Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File:                     1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier:          +0hOUsapAZ1/cl1sykI+wPi3mGoHmR7Nk3IrISFsj1U=
Subject key identifier:   6E:84:19:39:5F:47:DD:32:63:51:D2:78:6C:9E:E4:DA:76:E0:A8:49
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer:       /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial:       018F4B6CE32ABDA5408870ADA14D80476024
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number:          03A7
Signing time:             Mon 06 May 2024 01:02:58 +0000
Manifest this update:     Mon 06 May 2024 01:02:58 +0000
Manifest next update:     Tue 07 May 2024 01:02:58 +0000
Files and hashes:         1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: sIDTD7Dv4LGNze7ENcBrSC2YjL6Yqsj/6pj2MICcGxQ=)
                          2: 2gmmvuFlRhOZLHqOMiz56fV8jss.roa (hash: /evxrOguyJ4XordpyBySMjBh9YL47E7QN+T4npofl8M=)
                          3: EEpVLr6-9isxoASUwtFOw3dPetw.roa (hash: H5ihgWRJ7n4+YSEpiVpzWCYRe21+YPsbVn4JxQF5MzA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6c:e3:2a:bd:a5:40:88:70:ad:a1:4d:80:47:60:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
        Validity
            Not Before: May  6 01:02:58 2024 GMT
            Not After : May  7 01:02:58 2024 GMT
        Subject: CN=6e8419395f47dd326351d2786c9ee4da76e0a849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7e:5e:1a:7d:84:05:8c:a8:c2:bf:13:fa:f2:
                    20:73:43:d2:0e:c5:d4:bc:fe:7a:2a:cf:0a:d5:a7:
                    d6:2b:84:0e:f0:5c:d0:2d:e7:31:06:d4:7f:12:e6:
                    0d:26:4a:55:10:cc:0e:81:ec:d0:b2:4b:b5:78:f3:
                    24:3c:ed:4b:ea:d5:07:d3:b0:54:f8:ef:a1:63:f8:
                    e6:3c:3b:ae:06:67:58:d7:ac:45:b3:71:10:7b:0a:
                    94:66:54:f1:c9:89:3e:c3:be:53:7a:2c:0e:a3:14:
                    2f:ad:c3:89:1b:9e:75:b3:af:e0:6b:b2:b5:a3:89:
                    e5:a7:95:57:08:f4:17:a0:70:20:76:d3:d0:37:86:
                    f7:b9:c2:b3:8a:9b:87:6c:94:d1:4e:60:02:64:74:
                    e1:3c:32:16:f6:d4:e3:fc:d2:63:ea:b8:b9:6a:fb:
                    43:a2:8c:66:59:00:19:27:89:09:51:14:8e:b5:bf:
                    05:63:c3:b4:33:66:a9:8d:44:40:a8:32:29:f4:00:
                    9d:29:c4:27:eb:5a:9a:ca:97:1b:4a:ee:1b:fd:7e:
                    bc:fe:09:c0:32:91:d7:46:1a:a9:5d:e5:08:3b:a3:
                    74:8e:74:a8:f3:38:3d:1a:73:22:76:b5:68:38:38:
                    35:80:18:79:f0:5d:b4:2c:eb:3b:d6:8b:5a:f0:cc:
                    62:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:84:19:39:5F:47:DD:32:63:51:D2:78:6C:9E:E4:DA:76:E0:A8:49
            X509v3 Authority Key Identifier:
                keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:17:b4:d4:9f:ec:06:ee:ce:01:f1:3b:ad:1c:5c:95:4f:a6:
         af:84:88:2f:db:be:eb:31:5e:e7:62:e8:4e:87:23:9b:5c:3e:
         b3:f0:c0:e3:2e:86:ac:1b:49:6a:1b:8f:fd:9e:bd:9f:88:72:
         4c:60:de:81:66:74:6f:7e:73:27:87:b1:cf:a5:22:cc:6c:80:
         3f:3f:0b:63:ec:80:30:bf:a0:5d:7a:6b:9b:02:96:ee:a6:74:
         4b:da:6a:97:96:b7:30:57:86:cb:df:4f:47:a0:6a:cc:c3:9b:
         c0:f0:e3:57:fa:41:5d:17:a0:84:03:02:14:96:31:cf:85:13:
         6d:eb:ba:bc:3d:2d:35:75:d6:fa:c3:2c:0d:f2:cb:2f:79:9d:
         af:ae:27:15:c5:58:63:06:c4:14:39:30:4e:78:8c:f4:06:82:
         83:69:87:62:be:a1:67:9f:97:64:47:61:ac:93:fa:57:6c:b7:
         4a:83:c3:6a:65:a4:fd:56:8c:7e:0c:b4:78:6a:bc:a7:79:b5:
         74:6c:55:90:4d:67:8d:fe:6d:96:c8:f2:2c:29:4b:ec:4c:38:
         0f:7b:83:aa:c8:e5:f7:96:09:29:e7:c8:a8:98:bc:98:29:f3:
         fc:ff:d5:89:74:7e:12:31:04:59:6a:f7:6d:0d:43:d5:d8:8c:
         be:b9:fb:bb
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY9LbOMqvaVAiHCtoU2AR2AkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NGRmMmY4ZjVhMTNjNjQ1MzY4OTE0ZTNkYmU0MmEyNGEz
NmRhNWQwHhcNMjQwNTA2MDEwMjU4WhcNMjQwNTA3MDEwMjU4WjAzMTEwLwYDVQQD
Eyg2ZTg0MTkzOTVmNDdkZDMyNjM1MWQyNzg2YzllZTRkYTc2ZTBhODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo35eGn2EBYyowr8T+vIgc0PSDsXU
vP56Ks8K1afWK4QO8FzQLecxBtR/EuYNJkpVEMwOgezQsku1ePMkPO1L6tUH07BU
+O+hY/jmPDuuBmdY16xFs3EQewqUZlTxyYk+w75TeiwOoxQvrcOJG551s6/ga7K1
o4nlp5VXCPQXoHAgdtPQN4b3ucKzipuHbJTRTmACZHThPDIW9tTj/NJj6ri5avtD
ooxmWQAZJ4kJURSOtb8FY8O0M2apjURAqDIp9ACdKcQn61qaypcbSu4b/X68/gnA
MpHXRhqpXeUIO6N0jnSo8zg9GnMidrVoODg1gBh58F20LOs71ota8MxiFwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG6EGTlfR90yY1HSeGye5Np24KhJMB8GA1UdIwQY
MBaAFPlN8vj1oTxkU2iRTj2+QqJKNtpdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1VM3ktUFdoUEdSVGFKRk9QYjVDb2tvMjJsMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvZmQ4MDc0LTIyM2EtNGI1Mi1iZWRk
LTY2YmRmZmE4YmRjMS8xLzEtVTN5LVBXaFBHUlRhSkZPUGI1Q29rbzIybDAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJiL2ZkODA3NC0yMjNhLTRiNTItYmVkZC02NmJkZmZhOGJk
YzEvMS8xLVUzeS1QV2hQR1JUYUpGT1BiNUNva28yMmwwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxe0
1J/sBu7OAfE7rRxclU+mr4SIL9u+6zFe52LoTocjm1w+s/DA4y6GrBtJahuP/Z69
n4hyTGDegWZ0b35zJ4exz6UizGyAPz8LY+yAML+gXXprmwKW7qZ0S9pql5a3MFeG
y99PR6BqzMObwPDjV/pBXReghAMCFJYxz4UTbeu6vD0tNXXW+sMsDfLLL3mdr64n
FcVYYwbEFDkwTniM9AaCg2mHYr6hZ5+XZEdhrJP6V2y3SoPDamWk/VaMfgy0eGq8
p3m1dGxVkE1njf5tlsjyLClL7Ew4D3uDqsjl95YJKefIqJi8mCnz/P/ViXR+EjEE
WWr3bQ1D1diMvrn7uw==
-----END CERTIFICATE-----
Generated at Mon May 6 10:36:56 2024 by rpki-client on console-ams.rpki-client.org