Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File:                     02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier:          HNCo2kDR7lyXTtRRUFdLrbzZhyUrdswRVnQWr1O6lRg=
Subject key identifier:   05:B2:6D:E4:B6:92:B5:6D:35:C6:94:2B:A8:31:C3:35:E1:7E:63:C1
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer:       /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial:       018F24263DACC08B9D8C4BB26C187880A799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number:          0504
Signing time:             Sun 28 Apr 2024 10:00:36 +0000
Manifest this update:     Sun 28 Apr 2024 10:00:36 +0000
Manifest next update:     Mon 29 Apr 2024 10:00:36 +0000
Files and hashes:         1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: bLc1i3tW/Xug99rAp0aLOUK9AF4jgOusjfA8iKA8T3w=)
                          2: DnEKBj9uR_VSVGs4VNLrCNQGcF0.roa (hash: +bQjyLXVU2q0njBk0leR4X/Let5ZaqtUsoK9QqYHiYI=)
                          3: MKk7qhfDIivXkUiKToqwYo6mF50.roa (hash: PgGFv1SbxWcAA3ouyDIq8STID1zgNS8Z3onlFirs0D0=)
                          4: tOK2T1fH_kLHDuCwLmZwl7w1yoI.roa (hash: bRLLlFasc1DelnqRYybV6/popuy/KnonljbQ3bPmIdE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:24:26:3d:ac:c0:8b:9d:8c:4b:b2:6c:18:78:80:a7:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
        Validity
            Not Before: Apr 28 10:00:36 2024 GMT
            Not After : Apr 29 10:00:36 2024 GMT
        Subject: CN=05b26de4b692b56d35c6942ba831c335e17e63c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:eb:b9:16:a7:6d:fe:17:10:a9:bc:03:cc:da:
                    c9:9a:f8:c6:40:cd:c8:8c:d4:5c:4b:61:b4:72:d3:
                    7d:43:04:bd:a3:ab:a4:d1:bb:61:1e:d4:7e:3c:14:
                    a9:51:a6:98:8a:bb:f6:db:4e:78:e5:98:c2:23:42:
                    7c:c2:f1:1a:3d:53:03:7b:8b:19:7c:74:f7:cb:1c:
                    78:4d:92:ad:b0:4e:c7:2a:2a:8c:12:51:db:33:c8:
                    5d:7d:cc:33:e5:e3:13:47:a8:01:4a:4d:71:04:85:
                    02:c3:b2:96:7d:78:72:aa:35:86:8c:a8:a6:09:37:
                    2c:34:6f:61:2f:3c:89:da:11:37:6f:cd:c8:54:7d:
                    25:b8:ef:32:d1:71:52:a2:8b:b5:af:41:b6:44:f0:
                    8f:c1:9d:3f:1e:f4:b4:0f:df:62:02:82:d7:20:3e:
                    ef:bf:b0:3a:f9:34:82:63:42:c1:fc:a9:7f:5e:b9:
                    0f:1e:df:6f:7d:6f:20:ba:d1:0a:15:54:de:bc:f9:
                    5a:d3:2a:29:07:33:f6:a6:42:24:2e:5b:32:8c:80:
                    a7:1f:5b:e2:4f:f3:e3:03:8a:17:64:b6:12:b0:9d:
                    b7:56:7b:13:b1:e5:f8:1c:05:3e:31:a3:70:6a:85:
                    e0:2e:7a:d2:33:2f:5c:c4:72:4c:65:de:d8:10:a5:
