:49:ce:74:ac:e5:0b:24:c8:18:05:3c:23:12:38:
         bf:f7:7f:c4:89:01:be:e5:22:ae:75:ab:80:d5:b3:ef:d0:f6:
         c8:f0:d8:0d:83:f5:e8:9e:ad:21:22:78:75:79:28:ae:a0:e6:
         81:e6:bb:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ONdnCMOT4n3FW4HX8Z0OPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjRiMWYxMzU5MTEwYmZmOTkxZTlhYzZmNTE0NjlmZGNi
NDg3YWYwHhcNMjQwNTA2MTQwMTQyWhcNMjQwNTA3MTQwMTQyWjAzMTEwLwYDVQQD
EygyZWJiM2NkYTg4ZTA1ZWFiMjBjNjk1YzdkMTdmZjAwYjVhOWQyODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r8YPlfHeoXQprraAm4MFGFtSas/
e0Rw878mykK4z1DtMVjqqUZvRuhNA78R+kU83FSWZGJTVNfBN4GBLrtI2newboBg
WHCbcQAGw1cy3965lsQYbO2NuPx1vBApjoQf4HCJTQaV83+KML3xzmKbnRzpJLJc
Y1sVHTQC3I1ZwInhW3WotCxe6JjnQP8aCwIVXQMyDcFSOhfxSCyPEjUCxgsXW827
4K/hOEIN04hHmZOippJfncOq4t7ujApyZZp8PWxvSCP/Cy40PIrgL91OiwRHNGVn
KspR0MVeVTrtDAJP8hlHLe25Jy8KjhqUmGxcqDr/OOEaKJPxGgDE2ld/ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC67PNqI4F6rIMaVx9F/8AtanSg5MB8GA1UdIwQY
MBaAFAAksfE1kRC/+ZHprG9RRp/ctIevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUt
MmRhNjI1ZWI3MjQyLzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUtMmRhNjI1ZWI3MjQy
LzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNxt5TCE
RO28Ze81nWkd2c1V9xAyxFgTdqqYxRr+R53CQomA7IpmfDGqW8dLL7o+5UiIe5Ex
XFTV75lNnYJBq5SItLb+kj1WP6azu82QKEyVDSDMhMv1CVsLOqvnNGr/xw8TGWp9
k9rP31PQlKbsmbsl0N8niFjCDTEUPI4oOTc4ld3JKzicVt3GAp/DMtAc6n0HZy5q
Yvl8eHIcndTJnds6iunVRqHGahEndm6L0RFwhyGBuB/O/yvD4Bwho4EH+gFaqpG3
rGRo4UnOdKzlCyTIGAU8IxI4v/d/xIkBvuUirnWrgNWz79D2yPDYDYP16J6tISJ4
dXkorqDmgea7Ww==
-----END CERTIFICATE-----
Generated at Mon May 6 22:55:53 2024 by rpki-client on console-ams.rpki-client.org