Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
File:                     LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft (raw, json)
Hash identifier:          fXtBQ1NTB2ElW6VjslFPQ2ebtEujQ2JIlww/7MxOc2M=
Subject key identifier:   07:BA:45:7C:AA:93:17:82:71:47:17:76:A7:4F:22:C0:26:D3:D4:F8
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Certificate issuer:       /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial:       018F874A9EF5A8AFBDB77C57B5E9CEB8E15E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
Manifest number:          0B20
Signing time:             Fri 17 May 2024 16:02:45 +0000
Manifest this update:     Fri 17 May 2024 16:02:45 +0000
Manifest next update:     Sat 18 May 2024 16:02:45 +0000
Files and hashes:         1: 6xWqQPhAYauShadXSNreSc5s3U4.roa (hash: s27R1xiwKCcAU+YPa2QmVA6onHr4IC0g4E99sKkzZ4Q=)
                          2: LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl (hash: ipVtBgzZunD113fsezTNBmfkxyVWtyHJQrkVzhqtrRc=)
                          3: UcEnYVNqi5U6cqdiwoplOCS3HnA.roa (hash: tlO3GR/kt1gki0uA6qk4A0lEyuuVBM5YLXaJiMrAvVY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:9e:f5:a8:af:bd:b7:7c:57:b5:e9:ce:b8:e1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
        Validity
            Not Before: May 17 16:02:45 2024 GMT
            Not After : May 18 16:02:45 2024 GMT
        Subject: CN=07ba457caa93178271471776a74f22c026d3d4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:62:10:4f:66:09:f9:dd:e0:6a:56:5c:6d:46:
                    a2:e8:5f:d8:64:e4:5c:fc:2b:f6:cb:5b:dc:93:1f:
                    12:68:c3:51:90:99:ca:6b:06:f5:37:91:68:44:56:
                    c7:af:27:99:9f:3f:ab:69:25:51:92:a1:cb:81:13:
                    ce:2e:55:fb:76:aa:5d:53:66:3a:a9:43:b8:2a:96:
                    55:0b:fa:5a:6a:a0:aa:ed:f5:01:6c:53:54:9b:72:
                    1c:c5:d0:50:77:dd:c9:94:99:b7:84:2b:23:cd:ff:
                    38:13:b0:75:e3:59:3c:dc:c7:e9:6c:93:a1:df:f4:
                    48:3b:3c:21:8f:21:70:71:40:b2:32:37:7e:8c:b3:
                    52:d7:4a:80:bf:62:0e:19:19:c9:d2:31:8e:26:2a:
                    3b:79:f6:4f:e9:94:86:1e:c3:1c:73:51:23:71:62:
                    46:63:0e:3f:23:2b:89:79:fa:13:44:a0:89:b7:74:
                    80:62:31:08:6a:05:7f:b7:f1:f2:aa:54:e0:cf:08:
                    08:12:14:61:3f:7c:d2:57:f7:92:8b:3d:36:ac:c7:
                    65:86:df:c7:41:6f:83:90:e3:ff:52:0d:be:96:44:
                    94:59:23:3b:d5:f7:ee:8e:0e:04:93:c1:60:e8:ea:
                    42:33:14:f2:37:03:4c:b4:4c:fa:97:18:d4:98:ac:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BA:45:7C:AA:93:17:82:71:47:17:76:A7:4F:22:C0:26:D3:D4:F8
