Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/0wX4wDPMTAlsOVNYXCaJyaddPxg.mft
File:                     0wX4wDPMTAlsOVNYXCaJyaddPxg.mft (raw, json)
Hash identifier:          wk1dctmz+/hLCl+dxqzxpjTPPnYCwOXp4URtGK5ZpIs=
Subject key identifier:   53:6E:C9:1D:05:4A:46:9A:31:89:DD:B8:20:39:FE:EF:96:8D:65:A8
Authority key identifier: D3:05:F8:C0:33:CC:4C:09:6C:39:53:58:5C:26:89:C9:A7:5D:3F:18
Certificate issuer:       /CN=d305f8c033cc4c096c3953585c2689c9a75d3f18
Certificate serial:       018F43B1BC92986A5FD571904B49B8A3A462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wX4wDPMTAlsOVNYXCaJyaddPxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/0wX4wDPMTAlsOVNYXCaJyaddPxg.mft
Manifest number:          1155
Signing time:             Sat 04 May 2024 13:01:12 +0000
Manifest this update:     Sat 04 May 2024 13:01:12 +0000
Manifest next update:     Sun 05 May 2024 13:01:12 +0000
Files and hashes:         1: 0wX4wDPMTAlsOVNYXCaJyaddPxg.crl (hash: 6sSseiM1PZO9ZexU1DJpa+n9PPVPfhwmXzsJ0LTy7L8=)
                          2: J8AP6JRbrAhvEfUKC2d4Y1HWgT4.roa (hash: vZS30yHPPnHGwetxSUvDnexH3Ot/WxmgcDoS6LfEekw=)
                          3: Ol0O0oRqODYOj9ph8ml5n6odUeA.roa (hash: 1tqT7hXqTpvgreMeW3w+v2XxDa2v9KMg9/qNQibzJlg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/0wX4wDPMTAlsOVNYXCaJyaddPxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/0wX4wDPMTAlsOVNYXCaJyaddPxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wX4wDPMTAlsOVNYXCaJyaddPxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b1:bc:92:98:6a:5f:d5:71:90:4b:49:b8:a3:a4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d305f8c033cc4c096c3953585c2689c9a75d3f18
        Validity
            Not Before: May  4 13:01:12 2024 GMT
            Not After : May  5 13:01:12 2024 GMT
        Subject: CN=536ec91d054a469a3189ddb82039feef968d65a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:8e:73:f4:a8:59:14:79:ea:88:cb:96:52:
                    59:3c:fb:b3:bf:aa:c0:82:47:c8:b1:5b:8d:c0:02:
                    d8:b4:3a:29:de:64:c5:cf:89:d2:ae:d2:44:f2:38:
                    69:55:85:53:a0:65:8b:2b:08:cc:a7:43:9d:66:c9:
                    33:b4:50:cd:55:1b:82:02:06:91:54:30:54:65:ca:
                    20:89:08:2b:6b:f2:84:8c:87:24:d6:49:2c:47:84:
                    57:27:46:ac:ce:ee:ca:4a:dd:f8:f2:6e:e0:f2:7e:
                    6c:6b:aa:a8:9d:f5:f1:84:a1:34:79:04:af:72:c8:
                    fa:01:f2:02:24:a3:96:89:dc:52:25:d8:1c:97:e8:
                    97:2a:e6:72:cb:55:bc:ce:29:d5:71:8b:e6:49:e9:
                    19:50:a5:b5:88:3d:b2:f5:be:bc:4c:1c:82:2d:40:
                    0b:70:d9:15:f1:66:77:04:05:5b:d4:e1:09:d4:28:
                    72:ed:62:97:49:ca:b4:cb:f7:42:fc:5f:cf:83:c6:
                    d4:34:da:f6:03:22:b3:05:fe:4d:f4:fc:cd:63:a4:
                    14:9e:9b:d1:10:a8:b4:f5:ac:29:2a:1a:c6:87:f8:
                    ab:47:b8:e2:bb:23:cf:d1:2d:cc:e6:8a:4c:a0:4f:
                    2b:69:11:48:ba:b9:48:e1:12:21:9f:f9:41:8b:8d:
                    92:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6E:C9:1D:05:4A:46:9A:31:89:DD:B8:20:39:FE:EF:96:8D:65:A8
