Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
File:                     KeRudYZejUoIHktd2kbTyUADZ5s.mft (raw, json)
Hash identifier:          oSaRnm8wuo7b5jx2RRDMRt//jhFnkJDN+ruo8SclTNU=
Subject key identifier:   4B:34:BA:96:D8:AE:92:E2:C4:78:84:C4:EE:57:FC:02:0F:29:FF:8B
Authority key identifier: 29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
Certificate issuer:       /CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Certificate serial:       018F89383B9EC80EE70F7735B1405FAED8F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
Manifest number:          1057
Signing time:             Sat 18 May 2024 01:01:54 +0000
Manifest this update:     Sat 18 May 2024 01:01:54 +0000
Manifest next update:     Sun 19 May 2024 01:01:54 +0000
Files and hashes:         1: KeRudYZejUoIHktd2kbTyUADZ5s.crl (hash: 7wVA++pLiot/knnJmlaC4hioDOWpDRk60EXQyX28iIE=)
                          2: dfU5Tt4am3J_hHUteYpGdU46gBg.roa (hash: Lu4UdnmhraDSNY2Rehq+wkU4Juhg1cFoWaYtPIbxrlc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:3b:9e:c8:0e:e7:0f:77:35:b1:40:5f:ae:d8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
        Validity
            Not Before: May 18 01:01:54 2024 GMT
            Not After : May 19 01:01:54 2024 GMT
        Subject: CN=4b34ba96d8ae92e2c47884c4ee57fc020f29ff8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:42:8d:bf:f8:79:f4:7b:56:03:1c:c2:53:
                    e4:4f:7c:a1:70:41:00:89:6e:13:8f:41:7e:15:18:
                    41:24:18:a7:f4:48:74:05:75:57:43:6d:06:f3:d6:
                    ed:28:ff:8e:58:db:f7:5e:d4:0e:be:a2:b3:b7:0a:
                    57:e6:5c:f5:f9:cf:4e:1e:67:99:e8:cd:f8:be:a4:
                    4e:51:0e:0a:04:f6:ee:99:36:ab:67:f8:2b:cf:f1:
                    f4:90:44:5e:d4:df:11:7e:d9:a9:94:7d:16:b2:85:
                    b0:34:d5:b8:1a:80:77:1a:c6:66:86:3f:95:eb:02:
                    01:f6:46:a3:ed:7e:63:97:d9:36:8c:58:d7:54:63:
                    a6:a4:37:f5:fb:8b:f0:24:f3:45:08:3c:4e:50:a2:
                    c8:69:d2:91:e4:d6:02:4a:55:5d:b2:b8:7f:86:d9:
                    9e:66:bc:7d:05:36:b5:11:e0:ed:45:18:50:fa:30:
                    54:4e:44:e5:53:8e:3c:da:d7:1a:a6:73:0e:52:ee:
                    a5:de:80:1e:5f:6a:dc:30:2e:15:ed:0a:d5:fc:e3:
                    02:e1:14:e1:ab:a8:6a:7f:97:21:24:65:58:76:44:
                    5a:ea:d9:6b:db:70:5d:3e:df:cd:74:8a:15:9b:df:
                    c2:59:2f:aa:fc:20:65:87:9a:1d:5e:6f:de:a3:91:
                    55:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:34:BA:96:D8:AE:92:E2:C4:78:84:C4:EE:57:FC:02:0F:29:FF:8B
