Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File:                     5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier:          AV1Fdq44jCjUr+AVi5pMeCZMLUDTnFrO/fuUYoUDVj4=
Subject key identifier:   D9:7D:DB:58:7B:1F:63:0E:2B:C0:D6:CE:7D:8F:B6:C2:B3:C4:97:FF
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer:       /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial:       018F3DE65B3E07F4CB6E85F12307018FFF32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number:          1152
Signing time:             Fri 03 May 2024 10:00:57 +0000
Manifest this update:     Fri 03 May 2024 10:00:57 +0000
Manifest next update:     Sat 04 May 2024 10:00:57 +0000
Files and hashes:         1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: F+ockzcaS6JePvp9MnwD13LrYCing/zbuIMkFkAIdAw=)
                          2: BTg-Poo6hIriwL5lkQqLZy9C7f4.roa (hash: 7GvimEIcgaNkIFBH+5zGxfjvf3Jo309kpltw+JD90M0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e6:5b:3e:07:f4:cb:6e:85:f1:23:07:01:8f:ff:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
        Validity
            Not Before: May  3 10:00:57 2024 GMT
            Not After : May  4 10:00:57 2024 GMT
        Subject: CN=d97ddb587b1f630e2bc0d6ce7d8fb6c2b3c497ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:1d:87:72:9c:ba:0a:0e:9d:f6:91:59:c5:
                    c4:bc:85:c9:1a:5d:0e:52:1a:04:a6:48:ac:43:6c:
                    3c:ef:c8:24:ce:04:43:0f:fe:b5:6e:c7:14:de:a9:
                    8c:4c:c2:2c:75:21:e2:89:22:15:d3:2c:de:0a:46:
                    42:57:1b:a7:21:5b:7d:f0:6b:fc:de:12:6a:36:1c:
                    34:4e:9a:02:4b:54:1d:87:52:44:56:62:29:0d:05:
                    45:31:b7:69:df:22:29:5d:ba:0f:0a:2a:2f:23:15:
                    96:f4:97:ef:27:81:65:c2:00:ef:b6:9d:a3:22:c4:
                    3c:02:65:0c:25:91:c7:6b:a9:6b:42:2f:fc:86:28:
                    26:04:b9:33:fa:5d:e1:53:7e:2f:52:88:7b:93:f8:
                    63:7a:8c:6f:d6:fc:7d:d4:a2:bc:c3:a1:2b:dd:9d:
                    20:11:44:6d:f9:a6:93:70:20:00:49:ed:7f:22:c0:
                    cd:9d:87:bd:e0:9e:13:43:4d:e9:16:1a:39:ed:8b:
                    d3:f3:67:1c:41:a9:dc:c6:68:17:f5:92:14:5c:c2:
                    24:9e:a9:ef:83:87:35:34:48:b6:94:4c:43:cb:cd:
                    70:67:3b:3c:98:d3:ea:59:20:78:86:f5:78:86:89:
                    77:80:bc:0d:71:f7:b8:7e:cc:22:99:59:f0:6d:63:
                    6f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7D:DB:58:7B:1F:63:0E:2B:C0:D6:CE:7D:8F:B6:C2:B3:C4:97:FF
            X509v3 Authority Key Identifier:
                keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d0:38:36:ce:67:2e:25:27:89:f3:b3:39:69:c1:64:46:95:
         fd:9a:9a:5b:7d:2d:91:bd:3c:76:55:f0:0f:70:14:89:f8:e7:
         6b:e3:5e:94:0d:57:11:ad:a0:9d:d8:5f:f9:ad:8d:38:44:fb:
         af:56:30:52:cf:58:26:5f:d8:68:23:c0:0d:d4:e7:eb:50:3f:
         6c:4a:b9:06:a0:52:46:5f:b9:c2:58:a2:26:4f:db:10:9d:af:
         a7:e1:bf:1e:2d:03:5a:13:50:e6:61:41:57:94:b5:fe:3d:77:
         6c:f1:14:da:1f:ea:4e:24:b9:f9:c8:8f:cf:aa:70:0e:63:e1:
         cc:a4:1b:28:28:f4:3d:fb:e4:b0:5a:79:40:3a:44:ca:d9:d0:
         11:f8:a8:b4:50:de:aa:6a:d8:0c:89:7c:2e:ef:b9:3f:ac:ce:
         97:1b:e1:62:6a:f1:a9:e3:ac:42:3c:91:16:6b:2e:7a:6b:91:
         3a:aa:a1:e4:42:f4:48:95:b6:e9:26:3d:e7:14:1d:84:2b:8d:
         56:ea:cd:f3:b8:20:b7:7d:96:33:ce:cd:1c:2f:09:88:cb:62:
         ee:0a:a1:5e:52:d9:18:79:95:90:03:39:de:cb:0e:eb:ad:d3:
         d9:09:f9:ce:75:58:b5:7b:5a:c8:46:25:4d:33:4c:cc:52:94:
         2d:77:9c:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY895ls+B/TLboXxIwcBj/8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzlkNDhhMThjM2MwZDJlNGU2M2E3YjgzODg1YTc5Njc3
NTU4MjYwHhcNMjQwNTAzMTAwMDU3WhcNMjQwNTA0MTAwMDU3WjAzMTEwLwYDVQQD
EyhkOTdkZGI1ODdiMWY2MzBlMmJjMGQ2Y2U3ZDhmYjZjMmIzYzQ5N2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8Udh3KcugoOnfaRWcXEvIXJGl0O
UhoEpkisQ2w878gkzgRDD/61bscU3qmMTMIsdSHiiSIV0yzeCkZCVxunIVt98Gv8
3hJqNhw0TpoCS1Qdh1JEVmIpDQVFMbdp3yIpXboPCiovIxWW9JfvJ4FlwgDvtp2j
IsQ8AmUMJZHHa6lrQi/8higmBLkz+l3hU34vUoh7k/hjeoxv1vx91KK8w6Er3Z0g
EURt+aaTcCAASe1/IsDNnYe94J4TQ03pFho57YvT82ccQancxmgX9ZIUXMIknqnv
g4c1NEi2lExDy81wZzs8mNPqWSB4hvV4hol3gLwNcfe4fswimVnwbWNvNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNl921h7H2MOK8DWzn2PtsKzxJf/MB8GA1UdIwQY
MBaAFObJ1IoYw8DS5OY6e4OIWnlndVgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMt
ODQ4ZjczZGY4YjIwLzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMtODQ4ZjczZGY4YjIw
LzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNA4Ns5n
LiUnifOzOWnBZEaV/ZqaW30tkb08dlXwD3AUifjna+NelA1XEa2gndhf+a2NOET7
r1YwUs9YJl/YaCPADdTn61A/bEq5BqBSRl+5wliiJk/bEJ2vp+G/Hi0DWhNQ5mFB
V5S1/j13bPEU2h/qTiS5+ciPz6pwDmPhzKQbKCj0PfvksFp5QDpEytnQEfiotFDe
qmrYDIl8Lu+5P6zOlxvhYmrxqeOsQjyRFmsuemuROqqh5EL0SJW26SY95xQdhCuN
VurN87ggt32WM87NHC8JiMti7gqhXlLZGHmVkAM53ssO663T2Qn5znVYtXtayEYl
TTNMzFKULXecPA==
-----END CERTIFICATE-----
Generated at Fri May 3 15:33:19 2024 by rpki-client on console-fra.rpki-client.org