Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File:                     Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier:          iXApHxTQ2pzIJCgC0Sg/Vv144xsC4gFz0iZ7HgU7oOw=
Subject key identifier:   98:0C:E7:37:53:86:37:23:E5:7D:27:71:D8:11:52:40:30:45:B2:79
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer:       /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial:       018F87ED9E809027D50666D4D403BB3BAD00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number:          0310
Signing time:             Fri 17 May 2024 19:00:47 +0000
Manifest this update:     Fri 17 May 2024 19:00:47 +0000
Manifest next update:     Sat 18 May 2024 19:00:47 +0000
Files and hashes:         1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: wkccsNBDW8y/WsGSgCmvlqcotHDyJcbNl9qJTBAjTCA=)
                          2: tVgD2zEN9BVaII_gXMGuht9dkts.roa (hash: du7jcO1+rCybX7WuvarfrqSJ8FAUFlieIOpENf7MClQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:9e:80:90:27:d5:06:66:d4:d4:03:bb:3b:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
        Validity
            Not Before: May 17 19:00:47 2024 GMT
            Not After : May 18 19:00:47 2024 GMT
        Subject: CN=980ce73753863723e57d2771d81152403045b279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9c:1d:af:2e:ea:19:f3:8d:7a:42:e6:40:d0:
                    6a:92:d3:7e:f7:73:00:eb:eb:37:8d:a7:43:b1:c0:
                    a7:f7:71:4f:b1:44:29:ec:2b:ee:57:60:67:df:f0:
                    a2:df:17:94:8c:74:ed:97:c6:13:8b:24:a1:d9:43:
                    6a:11:6d:84:53:17:1f:26:1c:d1:8a:e2:50:0d:cf:
                    2f:d6:ef:f4:59:05:0f:f5:a4:e2:1c:2e:61:bf:57:
                    49:c4:09:8c:11:a0:b8:1f:31:e9:0c:07:06:7d:7e:
                    e5:de:1c:18:f7:e7:a4:fe:c9:31:89:65:e4:46:17:
                    7d:d2:e7:45:a2:c2:70:1f:85:73:d7:19:a8:4b:fb:
                    c2:4e:2a:aa:da:dc:5b:ee:2b:07:84:d2:c9:6d:d1:
                    a9:4b:7e:2f:8c:a4:43:58:dc:9a:91:4e:ee:20:7f:
                    9d:9f:d2:55:18:1e:80:0d:9d:84:f9:53:fd:c2:51:
                    03:7f:23:4e:95:16:91:11:3c:2e:ff:fa:12:c0:e3:
                    4f:b4:01:b0:ad:10:29:5d:f3:f7:4d:32:12:33:5a:
                    48:5f:b1:cd:b3:22:81:95:27:d0:26:7d:b7:d8:a2:
                    4c:d1:94:ac:b8:46:c5:4a:a4:4d:fd:de:a5:ac:92:
                    ff:c9:fd:73:9f:d9:97:2d:78:e0:40:56:1b:f4:a5:
                    23:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0C:E7:37:53:86:37:23:E5:7D:27:71:D8:11:52:40:30:45:B2:79
            X509v3 Authority Key Identifier:
                keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:7f:bd:50:cb:87:9f:ed:38:aa:aa:a8:ae:7d:eb:65:0d:
         6e:03:f5:f2:fc:b8:99:8e:5a:c0:0d:2b:41:cb:50:45:44:40:
         40:bb:38:12:c4:d9:77:51:15:39:d2:3a:81:f5:23:ed:73:74:
         b1:40:62:2b:6d:19:0f:d6:52:5e:a7:2c:67:c4:18:ed:92:f2:
         94:13:a6:cb:70:ca:0a:dd:7f:ef:8d:23:ae:ef:7f:9c:7c:fd:
         f6:da:d2:d7:fb:ce:35:fa:17:81:9f:d7:58:a3:a1:d4:55:ef:
         cb:e4:48:a9:4a:7c:cf:14:a2:bb:f4:41:60:ba:e0:d9:f8:ab:
         c7:72:8a:45:b3:79:ce:59:87:be:91:f0:d4:92:f2:c9:97:4b:
         62:1b:7e:72:4f:34:48:29:0c:29:eb:e5:c3:ae:5c:0d:73:e8:
         49:a2:75:a8:03:a9:6d:c8:d6:32:7e:f7:ef:2f:5f:e1:e8:6b:
         c4:4f:ea:f7:de:ec:44:6c:ad:e4:d8:03:56:82:ea:49:d0:72:
         fc:f8:38:74:d6:7a:ca:e7:b7:41:56:52:ee:2f:73:2a:9d:53:
         d4:9d:e1:6a:32:8e:ef:5c:ab:cc:86:47:11:28:8e:cd:01:4f:
         b7:86:44:6a:ca:74:70:4d:ac:3a:76:96:6f:de:9e:6c:ad:37:
         b4:3d:40:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7Z6AkCfVBmbU1AO7O60AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWM3NGRjMGI2YzJkNWI5ZDMwZWFmM2NkMjIyOTRmNzEx
OTAzOWYwHhcNMjQwNTE3MTkwMDQ3WhcNMjQwNTE4MTkwMDQ3WjAzMTEwLwYDVQQD
Eyg5ODBjZTczNzUzODYzNzIzZTU3ZDI3NzFkODExNTI0MDMwNDViMjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZwdry7qGfONekLmQNBqktN+93MA
6+s3jadDscCn93FPsUQp7CvuV2Bn3/Ci3xeUjHTtl8YTiySh2UNqEW2EUxcfJhzR
iuJQDc8v1u/0WQUP9aTiHC5hv1dJxAmMEaC4HzHpDAcGfX7l3hwY9+ek/skxiWXk
Rhd90udFosJwH4Vz1xmoS/vCTiqq2txb7isHhNLJbdGpS34vjKRDWNyakU7uIH+d
n9JVGB6ADZ2E+VP9wlEDfyNOlRaRETwu//oSwONPtAGwrRApXfP3TTISM1pIX7HN
syKBlSfQJn232KJM0ZSsuEbFSqRN/d6lrJL/yf1zn9mXLXjgQFYb9KUjywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgM5zdThjcj5X0ncdgRUkAwRbJ5MB8GA1UdIwQY
MBaAFAnsdNwLbC1bnTDq880iKU9xGQOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jZDg4M2MtNGQ3Ni00NTdlLWE4NWMt
ZGJhZmY4MWFkY2E4LzEvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jZDg4M2MtNGQ3Ni00NTdlLWE4NWMtZGJhZmY4MWFkY2E4
LzEvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/t/vVDL
h5/tOKqqqK5962UNbgP18vy4mY5awA0rQctQRURAQLs4EsTZd1EVOdI6gfUj7XN0
sUBiK20ZD9ZSXqcsZ8QY7ZLylBOmy3DKCt1/740jru9/nHz99trS1/vONfoXgZ/X
WKOh1FXvy+RIqUp8zxSiu/RBYLrg2firx3KKRbN5zlmHvpHw1JLyyZdLYht+ck80
SCkMKevlw65cDXPoSaJ1qAOpbcjWMn737y9f4ehrxE/q997sRGyt5NgDVoLqSdBy
/Pg4dNZ6yue3QVZS7i9zKp1T1J3hajKO71yrzIZHESiOzQFPt4ZEasp0cE2sOnaW
b96ebK03tD1AAA==
-----END CERTIFICATE-----
Generated at Fri May 17 20:07:54 2024 by rpki-client on console-ams.rpki-client.org