Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
File:                     G2pafunSGn3UW7v_9DGzZN6gta4.mft (raw, json)
Hash identifier:          lZ9sKQwaio/NX6ME80yit+FPFYHIrRmvAsbLxuTiMpk=
Subject key identifier:   02:30:E5:BA:34:B4:4D:0B:55:AB:DD:CB:FD:D1:00:B0:B3:4A:58:A5
Authority key identifier: 1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
Certificate issuer:       /CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Certificate serial:       018F882423A89F118EA82E465424C6582843
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
Manifest number:          03A3
Signing time:             Fri 17 May 2024 20:00:20 +0000
Manifest this update:     Fri 17 May 2024 20:00:20 +0000
Manifest next update:     Sat 18 May 2024 20:00:20 +0000
Files and hashes:         1: G2pafunSGn3UW7v_9DGzZN6gta4.crl (hash: KdVt515RGTVIYgbKOqicAbGXOL5R+sFdO60b0E2rQho=)
                          2: Uy9m1YnSyR2vaVqV8sdhd4RyI_g.roa (hash: dNua9wcVg3ZC/11NR22NxwzbPasxeq/BhMltALNiDrQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:23:a8:9f:11:8e:a8:2e:46:54:24:c6:58:28:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
        Validity
            Not Before: May 17 20:00:20 2024 GMT
            Not After : May 18 20:00:20 2024 GMT
        Subject: CN=0230e5ba34b44d0b55abddcbfdd100b0b34a58a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:23:2a:8c:73:60:dd:59:a6:b6:0b:f6:0a:de:
                    93:d6:20:b6:6d:8a:96:e9:e5:60:ed:f2:4c:bb:91:
                    e2:2d:8c:08:39:1a:90:a7:ab:e2:0f:82:4c:dc:ab:
                    51:63:06:3a:55:29:20:dc:e0:af:94:e7:43:a7:f8:
                    b3:0d:41:7e:e7:a5:b6:9e:89:25:b6:22:f3:45:d0:
                    81:db:16:4d:33:86:f3:e7:ce:20:0a:d7:91:ab:e5:
                    7d:18:bb:b2:9c:e1:09:74:22:7b:26:a6:a3:61:6d:
                    22:78:41:80:17:3d:52:f3:50:cd:f2:c5:65:d9:e8:
                    6f:84:49:3b:a2:a4:3e:30:2b:16:80:92:ed:fa:c7:
                    f3:84:16:12:fd:ee:19:ec:96:30:e8:7d:78:61:52:
                    4f:6b:39:b8:94:05:dd:cd:91:94:b5:ff:f8:8e:6c:
                    16:ea:05:e9:4a:df:05:ec:9b:d7:35:c8:a3:91:75:
                    6f:b5:e9:77:ed:b3:e8:18:76:15:1e:03:00:94:a5:
                    93:b0:50:f8:13:08:28:ff:da:4d:61:e4:db:2f:23:
                    d8:e7:55:28:99:4e:62:4b:26:97:92:41:85:b8:d9:
                    04:92:be:27:03:7b:bc:ca:fc:63:20:3a:14:5f:39:
                    c5:f6:90:b4:a0:11:1d:29:8e:48:7e:6b:ae:e6:f0:
                    3d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:30:E5:BA:34:B4:4D:0B:55:AB:DD:CB:FD:D1:00:B0:B3:4A:58:A5
