Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File:                     4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier:          oah3+tHLCKWt9byObO2Adwzk4vd2I+Z8GmrzJ6XhDls=
Subject key identifier:   BA:A4:FB:55:F3:DA:55:EE:62:5C:BF:E6:10:B2:2D:FE:8E:2F:A3:79
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer:       /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial:       018F3DE6D3FAF94CF827FFF7E8EECE21A7EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number:          057D
Signing time:             Fri 03 May 2024 10:01:28 +0000
Manifest this update:     Fri 03 May 2024 10:01:28 +0000
Manifest next update:     Sat 04 May 2024 10:01:28 +0000
Files and hashes:         1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: ASeJ4Qc+MxYu5h+0brNEwVvUXzSd1L/Driqr4E9iycs=)
                          2: vZI6cCFk8HUzkkeunJCMog6cXCY.roa (hash: NwVpmKMVYt44W1EXcszcBLpMTEiAz3MhriFSAcZ+Exk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e6:d3:fa:f9:4c:f8:27:ff:f7:e8:ee:ce:21:a7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
        Validity
            Not Before: May  3 10:01:28 2024 GMT
            Not After : May  4 10:01:28 2024 GMT
        Subject: CN=baa4fb55f3da55ee625cbfe610b22dfe8e2fa379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:24:24:5a:6f:47:79:b7:e3:23:be:7c:4c:
                    6c:9a:b3:50:09:f4:85:4e:56:e0:18:cc:9c:b7:c5:
                    28:2c:46:69:3d:e8:fc:9d:db:34:3c:12:da:90:2a:
                    fe:88:2d:8b:17:eb:f1:fa:4c:21:23:81:2d:83:46:
                    8c:92:ed:11:f2:37:85:5e:73:d9:2a:51:b8:74:e5:
                    38:0e:84:32:e5:a5:be:6d:24:9e:ef:14:10:14:d4:
                    1e:44:36:2b:3d:03:2b:b4:67:d4:4e:68:1a:69:a3:
                    80:c2:49:b8:07:57:e9:02:98:4f:1e:9a:48:97:4b:
                    6a:8d:c2:77:83:4a:90:bc:5d:f6:66:00:fa:4f:85:
                    59:55:15:ac:95:38:40:24:08:46:f0:ac:d2:91:6f:
                    a5:d7:55:97:ea:7a:47:dc:0c:3e:90:5f:65:c2:74:
                    04:97:26:50:fa:57:0c:19:24:be:c4:9d:e2:82:f7:
                    85:c4:2e:d5:22:7c:e1:e8:f4:5d:d6:ba:0a:79:49:
                    26:24:1d:3e:63:0e:5e:f4:ee:a2:1a:55:63:80:90:
                    17:0a:6a:d5:f3:02:27:bf:82:de:78:72:0a:df:a6:
                    80:be:31:46:6f:b4:af:2d:1a:70:31:a8:78:62:1e:
                    44:a5:91:b5:47:be:b4:e3:66:af:eb:21:3b:91:dd:
                    7e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A4:FB:55:F3:DA:55:EE:62:5C:BF:E6:10:B2:2D:FE:8E:2F:A3:79
            X509v3 Authority Key Identifier:
                keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:86:3f:f2:e2:23:91:44:87:d9:24:af:a3:6f:d0:1d:6e:c7:
         74:c6:2d:9c:cd:74:dc:87:0c:b6:4e:c0:25:74:28:c7:19:5d:
         70:f1:c1:7b:46:6d:da:dd:e7:0f:84:8b:c8:80:3f:75:ef:21:
         b8:96:c2:77:62:00:2f:d6:4c:a4:63:80:d5:8e:3d:1d:56:4b:
         2b:9f:0d:91:ca:f7:0e:0a:7d:c6:bc:b3:3a:7b:09:b9:90:37:
         ca:46:8f:02:f0:59:1b:35:f4:07:c6:9f:10:43:4e:d0:0d:a5:
         08:eb:d9:a6:e8:a2:34:4c:fa:08:3b:08:87:cf:f6:85:93:ea:
         b2:66:10:27:4a:69:87:35:9e:f4:8a:23:16:ee:f6:08:75:46:
         67:f6:8f:a7:80:a3:fc:ce:27:f5:32:fd:4b:cb:70:e4:8d:08:
         d6:86:d6:e7:e6:0a:b5:0c:67:fe:38:23:60:40:c8:4b:40:88:
         ef:db:55:0c:46:1f:82:69:e5:40:5e:e9:0f:be:a6:57:6d:a1:
         51:5c:82:df:f9:cd:d2:20:4f:29:64:4c:f9:7d:f8:9e:8f:73:
         7f:38:25:7e:ae:56:75:80:7d:e6:ac:22:59:73:e8:2e:d9:29:
         3e:2b:ba:d8:4f:ee:d7:7f:19:aa:b4:6b:7d:da:72:91:ff:84:
         c3:ae:d0:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY895tP6+Uz4J//36O7OIafsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNmI2MTg1MTY1MmZjOGZlZGMwMTFhNmYyMmY3YWU5YjZi
ZWIwYTMwHhcNMjQwNTAzMTAwMTI4WhcNMjQwNTA0MTAwMTI4WjAzMTEwLwYDVQQD
EyhiYWE0ZmI1NWYzZGE1NWVlNjI1Y2JmZTYxMGIyMmRmZThlMmZhMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCAkJFpvR3m34yO+fExsmrNQCfSF
TlbgGMyct8UoLEZpPej8nds0PBLakCr+iC2LF+vx+kwhI4Etg0aMku0R8jeFXnPZ
KlG4dOU4DoQy5aW+bSSe7xQQFNQeRDYrPQMrtGfUTmgaaaOAwkm4B1fpAphPHppI
l0tqjcJ3g0qQvF32ZgD6T4VZVRWslThAJAhG8KzSkW+l11WX6npH3Aw+kF9lwnQE
lyZQ+lcMGSS+xJ3igveFxC7VInzh6PRd1roKeUkmJB0+Yw5e9O6iGlVjgJAXCmrV
8wInv4LeeHIK36aAvjFGb7SvLRpwMah4Yh5EpZG1R76042av6yE7kd1+ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqk+1Xz2lXuYly/5hCyLf6OL6N5MB8GA1UdIwQY
MBaAFOJrYYUWUvyP7cARpvIveum2vrCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG10aGhSWlNfSV90d0JHbThpOTY2YmEtc0tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9kNzA4MzMtNjhlYi00MTAwLTkxMjMt
OTRlMWFiNTc1MDk0LzEvNG10aGhSWlNfSV90d0JHbThpOTY2YmEtc0tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9kNzA4MzMtNjhlYi00MTAwLTkxMjMtOTRlMWFiNTc1MDk0
LzEvNG10aGhSWlNfSV90d0JHbThpOTY2YmEtc0tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYY/8uIj
kUSH2SSvo2/QHW7HdMYtnM103IcMtk7AJXQoxxldcPHBe0Zt2t3nD4SLyIA/de8h
uJbCd2IAL9ZMpGOA1Y49HVZLK58Nkcr3Dgp9xryzOnsJuZA3ykaPAvBZGzX0B8af
EENO0A2lCOvZpuiiNEz6CDsIh8/2hZPqsmYQJ0pphzWe9IojFu72CHVGZ/aPp4Cj
/M4n9TL9S8tw5I0I1obW5+YKtQxn/jgjYEDIS0CI79tVDEYfgmnlQF7pD76mV22h
UVyC3/nN0iBPKWRM+X34no9zfzglfq5WdYB95qwiWXPoLtkpPiu62E/u138ZqrRr
fdpykf+Ew67QYA==
-----END CERTIFICATE-----
Generated at Fri May 3 12:24:46 2024 by rpki-client on console-fra.rpki-client.org