            X509v3 Authority Key Identifier:
                keyid:29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:99:b8:fe:c0:85:2f:11:b7:a4:57:4a:62:b9:5e:4d:a7:c5:
         68:f9:c0:0a:3a:d9:39:82:a2:57:67:7a:28:b7:be:dc:e0:de:
         2a:67:f4:e4:69:a5:6c:33:e2:b9:ec:2c:83:94:b2:27:2a:07:
         15:2b:00:41:d2:84:c9:b0:93:37:35:39:b3:a4:26:7e:98:a5:
         86:d4:8f:c7:48:66:3b:d6:57:66:a1:77:91:d1:ab:03:e4:ca:
         6d:f3:34:48:45:6b:dd:75:61:0c:3f:16:36:a0:0a:ed:33:69:
         b8:b0:6c:d2:0a:5d:d0:05:21:33:63:41:13:39:12:9e:17:e3:
         b3:b2:90:aa:24:5b:db:73:a9:23:0b:bc:3c:6d:3b:95:3f:26:
         f3:4d:ab:28:fe:1a:b0:4b:9c:b0:f4:7f:12:7c:49:65:c6:e1:
         f9:36:a3:5b:1d:9c:05:45:2a:1d:e9:89:d1:77:45:d9:57:f3:
         81:c4:9e:37:39:7c:b7:32:57:62:29:fb:8d:e5:6e:9e:fe:0c:
         77:36:57:d5:96:f1:c1:b7:2f:60:31:e0:b3:a5:5e:67:29:dd:
         79:ec:6e:ec:69:26:94:53:40:ba:31:1f:8b:85:bc:d6:b3:ed:
         b4:0b:cb:53:36:2a:90:6e:ba:a8:21:e8:f3:65:90:57:99:91:
         23:a9:4e:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JODueyA7nD3c1sUBfrtjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZTQ2ZTc1ODY1ZThkNGEwODFlNGI1ZGRhNDZkM2M5NDAw
MzY3OWIwHhcNMjQwNTE4MDEwMTU0WhcNMjQwNTE5MDEwMTU0WjAzMTEwLwYDVQQD
Eyg0YjM0YmE5NmQ4YWU5MmUyYzQ3ODg0YzRlZTU3ZmMwMjBmMjlmZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkBCjb/4efR7VgMcwlPkT3yhcEEA
iW4Tj0F+FRhBJBin9Eh0BXVXQ20G89btKP+OWNv3XtQOvqKztwpX5lz1+c9OHmeZ
6M34vqROUQ4KBPbumTarZ/grz/H0kERe1N8RftmplH0WsoWwNNW4GoB3GsZmhj+V
6wIB9kaj7X5jl9k2jFjXVGOmpDf1+4vwJPNFCDxOUKLIadKR5NYCSlVdsrh/htme
Zrx9BTa1EeDtRRhQ+jBUTkTlU4482tcapnMOUu6l3oAeX2rcMC4V7QrV/OMC4RTh
q6hqf5chJGVYdkRa6tlr23BdPt/NdIoVm9/CWS+q/CBlh5odXm/eo5FV4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEs0upbYrpLixHiExO5X/AIPKf+LMB8GA1UdIwQY
MBaAFCnkbnWGXo1KCB5LXdpG08lAA2ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kMjM1NGEtZjNjMi00MWQ1LWIyOTIt
YTlkMjY3YWNmNjY0LzEvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9kMjM1NGEtZjNjMi00MWQ1LWIyOTItYTlkMjY3YWNmNjY0
LzEvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5m4/sCF
LxG3pFdKYrleTafFaPnACjrZOYKiV2d6KLe+3ODeKmf05GmlbDPiuewsg5SyJyoH
FSsAQdKEybCTNzU5s6QmfpilhtSPx0hmO9ZXZqF3kdGrA+TKbfM0SEVr3XVhDD8W
NqAK7TNpuLBs0gpd0AUhM2NBEzkSnhfjs7KQqiRb23OpIwu8PG07lT8m802rKP4a
sEucsPR/EnxJZcbh+TajWx2cBUUqHemJ0XdF2VfzgcSeNzl8tzJXYin7jeVunv4M
dzZX1ZbxwbcvYDHgs6VeZyndeexu7GkmlFNAujEfi4W81rPttAvLUzYqkG66qCHo
82WQV5mRI6lOpA==
-----END CERTIFICATE-----
Generated at Sat May 18 01:51:34 2024 by rpki-client on console-fra.rpki-client.org