            X509v3 Authority Key Identifier:
                keyid:1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:89:2c:44:0d:64:59:3e:23:ce:ba:bf:09:44:09:90:35:58:
         35:d6:63:81:29:83:9c:a3:14:41:dc:f0:d8:45:39:fe:98:30:
         6b:c5:30:ad:3a:d9:2b:8f:1a:06:33:ad:1e:e2:90:b8:d1:43:
         37:5b:af:a4:89:48:85:da:42:d8:e5:34:9a:92:b3:5f:5c:a3:
         aa:63:4a:94:bc:38:2e:2f:60:2b:5d:47:26:51:67:34:0e:b4:
         b8:6d:5b:8d:62:17:68:2c:d0:26:d2:de:63:a5:93:e3:5d:22:
         e8:86:9b:a4:58:c9:95:0e:d9:25:ed:25:41:8a:7f:18:22:45:
         15:1e:84:51:d0:92:07:cb:92:c5:aa:40:2b:4c:c6:29:68:b1:
         1c:c4:11:e5:1b:a5:3f:1c:e4:2d:55:6b:5b:57:fc:ea:b8:22:
         98:50:4b:3a:9b:a2:7c:c8:7d:76:7b:17:58:1a:13:a6:85:b1:
         07:df:dc:3a:15:31:f1:db:5e:f8:0b:13:87:49:aa:f4:65:6b:
         89:9e:f9:39:68:34:f5:da:7c:85:2c:b3:89:3c:90:8c:4f:87:
         96:2f:df:26:d0:c6:c8:3d:42:9c:c2:dc:13:60:ec:df:99:89:
         2a:35:9b:cb:c3:b4:ce:9f:a2:2d:9c:00:7e:cd:2d:0a:e9:12:
         29:98:3c:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJCOonxGOqC5GVCTGWChDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmE1YTdlZTlkMjFhN2RkNDViYmJmZmY0MzFiMzY0ZGVh
MGI1YWUwHhcNMjQwNTE3MjAwMDIwWhcNMjQwNTE4MjAwMDIwWjAzMTEwLwYDVQQD
EygwMjMwZTViYTM0YjQ0ZDBiNTVhYmRkY2JmZGQxMDBiMGIzNGE1OGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yMqjHNg3Vmmtgv2Ct6T1iC2bYqW
6eVg7fJMu5HiLYwIORqQp6viD4JM3KtRYwY6VSkg3OCvlOdDp/izDUF+56W2nokl
tiLzRdCB2xZNM4bz584gCteRq+V9GLuynOEJdCJ7JqajYW0ieEGAFz1S81DN8sVl
2ehvhEk7oqQ+MCsWgJLt+sfzhBYS/e4Z7JYw6H14YVJPazm4lAXdzZGUtf/4jmwW
6gXpSt8F7JvXNcijkXVvtel37bPoGHYVHgMAlKWTsFD4Ewgo/9pNYeTbLyPY51Uo
mU5iSyaXkkGFuNkEkr4nA3u8yvxjIDoUXznF9pC0oBEdKY5Ifmuu5vA9wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIw5bo0tE0LVavdy/3RALCzSlilMB8GA1UdIwQY
MBaAFBtqWn7p0hp91Fu7//Qxs2TeoLWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kOGIwYzMtM2Y3MC00M2RiLTg1YTQt
NWJlMTIwMjM2N2U5LzEvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kOGIwYzMtM2Y3MC00M2RiLTg1YTQtNWJlMTIwMjM2N2U5
LzEvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIksRA1k
WT4jzrq/CUQJkDVYNdZjgSmDnKMUQdzw2EU5/pgwa8UwrTrZK48aBjOtHuKQuNFD
N1uvpIlIhdpC2OU0mpKzX1yjqmNKlLw4Li9gK11HJlFnNA60uG1bjWIXaCzQJtLe
Y6WT410i6IabpFjJlQ7ZJe0lQYp/GCJFFR6EUdCSB8uSxapAK0zGKWixHMQR5Rul
PxzkLVVrW1f86rgimFBLOpuifMh9dnsXWBoTpoWxB9/cOhUx8dte+AsTh0mq9GVr
iZ75OWg09dp8hSyziTyQjE+Hli/fJtDGyD1CnMLcE2Ds35mJKjWby8O0zp+iLZwA
fs0tCukSKZg8Jw==
-----END CERTIFICATE-----
Generated at Sat May 18 02:08:18 2024 by rpki-client on console-ams.rpki-client.org