Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
File:                     k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json)
Hash identifier:          OGdZav+tcLcOkg6y2qpOjcHnU0Ko7WOv/ti9fn5Xaos=
Subject key identifier:   72:C5:92:99:74:D4:60:FF:B3:45:3A:23:BD:91:19:C9:E0:8A:DC:E6
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Certificate issuer:       /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial:       018F8939997317179BAD4164FB2C4DC04D22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
Manifest number:          117A
Signing time:             Sat 18 May 2024 01:03:24 +0000
Manifest this update:     Sat 18 May 2024 01:03:24 +0000
Manifest next update:     Sun 19 May 2024 01:03:24 +0000
Files and hashes:         1: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: PSiRavpW4T1bpCgyi2bC+Mc0/jcrHB303B7XPND1tVE=)
                          2: kHFWplOmcPSEjlbRkWHC1lkDdAY.roa (hash: gjnCLYR1Hjgbp47CrkqQxoZLtjJWgJkU9mY8ZRdMSxI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:99:73:17:17:9b:ad:41:64:fb:2c:4d:c0:4d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
        Validity
            Not Before: May 18 01:03:24 2024 GMT
            Not After : May 19 01:03:24 2024 GMT
        Subject: CN=72c5929974d460ffb3453a23bd9119c9e08adce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:3f:aa:e8:0d:82:50:ec:99:57:32:46:5d:
                    c3:66:50:6e:ff:95:ec:f1:c8:ad:a3:bf:de:68:32:
                    be:85:32:4a:67:46:35:97:88:10:9f:d6:85:f7:3b:
                    3b:f7:d8:97:87:50:ae:cd:61:5c:13:eb:28:52:6f:
                    91:80:eb:ea:52:44:fb:c7:0a:eb:65:97:cb:de:b3:
                    49:34:b3:cf:bc:9c:d9:df:9e:fd:09:b1:02:4d:41:
                    5b:62:3b:8c:ee:ca:d1:89:70:f7:56:d4:70:57:e1:
                    94:9c:ed:db:47:6f:cf:68:f4:35:c5:ca:6a:a4:98:
                    38:2c:d2:bd:a1:b5:01:b9:ae:b5:df:56:68:b2:fe:
                    4e:41:d6:fc:40:6b:40:25:b5:b3:24:51:ea:c5:37:
                    e0:0c:39:49:97:2e:8b:eb:05:96:60:71:26:8e:b2:
                    3f:94:ec:5a:c4:da:6c:50:f5:b9:f7:a6:6d:4f:91:
                    f0:c4:e5:27:9a:99:dc:89:d3:c0:ca:90:16:f3:d3:
                    b8:ed:6b:d6:16:08:7f:8f:5f:9a:b7:aa:48:5e:94:
                    89:7e:04:6b:8b:37:1b:03:e4:a3:f3:19:52:d8:06:
                    e1:94:11:fe:9e:08:d7:41:7f:96:1f:c3:89:a4:39:
                    47:3c:c0:b4:85:ea:8d:f5:15:70:38:bd:bf:0b:da:
                    05:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C5:92:99:74:D4:60:FF:B3:45:3A:23:BD:91:19:C9:E0:8A:DC:E6
            X509v3 Authority Key Identifier:
                keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:7d:6f:b1:c9:de:da:0e:62:28:1d:62:00:47:25:ab:90:ac:
         c4:60:05:81:24:c2:77:a6:9e:9e:16:a8:26:00:5d:6e:aa:e0:
         03:20:f3:03:7c:ce:62:d2:fa:6f:77:68:39:42:81:37:1d:78:
         39:4e:b7:db:a4:5e:80:d9:5f:f2:af:b3:aa:0d:55:c9:f4:b6:
         b3:43:44:fa:f3:c4:c0:c1:95:30:3d:d3:22:bd:3b:40:1c:3a:
         5c:58:be:9a:4b:78:48:0b:2d:b4:b6:83:e4:b0:36:dd:75:c8:
         64:ce:63:d6:75:e0:b9:5e:c5:1b:b9:23:a7:b3:c4:fa:24:f8:
         2f:4e:20:44:dc:8b:96:de:c1:13:0f:47:94:9b:a3:1a:75:b5:
         35:b6:2b:5f:a6:cf:fb:6f:ce:f4:30:10:ca:37:3e:ec:46:50:
         24:be:1b:c3:6a:53:48:b7:20:c0:10:c0:f4:28:64:d1:38:4d:
         c3:34:af:c2:47:57:2a:e3:a9:fd:19:06:12:2f:bd:00:19:60:
         3c:2f:da:70:37:57:3f:1f:ca:dc:77:68:c5:30:f9:bd:d3:6a:
         c9:6f:ce:ad:a2:89:10:0b:ea:ca:72:1e:a8:c0:18:64:11:f2:
         48:db:55:bd:04:ba:d2:aa:eb:57:73:9f:ba:32:da:7f:45:87:
         13:36:e6:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JOZlzFxebrUFk+yxNwE0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNDk1OWFkZWJmN2RlOTQzNTU1YmNhMjUwODgwN2ViOTEz
Y2U2ZjIwHhcNMjQwNTE4MDEwMzI0WhcNMjQwNTE5MDEwMzI0WjAzMTEwLwYDVQQD
Eyg3MmM1OTI5OTc0ZDQ2MGZmYjM0NTNhMjNiZDkxMTljOWUwOGFkY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCM/qugNglDsmVcyRl3DZlBu/5Xs
8cito7/eaDK+hTJKZ0Y1l4gQn9aF9zs799iXh1CuzWFcE+soUm+RgOvqUkT7xwrr
ZZfL3rNJNLPPvJzZ3579CbECTUFbYjuM7srRiXD3VtRwV+GUnO3bR2/PaPQ1xcpq
pJg4LNK9obUBua6131Zosv5OQdb8QGtAJbWzJFHqxTfgDDlJly6L6wWWYHEmjrI/
lOxaxNpsUPW596ZtT5HwxOUnmpncidPAypAW89O47WvWFgh/j1+at6pIXpSJfgRr
izcbA+Sj8xlS2AbhlBH+ngjXQX+WH8OJpDlHPMC0heqN9RVwOL2/C9oFmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLFkpl01GD/s0U6I72RGcngitzmMB8GA1UdIwQY
MBaAFJNJWa3r996UNVW8olCIB+uRPObyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWIt
ZmIwZWU1Zjk5N2RhLzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWItZmIwZWU1Zjk5N2Rh
LzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV31vscne
2g5iKB1iAEclq5CsxGAFgSTCd6aenhaoJgBdbqrgAyDzA3zOYtL6b3doOUKBNx14
OU6326RegNlf8q+zqg1VyfS2s0NE+vPEwMGVMD3TIr07QBw6XFi+mkt4SAsttLaD
5LA23XXIZM5j1nXguV7FG7kjp7PE+iT4L04gRNyLlt7BEw9HlJujGnW1NbYrX6bP
+2/O9DAQyjc+7EZQJL4bw2pTSLcgwBDA9Chk0ThNwzSvwkdXKuOp/RkGEi+9ABlg
PC/acDdXPx/K3HdoxTD5vdNqyW/OraKJEAvqynIeqMAYZBHySNtVvQS60qrrV3Of
ujLaf0WHEzbmEg==
-----END CERTIFICATE-----
Generated at Sat May 18 02:10:45 2024 by rpki-client on console-ams.rpki-client.org