Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
File:                     4njEqqAhvti5JuNZH99QyN9rwXI.mft (raw, json)
Hash identifier:          VJSMaSigU4kQDwh+cuud2vkVKjnpMHv55+aW1TLqUI4=
Subject key identifier:   11:36:B3:D5:FD:0C:C2:9A:E4:5B:DB:13:9F:38:F4:B1:C8:16:5F:09
Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
Certificate issuer:       /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Certificate serial:       018F43B490CCD211E622839CC08256CD7DC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
Manifest number:          03C9
Signing time:             Sat 04 May 2024 13:04:17 +0000
Manifest this update:     Sat 04 May 2024 13:04:17 +0000
Manifest next update:     Sun 05 May 2024 13:04:17 +0000
Files and hashes:         1: 4njEqqAhvti5JuNZH99QyN9rwXI.crl (hash: ahkgd12BEVkF0uAa3MVHcxx5BjZ+FyLWTm7GuaCp/wc=)
                          2: NR5RvUV1SgP502VnLx5i8eOskRc.roa (hash: VjDnHHaNhtNvOmxAkIjBZLf9rrdtK30GbGIDY1gyvHk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b4:90:cc:d2:11:e6:22:83:9c:c0:82:56:cd:7d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
        Validity
            Not Before: May  4 13:04:17 2024 GMT
            Not After : May  5 13:04:17 2024 GMT
        Subject: CN=1136b3d5fd0cc29ae45bdb139f38f4b1c8165f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:ea:8e:d6:de:2e:d7:45:7f:80:7e:4f:00:
                    62:7a:65:96:44:4c:8b:de:8a:3e:07:ec:fc:14:9c:
                    85:f3:98:50:05:fa:00:ee:38:ba:2e:72:46:43:d7:
                    03:12:2a:c5:fa:f9:10:e0:7d:34:8f:6e:fa:74:05:
                    c5:cb:bd:e4:7f:84:22:c4:39:b5:52:38:92:16:91:
                    27:4d:2b:58:ac:45:5c:82:ee:2f:a4:be:ea:bb:97:
                    37:76:82:40:5c:c1:c5:e0:48:d1:03:a9:4d:18:f7:
                    06:db:4c:f9:93:60:c2:c3:a9:8a:fe:54:82:02:a8:
                    82:2e:b6:5d:0b:31:64:ba:8c:d1:99:45:2b:9b:ca:
                    fb:fc:67:7c:42:75:76:a0:47:58:49:49:9a:50:90:
                    56:7d:5f:0f:0d:59:b9:56:ed:40:6b:d2:47:d2:fe:
                    64:cc:6e:aa:29:e6:41:70:8c:c6:af:d9:36:79:84:
                    30:37:93:d4:af:f7:bd:d6:31:d1:9b:d2:e3:ca:cf:
                    a5:86:82:20:19:a4:79:d6:d5:23:c8:d0:0d:4d:d7:
                    d3:6a:76:f7:db:b8:cb:a6:c1:83:50:fc:47:bc:a3:
                    1b:d2:dd:d0:ef:0a:ce:b0:6c:80:b1:88:1a:97:87:
                    2a:c7:fe:cb:ea:41:51:f4:e9:29:b3:e1:2d:a3:8b:
                    a9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:36:B3:D5:FD:0C:C2:9A:E4:5B:DB:13:9F:38:F4:B1:C8:16:5F:09
