Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File:                     1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier:          VXtDB/N/mm2AWhKeWYyDqh+axMAeOlcYQnI6yaTTiMw=
Subject key identifier:   45:1B:59:66:CB:96:FC:84:79:82:2E:C7:D8:B9:0C:DF:2E:60:94:38
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer:       /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial:       018F88920FB0B725D4EEB6E2D7C9A4942665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number:          010B
Signing time:             Fri 17 May 2024 22:00:24 +0000
Manifest this update:     Fri 17 May 2024 22:00:24 +0000
Manifest next update:     Sat 18 May 2024 22:00:24 +0000
Files and hashes:         1: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: h2GDR98/Yc6NQf9HL/6h0FcYjg7/QGpSOJZnMkYQz8E=)
                          2: BchWUQYlasianl7it3pUaDsDp5s.roa (hash: ojh1KBPpVGiiPefZ+3s7ecODRItv/NQ962XYYRgKrLo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:0f:b0:b7:25:d4:ee:b6:e2:d7:c9:a4:94:26:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
        Validity
            Not Before: May 17 22:00:24 2024 GMT
            Not After : May 18 22:00:24 2024 GMT
        Subject: CN=451b5966cb96fc8479822ec7d8b90cdf2e609438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:31:a5:69:d1:96:22:fa:f5:65:6a:7a:6c:0d:
                    4e:7e:ce:6e:4b:84:87:93:cb:dd:c5:4a:d2:ee:d6:
                    52:1b:37:51:35:4d:1e:c7:a1:86:18:28:08:50:8c:
                    b0:e1:37:57:8a:6a:95:01:65:a2:3e:a5:da:fc:ba:
                    1e:af:36:a2:75:ed:1e:1e:a9:a1:98:8d:91:7f:7e:
                    b5:29:46:17:7e:5a:2b:e5:43:04:56:24:d6:39:b4:
                    8a:c3:c8:ec:b6:fd:02:39:0e:95:e3:55:e8:ad:4f:
                    e6:cc:b3:ab:9a:f6:0f:12:d1:ea:ec:03:cf:d9:1d:
                    6e:63:7c:83:d6:40:d5:31:52:df:7e:51:67:23:44:
                    22:4d:1c:0b:3f:10:37:1e:05:b8:5b:b2:7a:34:73:
                    35:2d:89:03:78:2e:b7:e9:c7:61:be:ca:bd:48:d1:
                    9e:37:80:cb:b7:86:c1:ab:81:a8:bb:6f:2d:4b:85:
                    5e:e9:6c:15:5b:50:31:70:32:cf:bd:7d:a6:e1:28:
                    44:f7:8a:0a:bf:a2:34:71:e2:6e:1c:df:84:ca:dc:
                    a0:6e:93:34:11:b1:38:25:e4:df:5b:0f:31:98:df:
                    da:de:49:43:74:35:d8:9d:fe:56:58:88:73:ed:c3:
                    3b:1a:85:d1:01:9a:65:ee:e7:18:43:e7:8b:69:dc:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1B:59:66:CB:96:FC:84:79:82:2E:C7:D8:B9:0C:DF:2E:60:94:38
            X509v3 Authority Key Identifier:
                keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:13:01:de:f5:e4:5f:28:f8:a0:9b:c7:70:ff:a2:ae:18:96:
         e6:df:d3:c5:80:84:e4:98:81:3a:24:1e:a2:fa:39:06:10:ee:
         ad:1c:40:d3:b1:1a:c8:3a:3e:20:40:db:88:b4:5c:8f:4a:27:
         21:10:59:2f:dd:a5:56:66:0b:c4:fb:df:a1:5b:7e:45:87:29:
         fa:35:55:af:9c:5b:7f:7b:30:82:62:8a:1b:88:1b:3c:08:56:
         9e:e7:60:bd:30:b9:48:6d:05:20:51:6d:84:23:a7:de:14:e7:
         dc:b0:aa:f6:bf:52:8f:4e:10:42:23:61:ec:3a:f7:c4:f1:be:
         df:10:94:82:57:4e:e6:80:8e:7b:99:17:9a:10:26:2a:a2:0f:
         6e:1b:78:60:38:ab:9f:5b:8c:fe:d7:89:a3:24:24:f9:3f:3e:
         c5:13:91:c5:4c:76:e6:c0:72:ad:1a:c0:95:c7:67:13:1b:a1:
         32:ce:f9:a7:c2:a4:37:fd:9c:5d:f9:23:34:d9:d1:75:86:5f:
         de:16:36:fe:8a:4f:2d:e8:65:27:63:75:3c:02:4d:4c:4d:c6:
         ce:24:ed:1d:8e:99:9f:12:77:25:87:16:87:2b:3c:99:fc:62:
         68:a8:7b:64:c3:bc:73:59:b4:d3:43:00:4c:1f:e5:65:f2:b1:
         07:55:bc:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Ikg+wtyXU7rbi18mklCZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0N2U2MmNiZjVmZWYzMzc3ZjllN2NkNTg1NThmNDRlMmVl
YTliY2UwHhcNMjQwNTE3MjIwMDI0WhcNMjQwNTE4MjIwMDI0WjAzMTEwLwYDVQQD
Eyg0NTFiNTk2NmNiOTZmYzg0Nzk4MjJlYzdkOGI5MGNkZjJlNjA5NDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DGladGWIvr1ZWp6bA1Ofs5uS4SH
k8vdxUrS7tZSGzdRNU0ex6GGGCgIUIyw4TdXimqVAWWiPqXa/Loerzaide0eHqmh
mI2Rf361KUYXflor5UMEViTWObSKw8jstv0COQ6V41XorU/mzLOrmvYPEtHq7APP
2R1uY3yD1kDVMVLfflFnI0QiTRwLPxA3HgW4W7J6NHM1LYkDeC636cdhvsq9SNGe
N4DLt4bBq4Gou28tS4Ve6WwVW1AxcDLPvX2m4ShE94oKv6I0ceJuHN+EytygbpM0
EbE4JeTfWw8xmN/a3klDdDXYnf5WWIhz7cM7GoXRAZpl7ucYQ+eLadyVWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUbWWbLlvyEeYIux9i5DN8uYJQ4MB8GA1UdIwQY
MBaAFNR+Ysv1/vM3f5581YVY9E4u6pvOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hYTlkNGUtMTIyNi00MGU3LWE5YzEt
NDY5ZDNhNTFkNDdkLzEvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hYTlkNGUtMTIyNi00MGU3LWE5YzEtNDY5ZDNhNTFkNDdk
LzEvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRMB3vXk
Xyj4oJvHcP+irhiW5t/TxYCE5JiBOiQeovo5BhDurRxA07EayDo+IEDbiLRcj0on
IRBZL92lVmYLxPvfoVt+RYcp+jVVr5xbf3swgmKKG4gbPAhWnudgvTC5SG0FIFFt
hCOn3hTn3LCq9r9Sj04QQiNh7Dr3xPG+3xCUgldO5oCOe5kXmhAmKqIPbht4YDir
n1uM/teJoyQk+T8+xRORxUx25sByrRrAlcdnExuhMs75p8KkN/2cXfkjNNnRdYZf
3hY2/opPLehlJ2N1PAJNTE3GziTtHY6ZnxJ3JYcWhys8mfxiaKh7ZMO8c1m000MA
TB/lZfKxB1W8Cg==
-----END CERTIFICATE-----
Generated at Fri May 17 23:46:43 2024 by rpki-client on console-ams.rpki-client.org