Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File:                     Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier:          cC9Ts0b0ELF/j89hxVmuwMgnEk51JSi4sjmB5i148Rw=
Subject key identifier:   E3:41:2F:F3:D3:40:01:C2:30:99:11:C0:4A:18:01:EF:8C:DC:83:A6
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer:       /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial:       018F3FD7783BB509B4505B866DD70AB4BEF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number:          1152
Signing time:             Fri 03 May 2024 19:03:56 +0000
Manifest this update:     Fri 03 May 2024 19:03:56 +0000
Manifest next update:     Sat 04 May 2024 19:03:56 +0000
Files and hashes:         1: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: XjHEUSLktogws7szym9cKEhG56GfttLtOs6DhvzJ/Lo=)
                          2: W03iCcCnKOn7sZzlXMwT2FOwSb4.roa (hash: yR/deMAlCZnwE1blpTOTt7VtHDxeDVJX7W8XPBlLhQw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d7:78:3b:b5:09:b4:50:5b:86:6d:d7:0a:b4:be:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
        Validity
            Not Before: May  3 19:03:56 2024 GMT
            Not After : May  4 19:03:56 2024 GMT
        Subject: CN=e3412ff3d34001c2309911c04a1801ef8cdc83a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:22:f6:52:26:2d:7e:8c:6d:ff:01:79:82:9d:
                    6e:b7:28:d8:27:7c:b2:70:0d:96:da:39:2d:15:0f:
                    f2:8d:62:1b:3e:8d:de:f8:09:ed:29:77:59:82:31:
                    c9:e6:33:fc:a6:2c:ed:92:cd:5a:1a:c8:78:3b:94:
                    8e:bc:08:81:88:2e:5d:5c:b2:00:ed:b2:dc:c1:c4:
                    cf:78:08:27:25:66:af:4d:6a:a6:ab:fb:4a:5c:61:
                    f6:9d:a7:47:4c:9d:62:de:56:9c:1a:35:b6:45:53:
                    3b:d2:53:60:2a:99:e9:60:8a:08:63:cb:dd:56:da:
                    e0:e9:c2:a6:df:5a:7b:97:80:49:24:34:fe:78:13:
                    77:66:c8:28:43:10:f7:85:0b:37:80:ea:20:ea:fb:
                    45:53:10:ed:44:e8:cd:f7:23:b8:67:97:cd:e9:62:
                    95:e9:15:ce:41:87:4c:f1:27:88:12:50:0a:fb:9e:
                    5e:6f:72:a1:6c:37:18:ad:1f:f0:f9:de:f7:ab:db:
                    54:37:1f:ba:04:09:0a:34:81:92:b6:07:b2:b3:65:
                    d9:0d:da:be:fa:0f:0a:79:4b:ee:96:89:df:b2:30:
                    c9:78:4a:ee:b9:79:12:d4:69:d7:d0:1b:59:53:7e:
                    24:d4:8e:a4:5b:f3:02:e6:54:8d:18:cb:91:1a:cc:
                    48:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:41:2F:F3:D3:40:01:C2:30:99:11:C0:4A:18:01:EF:8C:DC:83:A6
            X509v3 Authority Key Identifier:
                keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:50:40:e8:65:43:4b:84:54:6c:35:32:6d:81:71:fd:52:df:
         0e:f4:1e:c4:fc:71:d7:b0:9a:c6:d8:02:5e:43:3c:89:f5:c3:
         83:48:36:d5:7e:98:2c:ac:b5:25:a6:3e:b1:b6:f9:72:04:95:
         6c:8e:5e:6a:03:5d:d1:9e:77:d8:ec:e8:49:b9:ba:7e:97:7a:
         0c:c5:b2:ab:e7:61:b2:0a:d8:b6:8b:c9:76:fb:04:9e:fe:56:
         35:0f:f5:eb:94:d0:3c:8a:03:b6:0a:5e:e5:d3:05:1d:d1:60:
         9a:23:76:6b:4b:9a:4e:44:87:48:2c:c9:85:73:c1:b4:60:7f:
         48:af:4f:3a:da:b7:71:64:ab:c2:51:a1:ae:63:00:aa:dc:17:
         7d:75:c4:21:88:71:30:3f:60:0b:8f:3a:9e:eb:6b:ec:58:a4:
         a1:f8:21:98:9e:d3:ca:88:17:ce:76:00:49:aa:af:60:9c:f6:
         b8:b5:d5:ff:bd:9b:aa:1d:50:26:86:86:1a:43:73:48:55:b3:
         3c:bf:95:6f:af:51:d1:32:97:d9:f8:19:83:c5:62:eb:bc:d9:
         16:fe:16:79:c7:f6:01:3a:5f:7b:7e:00:6d:92:a5:ab:1d:d5:
         f2:e0:6b:8a:46:14:c8:4d:ce:ae:d7:c5:62:c8:45:fb:34:da:
         9c:93:1e:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8/13g7tQm0UFuGbdcKtL71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YmMzNjQ3ZTFiMjEyNGU5NmI4OGY3MzZlZGQ1ZWY4Y2Fk
ODhmZTMwHhcNMjQwNTAzMTkwMzU2WhcNMjQwNTA0MTkwMzU2WjAzMTEwLwYDVQQD
EyhlMzQxMmZmM2QzNDAwMWMyMzA5OTExYzA0YTE4MDFlZjhjZGM4M2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSL2UiYtfoxt/wF5gp1utyjYJ3yy
cA2W2jktFQ/yjWIbPo3e+AntKXdZgjHJ5jP8piztks1aGsh4O5SOvAiBiC5dXLIA
7bLcwcTPeAgnJWavTWqmq/tKXGH2nadHTJ1i3lacGjW2RVM70lNgKpnpYIoIY8vd
Vtrg6cKm31p7l4BJJDT+eBN3ZsgoQxD3hQs3gOog6vtFUxDtROjN9yO4Z5fN6WKV
6RXOQYdM8SeIElAK+55eb3KhbDcYrR/w+d73q9tUNx+6BAkKNIGStgeys2XZDdq+
+g8KeUvulonfsjDJeEruuXkS1GnX0BtZU34k1I6kW/MC5lSNGMuRGsxI2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONBL/PTQAHCMJkRwEoYAe+M3IOmMB8GA1UdIwQY
MBaAFAm8NkfhshJOlriPc27dXvjK2I/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjkt
NTM1OTUwOTA0N2JjLzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjktNTM1OTUwOTA0N2Jj
LzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelBA6GVD
S4RUbDUybYFx/VLfDvQexPxx17CaxtgCXkM8ifXDg0g21X6YLKy1JaY+sbb5cgSV
bI5eagNd0Z532OzoSbm6fpd6DMWyq+dhsgrYtovJdvsEnv5WNQ/165TQPIoDtgpe
5dMFHdFgmiN2a0uaTkSHSCzJhXPBtGB/SK9POtq3cWSrwlGhrmMAqtwXfXXEIYhx
MD9gC486nutr7FikofghmJ7TyogXznYASaqvYJz2uLXV/72bqh1QJoaGGkNzSFWz
PL+Vb69R0TKX2fgZg8Vi67zZFv4Wecf2ATpfe34AbZKlqx3V8uBrikYUyE3OrtfF
YshF+zTanJMecw==
-----END CERTIFICATE-----
Generated at Fri May 3 23:59:47 2024 by rpki-client on console-ams.rpki-client.org