            X509v3 Authority Key Identifier:
                keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:de:b5:73:f9:21:be:62:ad:06:ad:c3:e6:cd:e0:52:4d:2f:
         c7:0f:96:d6:22:92:c3:a4:80:cb:c5:c9:1b:8a:33:b3:e3:43:
         3e:da:9d:76:67:13:fb:a9:37:04:6c:30:f2:bc:d0:3f:cb:df:
         fa:6d:df:24:7f:91:96:81:f5:fc:00:97:f8:fc:dc:1a:02:e7:
         bf:9a:d0:48:6c:52:14:55:84:ec:e0:28:b1:c0:f0:a6:7c:42:
         a0:e7:7b:ab:8e:11:22:57:21:44:46:01:bd:dd:c0:60:b6:0b:
         9d:65:8b:31:b3:02:b1:b8:50:a4:00:a4:99:f2:f2:c3:e4:f7:
         87:63:86:6b:f4:2d:de:1f:73:32:08:c0:b8:c8:05:19:98:81:
         92:b7:21:8a:e5:e3:67:76:df:88:fe:0b:95:e4:81:6f:26:dc:
         2a:b7:f8:44:4b:bc:8b:af:66:8e:1e:01:0e:41:37:db:ae:55:
         19:e1:a4:b3:33:ea:98:e7:68:a5:3e:77:2f:6b:e1:56:e7:22:
         64:cd:6e:61:9b:9d:b4:b3:72:2a:df:66:1a:22:b4:72:95:09:
         38:3b:52:eb:a4:4c:cb:19:a8:af:92:53:05:f2:f4:cc:dc:8c:
         53:44:6a:67:7c:c5:68:c4:c0:9f:46:77:bd:99:ac:69:53:0e:
         d2:49:d3:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSp71qK+9t3xXtenOuOFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjc2YTYxZGNmNGQyMjJiYTY2Y2RhMTk0MzBmNjFlNjEx
ZDhhYWUwHhcNMjQwNTE3MTYwMjQ1WhcNMjQwNTE4MTYwMjQ1WjAzMTEwLwYDVQQD
EygwN2JhNDU3Y2FhOTMxNzgyNzE0NzE3NzZhNzRmMjJjMDI2ZDNkNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGIQT2YJ+d3galZcbUai6F/YZORc
/Cv2y1vckx8SaMNRkJnKawb1N5FoRFbHryeZnz+raSVRkqHLgRPOLlX7dqpdU2Y6
qUO4KpZVC/paaqCq7fUBbFNUm3IcxdBQd93JlJm3hCsjzf84E7B141k83MfpbJOh
3/RIOzwhjyFwcUCyMjd+jLNS10qAv2IOGRnJ0jGOJio7efZP6ZSGHsMcc1EjcWJG
Yw4/IyuJefoTRKCJt3SAYjEIagV/t/HyqlTgzwgIEhRhP3zSV/eSiz02rMdlht/H
QW+DkOP/Ug2+lkSUWSM71ffujg4Ek8Fg6OpCMxTyNwNMtEz6lxjUmKwH6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAe6RXyqkxeCcUcXdqdPIsAm09T4MB8GA1UdIwQY
MBaAFC1namHc9NIiumbNoZQw9h5hHYquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMmM2OGUtZWIzYi00ZTAxLWI1MGEt
YTg2YTI0NjU1ODcwLzEvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iMmM2OGUtZWIzYi00ZTAxLWI1MGEtYTg2YTI0NjU1ODcw
LzEvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdt61c/kh
vmKtBq3D5s3gUk0vxw+W1iKSw6SAy8XJG4ozs+NDPtqddmcT+6k3BGww8rzQP8vf
+m3fJH+RloH1/ACX+PzcGgLnv5rQSGxSFFWE7OAoscDwpnxCoOd7q44RIlchREYB
vd3AYLYLnWWLMbMCsbhQpACkmfLyw+T3h2OGa/Qt3h9zMgjAuMgFGZiBkrchiuXj
Z3bfiP4LleSBbybcKrf4REu8i69mjh4BDkE3265VGeGkszPqmOdopT53L2vhVuci
ZM1uYZudtLNyKt9mGiK0cpUJODtS66RMyxmor5JTBfL0zNyMU0RqZ3zFaMTAn0Z3
vZmsaVMO0knTCQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:27:37 2024 by rpki-client on console-fra.rpki-client.org