            X509v3 Authority Key Identifier:
                keyid:D3:05:F8:C0:33:CC:4C:09:6C:39:53:58:5C:26:89:C9:A7:5D:3F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wX4wDPMTAlsOVNYXCaJyaddPxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/0wX4wDPMTAlsOVNYXCaJyaddPxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/0wX4wDPMTAlsOVNYXCaJyaddPxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:45:2f:81:5d:65:71:db:91:b5:ed:02:88:c2:61:8a:0a:fe:
         14:59:77:d9:94:d8:77:9f:36:cb:db:59:f8:eb:27:8a:d7:a9:
         cf:e9:f7:bd:05:d4:89:2b:03:7e:81:ce:f0:e2:c6:03:2a:a4:
         47:e0:33:38:50:69:dd:38:9d:2a:90:24:93:8a:7e:be:80:cb:
         3a:ff:fa:66:2e:05:ed:34:87:f5:6d:15:da:a2:76:a9:4b:2e:
         6f:87:8c:a3:8b:9d:89:8c:45:de:0f:aa:b3:7b:4d:e8:98:37:
         09:76:97:95:09:50:28:d2:e0:f9:93:72:20:65:28:dd:30:9b:
         99:94:8b:c3:f9:5c:3b:e2:0b:e8:e4:a9:b4:8d:b7:77:ec:70:
         6a:6a:bf:3b:fb:dc:7e:07:f9:31:8c:d9:ba:c3:29:f0:50:6f:
         51:43:fe:ad:ab:c2:86:b6:4e:8c:48:c0:35:e0:9e:6f:59:45:
         8b:ce:4d:34:53:f5:33:ea:52:d9:8a:f2:7a:0f:9d:8d:f5:72:
         37:c5:5d:77:52:20:47:71:26:ba:f1:ec:7c:44:05:4d:0c:24:
         4e:60:ab:a7:c6:61:79:ad:4a:5a:0d:10:ec:4c:6f:f6:b4:cd:
         42:63:7f:7c:e3:a3:e6:3d:2f:8a:de:6c:8e:d3:97:6e:25:75:
         48:aa:06:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9DsbySmGpf1XGQS0m4o6RiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMDVmOGMwMzNjYzRjMDk2YzM5NTM1ODVjMjY4OWM5YTc1
ZDNmMTgwHhcNMjQwNTA0MTMwMTEyWhcNMjQwNTA1MTMwMTEyWjAzMTEwLwYDVQQD
Eyg1MzZlYzkxZDA1NGE0NjlhMzE4OWRkYjgyMDM5ZmVlZjk2OGQ2NWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq+Oc/SoWRR56ojLllJZPPuzv6rA
gkfIsVuNwALYtDop3mTFz4nSrtJE8jhpVYVToGWLKwjMp0OdZskztFDNVRuCAgaR
VDBUZcogiQgra/KEjIck1kksR4RXJ0aszu7KSt348m7g8n5sa6qonfXxhKE0eQSv
csj6AfICJKOWidxSJdgcl+iXKuZyy1W8zinVcYvmSekZUKW1iD2y9b68TByCLUAL
cNkV8WZ3BAVb1OEJ1Chy7WKXScq0y/dC/F/Pg8bUNNr2AyKzBf5N9PzNY6QUnpvR
EKi09awpKhrGh/irR7jiuyPP0S3M5opMoE8raRFIurlI4RIhn/lBi42SxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNuyR0FSkaaMYnduCA5/u+WjWWoMB8GA1UdIwQY
MBaAFNMF+MAzzEwJbDlTWFwmicmnXT8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHdYNHdEUE1UQWxzT1ZOWVhDYUp5YWRkUHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMjNlYzctNTgyZC00YzEyLWI3MjMt
Mjk3YzRiMzNkNTQxLzEvMHdYNHdEUE1UQWxzT1ZOWVhDYUp5YWRkUHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMjNlYzctNTgyZC00YzEyLWI3MjMtMjk3YzRiMzNkNTQx
LzEvMHdYNHdEUE1UQWxzT1ZOWVhDYUp5YWRkUHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkUvgV1l
cduRte0CiMJhigr+FFl32ZTYd582y9tZ+Osnitepz+n3vQXUiSsDfoHO8OLGAyqk
R+AzOFBp3TidKpAkk4p+voDLOv/6Zi4F7TSH9W0V2qJ2qUsub4eMo4udiYxF3g+q
s3tN6Jg3CXaXlQlQKNLg+ZNyIGUo3TCbmZSLw/lcO+IL6OSptI23d+xwamq/O/vc
fgf5MYzZusMp8FBvUUP+ravChrZOjEjANeCeb1lFi85NNFP1M+pS2Yryeg+djfVy
N8Vdd1IgR3EmuvHsfEQFTQwkTmCrp8Zhea1KWg0Q7Exv9rTNQmN/fOOj5j0vit5s
jtOXbiV1SKoG6A==
-----END CERTIFICATE-----
Generated at Sat May 4 18:18:13 2024 by rpki-client on console-fra.rpki-client.org