            X509v3 Authority Key Identifier:
                keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c1:5b:03:50:c0:25:0f:21:23:9e:bc:87:2e:ae:3f:10:e3:
         27:41:cd:ba:75:a5:e3:e4:8b:34:9c:c1:cb:0b:23:8b:95:e3:
         f6:e0:e3:88:63:ad:ce:1d:3e:ca:14:49:ed:62:fa:72:39:06:
         46:8e:88:3d:2b:35:4d:f5:f0:79:6c:4f:79:7e:10:69:ef:47:
         a2:04:c6:59:4b:b6:36:67:54:6a:c3:9c:67:3f:9f:6f:6f:93:
         35:cb:0a:69:c4:8e:e9:39:8e:44:90:79:7d:fc:34:40:11:b9:
         73:97:f7:3f:1c:f9:63:22:1a:cd:55:53:e1:07:2e:8e:72:a8:
         fe:e7:8b:27:8a:ef:2e:6a:0d:70:8a:27:24:a8:55:e1:6b:11:
         73:f2:10:27:8b:03:56:74:cc:7b:fc:d7:6d:15:88:53:eb:58:
         4e:4a:c2:7e:eb:be:bb:85:34:49:72:3f:a9:11:44:dc:6a:34:
         b9:e2:56:c1:89:0c:b4:3b:19:19:ab:e8:2c:d9:8c:a9:e3:cd:
         d4:36:41:19:39:4f:1f:5e:06:6e:4b:71:f5:13:07:39:3b:d2:
         7e:c8:a5:6c:13:f4:da:d1:e0:32:66:22:a8:e4:55:b5:8e:d2:
         6c:b0:7c:ea:34:88:e3:2b:a1:21:d4:96:4d:af:42:62:37:b0:
         81:dc:3b:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9DtJDM0hHmIoOcwIJWzX3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNzhjNGFhYTAyMWJlZDhiOTI2ZTM1OTFmZGY1MGM4ZGY2
YmMxNzIwHhcNMjQwNTA0MTMwNDE3WhcNMjQwNTA1MTMwNDE3WjAzMTEwLwYDVQQD
EygxMTM2YjNkNWZkMGNjMjlhZTQ1YmRiMTM5ZjM4ZjRiMWM4MTY1ZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxDqjtbeLtdFf4B+TwBiemWWREyL
3oo+B+z8FJyF85hQBfoA7ji6LnJGQ9cDEirF+vkQ4H00j276dAXFy73kf4QixDm1
UjiSFpEnTStYrEVcgu4vpL7qu5c3doJAXMHF4EjRA6lNGPcG20z5k2DCw6mK/lSC
AqiCLrZdCzFkuozRmUUrm8r7/Gd8QnV2oEdYSUmaUJBWfV8PDVm5Vu1Aa9JH0v5k
zG6qKeZBcIzGr9k2eYQwN5PUr/e91jHRm9Ljys+lhoIgGaR51tUjyNANTdfTanb3
27jLpsGDUPxHvKMb0t3Q7wrOsGyAsYgal4cqx/7L6kFR9Okps+Eto4uppQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBE2s9X9DMKa5FvbE5849LHIFl8JMB8GA1UdIwQY
MBaAFOJ4xKqgIb7YuSbjWR/fUMjfa8FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jMDY5MzctOTNiMy00NDJlLTg2NzYt
ZmM0MzM5MTk4OGY3LzEvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jMDY5MzctOTNiMy00NDJlLTg2NzYtZmM0MzM5MTk4OGY3
LzEvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsFbA1DA
JQ8hI568hy6uPxDjJ0HNunWl4+SLNJzBywsji5Xj9uDjiGOtzh0+yhRJ7WL6cjkG
Ro6IPSs1TfXweWxPeX4Qae9HogTGWUu2NmdUasOcZz+fb2+TNcsKacSO6TmORJB5
ffw0QBG5c5f3Pxz5YyIazVVT4QcujnKo/ueLJ4rvLmoNcIonJKhV4WsRc/IQJ4sD
VnTMe/zXbRWIU+tYTkrCfuu+u4U0SXI/qRFE3Go0ueJWwYkMtDsZGavoLNmMqePN
1DZBGTlPH14Gbktx9RMHOTvSfsilbBP02tHgMmYiqORVtY7SbLB86jSI4yuhIdSW
Ta9CYjewgdw7Vw==
-----END CERTIFICATE-----
Generated at Sat May 4 18:14:12 2024 by rpki-client on console-fra.rpki-client.org