Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
File:                     0seIZkHuEBvHspX9hvGSP8KD89A.mft (raw, json)
Hash identifier:          /ZPddhU/6WjMQqfRJeXSQ4dL0Ug0XG0o8iQihiEtRSg=
Subject key identifier:   65:F7:36:DD:E5:81:BD:74:95:94:B1:BB:2B:07:01:92:D2:41:A4:35
Authority key identifier: D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
Certificate issuer:       /CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Certificate serial:       018F46B321A7350069D10382E2113E93E109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
Manifest number:          0499
Signing time:             Sun 05 May 2024 03:01:35 +0000
Manifest this update:     Sun 05 May 2024 03:01:35 +0000
Manifest next update:     Mon 06 May 2024 03:01:35 +0000
Files and hashes:         1: 0seIZkHuEBvHspX9hvGSP8KD89A.crl (hash: FckVapoBHcgqAdswVh4AHDU0WWAmg/XbzNZ7YmcwGnk=)
                          2: BxFWtZtCzOYxmbMDMZagNLSbpXw.roa (hash: Pp91AyTBs6bvCF1wnmXCBO/jGcWG6utUwhI6GM9iOQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:b3:21:a7:35:00:69:d1:03:82:e2:11:3e:93:e1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
        Validity
            Not Before: May  5 03:01:35 2024 GMT
            Not After : May  6 03:01:35 2024 GMT
        Subject: CN=65f736dde581bd749594b1bb2b070192d241a435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:25:30:9a:f8:f5:5a:3c:5f:8b:4e:65:26:
                    b8:c7:6b:e4:9f:eb:3c:00:d2:5c:17:44:c0:ae:8d:
                    14:6a:1f:f7:bb:82:76:f4:58:83:6d:bc:f3:12:32:
                    05:4f:0e:c5:b7:ac:27:0e:96:a1:a6:47:2e:b6:25:
                    01:85:15:b0:4e:4d:20:f1:d3:88:4a:dd:bf:ef:ca:
                    b0:f0:75:53:43:96:23:ee:7f:e7:e0:7d:26:e2:0c:
                    65:ae:27:d9:0d:c8:38:30:5e:4b:ba:23:2a:ad:04:
                    c7:14:87:b9:3a:ad:f2:44:76:40:a9:75:5d:88:f3:
                    58:af:a4:cc:d5:d0:e1:68:33:de:f1:cb:b4:86:ee:
                    0d:3a:f3:06:ec:77:ba:40:20:f2:60:b5:6c:ec:3b:
                    fe:6b:2b:3f:89:6b:ff:6f:bb:2b:a7:49:1c:44:69:
                    44:b0:3a:b0:1b:34:b2:89:f0:d0:43:5c:b1:a8:0c:
                    5d:16:76:24:1b:53:06:04:7e:46:43:7d:77:07:3b:
                    02:33:6e:6e:71:a7:40:12:a4:74:d5:cd:0e:72:48:
                    1d:46:60:bb:97:ca:7e:09:87:65:61:34:6c:f8:a4:
                    c0:cf:77:66:64:ec:96:e1:4e:39:b3:51:b8:32:b6:
                    90:6c:e4:2e:72:5a:fa:14:a9:f6:55:f0:4c:8f:b2:
                    a3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F7:36:DD:E5:81:BD:74:95:94:B1:BB:2B:07:01:92:D2:41:A4:35
            X509v3 Authority Key Identifier:
                keyid:D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:92:05:43:87:79:20:26:e0:7f:12:5b:66:a4:66:40:15:97:
         7e:f7:40:a8:44:61:d3:dd:16:aa:22:1e:16:c3:64:fe:89:ee:
         f6:b9:3b:f7:6d:fa:a8:35:9a:a2:ac:56:31:ca:b5:02:e3:8e:
         cf:42:92:5c:ea:3a:b9:0f:52:ec:a5:3f:86:a3:09:3f:83:58:
         81:13:33:65:8e:e7:05:2f:79:c9:cc:e3:84:35:a7:80:e6:56:
         fc:43:5d:90:ec:56:8c:8a:80:3b:16:62:9e:0f:a9:ba:fb:99:
         b5:4a:93:3c:22:99:34:72:de:78:e6:a4:55:16:6b:c4:da:8e:
         04:bc:69:07:37:45:37:59:47:53:25:d0:0d:3a:8f:18:30:27:
         06:31:af:02:13:94:18:35:d7:d3:3a:45:5d:84:59:f9:af:f3:
         20:83:b6:68:cb:61:54:09:28:0b:26:6e:bf:89:b0:c1:a3:79:
         8b:ba:43:a3:60:aa:22:f5:39:cf:2c:9a:4e:b0:f9:b0:f0:ab:
         2d:ce:47:2d:c9:cc:83:43:2e:6e:ed:72:db:cb:1a:98:ac:e5:
         88:7e:34:3b:35:57:67:83:86:a4:4d:80:04:6d:7f:de:2d:c1:
         ac:a0:03:57:a3:8a:8f:35:71:99:f8:95:20:4e:e2:a7:e5:1b:
         fa:6e:ea:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9GsyGnNQBp0QOC4hE+k+EJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYzc4ODY2NDFlZTEwMWJjN2IyOTVmZDg2ZjE5MjNmYzI4
M2YzZDAwHhcNMjQwNTA1MDMwMTM1WhcNMjQwNTA2MDMwMTM1WjAzMTEwLwYDVQQD
Eyg2NWY3MzZkZGU1ODFiZDc0OTU5NGIxYmIyYjA3MDE5MmQyNDFhNDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurQlMJr49Vo8X4tOZSa4x2vkn+s8
ANJcF0TAro0Uah/3u4J29FiDbbzzEjIFTw7Ft6wnDpahpkcutiUBhRWwTk0g8dOI
St2/78qw8HVTQ5Yj7n/n4H0m4gxlrifZDcg4MF5LuiMqrQTHFIe5Oq3yRHZAqXVd
iPNYr6TM1dDhaDPe8cu0hu4NOvMG7He6QCDyYLVs7Dv+ays/iWv/b7srp0kcRGlE
sDqwGzSyifDQQ1yxqAxdFnYkG1MGBH5GQ313BzsCM25ucadAEqR01c0OckgdRmC7
l8p+CYdlYTRs+KTAz3dmZOyW4U45s1G4MraQbOQuclr6FKn2VfBMj7KjfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGX3Nt3lgb10lZSxuysHAZLSQaQ1MB8GA1UdIwQY
MBaAFNLHiGZB7hAbx7KV/Ybxkj/Cg/PQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHNlSVprSHVFQnZIc3BYOWh2R1NQOEtEODlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80NzAyZDgtM2VhZi00ZDdiLWEzZmUt
ZDg5NzU4Y2FkMjJhLzEvMHNlSVprSHVFQnZIc3BYOWh2R1NQOEtEODlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80NzAyZDgtM2VhZi00ZDdiLWEzZmUtZDg5NzU4Y2FkMjJh
LzEvMHNlSVprSHVFQnZIc3BYOWh2R1NQOEtEODlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpIFQ4d5
ICbgfxJbZqRmQBWXfvdAqERh090WqiIeFsNk/onu9rk79236qDWaoqxWMcq1AuOO
z0KSXOo6uQ9S7KU/hqMJP4NYgRMzZY7nBS95yczjhDWngOZW/ENdkOxWjIqAOxZi
ng+puvuZtUqTPCKZNHLeeOakVRZrxNqOBLxpBzdFN1lHUyXQDTqPGDAnBjGvAhOU
GDXX0zpFXYRZ+a/zIIO2aMthVAkoCyZuv4mwwaN5i7pDo2CqIvU5zyyaTrD5sPCr
Lc5HLcnMg0Mubu1y28samKzliH40OzVXZ4OGpE2ABG1/3i3BrKADV6OKjzVxmfiV
IE7ip+Ub+m7qLw==
-----END CERTIFICATE-----
Generated at Sun May 5 06:25:40 2024 by rpki-client on console-ams.rpki-client.org