Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/900f41-a2df-4d33-a96d-20f2dcfc853f/1/5A_iJBFqnxnTNyf963rPgjQbpgM.mft
File:                     5A_iJBFqnxnTNyf963rPgjQbpgM.mft (raw, json)
Hash identifier:          X1EcNy17cFrWbJ0eLkxIFCZVB5KIJQovVlQkj402sA4=
Subject key identifier:   5B:65:81:D2:2A:6C:9B:4F:19:A8:5B:69:C7:E0:36:47:7D:A4:38:9B
Authority key identifier: E4:0F:E2:24:11:6A:9F:19:D3:37:27:FD:EB:7A:CF:82:34:1B:A6:03
Certificate issuer:       /CN=e40fe224116a9f19d33727fdeb7acf82341ba603
Certificate serial:       018F429FC972919FB51F89B7FA15C1092F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5A_iJBFqnxnTNyf963rPgjQbpgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/900f41-a2df-4d33-a96d-20f2dcfc853f/1/5A_iJBFqnxnTNyf963rPgjQbpgM.mft
Manifest number:          10E4
Signing time:             Sat 04 May 2024 08:01:59 +0000
Manifest this update:     Sat 04 May 2024 08:01:59 +0000
Manifest next update:     Sun 05 May 2024 08:01:59 +0000
Files and hashes:         1: 5A_iJBFqnxnTNyf963rPgjQbpgM.crl (hash: r7B5C0NjMTtmXpppB6T/PyN3a+hyW7sR7hxP7Jq59NM=)
                          2: Jclb9IqPYP9q9iR1RRxqGP9EA8k.roa (hash: 1FsoQmZjMpo1ItTO6H2OoLtjrzUxXJnJvyFBkRBH43k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/900f41-a2df-4d33-a96d-20f2dcfc853f/1/5A_iJBFqnxnTNyf963rPgjQbpgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/900f41-a2df-4d33-a96d-20f2dcfc853f/1/5A_iJBFqnxnTNyf963rPgjQbpgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5A_iJBFqnxnTNyf963rPgjQbpgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:9f:c9:72:91:9f:b5:1f:89:b7:fa:15:c1:09:2f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e40fe224116a9f19d33727fdeb7acf82341ba603
        Validity
            Not Before: May  4 08:01:59 2024 GMT
            Not After : May  5 08:01:59 2024 GMT
        Subject: CN=5b6581d22a6c9b4f19a85b69c7e036477da4389b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:2e:96:fb:21:08:a5:c4:66:46:df:71:d3:
                    b6:a3:0e:92:ee:c5:6c:c8:5d:22:77:93:05:42:e9:
                    1a:0b:24:a8:4e:d9:40:7a:76:58:a6:85:d2:70:6d:
                    fe:ac:ca:4f:83:a4:f4:4d:21:72:62:26:66:9b:c9:
                    7b:6c:42:eb:0d:c5:4b:fe:89:6f:ff:2a:11:14:18:
                    23:be:64:d3:99:f8:2c:43:83:b3:36:95:2e:25:0c:
                    7d:28:d8:d3:65:70:ec:6a:86:88:87:d4:7d:62:8b:
                    f9:bd:c2:16:ca:71:fc:5b:9e:a2:b0:9a:4e:0c:b1:
                    0d:ea:db:ba:66:a4:73:45:51:f1:75:e4:d3:e1:36:
                    78:43:59:9d:56:38:2a:35:3b:fb:2b:4c:25:c0:68:
                    e0:7a:e4:41:7d:4b:29:99:c5:76:c8:1b:1f:f4:f8:
                    f9:06:2c:48:8b:fa:a1:58:79:64:59:3b:f7:b3:21:
                    9c:e1:9d:34:cc:5e:08:e5:b2:5e:f3:e9:ba:21:e5:
                    f0:d7:98:ba:4e:40:8b:3e:df:17:c2:17:7d:9a:6c:
                    59:06:ff:4b:f1:da:45:75:a4:b6:ad:94:d0:61:f9:
                    44:9b:1c:29:c4:2f:58:c9:17:14:0d:f8:a3:31:1e:
                    44:52:03:88:f7:39:c3:de:b5:4d:74:c2:58:a8:2d:
                    2b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:65:81:D2:2A:6C:9B:4F:19:A8:5B:69:C7:E0:36:47:7D:A4:38:9B
