Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File:                     CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier:          yp2qprI52jyLx8MjXkZZtrJOWVfIDo3XYDJcHIAve0g=
Subject key identifier:   A8:85:72:4F:D4:57:A4:DF:D6:40:08:A7:AA:BB:C4:F6:5B:F5:CA:98
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer:       /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial:       018F51382156529A6F391DA234E64A18C5CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number:          0D98
Signing time:             Tue 07 May 2024 04:03:03 +0000
Manifest this update:     Tue 07 May 2024 04:03:03 +0000
Manifest next update:     Wed 08 May 2024 04:03:03 +0000
Files and hashes:         1: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: aAHZ1g426A3SfAgJInbT0oAFMxU26vLs2faeeVcyZxg=)
                          2: ndPSPSpU2ABTDFk69DnGzO2CqI0.roa (hash: +IvNIU1Pvak6JKK1m7EcozXvT6C9YWy1R4B5moK5WOw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:38:21:56:52:9a:6f:39:1d:a2:34:e6:4a:18:c5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
        Validity
            Not Before: May  7 04:03:03 2024 GMT
            Not After : May  8 04:03:03 2024 GMT
        Subject: CN=a885724fd457a4dfd64008a7aabbc4f65bf5ca98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:8c:9d:24:10:db:dc:5d:fe:7b:2e:e8:d1:
                    5e:35:c8:eb:cd:06:a7:3d:0c:50:7d:d6:1e:b9:56:
                    cc:3e:bc:c4:44:5e:9b:af:df:58:93:7d:38:27:a0:
                    5a:18:e5:5a:8b:94:35:10:51:57:ab:69:84:de:96:
                    10:63:95:13:a0:2f:67:e6:c8:86:b7:f5:d9:48:76:
                    d7:ef:90:ed:08:8c:af:47:7d:48:04:08:fe:bd:90:
                    10:e7:d2:2e:82:4f:db:76:d6:3d:4b:e8:65:e1:cb:
                    de:3d:1d:b5:97:e8:4a:49:9c:4a:52:03:6b:9f:a0:
                    36:16:3a:41:8e:2d:3b:a7:ed:da:2a:c1:af:3e:0d:
                    91:75:8b:cd:63:ea:8b:79:84:cd:4a:50:ff:41:1b:
                    0a:af:46:6a:6e:7e:d7:ad:ca:eb:3d:e4:f1:df:ee:
                    49:2e:48:21:46:b3:df:69:d9:0f:fc:25:f8:a3:87:
                    5c:db:51:35:e4:7e:a0:b7:cf:9d:1e:33:92:2e:4c:
                    79:56:ca:b2:07:9e:f7:95:6a:ae:68:4a:2a:4e:df:
                    5f:02:2e:d6:d0:72:0c:11:6f:dd:00:72:33:f7:4d:
                    24:60:ba:dd:bb:9f:52:ed:76:97:59:59:61:c6:b8:
                    99:d5:1e:b4:7b:cb:1b:c0:8b:42:b1:1e:b8:01:64:
                    2a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:85:72:4F:D4:57:A4:DF:D6:40:08:A7:AA:BB:C4:F6:5B:F5:CA:98
            X509v3 Authority Key Identifier:
                keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:53:8c:a5:79:71:e9:12:62:a1:69:94:21:57:af:61:4b:69:
         c9:b4:de:d2:2e:2e:59:ca:6c:0b:62:b5:86:4a:46:76:54:a1:
         4e:44:9b:1c:e2:b6:b1:b0:bf:38:00:ce:2a:23:6a:33:93:88:
         e1:6b:ac:ed:99:6c:be:1a:10:ee:31:fc:3a:e5:eb:49:8c:4c:
         8a:c5:9d:f0:72:88:96:8f:d5:80:1e:40:09:8a:e9:83:6d:cf:
         91:9e:cc:a4:be:7b:78:90:3a:ad:4a:f3:88:bb:39:4f:c9:ea:
         df:17:87:5b:46:bd:8d:c2:1f:bd:1c:bd:d2:38:37:9c:6b:29:
         40:29:94:e1:62:29:d3:4f:2f:5b:e0:a2:d3:13:3e:7b:9b:03:
         80:b0:df:e1:57:3b:10:10:93:7c:b1:fa:11:14:9b:ad:af:5e:
         41:f1:97:9f:75:9b:25:ef:0a:71:fc:4a:5c:75:43:1f:d4:3d:
         0b:28:d3:c6:6c:6d:6b:48:63:54:04:54:2c:d6:4f:46:01:72:
         e3:b4:ed:36:1b:a0:ed:74:94:47:24:39:b7:7b:cc:19:e3:47:
         87:65:8b:7e:05:f4:0f:58:55:2d:85:38:aa:26:7d:ce:18:1e:
         7e:cf:e8:33:23:db:8c:b2:af:de:7f:98:7a:db:65:50:17:36:
         d4:f5:9f:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ROCFWUppvOR2iNOZKGMXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzk2OWNkYzBiNWZmMDlkMTk5YmNhNWRhZGRiOWFhYjUx
MDQwZTcwHhcNMjQwNTA3MDQwMzAzWhcNMjQwNTA4MDQwMzAzWjAzMTEwLwYDVQQD
EyhhODg1NzI0ZmQ0NTdhNGRmZDY0MDA4YTdhYWJiYzRmNjViZjVjYTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9eMnSQQ29xd/nsu6NFeNcjrzQan
PQxQfdYeuVbMPrzERF6br99Yk304J6BaGOVai5Q1EFFXq2mE3pYQY5UToC9n5siG
t/XZSHbX75DtCIyvR31IBAj+vZAQ59Iugk/bdtY9S+hl4cvePR21l+hKSZxKUgNr
n6A2FjpBji07p+3aKsGvPg2RdYvNY+qLeYTNSlD/QRsKr0Zqbn7XrcrrPeTx3+5J
LkghRrPfadkP/CX4o4dc21E15H6gt8+dHjOSLkx5VsqyB573lWquaEoqTt9fAi7W
0HIMEW/dAHIz900kYLrdu59S7XaXWVlhxriZ1R60e8sbwItCsR64AWQqwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiFck/UV6Tf1kAIp6q7xPZb9cqYMB8GA1UdIwQY
MBaAFAs5ac3Atf8J0Zm8pdrduaq1EEDnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYt
NmJiNGZlZTg1NzM1LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYtNmJiNGZlZTg1NzM1
LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1OMpXlx
6RJioWmUIVevYUtpybTe0i4uWcpsC2K1hkpGdlShTkSbHOK2sbC/OADOKiNqM5OI
4Wus7ZlsvhoQ7jH8OuXrSYxMisWd8HKIlo/VgB5ACYrpg23PkZ7MpL57eJA6rUrz
iLs5T8nq3xeHW0a9jcIfvRy90jg3nGspQCmU4WIp008vW+Ci0xM+e5sDgLDf4Vc7
EBCTfLH6ERSbra9eQfGXn3WbJe8KcfxKXHVDH9Q9CyjTxmxta0hjVARULNZPRgFy
47TtNhug7XSURyQ5t3vMGeNHh2WLfgX0D1hVLYU4qiZ9zhgefs/oMyPbjLKv3n+Y
ettlUBc21PWfuw==
-----END CERTIFICATE-----
Generated at Tue May 7 11:59:58 2024 by rpki-client on console-ams.rpki-client.org