Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File:                     c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier:          loDumTAKBZcWK3o/BawXioSC4udjloGJ0oFIityhjFI=
Subject key identifier:   CD:04:47:F4:21:90:42:F6:14:CA:B7:0D:57:CC:A3:9C:D5:E9:CE:DB
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer:       /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial:       018F8939001F6BC6AF0BAC02311068FD5744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number:          05BB
Signing time:             Sat 18 May 2024 01:02:45 +0000
Manifest this update:     Sat 18 May 2024 01:02:45 +0000
Manifest next update:     Sun 19 May 2024 01:02:45 +0000
Files and hashes:         1: 4o4qwtckYxB1k3pfijkKMyJzKSA.roa (hash: TMscSFlM9MIeP9OpHU345zTo6ZpZYGseXeHBKnJNVkw=)
                          2: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: LAQ1bcBqde5KXItf3JX69s8pAlITG5uB38quHqRGLY4=)
                          3: pATsjDMsKk0IZlNrV4oTnjptVn8.roa (hash: DwcNh5OXQ0SHQaz+hDmMkfBMuIG4XU+nlCMeJOxUEVg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:00:1f:6b:c6:af:0b:ac:02:31:10:68:fd:57:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
        Validity
            Not Before: May 18 01:02:45 2024 GMT
            Not After : May 19 01:02:45 2024 GMT
        Subject: CN=cd0447f4219042f614cab70d57cca39cd5e9cedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:02:60:ee:ee:e2:32:e3:e2:f3:4f:23:43:32:
                    7b:9e:93:3e:f0:0d:77:44:1d:8b:e3:60:cf:01:cb:
                    d4:d6:fd:25:c5:00:2f:43:ed:f4:6d:55:a7:94:a6:
                    e1:1d:f1:3c:db:c7:d6:67:10:a9:b7:a9:ed:a4:c3:
                    68:30:47:e1:ed:7f:ea:34:a0:a1:5f:f3:23:73:d5:
                    62:62:78:da:68:b4:43:5f:4e:b7:0a:3a:64:6a:ba:
                    40:e0:28:50:f9:a7:c8:6a:9c:99:c7:29:d1:24:1e:
                    4e:dc:d6:27:43:5d:cc:de:23:af:c8:54:6a:3e:b2:
                    e9:0e:0f:cc:b2:38:e8:1b:7c:40:83:1c:33:ec:59:
                    37:04:43:41:97:6d:65:8c:3b:ec:8f:11:60:09:ad:
                    31:2b:71:fb:11:48:48:b9:ae:b5:a2:0e:d5:19:97:
                    89:ae:fd:ba:29:08:09:e2:1a:76:d8:db:ce:8c:d0:
                    5a:cb:1d:59:65:37:e2:ab:8e:8d:b0:02:a3:33:9e:
                    a3:d1:e9:2b:83:e1:a0:de:0d:87:b0:06:9e:e7:5b:
                    87:0a:11:b5:0a:76:18:4c:23:30:7b:fd:ac:6e:8e:
                    5f:69:b3:64:8c:a2:14:a1:0b:37:d2:f7:0e:f4:97:
                    50:79:e0:0c:8a:66:8a:a8:8f:97:34:16:7a:73:d9:
                    47:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:04:47:F4:21:90:42:F6:14:CA:B7:0D:57:CC:A3:9C:D5:E9:CE:DB