            X509v3 Authority Key Identifier:
                keyid:E4:0F:E2:24:11:6A:9F:19:D3:37:27:FD:EB:7A:CF:82:34:1B:A6:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5A_iJBFqnxnTNyf963rPgjQbpgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/900f41-a2df-4d33-a96d-20f2dcfc853f/1/5A_iJBFqnxnTNyf963rPgjQbpgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/900f41-a2df-4d33-a96d-20f2dcfc853f/1/5A_iJBFqnxnTNyf963rPgjQbpgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:44:6d:5c:55:6f:e5:05:0e:72:44:62:15:f1:2d:c7:fb:57:
         1c:4f:93:69:ab:21:18:ef:ca:81:39:0b:2b:2a:e7:dd:5f:d8:
         d5:4e:26:aa:fd:84:ea:b1:05:36:92:1a:5a:18:0f:e6:ce:d2:
         35:1e:b7:96:f1:fe:83:a5:d6:6d:72:9d:e6:b3:5b:44:28:49:
         2e:90:a2:2f:ee:a1:4c:4e:ca:a3:3f:b3:f1:20:df:1f:e5:3c:
         68:c8:7e:5d:22:0e:2b:ed:3c:85:75:87:5a:4a:57:f4:3b:b5:
         df:e7:b7:cd:f7:b3:26:9a:d5:dd:07:9b:1d:da:b1:6a:2f:89:
         9c:27:35:d5:81:73:c4:69:b1:54:0f:8f:8b:e0:d7:80:1a:c7:
         c7:3b:dd:5d:06:e4:2d:d2:38:28:e5:e7:43:c5:03:9c:7e:38:
         30:76:4b:b2:aa:ea:76:7f:f6:17:db:7f:79:b6:0d:09:47:6d:
         ab:db:ca:9f:b9:16:8d:be:44:c2:7e:73:06:6f:62:b6:c0:0c:
         5f:cb:76:b5:94:50:38:13:ee:14:9f:36:07:08:21:13:23:cf:
         a6:d3:d2:d9:99:f6:36:91:97:5a:d3:2c:9b:71:2f:cb:01:3e:
         b7:16:e8:ad:ff:b3:6d:a6:24:f0:bc:31:c9:ba:7b:85:3d:88:
         46:7f:f6:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9Cn8lykZ+1H4m3+hXBCS8NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MGZlMjI0MTE2YTlmMTlkMzM3MjdmZGViN2FjZjgyMzQx
YmE2MDMwHhcNMjQwNTA0MDgwMTU5WhcNMjQwNTA1MDgwMTU5WjAzMTEwLwYDVQQD
Eyg1YjY1ODFkMjJhNmM5YjRmMTlhODViNjljN2UwMzY0NzdkYTQzODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4MulvshCKXEZkbfcdO2ow6S7sVs
yF0id5MFQukaCySoTtlAenZYpoXScG3+rMpPg6T0TSFyYiZmm8l7bELrDcVL/olv
/yoRFBgjvmTTmfgsQ4OzNpUuJQx9KNjTZXDsaoaIh9R9Yov5vcIWynH8W56isJpO
DLEN6tu6ZqRzRVHxdeTT4TZ4Q1mdVjgqNTv7K0wlwGjgeuRBfUspmcV2yBsf9Pj5
BixIi/qhWHlkWTv3syGc4Z00zF4I5bJe8+m6IeXw15i6TkCLPt8Xwhd9mmxZBv9L
8dpFdaS2rZTQYflEmxwpxC9YyRcUDfijMR5EUgOI9znD3rVNdMJYqC0rpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtlgdIqbJtPGahbacfgNkd9pDibMB8GA1UdIwQY
MBaAFOQP4iQRap8Z0zcn/et6z4I0G6YDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUFfaUpCRnFueG5UTnlmOTYzclBnalFicGdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85MDBmNDEtYTJkZi00ZDMzLWE5NmQt
MjBmMmRjZmM4NTNmLzEvNUFfaUpCRnFueG5UTnlmOTYzclBnalFicGdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC85MDBmNDEtYTJkZi00ZDMzLWE5NmQtMjBmMmRjZmM4NTNm
LzEvNUFfaUpCRnFueG5UTnlmOTYzclBnalFicGdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHURtXFVv
5QUOckRiFfEtx/tXHE+TaashGO/KgTkLKyrn3V/Y1U4mqv2E6rEFNpIaWhgP5s7S
NR63lvH+g6XWbXKd5rNbRChJLpCiL+6hTE7Koz+z8SDfH+U8aMh+XSIOK+08hXWH
WkpX9Du13+e3zfezJprV3QebHdqxai+JnCc11YFzxGmxVA+Pi+DXgBrHxzvdXQbk
LdI4KOXnQ8UDnH44MHZLsqrqdn/2F9t/ebYNCUdtq9vKn7kWjb5Ewn5zBm9itsAM
X8t2tZRQOBPuFJ82BwghEyPPptPS2Zn2NpGXWtMsm3EvywE+txborf+zbaYk8Lwx
ybp7hT2IRn/2cA==
-----END CERTIFICATE-----
Generated at Sat May 4 09:01:06 2024 by rpki-client on console-ams.rpki-client.org