                    6a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B2:6D:E4:B6:92:B5:6D:35:C6:94:2B:A8:31:C3:35:E1:7E:63:C1
            X509v3 Authority Key Identifier:
                keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:56:12:05:b8:27:b0:af:cb:21:e1:b1:bb:c7:81:ce:56:d0:
         4d:83:1d:e6:e2:3e:f3:2b:ee:80:4a:d9:88:75:3d:cd:00:7c:
         75:60:c6:da:b9:3c:d8:0f:b9:9c:05:50:cd:bb:e6:0c:9f:cf:
         62:a0:00:2c:77:a9:e1:40:e7:b4:20:a4:ef:95:40:1a:bf:fe:
         c7:67:d0:12:64:cb:8f:82:48:25:ea:a8:32:e0:2c:f3:5b:8d:
         87:18:33:aa:02:cf:ad:81:a1:14:09:fa:24:79:ac:da:f2:ab:
         f7:0d:8b:8c:e6:f2:ed:31:8d:d5:60:45:3f:4b:b1:2d:93:ec:
         68:cb:fc:19:c5:ba:6b:b9:f9:4e:06:e0:fb:43:16:3f:24:b9:
         bb:f6:c5:e7:02:34:a9:80:16:99:97:6b:66:fe:6f:92:45:01:
         1d:f4:0c:31:17:77:2a:ea:c6:7e:48:ab:44:f2:a2:b3:35:30:
         cf:6c:0b:a2:7b:0a:19:3a:ba:bb:ce:1f:27:91:23:00:70:bc:
         ce:b4:f1:d6:c5:f3:ff:c1:fc:08:7b:ae:0d:d2:dc:c5:ba:91:
         c0:62:81:49:08:4d:51:dd:27:53:03:54:93:a7:f5:b4:5d:ad:
         78:ff:0d:df:8e:cb:87:42:ed:81:f5:0d:8f:2f:a3:9d:f8:e6:
         51:7c:7a:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8kJj2swIudjEuybBh4gKeZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNmJmZDkyOGJjY2I0MmFkOWM0NjhhNTUyYWI3MzkzZmRk
ODcwOTUwHhcNMjQwNDI4MTAwMDM2WhcNMjQwNDI5MTAwMDM2WjAzMTEwLwYDVQQD
EygwNWIyNmRlNGI2OTJiNTZkMzVjNjk0MmJhODMxYzMzNWUxN2U2M2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeu5Fqdt/hcQqbwDzNrJmvjGQM3I
jNRcS2G0ctN9QwS9o6uk0bthHtR+PBSpUaaYirv220545ZjCI0J8wvEaPVMDe4sZ
fHT3yxx4TZKtsE7HKiqMElHbM8hdfcwz5eMTR6gBSk1xBIUCw7KWfXhyqjWGjKim
CTcsNG9hLzyJ2hE3b83IVH0luO8y0XFSoou1r0G2RPCPwZ0/HvS0D99iAoLXID7v
v7A6+TSCY0LB/Kl/XrkPHt9vfW8gutEKFVTevPla0yopBzP2pkIkLlsyjICnH1vi
T/PjA4oXZLYSsJ23VnsTseX4HAU+MaNwaoXgLnrSMy9cxHJMZd7YEKVqWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWybeS2krVtNcaUK6gxwzXhfmPBMB8GA1UdIwQY
MBaAFNNr/ZKLzLQq2cRopVKrc5P92HCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jN2FhMmEtMDkwYy00Zjc3LTlkNjkt
YTc0ZTRhODg3ODA0LzEvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9jN2FhMmEtMDkwYy00Zjc3LTlkNjktYTc0ZTRhODg3ODA0
LzEvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFYSBbgn
sK/LIeGxu8eBzlbQTYMd5uI+8yvugErZiHU9zQB8dWDG2rk82A+5nAVQzbvmDJ/P
YqAALHep4UDntCCk75VAGr/+x2fQEmTLj4JIJeqoMuAs81uNhxgzqgLPrYGhFAn6
JHms2vKr9w2LjOby7TGN1WBFP0uxLZPsaMv8GcW6a7n5Tgbg+0MWPyS5u/bF5wI0
qYAWmZdrZv5vkkUBHfQMMRd3KurGfkirRPKiszUwz2wLonsKGTq6u84fJ5EjAHC8
zrTx1sXz/8H8CHuuDdLcxbqRwGKBSQhNUd0nUwNUk6f1tF2teP8N347Lh0LtgfUN
jy+jnfjmUXx6EA==
-----END CERTIFICATE-----
Generated at Sun Apr 28 12:25:18 2024 by rpki-client on console-ams.rpki-client.org