Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
File:                     0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json)
Hash identifier:          ZlblrS3/VPohxFy7dODQzeOKLtzTalTBOU/GY2w2fic=
Subject key identifier:   FE:59:8B:56:8A:AC:3B:90:3F:EE:AA:92:06:E7:74:86:19:1C:12:6B
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Certificate issuer:       /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial:       018F4A58CEC2445F3AC7D46CD44FF032272D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
Manifest number:          0C42
Signing time:             Sun 05 May 2024 20:01:25 +0000
Manifest this update:     Sun 05 May 2024 20:01:25 +0000
Manifest next update:     Mon 06 May 2024 20:01:25 +0000
Files and hashes:         1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: J/7Sg/P6fD1KcorG4Jk6Pk/6WHkvQC65JRIExFuGtPk=)
                          2: t46nCPYDj_FPqrpDkyqC5nK0CVs.roa (hash: FLYzItNEpiNWzAyIjwtfZuFlKRc7xywLkolIiba0H0g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:58:ce:c2:44:5f:3a:c7:d4:6c:d4:4f:f0:32:27:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
        Validity
            Not Before: May  5 20:01:25 2024 GMT
            Not After : May  6 20:01:25 2024 GMT
        Subject: CN=fe598b568aac3b903feeaa9206e77486191c126b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:ee:79:22:10:5a:d0:42:fb:90:cc:38:c3:
                    88:9f:7e:5a:ee:32:d3:53:8e:3c:f4:0a:85:99:4b:
                    75:01:68:59:bd:47:cf:14:8a:e4:71:80:93:c0:12:
                    e5:72:32:d2:b9:e3:6b:36:14:dd:a7:32:cb:ca:56:
                    7e:d8:d1:be:b2:61:82:1b:19:cf:7c:dc:b1:44:b6:
                    fb:0b:44:e5:03:dc:fe:e8:cd:df:c5:f0:28:ce:78:
                    7b:49:6e:03:d1:9a:12:5c:5e:6a:f4:76:72:24:61:
                    db:0a:e5:e9:bd:f1:86:96:6b:28:8b:0e:8f:60:ef:
                    71:16:bd:bb:27:54:4f:ac:da:5b:f6:0b:f8:e2:ca:
                    00:9c:9b:94:a4:9b:3c:89:d5:8c:ac:cb:8a:eb:db:
                    11:03:38:dd:40:67:13:11:54:bd:51:96:0a:81:7f:
                    19:44:c8:16:28:e6:fc:35:b9:bb:cc:29:0a:05:0c:
                    bc:b5:f0:72:04:2e:8a:ef:c3:5f:16:95:c1:fd:89:
                    74:c0:48:60:52:6c:0d:e0:dd:86:95:f6:78:a9:e6:
                    e4:31:3a:42:31:83:bd:cc:89:a2:37:6b:29:b1:92:
                    a4:37:29:2d:a8:6d:ef:ca:9f:3c:56:f9:4f:e8:a3:
                    10:2e:63:fc:db:20:b0:32:48:78:fa:05:96:46:9a:
                    65:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:59:8B:56:8A:AC:3B:90:3F:EE:AA:92:06:E7:74:86:19:1C:12:6B
            X509v3 Authority Key Identifier:
                keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:82:82:52:32:a6:38:03:0b:2b:76:a2:28:58:c2:04:3d:6c:
         a0:89:68:cc:39:cc:24:7c:06:86:0b:d0:bb:fe:81:7b:80:39:
         a7:b0:fa:6e:89:94:29:8b:b0:f3:c1:87:35:18:2c:b6:7c:26:
         ef:22:cc:6c:58:b7:2c:f9:45:6e:50:79:e6:0c:58:e8:0f:25:
         f9:bf:a6:ba:7a:90:36:b0:f0:6e:5b:d1:1a:be:7a:39:25:b4:
         56:7b:35:c8:af:1c:4d:7f:52:f1:b9:4c:45:d8:fe:06:b5:52:
         34:b8:91:40:1d:78:32:16:26:a7:eb:04:fc:3b:14:05:ae:58:
         34:f6:7f:87:34:b7:b0:e3:da:57:27:22:ac:49:07:06:ed:fa:
         e5:b8:69:3c:11:10:6d:2a:45:9d:0a:ee:a0:ed:0d:5d:6c:53:
         3e:5c:c9:29:ab:81:33:3e:72:64:d7:36:a7:68:0d:97:04:81:
         3c:04:ce:4a:31:9b:f5:23:ed:bb:dc:fe:a4:30:45:36:1c:0c:
         3e:9d:61:22:ab:13:39:ee:53:01:b6:e9:c5:55:02:c1:94:a1:
         ed:60:b6:7e:42:67:67:c5:b8:7f:b0:9f:6f:c3:21:88:e8:6f:
         b0:5b:2d:5b:e9:35:e0:e7:49:1e:a1:4c:c6:71:cd:dd:bb:12:
         ae:92:6a:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9KWM7CRF86x9Rs1E/wMictMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOGMyMDMwYTU5NzFjNGE1NDA5NmE4ZWRiYjIxMjExZTU0
MjE2YTcwHhcNMjQwNTA1MjAwMTI1WhcNMjQwNTA2MjAwMTI1WjAzMTEwLwYDVQQD
EyhmZTU5OGI1NjhhYWMzYjkwM2ZlZWFhOTIwNmU3NzQ4NjE5MWMxMjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHjueSIQWtBC+5DMOMOIn35a7jLT
U4489AqFmUt1AWhZvUfPFIrkcYCTwBLlcjLSueNrNhTdpzLLylZ+2NG+smGCGxnP
fNyxRLb7C0TlA9z+6M3fxfAoznh7SW4D0ZoSXF5q9HZyJGHbCuXpvfGGlmsoiw6P
YO9xFr27J1RPrNpb9gv44soAnJuUpJs8idWMrMuK69sRAzjdQGcTEVS9UZYKgX8Z
RMgWKOb8Nbm7zCkKBQy8tfByBC6K78NfFpXB/Yl0wEhgUmwN4N2GlfZ4qebkMTpC
MYO9zImiN2spsZKkNyktqG3vyp88VvlP6KMQLmP82yCwMkh4+gWWRpplZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5Zi1aKrDuQP+6qkgbndIYZHBJrMB8GA1UdIwQY
MBaAFNGMIDCllxxKVAlqjtuyEhHlQhanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQt
NTNhNjcyZDE0YjdhLzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQtNTNhNjcyZDE0Yjdh
LzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYKCUjKm
OAMLK3aiKFjCBD1soIlozDnMJHwGhgvQu/6Be4A5p7D6bomUKYuw88GHNRgstnwm
7yLMbFi3LPlFblB55gxY6A8l+b+munqQNrDwblvRGr56OSW0Vns1yK8cTX9S8blM
Rdj+BrVSNLiRQB14MhYmp+sE/DsUBa5YNPZ/hzS3sOPaVycirEkHBu365bhpPBEQ
bSpFnQruoO0NXWxTPlzJKauBMz5yZNc2p2gNlwSBPATOSjGb9SPtu9z+pDBFNhwM
Pp1hIqsTOe5TAbbpxVUCwZSh7WC2fkJnZ8W4f7Cfb8MhiOhvsFstW+k14OdJHqFM
xnHN3bsSrpJquA==
-----END CERTIFICATE-----
Generated at Sun May 5 21:23:10 2024 by rpki-client on console-ams.rpki-client.org