Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File:                     493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier:          UtQXn+UmxQ8YlctmabwZLgvlbOB9lSsl1/UpXpw8a/0=
Subject key identifier:   22:93:65:73:F9:DB:FF:13:9B:04:20:18:5B:EA:94:05:56:F1:21:55
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer:       /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial:       018F2F17D28794FE313054E5E41F3C04ABF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number:          09B2
Signing time:             Tue 30 Apr 2024 13:00:41 +0000
Manifest this update:     Tue 30 Apr 2024 13:00:41 +0000
Manifest next update:     Wed 01 May 2024 13:00:41 +0000
Files and hashes:         1: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: 32Z9S87O4XHsOrSQDihYWpKjZXlzqAWhKqFvfxK4ViY=)
                          2: bDOnid45G1X3TeYWlWe9xiaVcTc.roa (hash: xue8C03QuBD8oFbqdATx8w73skPWcaBDtYYft4ekSwM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2f:17:d2:87:94:fe:31:30:54:e5:e4:1f:3c:04:ab:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
        Validity
            Not Before: Apr 30 13:00:41 2024 GMT
            Not After : May  1 13:00:41 2024 GMT
        Subject: CN=22936573f9dbff139b0420185bea940556f12155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:95:ce:bf:8d:29:02:99:aa:2c:98:aa:2a:3a:
                    ce:27:a0:05:f8:b2:c7:e8:43:af:6b:93:e8:78:27:
                    5a:cd:0c:6b:50:c3:e3:c6:f4:f3:36:2f:55:5b:a4:
                    83:81:6e:39:22:97:63:1e:18:d2:a9:a0:80:63:fc:
                    62:3e:62:40:52:14:e9:5d:25:ea:a5:57:4c:a9:4e:
                    71:8d:9a:74:73:ea:1f:28:0d:35:55:ce:24:1d:1e:
                    75:e8:0a:a6:26:7e:5d:1d:67:1b:e7:01:21:99:4a:
                    45:84:a3:ba:e8:3c:60:fd:70:ba:76:a4:68:d9:bd:
                    94:94:fd:4d:5c:df:6a:d0:f6:cd:26:22:8f:8e:b8:
                    19:57:76:a1:e3:8c:b7:e2:0e:62:b4:69:55:7d:ac:
                    b2:d2:49:21:eb:79:85:57:69:cc:d1:fd:a4:82:84:
                    67:5c:64:5a:d1:a1:32:40:6c:92:4e:45:9a:77:62:
                    7f:28:51:6d:5f:de:42:25:48:4f:89:6e:0c:05:56:
                    c7:ae:53:37:81:97:d9:43:ee:85:e6:a4:4f:c2:cd:
                    0e:97:96:74:d6:a5:59:8f:65:87:1c:70:7a:6f:2a:
                    c2:f8:ca:d5:9f:41:e7:f0:0d:ff:e8:04:ba:3a:6b:
                    25:9b:dc:27:8f:05:27:39:e8:6f:14:bb:c8:f2:62:
                    c2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:93:65:73:F9:DB:FF:13:9B:04:20:18:5B:EA:94:05:56:F1:21:55
            X509v3 Authority Key Identifier:
                keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8e:d4:20:97:ec:e7:86:bd:f7:64:1b:a2:a5:58:71:89:f9:
         68:5c:d0:b9:b6:fc:ca:2e:f6:f0:67:90:e5:e4:65:84:d5:18:
         36:5d:e9:3d:7a:4b:bc:fe:fa:16:fa:85:3b:0e:83:bd:fe:9e:
         c7:57:c9:fd:90:1b:9c:46:5d:c1:03:50:29:36:a7:99:64:b3:
         61:37:4e:83:67:d8:ff:7b:f3:c0:68:f5:68:53:47:80:ff:48:
         87:e6:e3:68:a2:c8:77:c0:b3:b4:35:83:62:0f:73:a2:14:44:
         c8:7e:17:f4:ad:5d:cf:4d:97:6d:36:d2:57:d4:43:d9:f6:b2:
         0c:0f:46:3a:0e:5b:c3:25:91:e5:3e:e1:da:92:14:70:45:0a:
         d0:19:8a:5d:79:82:09:9a:cd:30:13:38:1f:5e:b4:54:92:b5:
         5c:74:fb:5c:12:cd:c0:68:cf:71:c3:da:4d:83:2c:74:0d:24:
         45:40:b3:cb:e9:3c:d1:05:32:8f:2a:de:47:a3:fb:63:ab:9f:
         c6:df:c9:0c:30:67:30:9c:15:6d:0e:fe:7f:53:bd:12:cd:da:
         92:dd:3a:9f:87:61:10:f2:37:88:1b:a3:95:0a:2d:91:77:91:
         73:9a:04:f6:1a:3c:b9:b8:e4:72:f5:91:66:a6:7f:cb:15:ee:
         44:fd:f4:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8vF9KHlP4xMFTl5B88BKvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZGRkM2NiNjQ4YmViNDI1MWQ0N2NjNGI2NWJjZDY0YjA5
YThkNGIwHhcNMjQwNDMwMTMwMDQxWhcNMjQwNTAxMTMwMDQxWjAzMTEwLwYDVQQD
EygyMjkzNjU3M2Y5ZGJmZjEzOWIwNDIwMTg1YmVhOTQwNTU2ZjEyMTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JXOv40pApmqLJiqKjrOJ6AF+LLH
6EOva5PoeCdazQxrUMPjxvTzNi9VW6SDgW45IpdjHhjSqaCAY/xiPmJAUhTpXSXq
pVdMqU5xjZp0c+ofKA01Vc4kHR516AqmJn5dHWcb5wEhmUpFhKO66Dxg/XC6dqRo
2b2UlP1NXN9q0PbNJiKPjrgZV3ah44y34g5itGlVfayy0kkh63mFV2nM0f2kgoRn
XGRa0aEyQGySTkWad2J/KFFtX95CJUhPiW4MBVbHrlM3gZfZQ+6F5qRPws0Ol5Z0
1qVZj2WHHHB6byrC+MrVn0Hn8A3/6AS6Omslm9wnjwUnOehvFLvI8mLCwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKTZXP52/8TmwQgGFvqlAVW8SFVMB8GA1UdIwQY
MBaAFOPd08tki+tCUdR8xLZbzWSwmo1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTIt
YjZiNzZlMjJmZmFjLzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTItYjZiNzZlMjJmZmFj
LzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU47UIJfs
54a992QboqVYcYn5aFzQubb8yi728GeQ5eRlhNUYNl3pPXpLvP76FvqFOw6Dvf6e
x1fJ/ZAbnEZdwQNQKTanmWSzYTdOg2fY/3vzwGj1aFNHgP9Ih+bjaKLId8CztDWD
Yg9zohREyH4X9K1dz02XbTbSV9RD2fayDA9GOg5bwyWR5T7h2pIUcEUK0BmKXXmC
CZrNMBM4H160VJK1XHT7XBLNwGjPccPaTYMsdA0kRUCzy+k80QUyjyreR6P7Y6uf
xt/JDDBnMJwVbQ7+f1O9Es3akt06n4dhEPI3iBujlQotkXeRc5oE9ho8ubjkcvWR
ZqZ/yxXuRP30tg==
-----END CERTIFICATE-----
Generated at Tue Apr 30 19:15:30 2024 by rpki-client on console-fra.rpki-client.org