Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
File:                     hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json)
Hash identifier:          N4ZUj67Qd6tlsvVr/IKRAVX7nKRfNTJ0tvfFeTqpPAo=
Subject key identifier:   C8:97:7F:A9:57:C3:99:26:B4:C6:D2:AD:8A:F3:66:4E:82:D3:C4:6F
Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
Certificate issuer:       /CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Certificate serial:       018EF29730F232FEF4A45629857D448AF2D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
Manifest number:          0C7B
Signing time:             Thu 18 Apr 2024 19:02:58 +0000
Manifest this update:     Thu 18 Apr 2024 19:02:58 +0000
Manifest next update:     Fri 19 Apr 2024 19:02:58 +0000
Files and hashes:         1: _8rJuTQOL6dA7I04wwPydxCa3_I.roa (hash: Cu5wVONAKbIO6p9xyDmta5EinVSBkwim6xF3jQ6wQkE=)
                          2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: LUqCF8zXsASSiMHgQvwVGdrL0aa9hSrTNEdTMb3SNuI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Apr 2024 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f2:97:30:f2:32:fe:f4:a4:56:29:85:7d:44:8a:f2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1
        Validity
            Not Before: Apr 18 19:02:58 2024 GMT
            Not After : Apr 19 19:02:58 2024 GMT
        Subject: CN=c8977fa957c39926b4c6d2ad8af3664e82d3c46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:de:58:5b:12:07:9a:9f:50:30:6f:09:c6:
                    98:91:7e:20:b9:6b:54:b3:b6:4e:aa:1c:f7:27:a9:
                    ee:85:ea:06:b3:ca:52:d9:39:93:20:e3:b0:73:1b:
                    e4:6c:b3:4c:e4:d8:ef:71:26:44:c7:15:d7:49:99:
                    55:10:c5:b6:5b:b7:35:7b:d3:31:e0:b1:5d:a5:63:
                    f6:1c:15:5c:e3:17:d6:e2:30:92:a6:6f:85:76:c2:
                    b1:29:fe:66:fa:9c:55:db:13:34:f7:13:32:f4:6b:
                    1b:f9:5a:6c:71:1e:c7:30:e2:db:56:77:75:7a:6d:
                    28:24:80:89:9b:e7:cb:32:81:08:25:5a:45:52:64:
                    8e:64:50:fa:d0:03:81:e4:25:4f:15:06:df:3b:a8:
                    84:e6:3f:ee:0e:20:2d:b6:67:10:0c:48:e3:5a:89:
                    43:ec:4e:c4:6f:1c:79:71:a5:d9:84:bf:40:3b:85:
                    1a:bc:0d:df:86:6e:85:f5:09:8f:04:41:18:b2:71:
                    31:40:bb:e8:3d:54:f2:61:ff:bf:cd:44:7f:44:32:
                    d0:ff:a3:64:47:6e:fb:3c:4c:50:a1:7c:ab:0b:91:
                    28:cd:8e:ee:17:b2:1a:21:7f:f2:96:0a:e9:8b:14:
                    fe:8d:42:e6:ba:d2:a0:39:3c:81:8e:8a:79:57:1d:
                    01:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:97:7F:A9:57:C3:99:26:B4:C6:D2:AD:8A:F3:66:4E:82:D3:C4:6F
            X509v3 Authority Key Identifier:
                keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a3:81:4e:e2:26:7f:71:3d:bf:ab:e8:34:f9:de:14:21:4b:
         0e:fd:f0:67:38:8e:c4:76:24:83:de:28:f8:a6:6e:2e:ff:b4:
         8b:c9:d7:13:bd:e0:2d:5e:6e:c6:03:b3:eb:f0:45:17:73:02:
         37:56:80:5a:13:bb:d0:c8:77:4e:c9:cf:e9:aa:14:d6:1e:e6:
         b1:a1:e5:a8:f4:21:80:46:27:49:66:31:e4:a0:62:83:50:04:
         d6:b0:43:34:af:94:d8:ac:3c:00:68:e2:8d:93:a2:49:29:69:
         a7:8e:f0:14:fe:26:2a:83:62:f0:92:8d:ae:1b:14:a7:73:fc:
         53:af:74:0e:e0:12:eb:d0:fe:8e:3f:4a:bf:74:2b:ea:e5:58:
         60:8b:40:7d:c1:9a:e5:e1:45:40:92:ad:b1:75:d2:45:4a:88:
         b1:61:dd:f2:b2:59:5c:97:01:0c:61:e4:e9:29:50:49:12:e1:
         27:f3:bd:51:57:da:aa:7d:e5:65:2c:3a:a4:52:ef:e7:0c:b9:
         6f:e0:3d:15:8b:a6:7a:83:c2:08:72:6a:1a:59:39:ea:fd:54:
         5f:58:66:28:7b:7f:69:67:4a:f4:06:0e:2b:51:be:46:8f:3e:
         55:87:be:5f:e3:a3:53:bb:d4:c5:f3:8a:bf:96:a9:62:bd:da:
         a3:52:38:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY7ylzDyMv70pFYphX1EivLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0Njk1YzgyNTEyOWUzNjU0YTUwOGIzYmM1MjlmZTNhNWIz
ODM5YjEwHhcNMjQwNDE4MTkwMjU4WhcNMjQwNDE5MTkwMjU4WjAzMTEwLwYDVQQD
EyhjODk3N2ZhOTU3YzM5OTI2YjRjNmQyYWQ4YWYzNjY0ZTgyZDNjNDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJTeWFsSB5qfUDBvCcaYkX4guWtU
s7ZOqhz3J6nuheoGs8pS2TmTIOOwcxvkbLNM5NjvcSZExxXXSZlVEMW2W7c1e9Mx
4LFdpWP2HBVc4xfW4jCSpm+FdsKxKf5m+pxV2xM09xMy9Gsb+VpscR7HMOLbVnd1
em0oJICJm+fLMoEIJVpFUmSOZFD60AOB5CVPFQbfO6iE5j/uDiAttmcQDEjjWolD
7E7Ebxx5caXZhL9AO4UavA3fhm6F9QmPBEEYsnExQLvoPVTyYf+/zUR/RDLQ/6Nk
R277PExQoXyrC5EozY7uF7IaIX/ylgrpixT+jULmutKgOTyBjop5Vx0B7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiXf6lXw5kmtMbSrYrzZk6C08RvMB8GA1UdIwQY
MBaAFIRpXIJRKeNlSlCLO8Up/jpbODmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMt
YjdmNjM0MjNmMTkyLzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMtYjdmNjM0MjNmMTky
LzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGaOBTuIm
f3E9v6voNPneFCFLDv3wZziOxHYkg94o+KZuLv+0i8nXE73gLV5uxgOz6/BFF3MC
N1aAWhO70Mh3TsnP6aoU1h7msaHlqPQhgEYnSWYx5KBig1AE1rBDNK+U2Kw8AGji
jZOiSSlpp47wFP4mKoNi8JKNrhsUp3P8U690DuAS69D+jj9Kv3Qr6uVYYItAfcGa
5eFFQJKtsXXSRUqIsWHd8rJZXJcBDGHk6SlQSRLhJ/O9UVfaqn3lZSw6pFLv5wy5
b+A9FYumeoPCCHJqGlk56v1UX1hmKHt/aWdK9AYOK1G+Ro8+VYe+X+OjU7vUxfOK
v5apYr3ao1I4sg==
-----END CERTIFICATE-----
Generated at Thu Apr 18 20:20:18 2024 by rpki-client on console-fra.rpki-client.org