            X509v3 Authority Key Identifier:
                keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c5:d7:aa:08:7b:e7:6d:c8:72:97:24:5e:4c:45:83:a0:1f:
         78:06:a2:8a:f6:a3:ff:22:d8:e3:a6:ec:ee:79:7a:1b:cd:5c:
         e4:91:79:bb:22:d2:b5:00:43:6d:74:78:95:91:82:28:c7:43:
         f6:57:0c:bc:a3:b3:99:02:cf:a7:79:15:a6:d0:50:38:04:1d:
         6e:e5:8d:02:c9:aa:25:da:e5:73:22:5a:b2:11:01:f5:f6:f2:
         c0:90:1f:09:4b:e5:00:cf:0e:19:50:a1:43:b7:31:2c:f6:0d:
         a5:d5:8c:fb:81:1c:f5:a5:45:c5:e7:c7:25:fa:fe:b2:29:dd:
         a3:09:c7:ad:c2:b2:0c:21:be:c8:bc:3c:7c:55:0a:85:27:4a:
         a6:cb:a6:6a:b1:d3:00:1d:f9:fc:7c:78:29:e5:28:36:69:66:
         f1:59:03:d0:8d:55:73:37:41:2a:8b:e3:2d:55:69:f7:d1:80:
         96:3a:1b:13:65:56:b6:60:4b:e5:9e:89:93:f7:37:41:66:5b:
         f4:31:88:09:73:e8:bd:17:d3:20:a5:9e:ec:2c:c9:9a:3c:ce:
         bd:a3:c4:4d:b2:72:57:d6:dd:f6:22:4b:a6:74:4c:d9:5e:bb:
         79:64:32:43:bc:2c:3c:0c:7f:9f:01:06:7a:44:95:1b:71:c4:
         25:01:67:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JOQAfa8avC6wCMRBo/VdEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZmY0YjFjYmVhZjlkZDc1ZDNiNWVmM2VlOWE3NWQ1Nzk5
ZjcyODAwHhcNMjQwNTE4MDEwMjQ1WhcNMjQwNTE5MDEwMjQ1WjAzMTEwLwYDVQQD
EyhjZDA0NDdmNDIxOTA0MmY2MTRjYWI3MGQ1N2NjYTM5Y2Q1ZTljZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogJg7u7iMuPi808jQzJ7npM+8A13
RB2L42DPAcvU1v0lxQAvQ+30bVWnlKbhHfE828fWZxCpt6ntpMNoMEfh7X/qNKCh
X/Mjc9ViYnjaaLRDX063CjpkarpA4ChQ+afIapyZxynRJB5O3NYnQ13M3iOvyFRq
PrLpDg/MsjjoG3xAgxwz7Fk3BENBl21ljDvsjxFgCa0xK3H7EUhIua61og7VGZeJ
rv26KQgJ4hp22NvOjNBayx1ZZTfiq46NsAKjM56j0ekrg+Gg3g2HsAae51uHChG1
CnYYTCMwe/2sbo5fabNkjKIUoQs30vcO9JdQeeAMimaKqI+XNBZ6c9lH0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0ER/QhkEL2FMq3DVfMo5zV6c7bMB8GA1UdIwQY
MBaAFHP/Sxy+r53XXTte8+6addV5n3KAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yNmY0NGEtYWU1My00NzI3LTkwNzUt
NDM3YTM0NmIyMmY3LzEvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yNmY0NGEtYWU1My00NzI3LTkwNzUtNDM3YTM0NmIyMmY3
LzEvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsXXqgh7
523IcpckXkxFg6AfeAaiivaj/yLY46bs7nl6G81c5JF5uyLStQBDbXR4lZGCKMdD
9lcMvKOzmQLPp3kVptBQOAQdbuWNAsmqJdrlcyJashEB9fbywJAfCUvlAM8OGVCh
Q7cxLPYNpdWM+4Ec9aVFxefHJfr+sindownHrcKyDCG+yLw8fFUKhSdKpsumarHT
AB35/Hx4KeUoNmlm8VkD0I1VczdBKovjLVVp99GAljobE2VWtmBL5Z6Jk/c3QWZb
9DGICXPovRfTIKWe7CzJmjzOvaPETbJyV9bd9iJLpnRM2V67eWQyQ7wsPAx/nwEG
ekSVG3HEJQFnOQ==
-----END CERTIFICATE-----
Generated at Sat May 18 02:10:14 2024 by rpki-client on console-ams.rpki-client.org